112.66.105.39 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
112.66.105.143	attackspambots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/112.66.105.143/ CN - 1H : (585) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 112.66.105.143 CIDR : 112.66.0.0/15 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 ATTACKS DETECTED ASN4134 : 1H - 15 3H - 36 6H - 77 12H - 137 24H - 256 DateTime : 2019-11-04 15:35:55 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-04 23:02:37

类型

评论内容

时间

112.66.105.143

attackspambots

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/112.66.105.143/ 
 
 CN - 1H : (585)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN4134 
 
 IP : 112.66.105.143 
 
 CIDR : 112.66.0.0/15 
 
 PREFIX COUNT : 5430 
 
 UNIQUE IP COUNT : 106919680 
 
 
 ATTACKS DETECTED ASN4134 :  
  1H - 15 
  3H - 36 
  6H - 77 
 12H - 137 
 24H - 256 
 
 DateTime : 2019-11-04 15:35:55 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

2019-11-04 23:02:37

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.105.39
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33765
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.105.39.			IN	A

;; AUTHORITY SECTION:
.			559	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 06:39:21 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 39.105.66.112.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 39.105.66.112.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
181.143.226.67	attackspambots	Ssh brute force	2020-09-12 13:14:43
106.12.219.184	attackbotsspam	prod11 ...	2020-09-12 13:21:16
5.188.62.14	attack	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-12T04:01:22Z and 2020-09-12T04:10:40Z	2020-09-12 13:30:45
205.177.181.25	attack	Amazon.job's - Recruitment	2020-09-12 13:08:20
220.133.36.112	attackbots	2020-09-12T02:31:00.856477ks3355764 sshd[22999]: Invalid user david from 220.133.36.112 port 57674 2020-09-12T02:31:03.399144ks3355764 sshd[22999]: Failed password for invalid user david from 220.133.36.112 port 57674 ssh2 ...	2020-09-12 13:04:33
148.163.124.15	attackbotsspam	Phishing site	2020-09-12 12:59:34
203.195.204.122	attack	Sep 12 02:55:08 fhem-rasp sshd[728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.204.122 user=root Sep 12 02:55:10 fhem-rasp sshd[728]: Failed password for root from 203.195.204.122 port 41916 ssh2 ...	2020-09-12 13:28:40
61.177.172.54	attackbots	Sep 12 06:56:31 melroy-server sshd[8642]: Failed password for root from 61.177.172.54 port 42196 ssh2 Sep 12 06:56:37 melroy-server sshd[8642]: Failed password for root from 61.177.172.54 port 42196 ssh2 ...	2020-09-12 12:59:00
45.135.134.39	attackbotsspam	Sep 12 01:07:37 doubuntu sshd[25088]: error: maximum authentication attempts exceeded for root from 45.135.134.39 port 59086 ssh2 [preauth] Sep 12 01:07:40 doubuntu sshd[25090]: error: maximum authentication attempts exceeded for root from 45.135.134.39 port 60304 ssh2 [preauth] Sep 12 01:07:43 doubuntu sshd[25092]: Disconnected from authenticating user root 45.135.134.39 port 33290 [preauth] ...	2020-09-12 13:20:12
185.108.106.251	attackspambots	[2020-09-12 01:09:01] NOTICE[1239] chan_sip.c: Registration from '' failed for '185.108.106.251:62370' - Wrong password [2020-09-12 01:09:01] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-12T01:09:01.183-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9417",SessionID="0x7f4d482e4338",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.108.106.251/62370",Challenge="247687f0",ReceivedChallenge="247687f0",ReceivedHash="e066c1c1eeec090a3c55d64a2bb26f7c" [2020-09-12 01:14:54] NOTICE[1239] chan_sip.c: Registration from '' failed for '185.108.106.251:51849' - Wrong password [2020-09-12 01:14:54] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-12T01:14:54.577-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="366",SessionID="0x7f4d480d6c18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.108.1 ...	2020-09-12 13:24:48
106.54.253.41	attackbots	Sep 11 23:19:51 ws24vmsma01 sshd[22298]: Failed password for root from 106.54.253.41 port 44564 ssh2 ...	2020-09-12 13:19:45
91.232.4.149	attackspambots	Sep 12 01:58:57 h1745522 sshd[16577]: Invalid user teresa from 91.232.4.149 port 58428 Sep 12 01:58:57 h1745522 sshd[16577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.232.4.149 Sep 12 01:58:57 h1745522 sshd[16577]: Invalid user teresa from 91.232.4.149 port 58428 Sep 12 01:58:59 h1745522 sshd[16577]: Failed password for invalid user teresa from 91.232.4.149 port 58428 ssh2 Sep 12 02:00:31 h1745522 sshd[18605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.232.4.149 user=root Sep 12 02:00:33 h1745522 sshd[18605]: Failed password for root from 91.232.4.149 port 52142 ssh2 Sep 12 02:01:24 h1745522 sshd[18772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.232.4.149 user=root Sep 12 02:01:26 h1745522 sshd[18772]: Failed password for root from 91.232.4.149 port 38356 ssh2 Sep 12 02:02:18 h1745522 sshd[18894]: Invalid user test from 91.232.4.149 port 52 ...	2020-09-12 13:34:03
13.85.152.27	attack	Invalid user ansible from 13.85.152.27 port 49806	2020-09-12 12:59:15
60.199.131.62	attackbotsspam	Sep 12 07:01:52 db sshd[14363]: User root from 60.199.131.62 not allowed because none of user's groups are listed in AllowGroups ...	2020-09-12 13:15:40
222.92.116.40	attackbotsspam	Invalid user samba from 222.92.116.40 port 19553	2020-09-12 13:32:26

最近上报的IP列表

112.66.105.49	112.66.106.140	112.66.106.148	112.66.106.156
112.66.106.198	112.66.106.240	112.66.106.243	112.66.106.210
112.66.106.81	112.66.107.142	112.66.107.104	112.66.107.168
112.66.107.222	112.66.107.179	112.66.108.218	112.66.107.194
112.66.108.22	112.66.108.80	112.66.109.110	112.66.109.192