112.66.105.238

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
112.66.105.143	attackspambots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/112.66.105.143/ CN - 1H : (585) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 112.66.105.143 CIDR : 112.66.0.0/15 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 ATTACKS DETECTED ASN4134 : 1H - 15 3H - 36 6H - 77 12H - 137 24H - 256 DateTime : 2019-11-04 15:35:55 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-04 23:02:37

类型

评论内容

时间

112.66.105.143

attackspambots

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/112.66.105.143/ 
 
 CN - 1H : (585)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN4134 
 
 IP : 112.66.105.143 
 
 CIDR : 112.66.0.0/15 
 
 PREFIX COUNT : 5430 
 
 UNIQUE IP COUNT : 106919680 
 
 
 ATTACKS DETECTED ASN4134 :  
  1H - 15 
  3H - 36 
  6H - 77 
 12H - 137 
 24H - 256 
 
 DateTime : 2019-11-04 15:35:55 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

2019-11-04 23:02:37

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.105.238
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43003
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.105.238.			IN	A

;; AUTHORITY SECTION:
.			117	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022001 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 21 11:59:34 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

Host 238.105.66.112.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 238.105.66.112.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
129.204.121.245	attackbotsspam	Aug 21 15:55:27 * sshd[30616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.121.245 Aug 21 15:55:29 * sshd[30616]: Failed password for invalid user admin from 129.204.121.245 port 33103 ssh2	2020-08-21 22:18:44
157.245.101.251	attackspam	157.245.101.251 - - [21/Aug/2020:15:07:33 +0200] "GET /wp-login.php HTTP/1.1" 200 9040 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.101.251 - - [21/Aug/2020:15:07:34 +0200] "POST /wp-login.php HTTP/1.1" 200 9291 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.101.251 - - [21/Aug/2020:15:07:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-21 22:41:44
75.101.60.232	attackspambots	Aug 21 15:46:52 sip sshd[1378993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.101.60.232 user=proxy Aug 21 15:46:54 sip sshd[1378993]: Failed password for proxy from 75.101.60.232 port 33706 ssh2 Aug 21 15:51:04 sip sshd[1379042]: Invalid user nexus from 75.101.60.232 port 40702 ...	2020-08-21 22:32:43
45.95.168.157	attackbotsspam	Aug 21 16:44:47 srv3 sshd\[6150\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.157 user=root Aug 21 16:44:49 srv3 sshd\[6150\]: Failed password for root from 45.95.168.157 port 33382 ssh2 Aug 21 16:45:14 srv3 sshd\[6258\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.157 user=root Aug 21 16:45:16 srv3 sshd\[6258\]: Failed password for root from 45.95.168.157 port 57306 ssh2 Aug 21 16:46:35 srv3 sshd\[6327\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.157 user=root ...	2020-08-21 22:54:59
183.89.212.22	attack	(imapd) Failed IMAP login from 183.89.212.22 (TH/Thailand/mx-ll-183.89.212-22.dynamic.3bb.in.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 21 18:59:11 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=183.89.212.22, lip=5.63.12.44, TLS, session=	2020-08-21 22:49:59
185.152.136.150	attackspam	SMB Server BruteForce Attack	2020-08-21 22:28:36
134.175.129.58	attackspambots	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):	2020-08-21 22:40:59
5.154.243.131	attackbotsspam	Aug 21 16:21:23 home sshd[2729459]: Invalid user ec2-user from 5.154.243.131 port 45784 Aug 21 16:21:23 home sshd[2729459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.154.243.131 Aug 21 16:21:23 home sshd[2729459]: Invalid user ec2-user from 5.154.243.131 port 45784 Aug 21 16:21:24 home sshd[2729459]: Failed password for invalid user ec2-user from 5.154.243.131 port 45784 ssh2 Aug 21 16:25:29 home sshd[2730989]: Invalid user ec2-user from 5.154.243.131 port 49995 ...	2020-08-21 22:35:49
45.35.40.10	attack	SMB Server BruteForce Attack	2020-08-21 22:36:51
169.239.236.101	attackbots	srvr1: (mod_security) mod_security (id:942100) triggered by 169.239.236.101 (NG/-/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:06:03 [error] 482759#0: 840602 [client 169.239.236.101] ModSecurity: Access denied with code 406 (phase 2). [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "159801156315.457822"] [ref ""], client: 169.239.236.101, [redacted] request: "GET /forum/viewthread.php?thread_id=1122%27%29%29%29+OR+++%28%28%288824%3D0 HTTP/1.1" [redacted]	2020-08-21 22:20:08
59.188.2.19	attackbotsspam	2020-08-21T21:04:01.919773hostname sshd[5879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.188.2.19 2020-08-21T21:04:01.898081hostname sshd[5879]: Invalid user support from 59.188.2.19 port 40107 2020-08-21T21:04:04.170607hostname sshd[5879]: Failed password for invalid user support from 59.188.2.19 port 40107 ssh2 ...	2020-08-21 22:44:24
78.107.251.75	attack	Dovecot Invalid User Login Attempt.	2020-08-21 22:52:01
212.70.149.68	attackspam	Aug 21 14:45:43 mail postfix/smtpd[106710]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: generic failure Aug 21 14:46:09 mail postfix/smtpd[106711]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: generic failure Aug 21 14:47:57 mail postfix/smtpd[106710]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: generic failure ...	2020-08-21 22:49:01
111.125.70.22	attackbotsspam	$f2bV_matches	2020-08-21 22:34:20
189.57.121.10	attackbotsspam	srvr1: (mod_security) mod_security (id:942100) triggered by 189.57.121.10 (BR/-/189-57-121-10.customer.tdatabrasil.net.br): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:06:10 [error] 482759#0: 840604 [client 189.57.121.10] ModSecurity: Access denied with code 406 (phase 2). [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "159801157017.481997"] [ref ""], client: 189.57.121.10, [redacted] request: "GET /forum/viewthread.php?thread_id=1122%27%29%29%29+OR+++%28%28%285901%3D5901 HTTP/1.1" [redacted]	2020-08-21 22:14:47

最近上报的IP列表

112.66.105.216	112.66.105.194	112.66.105.250	112.66.105.29
112.66.106.146	112.66.106.163	112.66.105.97	112.66.106.199
112.66.106.45	112.66.106.68	112.66.106.249	112.66.106.83
112.66.106.206	112.66.107.107	112.66.107.131	112.66.107.139
112.66.107.215	112.66.106.23	112.66.107.246	112.66.107.5