117.67.94.116 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
117.67.94.90	attack	Lines containing failures of 117.67.94.90 Apr 17 15:17:19 neweola postfix/smtpd[3508]: connect from unknown[117.67.94.90] Apr 17 15:17:20 neweola postfix/smtpd[3508]: NOQUEUE: reject: RCPT from unknown[117.67.94.90]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo= Apr 17 15:17:20 neweola postfix/smtpd[3508]: disconnect from unknown[117.67.94.90] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 Apr 17 15:17:21 neweola postfix/smtpd[3508]: connect from unknown[117.67.94.90] Apr 17 15:17:21 neweola postfix/smtpd[3508]: lost connection after AUTH from unknown[117.67.94.90] Apr 17 15:17:21 neweola postfix/smtpd[3508]: disconnect from unknown[117.67.94.90] ehlo=1 auth=0/1 commands=1/2 Apr 17 15:17:22 neweola postfix/smtpd[3508]: connect from unknown[117.67.94.90] Apr 17 15:17:22 neweola postfix/smtpd[3508]: lost connection after AUTH from unknown[117.67.94.90] Apr 17 15:17:22 neweola postfix/smtpd[3508]: disconnect from unkno........ ------------------------------	2020-04-18 07:36:07

类型

评论内容

时间

117.67.94.90

attack

Lines containing failures of 117.67.94.90
Apr 17 15:17:19 neweola postfix/smtpd[3508]: connect from unknown[117.67.94.90]
Apr 17 15:17:20 neweola postfix/smtpd[3508]: NOQUEUE: reject: RCPT from unknown[117.67.94.90]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Apr 17 15:17:20 neweola postfix/smtpd[3508]: disconnect from unknown[117.67.94.90] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4
Apr 17 15:17:21 neweola postfix/smtpd[3508]: connect from unknown[117.67.94.90]
Apr 17 15:17:21 neweola postfix/smtpd[3508]: lost connection after AUTH from unknown[117.67.94.90]
Apr 17 15:17:21 neweola postfix/smtpd[3508]: disconnect from unknown[117.67.94.90] ehlo=1 auth=0/1 commands=1/2
Apr 17 15:17:22 neweola postfix/smtpd[3508]: connect from unknown[117.67.94.90]
Apr 17 15:17:22 neweola postfix/smtpd[3508]: lost connection after AUTH from unknown[117.67.94.90]
Apr 17 15:17:22 neweola postfix/smtpd[3508]: disconnect from unkno........
------------------------------

2020-04-18 07:36:07

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.67.94.116
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28250
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;117.67.94.116.			IN	A

;; AUTHORITY SECTION:
.			490	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 22:19:08 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 116.94.67.117.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 116.94.67.117.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
31.181.31.25	attackspambots	Automatic report - Port Scan Attack	2019-11-20 17:36:31
222.128.93.67	attackspambots	Nov 20 07:22:29 amit sshd\[2609\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.128.93.67 user=nobody Nov 20 07:22:30 amit sshd\[2609\]: Failed password for nobody from 222.128.93.67 port 43178 ssh2 Nov 20 07:26:51 amit sshd\[2636\]: Invalid user timpert from 222.128.93.67 Nov 20 07:26:51 amit sshd\[2636\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.128.93.67 ...	2019-11-20 17:35:16
116.255.226.242	attack	$f2bV_matches	2019-11-20 17:30:18
187.176.123.210	attackspambots	2019-11-20 06:22:15 H=187-176-123-210.dynamic.axtel.net [187.176.123.210]:10525 I=[10.100.18.21]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=187.176.123.210) 2019-11-20 06:22:15 unexpected disconnection while reading SMTP command from 187-176-123-210.dynamic.axtel.net [187.176.123.210]:10525 I=[10.100.18.21]:25 (error: Connection reset by peer) 2019-11-20 07:07:38 H=187-176-123-210.dynamic.axtel.net [187.176.123.210]:21185 I=[10.100.18.21]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=187.176.123.210) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=187.176.123.210	2019-11-20 17:28:08
98.143.227.144	attackspam	Nov 20 02:42:14 TORMINT sshd\[2198\]: Invalid user admin from 98.143.227.144 Nov 20 02:42:14 TORMINT sshd\[2198\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.143.227.144 Nov 20 02:42:16 TORMINT sshd\[2198\]: Failed password for invalid user admin from 98.143.227.144 port 47304 ssh2 ...	2019-11-20 17:51:48
212.83.138.75	attack	Automatic report - Banned IP Access	2019-11-20 17:32:13
112.85.42.72	attackspambots	2019-11-20T09:27:59.263216abusebot-7.cloudsearch.cf sshd\[24947\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.72 user=root	2019-11-20 17:44:34
133.242.53.230	attackbotsspam	Nov 20 07:03:26 mxgate1 postfix/postscreen[22629]: CONNECT from [133.242.53.230]:57812 to [176.31.12.44]:25 Nov 20 07:03:26 mxgate1 postfix/dnsblog[22862]: addr 133.242.53.230 listed by domain zen.spamhaus.org as 127.0.0.3 Nov 20 07:03:32 mxgate1 postfix/postscreen[22629]: DNSBL rank 2 for [133.242.53.230]:57812 Nov x@x Nov 20 07:03:33 mxgate1 postfix/postscreen[22629]: DISCONNECT [133.242.53.230]:57812 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=133.242.53.230	2019-11-20 17:14:46
219.154.5.127	attack	Unauthorised access (Nov 20) SRC=219.154.5.127 LEN=40 TTL=49 ID=7122 TCP DPT=8080 WINDOW=2556 SYN	2019-11-20 17:36:48
84.93.153.9	attackspambots	Nov 20 08:33:50 serwer sshd\[18200\]: Invalid user server from 84.93.153.9 port 44931 Nov 20 08:33:50 serwer sshd\[18200\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.93.153.9 Nov 20 08:33:52 serwer sshd\[18200\]: Failed password for invalid user server from 84.93.153.9 port 44931 ssh2 ...	2019-11-20 17:49:16
73.24.87.203	attackbotsspam	Nov 20 07:26:59 host3 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=73.24.87.203, lip=207.180.241.50, TLS, session=<7E+ARMGXyf5JGFfL> Nov 20 07:27:06 host3 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=73.24.87.203, lip=207.180.241.50, TLS, session= Nov 20 07:27:06 host3 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=73.24.87.203, lip=207.180.241.50, TLS, session= Nov 20 07:27:18 host3 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=73.24.87.203, lip=207.180.241.50, TLS, session=<6zFiRcGX9v5JGFfL> Nov 20 07:27:20 host3 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=	2019-11-20 17:20:11
87.101.248.114	attackbotsspam	2019-11-20 06:49:57 H=([87.101.248.114]) [87.101.248.114]:31204 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=87.101.248.114) 2019-11-20 06:49:57 unexpected disconnection while reading SMTP command from ([87.101.248.114]) [87.101.248.114]:31204 I=[10.100.18.22]:25 (error: Connection reset by peer) 2019-11-20 07:08:48 H=([87.101.248.114]) [87.101.248.114]:35515 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=87.101.248.114) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=87.101.248.114	2019-11-20 17:33:34
49.88.112.116	attackbots	Nov 20 04:30:11 ny01 sshd[1025]: Failed password for root from 49.88.112.116 port 32172 ssh2 Nov 20 04:30:14 ny01 sshd[1025]: Failed password for root from 49.88.112.116 port 32172 ssh2 Nov 20 04:30:16 ny01 sshd[1025]: Failed password for root from 49.88.112.116 port 32172 ssh2	2019-11-20 17:41:21
14.174.75.243	attack	2019-11-20 06:55:52 H=(static.vnpt.vn) [14.174.75.243]:10626 I=[10.100.18.23]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=14.174.75.243) 2019-11-20 06:55:52 unexpected disconnection while reading SMTP command from (static.vnpt.vn) [14.174.75.243]:10626 I=[10.100.18.23]:25 (error: Connection reset by peer) 2019-11-20 07:12:03 H=(static.vnpt.vn) [14.174.75.243]:12762 I=[10.100.18.23]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=14.174.75.243) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.174.75.243	2019-11-20 17:48:46
45.143.221.15	attackbots	\[2019-11-20 04:02:13\] NOTICE\[2754\] chan_sip.c: Registration from '"393" \' failed for '45.143.221.15:5534' - Wrong password \[2019-11-20 04:02:13\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-20T04:02:13.725-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="393",SessionID="0x7f26c47ffee8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.15/5534",Challenge="33690a66",ReceivedChallenge="33690a66",ReceivedHash="5d96910da8f84f0600ad6abaec891d96" \[2019-11-20 04:02:13\] NOTICE\[2754\] chan_sip.c: Registration from '"393" \' failed for '45.143.221.15:5534' - Wrong password \[2019-11-20 04:02:13\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-20T04:02:13.849-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="393",SessionID="0x7f26c477d0c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.1	2019-11-20 17:21:16

最近上报的IP列表

117.67.94.130	117.67.94.137	114.230.127.4	117.67.94.134
114.230.127.40	114.230.127.44	114.230.127.48	114.230.127.52
114.230.127.61	114.230.127.65	114.230.127.69	114.230.127.77
117.67.95.121	117.67.95.12	117.67.95.124	117.67.95.112
117.67.95.132	117.67.95.126	117.67.95.122	114.230.127.78