2001:470:dfa9:10ff:0:242:ac11:8

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Hurricane Electric LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Port scan	2020-02-20 08:20:29

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:


; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6_10.3 <<>> 2001:470:dfa9:10ff:0:242:ac11:8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53024
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;2001:470:dfa9:10ff:0:242:ac11:8. IN	A

;; AUTHORITY SECTION:
.			10800	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022500 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 100.100.2.138#53(100.100.2.138)
;; WHEN: Tue Feb 25 23:18:28 2020
;; MSG SIZE  rcvd: 124

HOST信息:

Host 8.0.0.0.1.1.c.a.2.4.2.0.0.0.0.0.f.f.0.1.9.a.f.d.0.7.4.0.1.0.0.2.ip6.arpa not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 8.0.0.0.1.1.c.a.2.4.2.0.0.0.0.0.f.f.0.1.9.a.f.d.0.7.4.0.1.0.0.2.ip6.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
177.170.126.240	attack	Feb 25 10:22:21 mout sshd[24756]: Invalid user deployer from 177.170.126.240 port 39048	2020-02-25 17:30:56
90.145.244.188	attackspambots	Feb 24 23:24:19 web1 sshd\[26465\]: Invalid user laojiang from 90.145.244.188 Feb 24 23:24:19 web1 sshd\[26465\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.145.244.188 Feb 24 23:24:21 web1 sshd\[26465\]: Failed password for invalid user laojiang from 90.145.244.188 port 52558 ssh2 Feb 24 23:28:41 web1 sshd\[26902\]: Invalid user crystal from 90.145.244.188 Feb 24 23:28:41 web1 sshd\[26902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.145.244.188	2020-02-25 17:38:07
145.239.82.192	attack	Feb 24 23:02:57 wbs sshd\[5860\]: Invalid user gitlab-psql from 145.239.82.192 Feb 24 23:02:57 wbs sshd\[5860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.ip-145-239-82.eu Feb 24 23:02:59 wbs sshd\[5860\]: Failed password for invalid user gitlab-psql from 145.239.82.192 port 37264 ssh2 Feb 24 23:08:51 wbs sshd\[6337\]: Invalid user student from 145.239.82.192 Feb 24 23:08:51 wbs sshd\[6337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.ip-145-239-82.eu	2020-02-25 17:58:58
106.12.200.213	attack	Feb 25 10:33:34 sd-53420 sshd\[18358\]: Invalid user ns2 from 106.12.200.213 Feb 25 10:33:34 sd-53420 sshd\[18358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.200.213 Feb 25 10:33:36 sd-53420 sshd\[18358\]: Failed password for invalid user ns2 from 106.12.200.213 port 33092 ssh2 Feb 25 10:40:53 sd-53420 sshd\[19194\]: Invalid user debian from 106.12.200.213 Feb 25 10:40:53 sd-53420 sshd\[19194\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.200.213 ...	2020-02-25 18:03:06
103.107.196.158	attackbots	TCP Port Scanning	2020-02-25 17:22:42
189.254.33.157	attack	2020-02-25T09:17:16.757278hz01.yumiweb.com sshd\[20698\]: Invalid user televisa-beta from 189.254.33.157 port 50889 2020-02-25T09:21:02.407390hz01.yumiweb.com sshd\[20716\]: Invalid user ftpuser from 189.254.33.157 port 35661 2020-02-25T09:24:48.799204hz01.yumiweb.com sshd\[20725\]: Invalid user mysql from 189.254.33.157 port 48663 ...	2020-02-25 17:50:15
181.122.66.98	attackspam	Feb 25 08:25:20 grey postfix/smtpd\[12178\]: NOQUEUE: reject: RCPT from unknown\[181.122.66.98\]: 554 5.7.1 Service unavailable\; Client host \[181.122.66.98\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.122.66.98\]\; from=\ to=\ proto=SMTP helo=\ ...	2020-02-25 17:23:04
27.154.58.154	attackbotsspam	Feb 25 09:24:31 zeus sshd[16540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.154.58.154 Feb 25 09:24:33 zeus sshd[16540]: Failed password for invalid user csczserver from 27.154.58.154 port 48559 ssh2 Feb 25 09:34:18 zeus sshd[16759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.154.58.154 Feb 25 09:34:21 zeus sshd[16759]: Failed password for invalid user devp from 27.154.58.154 port 45439 ssh2	2020-02-25 18:00:19
113.190.252.13	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 25-02-2020 07:25:08.	2020-02-25 17:37:14
218.92.0.145	attackspam	Brute-force attempt banned	2020-02-25 17:35:51
31.32.224.147	attackspambots	Feb 25 07:25:08 *** sshd[30547]: Invalid user arthur from 31.32.224.147	2020-02-25 17:31:23
103.249.193.156	attackbotsspam	CN_MAINT-CNNIC-AP_<177>1582615488 [1:2403498:55540] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 100 [Classification: Misc Attack] [Priority: 2] {TCP} 103.249.193.156:43814	2020-02-25 17:56:25
36.238.100.221	attack	Port probing on unauthorized port 23	2020-02-25 17:18:41
114.26.56.16	attack	Feb 25 08:25:16 debian-2gb-nbg1-2 kernel: \[4874714.998098\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=114.26.56.16 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=34227 PROTO=TCP SPT=1054 DPT=23 WINDOW=27771 RES=0x00 SYN URGP=0	2020-02-25 17:27:00
109.226.194.25	attackbotsspam	Automatic report BANNED IP	2020-02-25 17:46:17

最近上报的IP列表

141.93.227.217	199.237.109.51	253.126.164.18	198.199.110.54
95.240.73.252	58.218.199.165	5.233.57.110	187.177.89.253
92.211.177.19	18.216.215.24	52.136.193.147	2001:470:dfa9:10ff:0:242:ac11:2e
2001:470:dfa9:10ff:0:242:ac11:2c	2001:470:dfa9:10ff:0:242:ac11:2b	2001:470:dfa9:10ff:0:242:ac11:2a	92.50.140.246
72.186.139.38	2001:470:dfa9:10ff:0:242:ac11:28	210.136.218.48	13.57.33.148