112.80.139.5 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
112.80.139.186	attackbotsspam	Unauthorized connection attempt detected from IP address 112.80.139.186 to port 8118 [J]	2020-03-02 16:46:43
112.80.139.72	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5430ed179f239666 \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/4.054101423 Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 00:47:55
112.80.139.237	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5415a92e09326bf6 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 4.3; en-us; SM-N900T Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:55:56
112.80.139.252	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 5413c84ba8846d04 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/5.066704189 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:00:28
112.80.139.3	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5410ce0509096bc6 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 00:41:24

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.80.139.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41431
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.80.139.5.			IN	A

;; AUTHORITY SECTION:
.			131	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 13:33:37 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 5.139.80.112.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 5.139.80.112.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
103.63.215.38	attackspambots	port scan and connect, tcp 1433 (ms-sql-s)	2020-07-03 23:51:37
192.144.154.209	attack	Jul 3 03:59:02 OPSO sshd\[14789\]: Invalid user steamcmd from 192.144.154.209 port 44584 Jul 3 03:59:02 OPSO sshd\[14789\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.154.209 Jul 3 03:59:04 OPSO sshd\[14789\]: Failed password for invalid user steamcmd from 192.144.154.209 port 44584 ssh2 Jul 3 04:01:49 OPSO sshd\[15552\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.154.209 user=root Jul 3 04:01:51 OPSO sshd\[15552\]: Failed password for root from 192.144.154.209 port 35582 ssh2	2020-07-04 00:28:00
49.235.167.59	attackspambots	Jul 3 15:55:05 host sshd[9158]: Invalid user mapr from 49.235.167.59 port 37768 ...	2020-07-04 00:03:42
192.236.194.172	attack	Jul 3 02:03:59 dbr01 postfix/smtpd[16930]: NOQUEUE: reject: RCPT from hwsrv-746152.hostwindsdns.com[192.236.194.172]: 504 5.5.2 Jul 3 02:03:59 dbr01 postfix/smtpd[16929]: lost connection after RCPT from hwsrv-746152.hostwindsdns.com[192.236.194.172] Jul 3 02:03:59 dbr01 postfix/smtpd[16929]: disconnect from hwsrv-746152.hostwindsdns.com[192.236.194.172] ehlo=1 mail=1 rcpt=0/1 commands=2/3 Jul 3 02:03:59 dbr01 postfix/smtpd[16930]: connect from hwsrv-746152.hostwindsdns.com[192.236.194.172] Jul 3 02:03:59 dbr01 postfix/smtpd[16930]: NOQUEUE: reject: RCPT from hwsrv-746152.hostwindsdns.com[192.236.194.172]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from= to= proto=ESMTP helo= 347 times	2020-07-04 00:16:55
209.105.175.6	attackbotsspam	Unauthorized connection attempt detected from IP address 209.105.175.6 to port 23	2020-07-03 23:44:13
120.92.151.17	attackspam	Jul 3 17:32:17 sshd\[5651\]: User root from 120.92.151.17 not allowed because not listed in AllowUsersJul 3 17:32:18 sshd\[5651\]: Failed password for invalid user root from 120.92.151.17 port 17890 ssh2 ...	2020-07-03 23:57:01
148.70.15.205	attackspambots	2020-07-03T09:48:43.3569521495-001 sshd[8568]: Invalid user topgui from 148.70.15.205 port 58982 2020-07-03T09:48:45.3703471495-001 sshd[8568]: Failed password for invalid user topgui from 148.70.15.205 port 58982 ssh2 2020-07-03T09:51:57.1169101495-001 sshd[8714]: Invalid user build from 148.70.15.205 port 38318 2020-07-03T09:51:57.1198831495-001 sshd[8714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.15.205 2020-07-03T09:51:57.1169101495-001 sshd[8714]: Invalid user build from 148.70.15.205 port 38318 2020-07-03T09:51:59.4268111495-001 sshd[8714]: Failed password for invalid user build from 148.70.15.205 port 38318 ssh2 ...	2020-07-04 00:25:55
183.82.121.34	attackspambots	Jul 3 15:18:26 XXX sshd[28942]: Invalid user zxvf from 183.82.121.34 port 33672	2020-07-04 00:00:56
149.56.44.47	attack	port scan and connect, tcp 8000 (http-alt)	2020-07-03 23:42:33
104.131.190.193	attack	Jul 3 04:05:03 lnxmysql61 sshd[30372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.190.193	2020-07-03 23:52:41
118.126.90.89	attackspam	$f2bV_matches	2020-07-04 00:29:25
165.22.253.249	attack	Jul 3 03:53:19 myhostname sshd[29744]: Invalid user osa from 165.22.253.249 Jul 3 03:53:19 myhostname sshd[29744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.253.249 Jul 3 03:53:21 myhostname sshd[29744]: Failed password for invalid user osa from 165.22.253.249 port 17457 ssh2 Jul 3 03:53:21 myhostname sshd[29744]: Received disconnect from 165.22.253.249 port 17457:11: Bye Bye [preauth] Jul 3 03:53:21 myhostname sshd[29744]: Disconnected from 165.22.253.249 port 17457 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=165.22.253.249	2020-07-04 00:06:05
190.192.40.18	attack	Jul 3 17:04:25 srv-ubuntu-dev3 sshd[72489]: Invalid user zyc from 190.192.40.18 Jul 3 17:04:25 srv-ubuntu-dev3 sshd[72489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.192.40.18 Jul 3 17:04:25 srv-ubuntu-dev3 sshd[72489]: Invalid user zyc from 190.192.40.18 Jul 3 17:04:27 srv-ubuntu-dev3 sshd[72489]: Failed password for invalid user zyc from 190.192.40.18 port 43876 ssh2 Jul 3 17:08:24 srv-ubuntu-dev3 sshd[73109]: Invalid user wup from 190.192.40.18 Jul 3 17:08:24 srv-ubuntu-dev3 sshd[73109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.192.40.18 Jul 3 17:08:24 srv-ubuntu-dev3 sshd[73109]: Invalid user wup from 190.192.40.18 Jul 3 17:08:26 srv-ubuntu-dev3 sshd[73109]: Failed password for invalid user wup from 190.192.40.18 port 41286 ssh2 Jul 3 17:12:29 srv-ubuntu-dev3 sshd[73726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.192.40.18 ...	2020-07-04 00:24:53
202.7.53.137	attackbotsspam	2020-07-0304:00:461jrB0P-00070I-Eh\<=info@whatsup2013.chH=$localhost$[202.7.53.137]:35666P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=4960id=2061d7848fa48e861a1fa905e296bca840820c@whatsup2013.chT="Connectwithrealladiesforhookuptonite"forjw69me@yahoo.comcinc@gmail.commetugemejamemichael@gmail.com2020-07-0304:00:081jrAzh-0006wy-Mu\<=info@whatsup2013.chH=$localhost$[202.137.155.25]:3859P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=4929id=27dcfaa9a2895c50773284d723e46e62599845e0@whatsup2013.chT="Subscriberightnowtogetpussytonite"forelias2000779@gmail.comyzphil@icloud.comberry.allen22828@gmail.com2020-07-0303:57:451jrAxT-0006oM-FR\<=info@whatsup2013.chH=41-139-139-253.safaricombusiness.co.ke$localhost$[41.139.139.253]:44807P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=4956id=a2bd0b585378525ac6c375d93e4a6074cf7e24@whatsup2013.chT="Signuptodaytodiscoverbeavertonight"fory	2020-07-04 00:24:10
138.197.158.118	attack	Jul 3 17:37:58 pve1 sshd[22717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.158.118 Jul 3 17:38:00 pve1 sshd[22717]: Failed password for invalid user xyh from 138.197.158.118 port 42446 ssh2 ...	2020-07-04 00:25:21

最近上报的IP列表

112.80.139.211	112.80.139.31	112.80.139.207	112.80.139.66
112.80.139.249	112.80.139.86	112.80.139.76	112.80.139.48
112.80.139.42	112.80.139.55	112.80.139.82	112.80.139.98
112.80.83.45	112.81.137.51	112.82.140.246	112.81.202.192
112.80.139.61	112.85.22.170	112.85.64.77	112.85.64.39

基本信息:

用户上报:

相同子网IP讨论:

WHOIS信息:

DIG信息:

HOST信息:

NSLOOKUP信息:

相关IP信息:

最新评论:

最近上报的IP列表