112.115.139.26

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Yunnan Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Unauthorized connection attempt detected from IP address 112.115.139.26 to port 8908 [T]	2020-05-20 11:30:14

相同子网IP讨论:

IP	类型	评论内容	时间
112.115.139.108	attack	Unauthorized connection attempt detected from IP address 112.115.139.108 to port 8081	2019-12-31 06:51:06
112.115.139.118	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 54153a6a9d57eb00 \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/4.066686748 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 04:37:51

类型

评论内容

时间

112.115.139.108

attack

Unauthorized connection attempt detected from IP address 112.115.139.108 to port 8081

2019-12-31 06:51:06

112.115.139.118

attackbotsspam

The IP has triggered Cloudflare WAF. CF-Ray: 54153a6a9d57eb00 | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/4.066686748 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 04:37:51

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.115.139.26
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13692
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.115.139.26.			IN	A

;; AUTHORITY SECTION:
.			252	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051901 1800 900 604800 86400

;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 20 11:30:07 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

26.139.115.112.in-addr.arpa domain name pointer 26.139.115.112.broad.km.yn.dynamic.163data.com.cn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
26.139.115.112.in-addr.arpa	name = 26.139.115.112.broad.km.yn.dynamic.163data.com.cn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
49.232.43.151	attack	May 27 17:14:24 itv-usvr-01 sshd[4323]: Invalid user subzero from 49.232.43.151 May 27 17:14:24 itv-usvr-01 sshd[4323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.43.151 May 27 17:14:24 itv-usvr-01 sshd[4323]: Invalid user subzero from 49.232.43.151 May 27 17:14:27 itv-usvr-01 sshd[4323]: Failed password for invalid user subzero from 49.232.43.151 port 56294 ssh2 May 27 17:17:13 itv-usvr-01 sshd[4424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.43.151 user=root May 27 17:17:15 itv-usvr-01 sshd[4424]: Failed password for root from 49.232.43.151 port 58432 ssh2	2020-05-27 19:54:15
187.11.242.196	attackspam	May 27 13:53:33 server sshd[26547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.11.242.196 May 27 13:53:35 server sshd[26547]: Failed password for invalid user bytes from 187.11.242.196 port 57830 ssh2 May 27 13:58:02 server sshd[26876]: Failed password for root from 187.11.242.196 port 35710 ssh2 ...	2020-05-27 20:01:49
193.110.157.151	attack	CMS (WordPress or Joomla) login attempt.	2020-05-27 19:52:25
209.217.192.148	attackspam	May 27 04:12:35 pixelmemory sshd[53123]: Invalid user cvsadmin from 209.217.192.148 port 49992 May 27 04:12:37 pixelmemory sshd[53123]: Failed password for invalid user cvsadmin from 209.217.192.148 port 49992 ssh2 May 27 04:15:40 pixelmemory sshd[56105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.217.192.148 user=root May 27 04:15:42 pixelmemory sshd[56105]: Failed password for root from 209.217.192.148 port 54712 ssh2 May 27 04:18:42 pixelmemory sshd[59070]: Invalid user admin from 209.217.192.148 port 59404 ...	2020-05-27 19:39:03
5.136.158.33	attack	Fail2Ban Ban Triggered	2020-05-27 19:38:37
106.13.87.170	attackbotsspam	Failed password for invalid user admin from 106.13.87.170 port 36144 ssh2	2020-05-27 19:37:06
138.68.99.46	attackbotsspam	Invalid user chinho from 138.68.99.46 port 34122	2020-05-27 19:37:31
14.177.64.234	attackspam	Unauthorized connection attempt from IP address 14.177.64.234 on Port 445(SMB)	2020-05-27 19:57:24
31.214.241.133	attackbots	scan r	2020-05-27 20:09:05
106.13.95.100	attack	May 27 06:41:48 ajax sshd[24945]: Failed password for root from 106.13.95.100 port 49856 ssh2	2020-05-27 19:42:10
150.109.108.25	attackbotsspam	2020-05-27T14:05:04.828402afi-git.jinr.ru sshd[4992]: Failed password for invalid user peggy from 150.109.108.25 port 39006 ssh2 2020-05-27T14:07:43.223722afi-git.jinr.ru sshd[5735]: Invalid user xiaomei from 150.109.108.25 port 55580 2020-05-27T14:07:43.227142afi-git.jinr.ru sshd[5735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.108.25 2020-05-27T14:07:43.223722afi-git.jinr.ru sshd[5735]: Invalid user xiaomei from 150.109.108.25 port 55580 2020-05-27T14:07:45.791232afi-git.jinr.ru sshd[5735]: Failed password for invalid user xiaomei from 150.109.108.25 port 55580 ssh2 ...	2020-05-27 19:43:17
162.243.144.152	attackspam	[Thu May 14 20:53:15 2020] - DDoS Attack From IP: 162.243.144.152 Port: 50764	2020-05-27 19:34:09
187.174.219.142	attackbots	May 27 13:57:43 sshd\[29104\]: Invalid user qtss from 187.174.219.142May 27 13:57:45 sshd\[29104\]: Failed password for invalid user qtss from 187.174.219.142 port 42296 ssh2 ...	2020-05-27 20:12:37
129.211.41.234	attackbots	Failed password for invalid user aman from 129.211.41.234 port 34484 ssh2	2020-05-27 19:59:03
114.40.104.85	attackbots	TCP (SYN) 114.40.104.85:23515 -> port 23, len 44	2020-05-27 19:49:08

最近上报的IP列表

52.12.6.232	45.141.86.150	83.231.97.156	43.228.99.218
199.212.76.128	41.215.141.162	36.33.248.197	34.65.224.38
31.42.57.195	27.197.43.189	27.44.27.4	5.145.213.8
1.54.55.48	222.69.152.198	220.185.211.1	150.116.140.209
224.243.230.246	218.75.27.198	14.12.252.64	149.126.181.182