116.228.29.94 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Jingyu International (China) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	(ftpd) Failed FTP login from 116.228.29.94 (CN/China/-): 10 in the last 3600 secs	2020-06-20 21:34:50

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.228.29.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38768
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.228.29.94.			IN	A

;; AUTHORITY SECTION:
.			130	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062000 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 20 21:34:45 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 94.29.228.116.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 94.29.228.116.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
71.6.147.254	attack	TCP (SYN) 71.6.147.254:23320 -> port 55553, len 44	2020-05-17 08:18:19
71.6.135.131	attackbotsspam	TCP (SYN) 71.6.135.131:24858 -> port 32764, len 44	2020-05-17 08:18:31
89.248.168.218	attackspambots	May 17 01:53:32 debian-2gb-nbg1-2 kernel: \[11932055.225374\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=89.248.168.218 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=31120 PROTO=TCP SPT=46739 DPT=21678 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-17 08:15:54
187.193.213.86	attack	ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic	2020-05-17 08:32:10
211.149.232.81	spambotsattackproxy	211.149.232.81 - - [16/May/2020:14:21:59 +0200] "GET /robots.txt HTTP/1.1" 404 1869 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0" 211.149.232.81 - - [16/May/2020:14:22:00 +0200] "POST /Admin30bcab3e/Login.php HTTP/1.1" 404 1869 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0" 211.149.232.81 - - [16/May/2020:14:22:01 +0200] "GET / HTTP/1.1" 200 1120 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 211.149.232.81 - - [16/May/2020:14:39:39 +0200] "POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 404 1869 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"	2020-05-17 09:18:22
162.243.139.182	attackspambots	TCP (SYN) 162.243.139.182:54360 -> port 631, len 44	2020-05-17 08:37:27
185.156.73.65	attackspam	05/16/2020-20:19:48.150524 185.156.73.65 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-17 08:34:34
185.156.73.67	attackbotsspam	05/16/2020-19:40:19.611975 185.156.73.67 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-17 08:34:02
92.118.161.37	attackspam	TCP (SYN) 92.118.161.37:53226 -> port 2323, len 44	2020-05-17 08:13:43
46.101.6.56	attackbots	TCP (SYN) 46.101.6.56:57636 -> port 22846, len 44	2020-05-17 08:25:43
83.97.20.97	attackspambots	" "	2020-05-17 08:16:57
104.140.188.6	attackbotsspam	TCP (SYN) 104.140.188.6:56801 -> port 23, len 44	2020-05-17 08:41:37
45.151.254.234	attackbotsspam	GPL SNMP public access udp - port: 161 proto: UDP cat: Attempted Information Leak	2020-05-17 08:26:35
36.7.80.168	attackspam	TCP (SYN) 36.7.80.168:55045 -> port 22815, len 44	2020-05-17 08:28:47
37.49.226.172	attackbotsspam	ET DROP Dshield Block Listed Source group 1 - port: 5060 proto: TCP cat: Misc Attack	2020-05-17 08:27:41

最近上报的IP列表

26.149.12.197	101.102.146.53	41.184.176.237	113.254.106.244
95.217.181.44	183.83.163.14	202.83.56.255	111.150.90.250
173.225.101.9	106.245.217.25	190.200.100.87	179.97.57.42
37.70.42.83	193.56.28.141	76.124.160.2	117.69.191.174
104.248.22.27	103.145.12.167	198.72.167.238	180.105.248.51