116.68.171.11 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Sumber Data Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Unauthorized connection attempt from IP address 116.68.171.11 on Port 445(SMB)	2020-04-03 20:21:34

相同子网IP讨论:

IP	类型	评论内容	时间
116.68.171.155	attackbotsspam	Aug 16 12:20:21 itv-usvr-01 sshd[1120]: Invalid user mopps from 116.68.171.155 Aug 16 12:20:21 itv-usvr-01 sshd[1120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.68.171.155 Aug 16 12:20:21 itv-usvr-01 sshd[1120]: Invalid user mopps from 116.68.171.155 Aug 16 12:20:23 itv-usvr-01 sshd[1120]: Failed password for invalid user mopps from 116.68.171.155 port 37378 ssh2 Aug 16 12:27:26 itv-usvr-01 sshd[1383]: Invalid user mosquitto from 116.68.171.155	2019-08-16 21:09:22

类型

评论内容

时间

116.68.171.155

attackbotsspam

Aug 16 12:20:21 itv-usvr-01 sshd[1120]: Invalid user mopps from 116.68.171.155
Aug 16 12:20:21 itv-usvr-01 sshd[1120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.68.171.155
Aug 16 12:20:21 itv-usvr-01 sshd[1120]: Invalid user mopps from 116.68.171.155
Aug 16 12:20:23 itv-usvr-01 sshd[1120]: Failed password for invalid user mopps from 116.68.171.155 port 37378 ssh2
Aug 16 12:27:26 itv-usvr-01 sshd[1383]: Invalid user mosquitto from 116.68.171.155

2019-08-16 21:09:22

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.68.171.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37166
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.68.171.11.			IN	A

;; AUTHORITY SECTION:
.			139	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020040300 1800 900 604800 86400

;; Query time: 94 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 03 20:21:27 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 11.171.68.116.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 11.171.68.116.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
91.224.87.222	attack	[portscan] Port scan	2019-07-06 20:11:46
165.227.2.127	attackbotsspam	$f2bV_matches	2019-07-06 19:48:06
81.22.45.253	attack	Port scan on 6 port(s): 1935 5200 11001 13619 20464 23748	2019-07-06 19:58:23
202.75.62.141	attackspam	Invalid user agent from 202.75.62.141 port 48370	2019-07-06 20:28:22
171.33.251.147	attack	WordPress wp-login brute force :: 171.33.251.147 0.172 BYPASS [06/Jul/2019:13:34:48 1000] www.[censored_4] "POST /wp-login.php HTTP/1.1" 200 3538 "https://[censored_4]/wp-login.php" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0"	2019-07-06 20:04:10
46.181.250.178	attack	Unauthorized IMAP connection attempt.	2019-07-06 20:15:21
107.170.20.247	attackbots	Jul 6 04:36:54 MK-Soft-VM4 sshd\[29936\]: Invalid user cron from 107.170.20.247 port 59294 Jul 6 04:36:54 MK-Soft-VM4 sshd\[29936\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.20.247 Jul 6 04:36:57 MK-Soft-VM4 sshd\[29936\]: Failed password for invalid user cron from 107.170.20.247 port 59294 ssh2 ...	2019-07-06 20:00:10
117.50.73.241	attackspambots	Repeated brute force against a port	2019-07-06 19:42:52
86.98.56.236	attackbotsspam	Jul 6 05:31:49 SilenceServices sshd[14337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.98.56.236 Jul 6 05:31:52 SilenceServices sshd[14337]: Failed password for invalid user caroline from 86.98.56.236 port 35406 ssh2 Jul 6 05:34:28 SilenceServices sshd[15952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.98.56.236	2019-07-06 20:11:29
188.50.37.163	attack	Honeypot attack, port: 445, PTR: PTR record not found	2019-07-06 20:22:58
115.84.105.146	attackspambots	Jul 5 22:33:49 mailman dovecot: imap-login: Disconnected (auth failed, 1 attempts): user=, method=PLAIN, rip=115.84.105.146, lip=[munged], TLS	2019-07-06 20:22:00
45.83.88.52	attack	Postfix DNSBL listed. Trying to send SPAM.	2019-07-06 19:47:40
195.201.225.12	attackbotsspam	Jul 6 11:28:12 dcd-gentoo sshd[4994]: Invalid user Stockholm from 195.201.225.12 port 62094 Jul 6 11:28:14 dcd-gentoo sshd[4994]: error: PAM: Authentication failure for illegal user Stockholm from 195.201.225.12 Jul 6 11:28:12 dcd-gentoo sshd[4994]: Invalid user Stockholm from 195.201.225.12 port 62094 Jul 6 11:28:14 dcd-gentoo sshd[4994]: error: PAM: Authentication failure for illegal user Stockholm from 195.201.225.12 Jul 6 11:28:12 dcd-gentoo sshd[4994]: Invalid user Stockholm from 195.201.225.12 port 62094 Jul 6 11:28:14 dcd-gentoo sshd[4994]: error: PAM: Authentication failure for illegal user Stockholm from 195.201.225.12 Jul 6 11:28:14 dcd-gentoo sshd[4994]: Failed keyboard-interactive/pam for invalid user Stockholm from 195.201.225.12 port 62094 ssh2 ...	2019-07-06 19:45:20
185.232.41.110	attack	[portscan] Port scan	2019-07-06 19:52:59
163.179.32.237	attackbots	Banned for posting to wp-login.php without referer {"log":"admin","wp-submit":"Log In","testcookie":"1","redirect_to":"http:\/\/priscilladobbs.com\/wp-admin\/theme-install.php","pwd":"admin"}	2019-07-06 19:49:55

最近上报的IP列表

23.105.171.105	223.68.169.180	14.249.235.50	91.203.49.128
111.110.175.89	225.242.237.210	170.137.212.121	187.127.186.72
190.124.250.1	135.10.120.223	237.84.154.113	115.75.194.167
46.159.157.151	113.181.167.122	36.76.245.245	212.188.12.103
180.241.132.249	182.52.210.47	101.109.252.81	77.40.74.36