112.94.5.5 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Guangzhou Unicom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Port Scan detected from 112.94.5.5 (CN/China/-). 4 hits in the last 101 seconds	2019-08-23 12:29:26
attack	Aug 10 13:38:56 nexus sshd[28260]: Did not receive identification string from 112.94.5.5 port 53496 Aug 10 13:38:56 nexus sshd[28261]: Did not receive identification string from 112.94.5.5 port 56604 Aug 10 13:39:02 nexus sshd[28262]: Invalid user sniffer from 112.94.5.5 port 59127 Aug 10 13:39:02 nexus sshd[28262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.94.5.5 Aug 10 13:39:04 nexus sshd[28262]: Failed password for invalid user sniffer from 112.94.5.5 port 59127 ssh2 Aug 10 13:39:05 nexus sshd[28262]: Connection closed by 112.94.5.5 port 59127 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=112.94.5.5	2019-08-10 21:01:39

类型

评论内容

时间

attackbots

*Port Scan* detected from 112.94.5.5 (CN/China/-). 4 hits in the last 101 seconds

2019-08-23 12:29:26

attack

Aug 10 13:38:56 nexus sshd[28260]: Did not receive identification string from 112.94.5.5 port 53496
Aug 10 13:38:56 nexus sshd[28261]: Did not receive identification string from 112.94.5.5 port 56604
Aug 10 13:39:02 nexus sshd[28262]: Invalid user sniffer from 112.94.5.5 port 59127
Aug 10 13:39:02 nexus sshd[28262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.94.5.5
Aug 10 13:39:04 nexus sshd[28262]: Failed password for invalid user sniffer from 112.94.5.5 port 59127 ssh2
Aug 10 13:39:05 nexus sshd[28262]: Connection closed by 112.94.5.5 port 59127 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=112.94.5.5

2019-08-10 21:01:39

相同子网IP讨论:

IP	类型	评论内容	时间
112.94.5.2	attack	Invalid user vnc from 112.94.5.2 port 45350	2020-07-17 13:10:27
112.94.5.2	attackbots	Invalid user vnc from 112.94.5.2 port 45350	2020-07-16 19:05:47
112.94.5.2	attackbotsspam	Jul 11 03:57:16 atlas sshd[819]: Failed password for mail from 112.94.5.2 port 49550 ssh2 Jul 11 04:04:11 atlas sshd[1039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.94.5.2 Jul 11 04:04:13 atlas sshd[1039]: Failed password for invalid user lzhou from 112.94.5.2 port 50802 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=112.94.5.2	2020-07-12 15:38:14

类型

评论内容

时间

112.94.5.2

attack

Invalid user vnc from 112.94.5.2 port 45350

2020-07-17 13:10:27

112.94.5.2

attackbots

Invalid user vnc from 112.94.5.2 port 45350

2020-07-16 19:05:47

112.94.5.2

attackbotsspam

Jul 11 03:57:16 atlas sshd[819]: Failed password for mail from 112.94.5.2 port 49550 ssh2
Jul 11 04:04:11 atlas sshd[1039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.94.5.2
Jul 11 04:04:13 atlas sshd[1039]: Failed password for invalid user lzhou from 112.94.5.2 port 50802 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=112.94.5.2

2020-07-12 15:38:14

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.94.5.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27375
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.94.5.5.			IN	A

;; AUTHORITY SECTION:
.			1780	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081000 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 10 21:01:31 CST 2019
;; MSG SIZE  rcvd: 114

HOST信息:

Host 5.5.94.112.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 5.5.94.112.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
207.154.229.50	attack	Dec 18 11:30:24 php1 sshd\[15492\]: Invalid user jl from 207.154.229.50 Dec 18 11:30:24 php1 sshd\[15492\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.229.50 Dec 18 11:30:27 php1 sshd\[15492\]: Failed password for invalid user jl from 207.154.229.50 port 47966 ssh2 Dec 18 11:35:47 php1 sshd\[16389\]: Invalid user siegurd from 207.154.229.50 Dec 18 11:35:47 php1 sshd\[16389\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.229.50	2019-12-19 05:52:46
187.141.128.42	attackspambots	Dec 18 23:16:34 hell sshd[20111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.141.128.42 Dec 18 23:16:36 hell sshd[20111]: Failed password for invalid user sisler from 187.141.128.42 port 57994 ssh2 ...	2019-12-19 06:20:57
37.49.230.63	attack	\[2019-12-18 16:56:21\] NOTICE\[2839\] chan_sip.c: Registration from '"1001" \' failed for '37.49.230.63:5589' - Wrong password \[2019-12-18 16:56:21\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-18T16:56:21.912-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7f0fb4234468",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.63/5589",Challenge="111feeed",ReceivedChallenge="111feeed",ReceivedHash="5ba726f739328f596cefb72550668ea2" \[2019-12-18 16:56:22\] NOTICE\[2839\] chan_sip.c: Registration from '"1001" \' failed for '37.49.230.63:5589' - Wrong password \[2019-12-18 16:56:22\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-18T16:56:22.059-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7f0fb46c6168",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/3	2019-12-19 06:00:15
190.78.221.132	attack	Unauthorized connection attempt from IP address 190.78.221.132 on Port 445(SMB)	2019-12-19 06:05:31
188.35.187.50	attackbotsspam	Dec 18 22:34:26 nextcloud sshd\[16298\]: Invalid user semanaz from 188.35.187.50 Dec 18 22:34:26 nextcloud sshd\[16298\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.35.187.50 Dec 18 22:34:27 nextcloud sshd\[16298\]: Failed password for invalid user semanaz from 188.35.187.50 port 54074 ssh2 ...	2019-12-19 05:50:27
91.242.161.167	attackspam	auto-add	2019-12-19 05:54:33
88.199.164.141	attackspambots	Automatic report - XMLRPC Attack	2019-12-19 06:02:12
54.37.21.211	attackbots	Automatic report - XMLRPC Attack	2019-12-19 06:08:43
37.195.50.41	attack	Dec 18 06:32:45 kapalua sshd\[2014\]: Invalid user kursa from 37.195.50.41 Dec 18 06:32:45 kapalua sshd\[2014\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=l37-195-50-41.novotelecom.ru Dec 18 06:32:46 kapalua sshd\[2014\]: Failed password for invalid user kursa from 37.195.50.41 port 52896 ssh2 Dec 18 06:40:53 kapalua sshd\[3043\]: Invalid user benwitt from 37.195.50.41 Dec 18 06:40:53 kapalua sshd\[3043\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=l37-195-50-41.novotelecom.ru	2019-12-19 06:09:43
151.237.170.56	attackbotsspam	Unauthorised access (Dec 18) SRC=151.237.170.56 LEN=48 PREC=0x20 TTL=113 ID=3603 DF TCP DPT=445 WINDOW=8192 SYN	2019-12-19 05:50:48
85.192.176.128	attackbotsspam	Fail2Ban Ban Triggered	2019-12-19 05:57:45
92.249.143.33	attackspam	SSH Brute Force	2019-12-19 06:04:33
195.84.49.20	attackspam	$f2bV_matches	2019-12-19 05:54:14
2.139.215.255	attack	Invalid user support from 2.139.215.255 port 34631	2019-12-19 06:02:42
85.67.147.238	attack	Dec 18 22:00:49 marvibiene sshd[56808]: Invalid user apache from 85.67.147.238 port 40696 Dec 18 22:00:49 marvibiene sshd[56808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.67.147.238 Dec 18 22:00:49 marvibiene sshd[56808]: Invalid user apache from 85.67.147.238 port 40696 Dec 18 22:00:51 marvibiene sshd[56808]: Failed password for invalid user apache from 85.67.147.238 port 40696 ssh2 ...	2019-12-19 06:06:02

最近上报的IP列表

14.139.125.70	178.122.239.121	14.139.120.51	176.89.115.112
172.245.159.142	153.11.219.71	118.71.48.247	160.153.154.2
64.94.45.68	14.116.254.127	41.35.17.72	14.116.251.29
61.254.200.126	5.189.160.177	64.94.45.67	58.71.220.30
180.248.121.42	115.75.104.128	177.167.178.225	104.211.156.205

基本信息:

用户上报:

相同子网IP讨论:

WHOIS信息:

DIG信息:

HOST信息:

NSLOOKUP信息:

相关IP信息:

最新评论:

最近上报的IP列表