116.206.19.139

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Cambodia

运营商(isp): WiCAM Corporation Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-18 09:34:46,532 INFO [amun_request_handler] PortScan Detected on Port: 445 (116.206.19.139)	2019-07-18 21:44:29

相同子网IP讨论:

IP	类型	评论内容	时间
116.206.196.125	attackspambots	Aug 30 14:33:02 haigwepa sshd[25112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.206.196.125 Aug 30 14:33:04 haigwepa sshd[25112]: Failed password for invalid user greatwall from 116.206.196.125 port 52700 ssh2 ...	2020-08-30 21:51:28
116.206.196.125	attackspambots	2020-08-29T16:06:41.250466mail.standpoint.com.ua sshd[23297]: Invalid user pepper from 116.206.196.125 port 50536 2020-08-29T16:06:41.253124mail.standpoint.com.ua sshd[23297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.206.196.125 2020-08-29T16:06:41.250466mail.standpoint.com.ua sshd[23297]: Invalid user pepper from 116.206.196.125 port 50536 2020-08-29T16:06:43.634398mail.standpoint.com.ua sshd[23297]: Failed password for invalid user pepper from 116.206.196.125 port 50536 ssh2 2020-08-29T16:11:07.009477mail.standpoint.com.ua sshd[23909]: Invalid user contabilidad from 116.206.196.125 port 59096 ...	2020-08-29 23:46:47
116.206.196.125	attackspam	Aug 23 22:31:43 MainVPS sshd[8106]: Invalid user nag from 116.206.196.125 port 43764 Aug 23 22:31:44 MainVPS sshd[8106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.206.196.125 Aug 23 22:31:43 MainVPS sshd[8106]: Invalid user nag from 116.206.196.125 port 43764 Aug 23 22:31:45 MainVPS sshd[8106]: Failed password for invalid user nag from 116.206.196.125 port 43764 ssh2 Aug 23 22:35:34 MainVPS sshd[15265]: Invalid user oracle from 116.206.196.125 port 53466 ...	2020-08-24 04:43:46
116.206.196.125	attackbotsspam	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-08-18T12:04:57Z and 2020-08-18T12:24:35Z	2020-08-18 20:30:30
116.206.196.125	attackbots	Invalid user liyan from 116.206.196.125 port 53052	2020-07-31 06:02:16
116.206.196.125	attackspambots	Jul 30 10:17:29 srv-ubuntu-dev3 sshd[88872]: Invalid user yuki from 116.206.196.125 Jul 30 10:17:29 srv-ubuntu-dev3 sshd[88872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.206.196.125 Jul 30 10:17:29 srv-ubuntu-dev3 sshd[88872]: Invalid user yuki from 116.206.196.125 Jul 30 10:17:31 srv-ubuntu-dev3 sshd[88872]: Failed password for invalid user yuki from 116.206.196.125 port 51456 ssh2 Jul 30 10:21:50 srv-ubuntu-dev3 sshd[89402]: Invalid user tangyong from 116.206.196.125 Jul 30 10:21:50 srv-ubuntu-dev3 sshd[89402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.206.196.125 Jul 30 10:21:50 srv-ubuntu-dev3 sshd[89402]: Invalid user tangyong from 116.206.196.125 Jul 30 10:21:52 srv-ubuntu-dev3 sshd[89402]: Failed password for invalid user tangyong from 116.206.196.125 port 36366 ssh2 Jul 30 10:26:13 srv-ubuntu-dev3 sshd[89853]: Invalid user vps from 116.206.196.125 ...	2020-07-30 16:46:38
116.206.196.227	attackbots	xmlrpc attack	2020-07-29 02:54:54
116.206.196.125	attack	Jul 20 15:27:20 journals sshd\[1385\]: Invalid user userftp from 116.206.196.125 Jul 20 15:27:20 journals sshd\[1385\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.206.196.125 Jul 20 15:27:22 journals sshd\[1385\]: Failed password for invalid user userftp from 116.206.196.125 port 54730 ssh2 Jul 20 15:31:15 journals sshd\[1791\]: Invalid user webadm from 116.206.196.125 Jul 20 15:31:15 journals sshd\[1791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.206.196.125 ...	2020-07-20 20:46:00
116.206.196.125	attackbotsspam	Jul 11 05:51:40 rancher-0 sshd[245467]: Invalid user theresa from 116.206.196.125 port 57728 Jul 11 05:51:42 rancher-0 sshd[245467]: Failed password for invalid user theresa from 116.206.196.125 port 57728 ssh2 ...	2020-07-11 17:17:55
116.206.196.125	attackspambots	Jul 10 11:21:35 buvik sshd[25680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.206.196.125 Jul 10 11:21:37 buvik sshd[25680]: Failed password for invalid user sugimoto from 116.206.196.125 port 53170 ssh2 Jul 10 11:23:52 buvik sshd[25984]: Invalid user yuanmeng from 116.206.196.125 ...	2020-07-10 17:33:38
116.206.193.127	attackbots	Jan 10 13:51:00 grey postfix/smtpd\[30256\]: NOQUEUE: reject: RCPT from unknown\[116.206.193.127\]: 554 5.7.1 Service unavailable\; Client host \[116.206.193.127\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[116.206.193.127\]\; from=\ to=\ proto=ESMTP helo=\<\[116.206.193.127\]\> ...	2020-01-11 04:59:01
116.206.19.140	attackbots	Port Scan: TCP/445	2019-09-20 19:39:25
116.206.196.49	attackbotsspam	May 8 16:01:02 server sshd\[229048\]: Invalid user ee from 116.206.196.49 May 8 16:01:02 server sshd\[229048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.206.196.49 May 8 16:01:04 server sshd\[229048\]: Failed password for invalid user ee from 116.206.196.49 port 52682 ssh2 ...	2019-07-17 12:41:41

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.206.19.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32503
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.206.19.139.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071800 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 18 21:44:21 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

139.19.206.116.in-addr.arpa domain name pointer mxy.adventurousbelieve.com.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
139.19.206.116.in-addr.arpa	name = mxy.adventurousbelieve.com.

Authoritative answers can be found from:

IP	类型	评论内容	时间
36.4.103.85	attack	Brute forcing email accounts	2020-09-09 20:06:03
207.38.83.210	attackspambots	Spam	2020-09-09 19:52:50
93.80.211.131	attack	Brute forcing RDP port 3389	2020-09-09 20:23:58
92.55.237.224	attackbotsspam	Brute force attempt	2020-09-09 20:01:37
119.29.205.228	attackspambots	SSH invalid-user multiple login try	2020-09-09 19:57:38
116.193.216.231	attackspam	Port scan on 1 port(s): 445	2020-09-09 20:02:45
223.182.49.192	attackbots	Icarus honeypot on github	2020-09-09 20:29:57
106.12.40.74	attackbotsspam	Sep 9 01:30:39 propaganda sshd[3142]: Connection from 106.12.40.74 port 41730 on 10.0.0.161 port 22 rdomain "" Sep 9 01:30:39 propaganda sshd[3142]: Connection closed by 106.12.40.74 port 41730 [preauth]	2020-09-09 20:16:36
138.68.94.142	attack	TCP port : 2280	2020-09-09 19:51:34
93.146.237.163	attackspam	...	2020-09-09 20:18:48
192.3.247.10	attack	Sep 9 12:17:25 vmd17057 sshd[27929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.247.10 Sep 9 12:17:27 vmd17057 sshd[27929]: Failed password for invalid user zeitlinzeitlin from 192.3.247.10 port 49120 ssh2 ...	2020-09-09 20:18:24
186.214.191.155	attack	Unauthorized connection attempt from IP address 186.214.191.155 on Port 445(SMB)	2020-09-09 19:54:55
191.103.252.161	attack	20/9/8@12:55:24: FAIL: Alarm-Network address from=191.103.252.161 20/9/8@12:55:24: FAIL: Alarm-Network address from=191.103.252.161 ...	2020-09-09 20:11:21
188.168.75.254	attackspambots	Dovecot Invalid User Login Attempt.	2020-09-09 19:49:03
139.219.0.102	attack	prod11 ...	2020-09-09 20:01:02

最近上报的IP列表

43.230.145.18	92.97.134.212	81.16.235.30	104.236.109.46
67.5.247.48	171.228.174.235	120.28.78.171	223.225.106.5
92.9.12.123	54.36.150.10	119.93.116.207	92.81.141.33
110.240.142.142	183.196.148.51	92.50.91.242	47.30.251.239
112.114.234.156	92.32.222.172	195.29.9.70	171.124.31.195