116.6.114.20 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Guangdong Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-10 17:37:53
attack	Unauthorized connection attempt from IP address 116.6.114.20 on Port 445(SMB)	2019-11-11 22:49:51
attackspam	445/tcp 445/tcp 445/tcp... [2019-06-23/07-02]12pkt,1pt.(tcp)	2019-07-02 15:03:41

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.6.114.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52189
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.6.114.20.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070200 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 02 15:03:34 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 20.114.6.116.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 20.114.6.116.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
77.88.47.137	attackspam	port scan and connect, tcp 443 (https)	2020-01-01 23:56:54
106.54.113.118	attack	Jan 1 05:57:40 web9 sshd\[6867\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.113.118 user=root Jan 1 05:57:42 web9 sshd\[6867\]: Failed password for root from 106.54.113.118 port 45474 ssh2 Jan 1 05:59:02 web9 sshd\[7078\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.113.118 user=backup Jan 1 05:59:05 web9 sshd\[7078\]: Failed password for backup from 106.54.113.118 port 53894 ssh2 Jan 1 06:00:20 web9 sshd\[7279\]: Invalid user tecusan from 106.54.113.118 Jan 1 06:00:20 web9 sshd\[7279\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.113.118	2020-01-02 00:13:07
51.15.41.227	attackspambots	Jan 1 16:54:23 sd-53420 sshd\[14912\]: Invalid user $easyWinArt4 from 51.15.41.227 Jan 1 16:54:23 sd-53420 sshd\[14912\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.41.227 Jan 1 16:54:25 sd-53420 sshd\[14912\]: Failed password for invalid user $easyWinArt4 from 51.15.41.227 port 37158 ssh2 Jan 1 16:57:36 sd-53420 sshd\[15992\]: Invalid user sung from 51.15.41.227 Jan 1 16:57:36 sd-53420 sshd\[15992\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.41.227 ...	2020-01-02 00:10:20
181.81.114.23	attackbots	Automatic report - Port Scan Attack	2020-01-02 00:10:51
184.105.139.87	attackspam	" "	2020-01-02 00:04:51
201.48.170.252	attackspambots	Jan 1 16:43:23 dev0-dcde-rnet sshd[15106]: Failed password for root from 201.48.170.252 port 34766 ssh2 Jan 1 16:46:49 dev0-dcde-rnet sshd[15295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.170.252 Jan 1 16:46:51 dev0-dcde-rnet sshd[15295]: Failed password for invalid user loosse from 201.48.170.252 port 60212 ssh2	2020-01-01 23:59:36
222.186.42.155	attackbotsspam	2020-01-01T16:53:33.329792scmdmz1 sshd[31348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.155 user=root 2020-01-01T16:53:35.319536scmdmz1 sshd[31348]: Failed password for root from 222.186.42.155 port 37799 ssh2 2020-01-01T16:53:38.568850scmdmz1 sshd[31348]: Failed password for root from 222.186.42.155 port 37799 ssh2 2020-01-01T16:53:33.329792scmdmz1 sshd[31348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.155 user=root 2020-01-01T16:53:35.319536scmdmz1 sshd[31348]: Failed password for root from 222.186.42.155 port 37799 ssh2 2020-01-01T16:53:38.568850scmdmz1 sshd[31348]: Failed password for root from 222.186.42.155 port 37799 ssh2 2020-01-01T16:53:33.329792scmdmz1 sshd[31348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.155 user=root 2020-01-01T16:53:35.319536scmdmz1 sshd[31348]: Failed password for root from 222.186.42.155 port 37799 ssh2 2	2020-01-01 23:55:40
140.143.151.93	attackspambots	Jan 1 15:52:04 ks10 sshd[7789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.151.93 Jan 1 15:52:06 ks10 sshd[7789]: Failed password for invalid user www from 140.143.151.93 port 48940 ssh2 ...	2020-01-02 00:18:17
63.80.88.209	attack	Jan 1 15:52:12 exim[12217]: [1\47] 1imfM2-0003B3-T6 H=trail.nabhaa.com (trail.nvifia.com) [63.80.88.209] F= rejected after DATA: This message scored 101.5 spam points.	2020-01-02 00:00:25
113.95.188.179	attackbots	Unauthorized connection attempt from IP address 113.95.188.179 on Port 139(NETBIOS)	2020-01-02 00:18:53
218.92.0.164	attack	Jan 1 05:50:16 auw2 sshd\[5926\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.164 user=root Jan 1 05:50:18 auw2 sshd\[5926\]: Failed password for root from 218.92.0.164 port 12575 ssh2 Jan 1 05:50:21 auw2 sshd\[5926\]: Failed password for root from 218.92.0.164 port 12575 ssh2 Jan 1 05:50:24 auw2 sshd\[5926\]: Failed password for root from 218.92.0.164 port 12575 ssh2 Jan 1 05:50:27 auw2 sshd\[5926\]: Failed password for root from 218.92.0.164 port 12575 ssh2	2020-01-02 00:32:43
113.190.160.111	attack	1577890332 - 01/01/2020 15:52:12 Host: 113.190.160.111/113.190.160.111 Port: 445 TCP Blocked	2020-01-02 00:30:17
194.219.215.129	attack	Jan 1 15:53:09 grey postfix/smtpd\[23591\]: NOQUEUE: reject: RCPT from 194.219.215.129.dsl.dyn.forthnet.gr\[194.219.215.129\]: 554 5.7.1 Service unavailable\; Client host \[194.219.215.129\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?194.219.215.129\; from=\ to=\ proto=ESMTP helo=\<194.219.215.129.dsl.dyn.forthnet.gr\> ...	2020-01-01 23:54:48
82.102.173.83	attackspam	Jan 1 15:52:23 debian-2gb-nbg1-2 kernel: \[149675.502826\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=82.102.173.83 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x60 TTL=244 ID=54254 PROTO=TCP SPT=40228 DPT=8280 WINDOW=1024 RES=0x00 SYN URGP=0	2020-01-02 00:20:40
185.153.199.201	attackbots	Jan 1 16:47:43 debian-2gb-nbg1-2 kernel: \[152994.596747\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.153.199.201 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=8606 PROTO=TCP SPT=45491 DPT=1000 WINDOW=1024 RES=0x00 SYN URGP=0	2020-01-01 23:56:02

最近上报的IP列表

1.169.2.177	185.41.20.130	14.239.0.109	168.228.149.223
45.32.213.73	193.56.29.115	118.70.124.1	87.103.204.149
118.24.63.28	211.152.49.205	168.228.151.82	88.250.86.55
190.27.198.74	42.123.90.110	182.103.25.230	202.133.249.200
172.58.14.215	101.255.85.78	114.232.201.50	5.254.147.67