2.57.122.116 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): Bunea Telecom SRL

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Failed password for invalid user from 2.57.122.116 port 60090 ssh2	2020-10-04 05:53:10
attack	Oct 3 07:13:14 server2 sshd\[17329\]: Invalid user ubnt from 2.57.122.116 Oct 3 07:13:15 server2 sshd\[17331\]: Invalid user admin from 2.57.122.116 Oct 3 07:13:15 server2 sshd\[17333\]: User root from 2.57.122.116 not allowed because not listed in AllowUsers Oct 3 07:13:16 server2 sshd\[17337\]: Invalid user 1234 from 2.57.122.116 Oct 3 07:13:17 server2 sshd\[17339\]: Invalid user usuario from 2.57.122.116 Oct 3 07:13:17 server2 sshd\[17341\]: Invalid user support from 2.57.122.116	2020-10-03 13:37:23
attackbots	Oct 2 23:03:24 server2 sshd\[23552\]: Invalid user ubnt from 2.57.122.116 Oct 2 23:03:25 server2 sshd\[23554\]: Invalid user admin from 2.57.122.116 Oct 2 23:03:26 server2 sshd\[23556\]: User root from 2.57.122.116 not allowed because not listed in AllowUsers Oct 2 23:03:27 server2 sshd\[23558\]: Invalid user 1234 from 2.57.122.116 Oct 2 23:03:27 server2 sshd\[23560\]: Invalid user usuario from 2.57.122.116 Oct 2 23:03:28 server2 sshd\[23562\]: Invalid user support from 2.57.122.116	2020-10-03 04:34:52
attackbotsspam	TCP (SYN) 2.57.122.116:37157 -> port 22, len 44	2020-10-02 23:56:20
attackbots	TCP (SYN) 2.57.122.116:37157 -> port 22, len 44	2020-10-02 20:27:05
attackbotsspam	TCP (SYN) 2.57.122.116:47611 -> port 22, len 44	2020-10-02 16:59:22
attackbotsspam	Invalid user admin from 2.57.122.116	2020-10-02 13:21:17

相同子网IP讨论:

IP	类型	评论内容	时间
2.57.122.195	attackspam	Triggered by Fail2Ban at ReverseProxy web server	2020-10-12 21:47:03
2.57.122.195	attackspam	Unauthorized connection attempt detected from IP address 2.57.122.195 to port 22	2020-10-12 13:17:02
2.57.122.185	attackbotsspam	TCP (SYN) 2.57.122.185:43529 -> port 81, len 44	2020-10-12 07:57:50
2.57.122.170	attackspambots	Automatic report - Banned IP Access	2020-10-12 05:01:22
2.57.122.185	attackbots	TCP (SYN) 2.57.122.185:38582 -> port 81, len 44	2020-10-12 00:15:47
2.57.122.170	attackspambots	Automatic report - Banned IP Access	2020-10-11 21:06:02
2.57.122.185	attackspambots	Unauthorized connection attempt detected from IP address 2.57.122.185 to port 81	2020-10-11 16:14:09
2.57.122.170	attackspam	Automatic report - Banned IP Access	2020-10-11 13:03:10
2.57.122.185	attackbotsspam	TCP (SYN) 2.57.122.185:53503 -> port 81, len 44	2020-10-11 09:33:04
2.57.122.170	attackspambots	Automatic report - Banned IP Access	2020-10-11 06:26:15
2.57.122.181	attack	TCP (SYN) 2.57.122.181:33950 -> port 80, len 40	2020-10-10 23:49:38
2.57.122.209	attack	Sep 10 16:11:05 hidden postfix/postscreen[11034]: DNSBL rank 4 for [2.57.122.209]:55941	2020-10-10 23:47:57
2.57.122.185	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 4 - port: 81 proto: tcp cat: Misc Attackbytes: 60	2020-10-10 23:37:41
2.57.122.171	attackbotsspam	Port Scan ...	2020-10-10 22:33:16
2.57.122.181	attack	TCP (SYN) 2.57.122.181:33950 -> port 80, len 40	2020-10-10 15:39:14

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.57.122.116
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62012
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.57.122.116.			IN	A

;; AUTHORITY SECTION:
.			340	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020100102 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 02 13:21:14 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 116.122.57.2.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 116.122.57.2.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
85.209.0.206	attack	"SSH brute force auth login attempt."	2020-01-23 19:47:35
159.89.170.20	attackspambots	Unauthorized connection attempt detected from IP address 159.89.170.20 to port 2220 [J]	2020-01-23 19:50:27
187.94.134.127	attackbots	"SMTP brute force auth login attempt."	2020-01-23 19:45:59
110.78.149.151	attackbotsspam	1579765824 - 01/23/2020 08:50:24 Host: 110.78.149.151/110.78.149.151 Port: 445 TCP Blocked	2020-01-23 20:25:42
160.16.238.205	attack	"SSH brute force auth login attempt."	2020-01-23 19:46:14
91.121.84.121	attackspam	Invalid user caja01 from 91.121.84.121 port 58440	2020-01-23 20:01:08
14.231.221.172	attackspam	"SMTP brute force auth login attempt."	2020-01-23 19:48:09
82.64.77.30	attack	"SSH brute force auth login attempt."	2020-01-23 20:23:15
41.35.58.233	attack	"SMTP brute force auth login attempt."	2020-01-23 20:26:09
178.22.41.22	attack	"SMTP brute force auth login attempt."	2020-01-23 20:04:20
149.202.180.143	attackspam	"SSH brute force auth login attempt."	2020-01-23 19:48:31
106.12.154.232	attackspambots	Jan 23 08:50:35 tuxlinux sshd[14602]: Invalid user mike from 106.12.154.232 port 44660 Jan 23 08:50:35 tuxlinux sshd[14602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.154.232 Jan 23 08:50:35 tuxlinux sshd[14602]: Invalid user mike from 106.12.154.232 port 44660 Jan 23 08:50:35 tuxlinux sshd[14602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.154.232 Jan 23 08:50:35 tuxlinux sshd[14602]: Invalid user mike from 106.12.154.232 port 44660 Jan 23 08:50:35 tuxlinux sshd[14602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.154.232 Jan 23 08:50:37 tuxlinux sshd[14602]: Failed password for invalid user mike from 106.12.154.232 port 44660 ssh2 ...	2020-01-23 20:08:37
177.69.104.168	attackbotsspam	Unauthorized connection attempt detected from IP address 177.69.104.168 to port 2220 [J]	2020-01-23 20:22:50
79.2.22.244	attackspambots	"SSH brute force auth login attempt."	2020-01-23 20:17:15
192.241.249.226	attack	Unauthorized connection attempt detected from IP address 192.241.249.226 to port 2220 [J]	2020-01-23 20:13:20

最近上报的IP列表

199.23.25.68	112.92.227.123	36.91.97.122	125.133.217.56
59.31.62.0	14.89.34.224	238.171.167.23	17.108.218.153
160.180.139.58	186.131.75.1	41.188.246.135	101.105.193.144
24.166.212.119	210.143.125.67	6.50.151.50	46.18.104.170
42.20.42.222	2.41.127.174	91.169.80.230	246.106.57.191