116.30.199.68 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
116.30.199.128	attack	2020-08-07T09:28:12.158035amanda2.illicoweb.com sshd\[43234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.30.199.128 user=root 2020-08-07T09:28:14.066687amanda2.illicoweb.com sshd\[43234\]: Failed password for root from 116.30.199.128 port 50472 ssh2 2020-08-07T09:31:18.475574amanda2.illicoweb.com sshd\[43724\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.30.199.128 user=root 2020-08-07T09:31:19.917684amanda2.illicoweb.com sshd\[43724\]: Failed password for root from 116.30.199.128 port 59850 ssh2 2020-08-07T09:34:06.969215amanda2.illicoweb.com sshd\[44283\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.30.199.128 user=root ...	2020-08-07 19:56:35

类型

评论内容

时间

116.30.199.128

attack

2020-08-07T09:28:12.158035amanda2.illicoweb.com sshd\[43234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.30.199.128  user=root
2020-08-07T09:28:14.066687amanda2.illicoweb.com sshd\[43234\]: Failed password for root from 116.30.199.128 port 50472 ssh2
2020-08-07T09:31:18.475574amanda2.illicoweb.com sshd\[43724\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.30.199.128  user=root
2020-08-07T09:31:19.917684amanda2.illicoweb.com sshd\[43724\]: Failed password for root from 116.30.199.128 port 59850 ssh2
2020-08-07T09:34:06.969215amanda2.illicoweb.com sshd\[44283\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.30.199.128  user=root
...

2020-08-07 19:56:35

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.30.199.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48539
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.30.199.68.			IN	A

;; AUTHORITY SECTION:
.			109	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 140 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 19:23:34 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 68.199.30.116.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 68.199.30.116.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
185.50.149.9	attackbotsspam	(smtpauth) Failed SMTP AUTH login from 185.50.149.9 (ES/Spain/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-05-07 17:45:59 login authenticator failed for ([185.50.149.9]) [185.50.149.9]: 535 Incorrect authentication data (set_id=test@kvsolutions.nl) 2020-05-07 17:46:07 login authenticator failed for ([185.50.149.9]) [185.50.149.9]: 535 Incorrect authentication data (set_id=test) 2020-05-07 17:55:15 login authenticator failed for ([185.50.149.9]) [185.50.149.9]: 535 Incorrect authentication data (set_id=sales@kvsolutions.nl) 2020-05-07 17:55:20 login authenticator failed for ([185.50.149.9]) [185.50.149.9]: 535 Incorrect authentication data (set_id=sales) 2020-05-07 18:17:30 login authenticator failed for ([185.50.149.9]) [185.50.149.9]: 535 Incorrect authentication data (set_id=postmaster@kvsolutions.nl)	2020-05-08 00:19:22
112.85.42.176	attackspambots	May 7 18:41:44 vps sshd[114507]: Failed password for root from 112.85.42.176 port 48332 ssh2 May 7 18:41:48 vps sshd[114507]: Failed password for root from 112.85.42.176 port 48332 ssh2 May 7 18:41:51 vps sshd[114507]: Failed password for root from 112.85.42.176 port 48332 ssh2 May 7 18:41:55 vps sshd[114507]: Failed password for root from 112.85.42.176 port 48332 ssh2 May 7 18:41:59 vps sshd[114507]: Failed password for root from 112.85.42.176 port 48332 ssh2 ...	2020-05-08 00:42:36
90.189.197.237	attack	Unauthorized connection attempt detected from IP address 90.189.197.237 to port 23 [T]	2020-05-08 00:25:39
210.212.237.67	attackspambots	May 7 15:01:04 home sshd[13684]: Failed password for root from 210.212.237.67 port 47000 ssh2 May 7 15:05:18 home sshd[14318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.212.237.67 May 7 15:05:20 home sshd[14318]: Failed password for invalid user scan from 210.212.237.67 port 51580 ssh2 ...	2020-05-08 00:40:33
2.86.246.211	attack	Connection by 2.86.246.211 on port: 8080 got caught by honeypot at 5/7/2020 12:59:19 PM	2020-05-08 00:13:24
118.25.96.30	attackspambots	2020-05-07T16:45:08.460756shield sshd\[18926\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.96.30 user=root 2020-05-07T16:45:10.672377shield sshd\[18926\]: Failed password for root from 118.25.96.30 port 44829 ssh2 2020-05-07T16:46:40.591271shield sshd\[19384\]: Invalid user bbb from 118.25.96.30 port 61611 2020-05-07T16:46:40.595256shield sshd\[19384\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.96.30 2020-05-07T16:46:42.435578shield sshd\[19384\]: Failed password for invalid user bbb from 118.25.96.30 port 61611 ssh2	2020-05-08 00:59:21
202.51.98.226	attackspam	May 7 11:53:58 localhost sshd[12328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.51.98.226 user=root May 7 11:53:59 localhost sshd[12328]: Failed password for root from 202.51.98.226 port 44436 ssh2 May 7 11:59:13 localhost sshd[12959]: Invalid user vladimir from 202.51.98.226 port 53006 May 7 11:59:13 localhost sshd[12959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.51.98.226 May 7 11:59:13 localhost sshd[12959]: Invalid user vladimir from 202.51.98.226 port 53006 May 7 11:59:14 localhost sshd[12959]: Failed password for invalid user vladimir from 202.51.98.226 port 53006 ssh2 ...	2020-05-08 00:26:46
159.138.201.61	attack	May 7 17:17:03 vserver sshd\[10164\]: Invalid user cynthia from 159.138.201.61May 7 17:17:05 vserver sshd\[10164\]: Failed password for invalid user cynthia from 159.138.201.61 port 51946 ssh2May 7 17:20:43 vserver sshd\[10199\]: Invalid user connor from 159.138.201.61May 7 17:20:46 vserver sshd\[10199\]: Failed password for invalid user connor from 159.138.201.61 port 60620 ssh2 ...	2020-05-08 00:38:53
106.58.169.162	attackbotsspam	May 7 13:47:53 ovpn sshd\[7523\]: Invalid user wuc from 106.58.169.162 May 7 13:47:53 ovpn sshd\[7523\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.58.169.162 May 7 13:47:54 ovpn sshd\[7523\]: Failed password for invalid user wuc from 106.58.169.162 port 58786 ssh2 May 7 13:58:33 ovpn sshd\[10067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.58.169.162 user=root May 7 13:58:35 ovpn sshd\[10067\]: Failed password for root from 106.58.169.162 port 60728 ssh2	2020-05-08 01:06:59
45.142.195.7	attackbots	May 7 18:15:06 galaxy event: galaxy/lswi: smtp: wechat@uni-potsdam.de [45.142.195.7] authentication failure using internet password May 7 18:15:57 galaxy event: galaxy/lswi: smtp: wed@uni-potsdam.de [45.142.195.7] authentication failure using internet password May 7 18:16:48 galaxy event: galaxy/lswi: smtp: wedding@uni-potsdam.de [45.142.195.7] authentication failure using internet password May 7 18:17:40 galaxy event: galaxy/lswi: smtp: weddings@uni-potsdam.de [45.142.195.7] authentication failure using internet password May 7 18:18:30 galaxy event: galaxy/lswi: smtp: weed@uni-potsdam.de [45.142.195.7] authentication failure using internet password ...	2020-05-08 00:23:12
206.189.186.211	attackspambots	WordPress login Brute force / Web App Attack on client site.	2020-05-08 01:09:52
79.180.54.48	attackspambots	Automatic report - Port Scan Attack	2020-05-08 00:37:15
222.186.15.10	attackspam	May 7 16:37:43 scw-6657dc sshd[8732]: Failed password for root from 222.186.15.10 port 47058 ssh2 May 7 16:37:43 scw-6657dc sshd[8732]: Failed password for root from 222.186.15.10 port 47058 ssh2 May 7 16:37:45 scw-6657dc sshd[8732]: Failed password for root from 222.186.15.10 port 47058 ssh2 ...	2020-05-08 00:42:12
50.233.42.98	attackbotsspam	May 7 13:41:29 web01.agentur-b-2.de postfix/smtpd[191672]: NOQUEUE: reject: RCPT from unknown[50.233.42.98]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= May 7 13:41:30 web01.agentur-b-2.de postfix/smtpd[191672]: NOQUEUE: reject: RCPT from unknown[50.233.42.98]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= May 7 13:41:31 web01.agentur-b-2.de postfix/smtpd[191672]: NOQUEUE: reject: RCPT from unknown[50.233.42.98]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= May 7 13:41:32 web01.agentur-b-2.de postfix/smtpd[191672]: NOQUEUE: reject: RCPT from unknown[50.233.42.98]: 450 4.7.1 : Helo command rejected: Host not found; from=	2020-05-08 00:21:49
222.186.175.216	attackspam	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-05-08 00:14:09

最近上报的IP列表

116.30.199.27	116.30.204.100	116.30.205.195	116.30.204.97
116.30.204.227	116.30.205.177	116.30.205.20	116.30.199.83
114.106.172.134	116.30.199.97	116.30.206.94	116.30.206.59
116.30.207.137	116.30.205.62	116.30.207.18	116.30.216.138
116.30.216.103	116.30.216.162	116.30.216.123	114.106.172.136