116.31.16.6 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Guangdong Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Automatic report - Port Scan Attack	2020-05-25 02:04:18

相同子网IP讨论:

IP	类型	评论内容	时间
116.31.166.93	attackspambots	Automatic report - Port Scan Attack	2020-10-01 08:06:38
116.31.166.93	attackspam	Automatic report - Port Scan Attack	2020-10-01 00:38:42
116.31.164.17	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 54383696afd0e4fa \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20120101 Firefox/33.0 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 04:46:33

类型

评论内容

时间

116.31.166.93

attackspambots

Automatic report - Port Scan Attack

2020-10-01 08:06:38

116.31.166.93

attackspam

Automatic report - Port Scan Attack

2020-10-01 00:38:42

116.31.164.17

attackspam

The IP has triggered Cloudflare WAF. CF-Ray: 54383696afd0e4fa | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: d.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20120101 Firefox/33.0 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-12 04:46:33

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.31.16.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45120
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.31.16.6.			IN	A

;; AUTHORITY SECTION:
.			573	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052401 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 25 02:04:15 CST 2020
;; MSG SIZE  rcvd: 115

HOST信息:

Host 6.16.31.116.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 6.16.31.116.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
132.232.93.48	attack	Nov 13 07:25:20 vps01 sshd[18026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.93.48 Nov 13 07:25:23 vps01 sshd[18026]: Failed password for invalid user www from 132.232.93.48 port 56132 ssh2	2019-11-13 17:57:55
81.177.73.17	attack	T: f2b postfix aggressive 3x	2019-11-13 18:08:38
119.27.167.231	attack	Nov 13 08:17:46 ncomp sshd[31959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.167.231 user=root Nov 13 08:17:48 ncomp sshd[31959]: Failed password for root from 119.27.167.231 port 44434 ssh2 Nov 13 08:25:04 ncomp sshd[32108]: Invalid user nfs from 119.27.167.231	2019-11-13 18:05:18
3.83.80.150	attackspam	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	2019-11-13 17:33:49
222.127.86.135	attack	$f2bV_matches_ltvn	2019-11-13 17:42:17
129.226.68.217	attack	Nov 13 08:59:36 server sshd\[27782\]: Invalid user lindsey from 129.226.68.217 Nov 13 08:59:36 server sshd\[27782\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.68.217 Nov 13 08:59:38 server sshd\[27782\]: Failed password for invalid user lindsey from 129.226.68.217 port 41824 ssh2 Nov 13 09:25:37 server sshd\[1996\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.68.217 user=root Nov 13 09:25:40 server sshd\[1996\]: Failed password for root from 129.226.68.217 port 37176 ssh2 ...	2019-11-13 17:46:51
116.109.164.35	attackbots	Automatic report - Port Scan Attack	2019-11-13 18:01:37
115.73.214.234	attackspambots	Unauthorised access (Nov 13) SRC=115.73.214.234 LEN=44 TTL=46 ID=29508 TCP DPT=23 WINDOW=26731 SYN	2019-11-13 17:45:03
181.120.29.87	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/181.120.29.87/ PY - 1H : (6) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : PY NAME ASN : ASN23201 IP : 181.120.29.87 CIDR : 181.120.0.0/14 PREFIX COUNT : 68 UNIQUE IP COUNT : 788480 ATTACKS DETECTED ASN23201 : 1H - 2 3H - 2 6H - 3 12H - 5 24H - 6 DateTime : 2019-11-13 07:25:13 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-13 17:59:05
162.195.60.106	attack	/editBlackAndWhiteList ApiTool	2019-11-13 18:05:02
111.85.182.30	attack	Nov 13 10:15:17 meumeu sshd[26251]: Failed password for root from 111.85.182.30 port 56595 ssh2 Nov 13 10:20:33 meumeu sshd[26812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.85.182.30 Nov 13 10:20:35 meumeu sshd[26812]: Failed password for invalid user clinkard from 111.85.182.30 port 36080 ssh2 ...	2019-11-13 17:42:54
194.230.148.216	attack	Nov1307:25:29server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin3secs$:user=\\,method=PLAIN\,rip=194.230.148.216\,lip=81.17.25.230\,session=\Nov1307:25:35server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin6secs$:user=\\,method=PLAIN\,rip=194.230.148.216\,lip=81.17.25.230\,session=\Nov1307:25:46server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin6secs$:user=\\,method=PLAIN\,rip=194.230.148.216\,lip=81.17.25.230\,session=\Nov1307:25:48server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin2secs$:user=\\,method=PLAIN\,rip=194.230.148.216\,lip=81.17.25.230\,session=\Nov1307:25:52server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin2secs$:user=\\,method=PLAIN\,rip=194.230.148.216\,lip=81.17.25.230\,session=\Nov1307:25:56server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin2secs$:user=	2019-11-13 17:33:06
84.244.180.7	attack	2019-11-13T10:36:17.022396mail01 postfix/smtpd[11013]: warning: opzetborstelshop.nl[84.244.180.7]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-13T10:45:19.218622mail01 postfix/smtpd[11013]: warning: opzetborstelshop.nl[84.244.180.7]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-13T10:45:24.046253mail01 postfix/smtpd[18669]: warning: opzetborstelshop.nl[84.244.180.7]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-11-13 17:57:26
186.133.187.59	attack	TCP Port Scanning	2019-11-13 18:12:12
167.114.185.237	attackbotsspam	2019-11-13T09:40:58.221129shield sshd\[2692\]: Invalid user youldon from 167.114.185.237 port 47902 2019-11-13T09:40:58.225288shield sshd\[2692\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=237.ip-167-114-185.net 2019-11-13T09:41:00.394250shield sshd\[2692\]: Failed password for invalid user youldon from 167.114.185.237 port 47902 ssh2 2019-11-13T09:44:19.786907shield sshd\[3148\]: Invalid user titania from 167.114.185.237 port 55298 2019-11-13T09:44:19.791162shield sshd\[3148\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=237.ip-167-114-185.net	2019-11-13 17:55:08

最近上报的IP列表

64.108.86.180	113.117.215.79	113.117.214.224	113.76.111.153
94.143.205.247	113.72.216.207	113.70.181.47	93.104.208.79
113.69.210.248	95.159.39.117	110.156.96.197	106.124.251.175
59.33.62.245	58.62.135.234	58.47.202.29	36.107.247.172
36.107.216.213	223.146.135.238	113.117.42.96	113.72.218.38