116.2.6.92 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom Liaoning Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Apr 7 05:58:28 web1 pure-ftpd: \(\?@116.2.6.92\) \[WARNING\] Authentication failed for user \[anonymous\] Apr 7 05:58:44 web1 pure-ftpd: \(\?@116.2.6.92\) \[WARNING\] Authentication failed for user \[www\] Apr 7 05:59:01 web1 pure-ftpd: \(\?@116.2.6.92\) \[WARNING\] Authentication failed for user \[www\]	2020-04-07 13:37:02

类型

评论内容

时间

attack

Apr  7 05:58:28 web1 pure-ftpd: \(\?@116.2.6.92\) \[WARNING\] Authentication failed for user \[anonymous\]
Apr  7 05:58:44 web1 pure-ftpd: \(\?@116.2.6.92\) \[WARNING\] Authentication failed for user \[www\]
Apr  7 05:59:01 web1 pure-ftpd: \(\?@116.2.6.92\) \[WARNING\] Authentication failed for user \[www\]

2020-04-07 13:37:02

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.2.6.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1494
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.2.6.92.			IN	A

;; AUTHORITY SECTION:
.			461	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020040601 1800 900 604800 86400

;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 07 13:36:56 CST 2020
;; MSG SIZE  rcvd: 114

HOST信息:

Host 92.6.2.116.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 100.100.2.138, trying next server
;; Got SERVFAIL reply from 100.100.2.138, trying next server
Server:		100.100.2.136
Address:	100.100.2.136#53

** server can't find 92.6.2.116.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
185.58.205.244	attackbotsspam	Jan 7 06:20:02 venus sshd[6958]: Invalid user eem from 185.58.205.244 port 57580 Jan 7 06:20:05 venus sshd[6958]: Failed password for invalid user eem from 185.58.205.244 port 57580 ssh2 Jan 7 06:29:28 venus sshd[8124]: Invalid user hos from 185.58.205.244 port 53054 Jan 7 06:29:30 venus sshd[8124]: Failed password for invalid user hos from 185.58.205.244 port 53054 ssh2 Jan 7 06:32:57 venus sshd[8508]: Invalid user apache2 from 185.58.205.244 port 44594 Jan 7 06:32:59 venus sshd[8508]: Failed password for invalid user apache2 from 185.58.205.244 port 44594 ssh2 Jan 7 06:36:05 venus sshd[8891]: Invalid user tester from 185.58.205.244 port 36140 Jan 7 06:36:07 venus sshd[8891]: Failed password for invalid user tester from 185.58.205.244 port 36140 ssh2 Jan 7 06:39:03 venus sshd[9273]: Invalid user from 185.58.205.244 port 55920 Jan 7 06:39:06 venus sshd[9273]: Failed password for invalid user from 185.58.205.244 port 55920 ssh2 Jan 7 06:42:09 venus sshd[9712]........ ------------------------------	2020-01-10 17:19:12
123.207.145.66	attackspambots	Jan 10 04:51:31 unicornsoft sshd\[3038\]: Invalid user ato from 123.207.145.66 Jan 10 04:51:31 unicornsoft sshd\[3038\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.145.66 Jan 10 04:51:32 unicornsoft sshd\[3038\]: Failed password for invalid user ato from 123.207.145.66 port 35636 ssh2	2020-01-10 17:28:45
181.57.163.122	attackspam	Unauthorized connection attempt from IP address 181.57.163.122 on Port 445(SMB)	2020-01-10 17:48:38
103.66.79.160	attack	Jan 10 05:51:08 grey postfix/smtpd\[369\]: NOQUEUE: reject: RCPT from unknown\[103.66.79.160\]: 554 5.7.1 Service unavailable\; Client host \[103.66.79.160\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=103.66.79.160\; from=\ to=\ proto=ESMTP helo=\<\[103.66.79.160\]\> ...	2020-01-10 17:43:08
167.99.69.25	attackspam	Jan 10 07:13:52 *** sshd[24370]: User root from 167.99.69.25 not allowed because not listed in AllowUsers	2020-01-10 17:14:30
212.64.6.121	attackspambots	WordPress login Brute force / Web App Attack on client site.	2020-01-10 17:18:45
118.89.249.95	attack	Jan 10 05:49:41 MK-Soft-VM8 sshd[12471]: Failed password for root from 118.89.249.95 port 44164 ssh2 ...	2020-01-10 17:20:01
62.180.9.125	attackbotsspam	Unauthorised access (Jan 10) SRC=62.180.9.125 LEN=76 TTL=55 ID=54543 DF TCP DPT=445 WINDOW=5840 SYN	2020-01-10 17:38:29
218.92.0.172	attack	2020-01-10T10:05:53.351547ns386461 sshd\[22655\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.172 user=root 2020-01-10T10:05:55.344600ns386461 sshd\[22655\]: Failed password for root from 218.92.0.172 port 47658 ssh2 2020-01-10T10:05:58.666361ns386461 sshd\[22655\]: Failed password for root from 218.92.0.172 port 47658 ssh2 2020-01-10T10:06:01.732667ns386461 sshd\[22655\]: Failed password for root from 218.92.0.172 port 47658 ssh2 2020-01-10T10:06:05.211276ns386461 sshd\[22655\]: Failed password for root from 218.92.0.172 port 47658 ssh2 ...	2020-01-10 17:15:32
213.6.13.134	attackbotsspam	1578631912 - 01/10/2020 05:51:52 Host: 213.6.13.134/213.6.13.134 Port: 445 TCP Blocked	2020-01-10 17:17:35
14.228.135.36	attackspambots	1578631873 - 01/10/2020 05:51:13 Host: 14.228.135.36/14.228.135.36 Port: 445 TCP Blocked	2020-01-10 17:38:04
115.31.172.51	attackbots	Jan 6 02:38:59 pl3server sshd[19722]: Invalid user Amalia from 115.31.172.51 Jan 6 02:38:59 pl3server sshd[19722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.31.172.51 Jan 6 02:39:02 pl3server sshd[19722]: Failed password for invalid user Amalia from 115.31.172.51 port 44603 ssh2 Jan 6 02:39:02 pl3server sshd[19722]: Received disconnect from 115.31.172.51: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=115.31.172.51	2020-01-10 17:22:57
167.71.98.73	attackbots	WordPress login Brute force / Web App Attack on client site.	2020-01-10 17:12:48
212.64.33.206	attackspambots	$f2bV_matches	2020-01-10 17:30:32
154.0.168.66	attack	WordPress login Brute force / Web App Attack on client site.	2020-01-10 17:32:34

最近上报的IP列表

183.48.34.144	103.78.181.213	122.51.218.27	196.53.10.148
104.225.219.138	223.240.81.251	106.12.89.154	154.162.30.112
138.68.243.62	154.92.195.196	46.148.20.56	138.68.2.107
178.54.246.239	23.253.73.217	18.210.220.63	190.151.165.13
45.167.158.123	177.200.4.90	164.232.207.230	91.206.13.21