110.138.59.118

基本信息:

城市(city): Jakarta

省份(region): Jakarta

国家(country): Indonesia

运营商(isp): PT Telkom Indonesia

主机名(hostname): unknown

机构(organization): PT Telekomunikasi Indonesia

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Jul 17 18:41:50 thevastnessof sshd[23922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.138.59.118 ...	2019-07-18 03:22:39

相同子网IP讨论:

IP	类型	评论内容	时间
110.138.59.176	attackspam	110.138.59.176 - - [02/May/2020:07:37:33 +0300] "POST /wp-login.php HTTP/1.1" 200 2172 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-05-02 16:26:08

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.138.59.118
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52055
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;110.138.59.118.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071701 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 18 03:22:32 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

118.59.138.110.in-addr.arpa domain name pointer 118.subnet110-138-59.speedy.telkom.net.id.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
118.59.138.110.in-addr.arpa	name = 118.subnet110-138-59.speedy.telkom.net.id.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
66.240.205.34	attackbotsspam	" "	2019-06-30 03:43:08
222.108.131.117	attack	(sshd) Failed SSH login from 222.108.131.117 (-): 5 in the last 3600 secs	2019-06-30 03:35:35
91.89.97.195	attackbotsspam	Jun 29 21:05:53 dev sshd\[22579\]: Invalid user shang from 91.89.97.195 port 40254 Jun 29 21:05:53 dev sshd\[22579\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.89.97.195 ...	2019-06-30 03:12:03
103.94.130.4	attack	Jun 28 19:33:27 debian sshd[23940]: Unable to negotiate with 103.94.130.4 port 48838: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Jun 29 15:05:16 debian sshd[19572]: Unable to negotiate with 103.94.130.4 port 37855: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] ...	2019-06-30 03:23:48
77.247.110.165	attackbotsspam	Jun2921:04:26server2kernel:Firewall:\UDP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=77.247.110.165DST=136.243.224.51LEN=443TOS=0x00PREC=0x00TTL=58ID=6616DFPROTO=UDPSPT=5995DPT=65470LEN=423Jun2921:04:26server2kernel:Firewall:\UDP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=77.247.110.165DST=136.243.224.50LEN=445TOS=0x00PREC=0x00TTL=58ID=4020DFPROTO=UDPSPT=5995DPT=65470LEN=425Jun2921:04:26server2kernel:Firewall:\UDP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=77.247.110.165DST=136.243.224.52LEN=443TOS=0x00PREC=0x00TTL=58ID=63668DFPROTO=UDPSPT=5995DPT=65470LEN=423Jun2921:04:26server2kernel:Firewall:\UDP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=77.247.110.165DST=136.243.224.53LEN=443TOS=0x00PREC=0x00TTL=58ID=24456DFPROTO=UDPSPT=5995DPT=65470LEN=423Jun2921:04:26server2kernel:Firewall:\UDP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=77.247.110.165DST=136.243.224.54LEN=445TO	2019-06-30 03:15:29
198.50.161.20	attackspambots	Invalid user sammy from 198.50.161.20 port 46888 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.50.161.20 Failed password for invalid user sammy from 198.50.161.20 port 46888 ssh2 Invalid user hp from 198.50.161.20 port 50344 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.50.161.20	2019-06-30 03:30:12
37.49.225.168	attackbotsspam	SSH invalid-user multiple login try	2019-06-30 03:27:29
220.128.109.148	attack	SSH Bruteforce Attack	2019-06-30 03:10:27
186.24.50.165	attack	Sending SPAM email	2019-06-30 03:19:11
187.226.162.58	attackbots	Unauthorized connection attempt from IP address 187.226.162.58 on Port 445(SMB)	2019-06-30 03:48:13
193.32.163.182	attackspam	Jun 29 21:15:07 v22018076622670303 sshd\[32256\]: Invalid user admin from 193.32.163.182 port 46433 Jun 29 21:15:07 v22018076622670303 sshd\[32256\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.32.163.182 Jun 29 21:15:09 v22018076622670303 sshd\[32256\]: Failed password for invalid user admin from 193.32.163.182 port 46433 ssh2 ...	2019-06-30 03:17:01
185.232.21.29	attack	Automatic report - Web App Attack	2019-06-30 03:28:39
106.46.169.12	attack	Unauthorized connection attempt from IP address 106.46.169.12 on Port 445(SMB)	2019-06-30 03:49:42
54.38.200.232	attackbotsspam	These are people / users who try to send programs for data capture (spy), see examples below, there are no limits: From return@sempcam.com.br Fri Jun 28 03:48:18 2019 Received: from mx233.respinaverse.we.bs ([54.38.200.232]:36467) (envelope-from ) Subject: Cruzamento de Obrigacoes e Informacoes pela Receita Federal - O que e SPED e qual a sua finalidade From: "Cruzamento de Obrigacoes e Informacoes pela Receita Federal - Informacoes a serem prestadas na Dirf e na EFD-Reinf" Reply-To: reply-43x8@sempcam.com.br	2019-06-30 03:14:32
119.116.248.141	attack	port scan 23	2019-06-30 03:11:58

最近上报的IP列表

115.36.229.118	179.5.33.27	23.99.124.36	58.235.83.214
213.214.83.93	2001:44c8:4610:5224:1:0:8682:3f87	185.134.179.183	160.32.118.124
2003:e7:2719:ecbf:4cea:f737:e44c:b9f0	57.51.72.72	2003:c3:6739:dd39:2574:9391:95d1:ec73	119.213.80.62
14.243.168.250	14.248.56.197	71.135.8.36	78.140.207.189
221.198.195.76	169.144.71.54	130.33.152.158	153.233.15.80