180.157.90.94 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Shanghai Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Honeypot attack, port: 5555, PTR: PTR record not found	2020-02-23 21:55:11

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 180.157.90.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37929
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;180.157.90.94.			IN	A

;; AUTHORITY SECTION:
.			471	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022300 1800 900 604800 86400

;; Query time: 88 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 23 21:55:06 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 94.90.157.180.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 94.90.157.180.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
183.182.101.33	attackbots	Brute forcing RDP port 3389	2019-10-17 18:24:06
51.254.137.156	attackbotsspam	51.254.137.156 - - [17/Oct/2019:05:47:27 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.254.137.156 - - [17/Oct/2019:05:47:27 +0200] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.254.137.156 - - [17/Oct/2019:05:47:27 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.254.137.156 - - [17/Oct/2019:05:47:27 +0200] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.254.137.156 - - [17/Oct/2019:05:47:27 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.254.137.156 - - [17/Oct/2019:05:47:27 +0200] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-10-17 18:27:38
112.222.29.147	attackbotsspam	[Aegis] @ 2019-10-17 06:15:39 0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack	2019-10-17 18:30:48
106.12.189.235	attackspambots	Oct 16 22:24:28 server sshd\[1473\]: Failed password for invalid user support from 106.12.189.235 port 57776 ssh2 Oct 17 06:15:15 server sshd\[15246\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.189.235 user=root Oct 17 06:15:16 server sshd\[15246\]: Failed password for root from 106.12.189.235 port 43868 ssh2 Oct 17 13:13:21 server sshd\[15104\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.189.235 user=root Oct 17 13:13:23 server sshd\[15104\]: Failed password for root from 106.12.189.235 port 46506 ssh2 ...	2019-10-17 18:17:08
89.109.23.190	attack	2019-10-17T09:38:23.902349abusebot-5.cloudsearch.cf sshd\[2881\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.109.23.190 user=root	2019-10-17 18:04:18
178.62.117.106	attackspambots	Automatic report - Banned IP Access	2019-10-17 18:35:58
163.172.45.139	attack	Automatic report - Banned IP Access	2019-10-17 18:27:55
222.186.175.169	attack	Oct 17 12:01:03 legacy sshd[9428]: Failed password for root from 222.186.175.169 port 47706 ssh2 Oct 17 12:01:21 legacy sshd[9428]: error: maximum authentication attempts exceeded for root from 222.186.175.169 port 47706 ssh2 [preauth] Oct 17 12:01:31 legacy sshd[9433]: Failed password for root from 222.186.175.169 port 50886 ssh2 ...	2019-10-17 18:02:44
185.106.102.9	attackbotsspam	IP: 185.106.102.9 ASN: AS197648 Cloudlayer8 Limited Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 17/10/2019 3:47:47 AM UTC	2019-10-17 18:18:21
159.203.201.250	attack	ET DROP Dshield Block Listed Source group 1 - port: 40373 proto: TCP cat: Misc Attack	2019-10-17 18:16:48
161.0.153.34	attackspam	Oct 17 09:37:16 imap-login: Info: Disconnected $auth failed, 1 attempts in 9 secs$: user=\, method=PLAIN, rip=161.0.153.34, lip=192.168.100.101, session=\<1uvaSBaVgwChAJki\>\ Oct 17 09:37:17 imap-login: Info: Disconnected $auth failed, 1 attempts in 10 secs$: user=\, method=PLAIN, rip=161.0.153.34, lip=192.168.100.101, session=\<13HbSBaVhgChAJki\>\ Oct 17 09:40:03 imap-login: Info: Disconnected: Inactivity $auth failed, 1 attempts in 176 secs$: user=\, method=PLAIN, rip=161.0.153.34, lip=192.168.100.101, session=\\ Oct 17 09:40:05 imap-login: Info: Disconnected: Inactivity $auth failed, 1 attempts in 176 secs$: user=\, method=PLAIN, rip=161.0.153.34, lip=192.168.100.101, session=\\ Oct 17 09:40:17 imap-login: Info: Disconnected: Inactivity $no auth attempts in 180 secs$: user=\<\>, rip=161.0.153.34, lip=192.168.100.101, session=\\ Oct 17 09:40:18 imap-login:	2019-10-17 18:22:12
117.185.62.146	attackbots	Oct 17 15:33:59 areeb-Workstation sshd[7068]: Failed password for root from 117.185.62.146 port 33535 ssh2 ...	2019-10-17 18:11:51
188.235.138.182	attackbots	proto=tcp . spt=39824 . dpt=25 . (Listed on truncate-gbudb also unsubscore and rbldns-ru) (374)	2019-10-17 18:16:31
66.249.155.245	attackspambots	Oct 17 07:04:21 www2 sshd\[11074\]: Invalid user git from 66.249.155.245Oct 17 07:04:23 www2 sshd\[11074\]: Failed password for invalid user git from 66.249.155.245 port 38890 ssh2Oct 17 07:08:35 www2 sshd\[11590\]: Invalid user webline from 66.249.155.245 ...	2019-10-17 18:37:44
2.224.128.111	attackspam	$f2bV_matches	2019-10-17 18:29:02

最近上报的IP列表

222.85.232.125	201.150.114.212	178.216.52.105	139.212.58.235
221.220.109.166	1.85.118.107	180.142.153.116	114.241.246.233
114.239.105.249	49.70.209.23	213.16.210.156	122.4.28.180
106.110.205.249	116.58.232.160	112.243.178.27	112.114.168.73
180.115.154.73	118.79.208.185	112.84.212.36	49.88.89.213