117.92.16.140 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Jiangsu Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
117.92.16.77	attackbotsspam	POSTFIX Brute-Force attempt	2020-10-14 00:15:00
117.92.16.77	attackbots	POSTFIX Brute-Force attempt	2020-10-13 15:27:16
117.92.16.77	attackspam	POSTFIX Brute-Force attempt	2020-10-13 08:03:29
117.92.16.114	attackspam	Postfix RBL failed	2020-05-15 05:35:37
117.92.165.218	attackspambots	SpamScore above: 10.0	2020-03-23 01:50:43
117.92.16.228	attack	Mar 9 04:48:10 grey postfix/smtpd\[12910\]: NOQUEUE: reject: RCPT from unknown\[117.92.16.228\]: 554 5.7.1 Service unavailable\; Client host \[117.92.16.228\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[117.92.16.228\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-03-09 16:36:45
117.92.168.216	attackspam	MVPower DVR TV Shell Unauthenticated Command Execution Vulnerability, PTR: 216.168.92.117.broad.lyg.js.dynamic.163data.com.cn.	2020-02-15 01:50:43
117.92.164.8	attackbots	$f2bV_matches	2020-02-13 19:28:01
117.92.16.233	attack	Feb 9 05:47:50 server postfix/smtpd[6281]: NOQUEUE: reject: RCPT from unknown[117.92.16.233]: 554 5.7.1 Service unavailable; Client host [117.92.16.233] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/117.92.16.233; from= to= proto=ESMTP helo=	2020-02-09 21:11:19
117.92.164.165	attackspambots	Feb 4 14:48:17 grey postfix/smtpd\[23104\]: NOQUEUE: reject: RCPT from unknown\[117.92.164.165\]: 554 5.7.1 Service unavailable\; Client host \[117.92.164.165\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[117.92.164.165\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-05 03:37:07
117.92.16.198	attackbotsspam	SpamReport	2019-12-28 14:46:52
117.92.16.177	attackbots	Dec 21 23:57:33 grey postfix/smtpd\[22067\]: NOQUEUE: reject: RCPT from unknown\[117.92.16.177\]: 554 5.7.1 Service unavailable\; Client host \[117.92.16.177\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[117.92.16.177\]\; from=\ to=\ proto=SMTP helo=\ ...	2019-12-22 08:09:57
117.92.165.31	attack	Email spam message	2019-12-08 16:35:04
117.92.16.34	attack	Dec 6 07:22:37 grey postfix/smtpd\[5417\]: NOQUEUE: reject: RCPT from unknown\[117.92.16.34\]: 554 5.7.1 Service unavailable\; Client host \[117.92.16.34\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[117.92.16.34\]\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-06 22:19:17
117.92.16.61	attack	SpamReport	2019-11-25 16:07:45

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.92.16.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21923
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.92.16.140.			IN	A

;; AUTHORITY SECTION:
.			350	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102000 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 20 21:27:42 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 140.16.92.117.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 140.16.92.117.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
185.38.175.71	attackbotsspam	Automatic report - Banned IP Access	2020-04-16 00:26:57
49.231.148.156	attackspam	Unauthorized connection attempt detected from IP address 49.231.148.156 to port 445	2020-04-16 00:54:25
23.227.38.65	spamattack	ORDURES aux Sites totalement ILLÉGAUX, aux mentions légales erronées, en WHOIS caché comme d'habitude chez les ESCROCS qui balancent des POURRIELS à répétition pour du PHISHING puis du SCAM ! A FUIR immédiatement de telles raclures de bidet... GARBAGES in the TOTALLY ILLEGAL Sites, without any legal notice, in WHOIS hidden as usual at the SWINDLERS which rocks repeated SPAMS for the PHISHING then the SCAM ! To RUN AWAY FROM immediately such scrapings of bidet ... SCHMUTZ in den völlig UNGESETZLICHEN Websiten, ohne eine gesetzliche Erwähnung, im versteckten WHOIS wie gewöhnlich bei den BETRÜGERN, die POURRIELS in Wiederholung für den PHISHING dann SCAM schaukelt ! Sofort solche Späne von Bidet zu VERMEIDEN... МУСОР в полностью НЕЗАКОННЫХ участках, без любого юридического уведомления, в WHOIS, скрытом как обычно в ЖУЛИКАХ, который трясет повторный SPAMS для PHISHING затем ЖУЛЬНИЧЕСТВО ! ИЗБЕГАТЬ немедленно таких очисток биде.... 垃圾中的完全非法的站点，而不受任何法律通告，在 WHOIS 中隐藏的象往常, 的岩石重复 SPAMS 的网络钓鱼然后骗局！为避免（逃亡）立即这样的 scrapings 的坐浴盆... medical-priority.com, ESCROCS NOTOIRES ILLEGAUX ! Site créé le 31 Mars 2020, comme d'habitude chez les ESCROCS NameCheap, Inc. et "protégé", comprendre caché au Panama par WhoisGuard, Inc. ! https://www.whois.com/whois/medical-priority.com Très "professionnel", avec une adresse courriel chez ? medicalpriorityfr@gmail.com, soit GOOGLE, donc des NULS de chez SUPRA NULS... Et IP au ...Canada ! 23.227.38.65 => shopify.com https://whatismyip.click/?q=medical-priority.com Ce sera d'ailleurs la SEULE mention qui valent quelques chose, car PAS de Nom, de personne comme de Société, AUCUN Registre du Commerce, AUCUNE adresse géographique NI téléphone, RIEN... https://www.mywot.com/scorecard/medical-priority.com https://www.mywot.com/scorecard/namecheap.com https://www.mywot.com/scorecard/whoisguard.com https://www.mywot.com/scorecard/shopify.com	2020-04-16 00:44:43
60.246.3.79	attack	IMAP brute force ...	2020-04-16 00:34:28
190.0.45.254	attack	$f2bV_matches	2020-04-16 00:48:37
213.180.203.184	attackspam	[Wed Apr 15 19:08:40.958261 2020] [:error] [pid 25691:tid 139897189979904] [client 213.180.203.184:38642] [client 213.180.203.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "Xpb5SIxk7T6pcaz7KNP57AAAAe8"] ...	2020-04-16 01:03:47
51.75.70.30	attackbotsspam	Apr 15 12:16:17 ny01 sshd[19127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.70.30 Apr 15 12:16:18 ny01 sshd[19127]: Failed password for invalid user spamfilter from 51.75.70.30 port 45774 ssh2 Apr 15 12:23:37 ny01 sshd[20075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.70.30	2020-04-16 00:25:53
203.176.181.93	attackbots	Honeypot attack, port: 445, PTR: ip-203-176-181-93.moratelindo.co.id.	2020-04-16 01:05:42
185.234.219.23	attack	(pop3d) Failed POP3 login from 185.234.219.23 (IE/Ireland/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 15 21:13:57 ir1 dovecot[566034]: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.219.23, lip=5.63.12.44, session=<6jmgBVejIFS56tsX>	2020-04-16 00:51:26
185.47.65.30	attack	2020-04-15T18:19:31.670743sd-86998 sshd[24081]: Invalid user test from 185.47.65.30 port 58678 2020-04-15T18:19:31.675103sd-86998 sshd[24081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=host30.router40.tygrys.net 2020-04-15T18:19:31.670743sd-86998 sshd[24081]: Invalid user test from 185.47.65.30 port 58678 2020-04-15T18:19:34.150288sd-86998 sshd[24081]: Failed password for invalid user test from 185.47.65.30 port 58678 ssh2 2020-04-15T18:24:22.725068sd-86998 sshd[24662]: Invalid user www from 185.47.65.30 port 38164 ...	2020-04-16 00:50:15
106.12.119.1	attackspam	Bruteforce detected by fail2ban	2020-04-16 01:02:35
190.205.59.6	attack	2020-04-15T14:28:25.690449shield sshd\[31259\]: Invalid user visitor from 190.205.59.6 port 53008 2020-04-15T14:28:25.695661shield sshd\[31259\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.205.59.6 2020-04-15T14:28:27.709654shield sshd\[31259\]: Failed password for invalid user visitor from 190.205.59.6 port 53008 ssh2 2020-04-15T14:33:08.407573shield sshd\[31972\]: Invalid user jenkins from 190.205.59.6 port 33140 2020-04-15T14:33:08.412328shield sshd\[31972\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.205.59.6	2020-04-16 00:32:51
197.156.69.34	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-04-16 00:28:02
167.114.36.165	attack	prod6 ...	2020-04-16 00:44:07
138.68.148.177	attackbots	Apr 15 16:22:51 sshd[15334]: Failed password for invalid user dusty from 138.68.148.177 port 51654 ssh2	2020-04-16 00:58:55

最近上报的IP列表

77.247.110.38	185.26.107.131	139.130.50.190	158.69.204.172
176.217.141.232	226.117.180.177	230.75.100.52	148.72.232.37
32.48.35.51	69.141.28.199	80.241.212.209	158.138.238.125
192.192.65.109	171.168.27.52	223.39.0.240	167.82.103.14
44.164.37.127	169.160.231.52	238.31.244.30	72.49.136.36