116.56.5.127 - IPInfo

基本信息:

城市(city): unknown

省份(region): Guangdong

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): CERNET2 IX at South China University of Technology

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.56.5.127
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49682
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.56.5.127.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019052700 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon May 27 21:00:36 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 127.5.56.116.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 127.5.56.116.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
81.22.45.160	attack	Port scan on 9 port(s): 2017 3388 3390 10000 50001 50003 50004 50005 59999	2019-08-08 03:27:20
178.128.55.52	attackbotsspam	Aug 7 19:45:07 vpn01 sshd\[8948\]: Invalid user mailroom from 178.128.55.52 Aug 7 19:45:07 vpn01 sshd\[8948\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.55.52 Aug 7 19:45:09 vpn01 sshd\[8948\]: Failed password for invalid user mailroom from 178.128.55.52 port 48657 ssh2	2019-08-08 02:56:22
54.37.156.188	attackspambots	Aug 7 14:52:35 TORMINT sshd\[10348\]: Invalid user wxl from 54.37.156.188 Aug 7 14:52:35 TORMINT sshd\[10348\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.156.188 Aug 7 14:52:37 TORMINT sshd\[10348\]: Failed password for invalid user wxl from 54.37.156.188 port 35848 ssh2 ...	2019-08-08 02:53:10
179.108.245.140	attackspambots	Aug 7 19:42:08 xeon postfix/smtpd[15806]: warning: unknown[179.108.245.140]: SASL PLAIN authentication failed: authentication failure	2019-08-08 03:25:09
182.74.217.122	attackspam	web-1 [ssh] SSH Attack	2019-08-08 03:23:02
95.74.245.166	attackspam	Aug719:43:25server2dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=95.74.245.166\,lip=136.243.224.50\,TLS\,session=\Aug719:43:35server2dovecot:imap-login:Disconnected\(authfailed\,1attemptsin6secs\):user=\\,method=PLAIN\,rip=95.74.245.166\,lip=136.243.224.50\,TLS\,session=\Aug719:43:42server2dovecot:imap-login:Disconnected\(authfailed\,1attemptsin6secs\):user=\\,method=PLAIN\,rip=95.74.245.166\,lip=136.243.224.50\,TLS\,session=\Aug719:43:47server2dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=95.74.245.166\,lip=136.243.224.50\,TLS\,session=\Aug719:43:53server2dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=95.74.245.166\,lip=136.243.224.50\,TLS\,session	2019-08-08 03:15:10
120.52.96.216	attack	Jun 20 02:26:03 vtv3 sshd\[2536\]: Invalid user test from 120.52.96.216 port 18760 Jun 20 02:26:03 vtv3 sshd\[2536\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.96.216 Jun 20 02:26:05 vtv3 sshd\[2536\]: Failed password for invalid user test from 120.52.96.216 port 18760 ssh2 Jun 20 02:31:10 vtv3 sshd\[5036\]: Invalid user l4d2 from 120.52.96.216 port 38354 Jun 20 02:31:10 vtv3 sshd\[5036\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.96.216 Jun 20 02:41:58 vtv3 sshd\[10176\]: Invalid user gta from 120.52.96.216 port 22370 Jun 20 02:41:58 vtv3 sshd\[10176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.96.216 Jun 20 02:42:00 vtv3 sshd\[10176\]: Failed password for invalid user gta from 120.52.96.216 port 22370 ssh2 Jun 20 02:43:32 vtv3 sshd\[10792\]: Invalid user testftp from 120.52.96.216 port 28127 Jun 20 02:43:32 vtv3 sshd\[10792\]: pam_unix\(sshd:	2019-08-08 03:17:03
62.234.68.246	attack	Aug 7 20:50:44 [host] sshd[16089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.68.246 user=root Aug 7 20:50:45 [host] sshd[16089]: Failed password for root from 62.234.68.246 port 39752 ssh2 Aug 7 20:52:53 [host] sshd[16091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.68.246 user=root	2019-08-08 03:12:01
177.20.168.234	attack	Aug 7 19:45:26 v22018076622670303 sshd\[18962\]: Invalid user sniffer from 177.20.168.234 port 59179 Aug 7 19:45:26 v22018076622670303 sshd\[18962\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.20.168.234 Aug 7 19:45:28 v22018076622670303 sshd\[18962\]: Failed password for invalid user sniffer from 177.20.168.234 port 59179 ssh2 ...	2019-08-08 02:48:34
18.85.192.253	attackspam	2019-08-07T18:03:14.993416abusebot-3.cloudsearch.cf sshd\[17579\]: Invalid user administrator from 18.85.192.253 port 43416	2019-08-08 03:20:48
62.234.96.175	attackspam	SSH bruteforce (Triggered fail2ban)	2019-08-08 02:36:35
49.88.112.56	attackbotsspam	Aug 7 19:44:38 tux-35-217 sshd\[18371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.56 user=root Aug 7 19:44:40 tux-35-217 sshd\[18371\]: Failed password for root from 49.88.112.56 port 10309 ssh2 Aug 7 19:44:43 tux-35-217 sshd\[18371\]: Failed password for root from 49.88.112.56 port 10309 ssh2 Aug 7 19:44:45 tux-35-217 sshd\[18371\]: Failed password for root from 49.88.112.56 port 10309 ssh2 ...	2019-08-08 03:07:56
118.89.215.182	attackspambots	[WedAug0719:45:13.2643862019][:error][pid2911:tid139738488141568][client118.89.215.182:27268][client118.89.215.182]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\\\\\\\\\(chr\?\\\\\\\\\(\?[0-9]{1\,3}\?\\\\\\\\\)\\|\?=\?f\(\?:open\\|write\)\?\\\\\\\\\(\\|\\\\\\\\b\(\?:passthru\\|serialize\\|php_uname\\|phpinfo\\|shell_exec\\|preg_\\\\\\\\w \\|mysql_query\\|exec\\|eval\\|base64_decode\\|decode_base64\\|rot13\\|base64_url_decode\\|gz\(\?:inflate\\|decode\\|uncompress\)\\|strrev\\|zlib_\\\\\\\\w \)\\\\\\\\b\?\(\?..."atARGS:admin.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"767"][id"340095"][rev"53"][msg"Atomicorp.comWAFRules:AttackBlocked-PHPfunctioninArgument-thismaybeanattack."][data"die\(@md5\,ARGS:admin"][severity"CRITICAL"][hostname"81.17.25.236"][uri"/App.php"][unique_id"XUsOKU05zO2tJVstc8H8UQAAAQA"][WedAug0719:45:14.5227552019][:error][pid2908:tid139738361095936][client118.89.215.182:27671][client118.89.215.182]ModSecurity:Accessdeniedwithcode403\(phase2\).Matc	2019-08-08 02:52:09
84.127.54.225	attack	Aug 7 19:45:59 server postfix/smtpd[24645]: NOQUEUE: reject: RCPT from 84.127.54.225.dyn.user.ono.com[84.127.54.225]: 554 5.7.1 Service unavailable; Client host [84.127.54.225] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/84.127.54.225; from= to= proto=ESMTP helo=<84.127.54.225.dyn.user.ono.com>	2019-08-08 02:35:25
121.234.217.17	attack	FTP/21 MH Probe, BF, Hack -	2019-08-08 02:33:41

最近上报的IP列表

142.51.111.92	126.233.57.227	52.10.137.168	219.243.201.11
178.173.219.47	180.124.242.54	209.209.185.15	62.182.202.35
119.55.232.34	18.9.193.249	180.111.239.82	40.189.160.112
204.48.30.160	191.209.220.186	134.249.186.247	218.175.49.106
144.100.254.251	108.186.52.82	220.54.160.181	39.85.249.232