城市(city): unknown
省份(region): unknown
国家(country): Hong Kong
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '112.213.112.0 - 112.213.112.255'
% Abuse contact for '112.213.112.0 - 112.213.112.255' is 'SUN-HK@WORLDMAILHK.COM'
inetnum: 112.213.112.0 - 112.213.112.255
netname: MEGA-II
descr: MEGA-II IDC
country: HK
admin-c: DA179-AP
tech-c: DA179-AP
abuse-c: AS2098-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-HK-SUN
mnt-irt: IRT-SUN-HK
last-modified: 2020-05-17T23:03:24Z
source: APNIC
irt: IRT-SUN-HK
address: MEGA-II IDC
e-mail: SUN-HK@WORLDMAILHK.COM
abuse-mailbox: SUN-HK@WORLDMAILHK.COM
admin-c: DA179-AP
tech-c: DA179-AP
auth: # Filtered
remarks: sun-hk@worldmailhk.com was validated on 2025-09-04
mnt-by: MAINT-HK-SNW
last-modified: 2025-09-04T22:48:46Z
source: APNIC
role: ABUSE SUNHK
country: ZZ
address: MEGA-II IDC
phone: +000000000
e-mail: SUN-HK@WORLDMAILHK.COM
admin-c: DA179-AP
tech-c: DA179-AP
nic-hdl: AS2098-AP
remarks: Generated from irt object IRT-SUN-HK
remarks: sun-hk@worldmailhk.com was validated on 2025-09-04
abuse-mailbox: SUN-HK@WORLDMAILHK.COM
mnt-by: APNIC-ABUSE
last-modified: 2025-09-05T00:38:26Z
source: APNIC
person: DNS Administrator
nic-hdl: DA179-AP
e-mail: SUN-HK@WORLDMAILHK.COM
address: SHA TIN
phone: +852-2135-9374
country: HK
mnt-by: MAINT-HK-SNW
abuse-mailbox: SUN-HK@WORLDMAILHK.COM
last-modified: 2024-07-12T04:45:31Z
source: APNIC
% Information related to '112.213.96.0/19AS38197'
route: 112.213.96.0/19
descr: MEGA-II IDC
origin: AS38197
mnt-by: MAINT-HK-SUN
last-modified: 2020-05-29T05:18:46Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.34 (WHOIS-AU4); <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.213.112.235
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62051
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;112.213.112.235. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025101200 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 12 21:32:23 CST 2025
;; MSG SIZE rcvd: 108Host 235.112.213.112.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 235.112.213.112.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 1.55.17.162 | attackspambots | Oct 18 07:10:26 ns381471 sshd[32300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.55.17.162 Oct 18 07:10:28 ns381471 sshd[32300]: Failed password for invalid user 1234 from 1.55.17.162 port 47422 ssh2 Oct 18 07:19:48 ns381471 sshd[32512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.55.17.162 |
2019-10-18 18:35:23 |
| 92.252.162.35 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 18-10-2019 04:45:22. |
2019-10-18 18:29:42 |
| 121.101.186.242 | attackspam | email spam |
2019-10-18 18:28:30 |
| 91.121.67.107 | attack | 2019-10-18T07:25:42.117099abusebot-4.cloudsearch.cf sshd\[9007\]: Invalid user admin from 91.121.67.107 port 41850 |
2019-10-18 18:25:14 |
| 125.164.153.16 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 18-10-2019 04:45:18. |
2019-10-18 18:37:33 |
| 157.230.251.115 | attackspam | Oct 17 20:51:31 tdfoods sshd\[25033\]: Invalid user password from 157.230.251.115 Oct 17 20:51:31 tdfoods sshd\[25033\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.251.115 Oct 17 20:51:33 tdfoods sshd\[25033\]: Failed password for invalid user password from 157.230.251.115 port 53758 ssh2 Oct 17 20:56:01 tdfoods sshd\[25449\]: Invalid user wd@123 from 157.230.251.115 Oct 17 20:56:01 tdfoods sshd\[25449\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.251.115 |
2019-10-18 18:39:26 |
| 123.136.161.146 | attack | Sep 12 07:44:16 microserver sshd[48776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.136.161.146 user=root Sep 12 07:44:17 microserver sshd[48776]: Failed password for root from 123.136.161.146 port 37724 ssh2 Sep 12 07:51:35 microserver sshd[50021]: Invalid user teste from 123.136.161.146 port 34086 Sep 12 07:51:35 microserver sshd[50021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.136.161.146 Sep 12 07:51:37 microserver sshd[50021]: Failed password for invalid user teste from 123.136.161.146 port 34086 ssh2 Sep 12 08:05:58 microserver sshd[52145]: Invalid user vnc from 123.136.161.146 port 54194 Sep 12 08:05:58 microserver sshd[52145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.136.161.146 Sep 12 08:06:00 microserver sshd[52145]: Failed password for invalid user vnc from 123.136.161.146 port 54194 ssh2 Sep 12 08:13:51 microserver sshd[52977]: Invalid user daniell |
2019-10-18 18:45:18 |
| 67.215.237.6 | attack | failed_logins |
2019-10-18 18:21:44 |
| 159.65.180.64 | attack | Automatic report - Banned IP Access |
2019-10-18 18:10:17 |
| 51.77.148.87 | attackspam | $f2bV_matches |
2019-10-18 18:25:39 |
| 36.88.154.4 | attackspambots | Fail2Ban Ban Triggered |
2019-10-18 18:21:28 |
| 118.27.16.153 | attack | Oct 17 17:41:15 hanapaa sshd\[1221\]: Invalid user zmss from 118.27.16.153 Oct 17 17:41:15 hanapaa sshd\[1221\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v118-27-16-153.985k.static.cnode.io Oct 17 17:41:16 hanapaa sshd\[1221\]: Failed password for invalid user zmss from 118.27.16.153 port 46346 ssh2 Oct 17 17:45:31 hanapaa sshd\[1567\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v118-27-16-153.985k.static.cnode.io user=root Oct 17 17:45:33 hanapaa sshd\[1567\]: Failed password for root from 118.27.16.153 port 57340 ssh2 |
2019-10-18 18:20:54 |
| 113.125.25.73 | attack | Automatic report - Banned IP Access |
2019-10-18 18:15:40 |
| 40.117.171.237 | attackspam | Oct 18 05:40:47 MainVPS sshd[30961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.117.171.237 user=root Oct 18 05:40:49 MainVPS sshd[30961]: Failed password for root from 40.117.171.237 port 2984 ssh2 Oct 18 05:45:06 MainVPS sshd[31268]: Invalid user s from 40.117.171.237 port 2984 Oct 18 05:45:06 MainVPS sshd[31268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.117.171.237 Oct 18 05:45:06 MainVPS sshd[31268]: Invalid user s from 40.117.171.237 port 2984 Oct 18 05:45:08 MainVPS sshd[31268]: Failed password for invalid user s from 40.117.171.237 port 2984 ssh2 ... |
2019-10-18 18:46:40 |
| 14.42.80.24 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/14.42.80.24/ KR - 1H : (59) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : KR NAME ASN : ASN4766 IP : 14.42.80.24 CIDR : 14.42.80.0/22 PREFIX COUNT : 8136 UNIQUE IP COUNT : 44725248 WYKRYTE ATAKI Z ASN4766 : 1H - 2 3H - 6 6H - 9 12H - 17 24H - 39 DateTime : 2019-10-18 05:45:11 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-18 18:45:03 |