114.99.130.6 - IPInfo

基本信息:

城市(city): Tongling

省份(region): Anhui

国家(country): China

运营商(isp): ChinaNet Anhui Province Network

主机名(hostname): unknown

机构(organization): No.31,Jin-rong Street

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Jun 28 00:16:09 mailman postfix/smtpd[31101]: warning: unknown[114.99.130.6]: SASL LOGIN authentication failed: authentication failure	2019-06-28 14:42:44

相同子网IP讨论:

IP	类型	评论内容	时间
114.99.130.129	attackbots	Brute forcing email accounts	2020-10-02 01:44:05
114.99.130.129	attackspambots	Brute forcing email accounts	2020-10-01 17:50:55
114.99.130.92	attackbotsspam	MAIL: User Login Brute Force Attempt	2020-08-09 15:22:01
114.99.130.196	attackspam	MAIL: User Login Brute Force Attempt	2020-08-08 23:54:02
114.99.130.170	attackspambots	Jul 30 05:54:20 andromeda postfix/smtpd\[25889\]: warning: unknown\[114.99.130.170\]: SASL LOGIN authentication failed: authentication failure Jul 30 05:54:23 andromeda postfix/smtpd\[25889\]: warning: unknown\[114.99.130.170\]: SASL LOGIN authentication failed: authentication failure Jul 30 05:54:24 andromeda postfix/smtpd\[25889\]: warning: unknown\[114.99.130.170\]: SASL LOGIN authentication failed: authentication failure Jul 30 05:54:27 andromeda postfix/smtpd\[25889\]: warning: unknown\[114.99.130.170\]: SASL LOGIN authentication failed: authentication failure Jul 30 05:54:29 andromeda postfix/smtpd\[25889\]: warning: unknown\[114.99.130.170\]: SASL LOGIN authentication failed: authentication failure	2020-07-30 13:49:42
114.99.130.2	attackbotsspam	SSH invalid-user multiple login try	2020-03-10 19:49:35
114.99.130.22	attackspambots	Feb 11 07:38:40 mailman postfix/smtpd[6162]: warning: unknown[114.99.130.22]: SASL LOGIN authentication failed: authentication failure	2020-02-12 06:17:08
114.99.130.5	attackspam	Unauthorized connection attempt detected from IP address 114.99.130.5 to port 6656 [T]	2020-01-30 17:00:48
114.99.130.91	attack	Unauthorized connection attempt detected from IP address 114.99.130.91 to port 6656 [T]	2020-01-29 19:07:45
114.99.130.186	attackspambots	Brute force attempt	2020-01-11 00:21:23
114.99.130.15	attack	Brute force attempt	2019-09-28 18:39:19
114.99.130.250	attack	Aug 12 04:34:30 lnxmail61 postfix/smtpd[17408]: warning: unknown[114.99.130.250]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 04:34:30 lnxmail61 postfix/smtpd[17408]: lost connection after AUTH from unknown[114.99.130.250] Aug 12 04:34:38 lnxmail61 postfix/smtpd[14894]: warning: unknown[114.99.130.250]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 04:34:38 lnxmail61 postfix/smtpd[14894]: lost connection after AUTH from unknown[114.99.130.250] Aug 12 04:34:49 lnxmail61 postfix/smtpd[17408]: warning: unknown[114.99.130.250]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 04:34:49 lnxmail61 postfix/smtpd[17408]: lost connection after AUTH from unknown[114.99.130.250]	2019-08-12 16:32:28
114.99.130.64	attack	[2019/7/25 AM 05:44:59] [1240] 114.99.130.64 This mailbox could not be found or has been disabled: bbbb@xxxxxx.com.tw	2019-07-25 15:28:03

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.99.130.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37868
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.99.130.6.			IN	A

;; AUTHORITY SECTION:
.			618	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062800 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jun 28 14:42:36 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 6.130.99.114.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 6.130.99.114.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
129.28.76.250	attackbots	Aug 28 11:48:11 vps691689 sshd[25856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.76.250 Aug 28 11:48:13 vps691689 sshd[25856]: Failed password for invalid user fieu from 129.28.76.250 port 48112 ssh2 ...	2019-08-28 20:49:34
75.50.59.234	attackspambots	Invalid user unity from 75.50.59.234 port 36160	2019-08-28 20:55:16
73.212.16.243	attackbots	Aug 28 08:39:13 MK-Soft-VM3 sshd\[23892\]: Invalid user jordan123 from 73.212.16.243 port 48442 Aug 28 08:39:13 MK-Soft-VM3 sshd\[23892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.212.16.243 Aug 28 08:39:15 MK-Soft-VM3 sshd\[23892\]: Failed password for invalid user jordan123 from 73.212.16.243 port 48442 ssh2 ...	2019-08-28 20:56:13
185.177.157.182	attackbots	LGS,WP GET /wp-login.php	2019-08-28 20:21:35
1.220.9.68	attack	2019-08-27 23:19:51 H=(lsgenius.it) [1.220.9.68]:38839 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-08-27 23:19:52 H=(lsgenius.it) [1.220.9.68]:38839 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/1.220.9.68) 2019-08-27 23:19:53 H=(lsgenius.it) [1.220.9.68]:38839 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/1.220.9.68) ...	2019-08-28 20:36:33
104.248.211.180	attack	Too many connections or unauthorized access detected from Arctic banned ip	2019-08-28 21:11:06
191.54.165.130	attackspam	Aug 28 00:48:48 kapalua sshd\[15892\]: Invalid user ken from 191.54.165.130 Aug 28 00:48:48 kapalua sshd\[15892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.165.130 Aug 28 00:48:50 kapalua sshd\[15892\]: Failed password for invalid user ken from 191.54.165.130 port 39265 ssh2 Aug 28 00:53:59 kapalua sshd\[16318\]: Invalid user oracle from 191.54.165.130 Aug 28 00:53:59 kapalua sshd\[16318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.165.130	2019-08-28 20:46:40
113.28.150.73	attackspambots	Aug 28 09:43:46 yabzik sshd[319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.28.150.73 Aug 28 09:43:48 yabzik sshd[319]: Failed password for invalid user paintball1 from 113.28.150.73 port 46529 ssh2 Aug 28 09:53:09 yabzik sshd[4064]: Failed password for root from 113.28.150.73 port 24481 ssh2	2019-08-28 20:17:57
165.227.94.64	attackbotsspam	Automatic report - SSH Brute-Force Attack	2019-08-28 20:44:17
177.220.205.70	attackspam	Aug 28 07:54:05 TORMINT sshd\[5940\]: Invalid user sdtdserver from 177.220.205.70 Aug 28 07:54:05 TORMINT sshd\[5940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.220.205.70 Aug 28 07:54:07 TORMINT sshd\[5940\]: Failed password for invalid user sdtdserver from 177.220.205.70 port 40923 ssh2 ...	2019-08-28 20:18:39
222.127.53.107	attackbots	2019-08-28T06:08:56.736937abusebot-2.cloudsearch.cf sshd\[25530\]: Invalid user 123456 from 222.127.53.107 port 46593	2019-08-28 20:59:06
221.231.65.86	attackspambots	Invalid user admin from 221.231.65.86 port 4312	2019-08-28 20:34:43
185.166.107.182	attack	Aug 28 14:53:01 ubuntu-2gb-nbg1-dc3-1 sshd[7230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.166.107.182 Aug 28 14:53:04 ubuntu-2gb-nbg1-dc3-1 sshd[7230]: Failed password for invalid user arma from 185.166.107.182 port 32850 ssh2 ...	2019-08-28 20:58:12
194.228.3.191	attackspam	Aug 27 20:00:07 php2 sshd\[4415\]: Invalid user rony from 194.228.3.191 Aug 27 20:00:07 php2 sshd\[4415\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.228.3.191 Aug 27 20:00:09 php2 sshd\[4415\]: Failed password for invalid user rony from 194.228.3.191 port 39223 ssh2 Aug 27 20:04:22 php2 sshd\[4774\]: Invalid user admin1 from 194.228.3.191 Aug 27 20:04:22 php2 sshd\[4774\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.228.3.191	2019-08-28 20:41:51
112.116.155.205	attackbots	Aug 28 14:38:44 v22019058497090703 sshd[13672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.116.155.205 Aug 28 14:38:46 v22019058497090703 sshd[13672]: Failed password for invalid user aime from 112.116.155.205 port 18684 ssh2 Aug 28 14:43:50 v22019058497090703 sshd[14120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.116.155.205 ...	2019-08-28 21:09:03

最近上报的IP列表

8.74.137.67	50.44.91.2	173.110.69.100	205.162.133.23
111.52.143.195	107.89.175.67	104.155.225.86	197.62.76.192
39.110.139.107	150.35.183.82	66.3.24.149	194.236.229.64
193.112.199.7	72.157.203.45	109.162.102.69	154.9.238.20
182.201.245.234	182.217.213.114	140.122.216.33	114.204.228.205