116.2.14.187 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom Liaoning Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	(ftpd) Failed FTP login from 116.2.14.187 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 27 08:19:06 ir1 pure-ftpd: (?@116.2.14.187) [WARNING] Authentication failed for user [anonymous]	2020-05-27 18:30:29

类型

评论内容

时间

attack

(ftpd) Failed FTP login from 116.2.14.187 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 27 08:19:06 ir1 pure-ftpd: (?@116.2.14.187) [WARNING] Authentication failed for user [anonymous]

2020-05-27 18:30:29

相同子网IP讨论:

IP	类型	评论内容	时间
116.2.141.86	attackbotsspam	:	2019-06-25 03:15:51

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.2.14.187
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6177
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.2.14.187.			IN	A

;; AUTHORITY SECTION:
.			479	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052700 1800 900 604800 86400

;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 27 18:30:22 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 187.14.2.116.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 100.100.2.138, trying next server
;; Got SERVFAIL reply from 100.100.2.138, trying next server
Server:		100.100.2.136
Address:	100.100.2.136#53

** server can't find 187.14.2.116.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
212.83.138.123	attackspam	[2020-09-16 16:53:12] NOTICE[1239] chan_sip.c: Registration from '"1621" ' failed for '212.83.138.123:5074' - Wrong password [2020-09-16 16:53:12] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-16T16:53:12.052-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1621",SessionID="0x7f4d482e4338",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.138.123/5074",Challenge="2e3af6c1",ReceivedChallenge="2e3af6c1",ReceivedHash="2def2e063bc80713147af7d2219d2cb5" [2020-09-16 16:55:09] NOTICE[1239] chan_sip.c: Registration from '"1721" ' failed for '212.83.138.123:5067' - Wrong password [2020-09-16 16:55:09] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-16T16:55:09.729-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1721",SessionID="0x7f4d480d6c18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-09-17 05:08:04
183.62.101.90	attackspam	2020-09-15T04:51:24.249620hostname sshd[84469]: Failed password for root from 183.62.101.90 port 40034 ssh2 ...	2020-09-17 05:32:50
85.209.0.101	attackspambots	Sep 16 22:05:38 vmd17057 sshd[5711]: Failed password for root from 85.209.0.101 port 64512 ssh2 ...	2020-09-17 04:59:20
183.60.227.177	attackbots	port	2020-09-17 05:30:14
83.149.45.205	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-17 04:58:24
2.228.87.254	attackbots	Unauthorized connection attempt from IP address 2.228.87.254 on Port 445(SMB)	2020-09-17 05:16:14
61.175.121.76	attackbots	$f2bV_matches	2020-09-17 05:09:30
200.54.105.58	attackbotsspam	Unauthorized connection attempt from IP address 200.54.105.58 on Port 445(SMB)	2020-09-17 04:57:07
51.68.71.102	attack	Triggered by Fail2Ban at Ares web server	2020-09-17 05:10:55
89.158.126.203	attackspambots	Sep 16 17:00:55 ssh2 sshd[64064]: User root from 89-158-126-203.rev.numericable.fr not allowed because not listed in AllowUsers Sep 16 17:00:56 ssh2 sshd[64064]: Failed password for invalid user root from 89.158.126.203 port 38108 ssh2 Sep 16 17:00:56 ssh2 sshd[64064]: Connection closed by invalid user root 89.158.126.203 port 38108 [preauth] ...	2020-09-17 05:15:43
137.74.171.160	attack	Sep 16 22:48:26 vps sshd[25959]: Failed password for root from 137.74.171.160 port 51626 ssh2 Sep 16 22:57:26 vps sshd[26464]: Failed password for root from 137.74.171.160 port 54194 ssh2 ...	2020-09-17 05:26:37
49.232.152.36	attackspambots	Brute-force attempt banned	2020-09-17 05:14:52
180.76.190.251	attack	bruteforce detected	2020-09-17 05:25:45
31.44.116.66	attack	Automatic report - Port Scan Attack	2020-09-17 05:13:30
49.235.38.46	attack	Banned for a week because repeated abuses, for example SSH, but not only	2020-09-17 05:11:25

最近上报的IP列表

37.183.38.184	2.42.205.208	202.47.68.162	117.212.149.90
40.76.46.120	14.234.227.146	175.97.139.252	178.32.221.225
220.64.91.229	117.2.123.160	171.232.147.135	117.62.172.69
82.214.131.179	220.134.240.155	6.124.233.114	229.201.215.38
193.148.74.30	139.72.32.42	55.147.104.91	28.8.180.83