113.118.5.42 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
113.118.5.165	attack	Unauthorized connection attempt detected from IP address 113.118.5.165 to port 445	2020-05-31 21:40:13
113.118.54.65	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/113.118.54.65/ CN - 1H : (497) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 113.118.54.65 CIDR : 113.116.0.0/14 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 WYKRYTE ATAKI Z ASN4134 : 1H - 13 3H - 35 6H - 52 12H - 107 24H - 216 DateTime : 2019-10-11 05:57:24 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-11 13:11:31

类型

评论内容

时间

113.118.5.165

attack

Unauthorized connection attempt detected from IP address 113.118.5.165 to port 445

2020-05-31 21:40:13

113.118.54.65

attackbotsspam

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/113.118.54.65/ 
 CN - 1H : (497)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN4134 
 
 IP : 113.118.54.65 
 
 CIDR : 113.116.0.0/14 
 
 PREFIX COUNT : 5430 
 
 UNIQUE IP COUNT : 106919680 
 
 
 WYKRYTE ATAKI Z ASN4134 :  
  1H - 13 
  3H - 35 
  6H - 52 
 12H - 107 
 24H - 216 
 
 DateTime : 2019-10-11 05:57:24 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

2019-10-11 13:11:31

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.118.5.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49154
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;113.118.5.42.			IN	A

;; AUTHORITY SECTION:
.			299	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 05:54:13 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 42.5.118.113.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.5.118.113.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
103.4.146.54	attackspam	Multiple organisations/people, including this one, are trying to hack my account. They are active in the next countries; Bangladesh (Dhaka), Liberia (Monrovia), Russia (Samara), Brasil, South-Afrika (Johannesburg), Maleisië (georgetown), China (hefei).	2020-06-06 04:07:29
162.243.135.209	attackspambots	[04/Jun/2020:09:51:58 -0400] "GET /ReportServer HTTP/1.1" "Mozilla/5.0 zgrab/0.x"	2020-06-06 04:26:52
119.28.221.132	attackspam	Jun 5 16:11:11 ns3164893 sshd[16506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.221.132 user=root Jun 5 16:11:14 ns3164893 sshd[16506]: Failed password for root from 119.28.221.132 port 41646 ssh2 ...	2020-06-06 04:18:08
139.162.106.181	attackspam	[04/Jun/2020:05:04:04 -0400] "GET / HTTP/1.1" "HTTP Banner Detection (https://security.ipip.net)"	2020-06-06 04:28:24
178.62.234.124	attack	Jun 5 15:47:56 lanister sshd[27306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.234.124 user=root Jun 5 15:47:58 lanister sshd[27306]: Failed password for root from 178.62.234.124 port 43910 ssh2 Jun 5 15:51:02 lanister sshd[27316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.234.124 user=root Jun 5 15:51:04 lanister sshd[27316]: Failed password for root from 178.62.234.124 port 47850 ssh2	2020-06-06 04:14:49
83.97.20.35	attackspam	Jun 5 23:29:03 debian kernel: [291504.281101] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=83.97.20.35 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=51381 DPT=3333 WINDOW=65535 RES=0x00 SYN URGP=0	2020-06-06 04:33:33
183.136.225.56	attack	[04/Jun/2020:12:56:35 -0400] "GET / HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"	2020-06-06 04:23:52
45.224.162.4	attackspambots	(smtpauth) Failed SMTP AUTH login from 45.224.162.4 (BR/Brazil/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-05 16:26:30 plain authenticator failed for ([45.224.162.4]) [45.224.162.4]: 535 Incorrect authentication data (set_id=sourenco.cominfo@sourenco.com)	2020-06-06 04:15:43
178.93.0.150	attack	[04/Jun/2020:19:59:30 -0400] "GET / HTTP/1.1" Chrome 52.0 UA	2020-06-06 04:24:18
185.130.184.207	attack	[2020-06-05 15:46:41] NOTICE[1288] chan_sip.c: Registration from '' failed for '185.130.184.207:64271' - Wrong password [2020-06-05 15:46:41] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-05T15:46:41.368-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2182",SessionID="0x7f4d7403c148",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.130.184.207/64271",Challenge="4953553f",ReceivedChallenge="4953553f",ReceivedHash="2bdf799eece630066968cfefd8b38cb1" [2020-06-05 15:47:44] NOTICE[1288] chan_sip.c: Registration from '' failed for '185.130.184.207:56547' - Wrong password [2020-06-05 15:47:44] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-05T15:47:44.475-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6371",SessionID="0x7f4d7430bbe8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.130 ...	2020-06-06 04:02:10
37.112.33.85	attackbots	[portscan] Port scan	2020-06-06 04:38:07
104.248.137.95	attack	2020-06-05T17:55:04.531741abusebot-4.cloudsearch.cf sshd[22852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.137.95 user=root 2020-06-05T17:55:06.355503abusebot-4.cloudsearch.cf sshd[22852]: Failed password for root from 104.248.137.95 port 50322 ssh2 2020-06-05T17:58:16.437567abusebot-4.cloudsearch.cf sshd[23014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.137.95 user=root 2020-06-05T17:58:18.286573abusebot-4.cloudsearch.cf sshd[23014]: Failed password for root from 104.248.137.95 port 53336 ssh2 2020-06-05T18:01:35.031052abusebot-4.cloudsearch.cf sshd[23196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.137.95 user=root 2020-06-05T18:01:37.060776abusebot-4.cloudsearch.cf sshd[23196]: Failed password for root from 104.248.137.95 port 56352 ssh2 2020-06-05T18:04:40.201906abusebot-4.cloudsearch.cf sshd[23355]: pam_unix(sshd:auth): ...	2020-06-06 04:01:33
114.35.165.52	attackbots	port scan and connect, tcp 8080 (http-proxy)	2020-06-06 04:30:48
217.91.110.132	attackbotsspam	Jun 5 15:16:07 piServer sshd[5521]: Failed password for root from 217.91.110.132 port 39708 ssh2 Jun 5 15:19:38 piServer sshd[5794]: Failed password for root from 217.91.110.132 port 42932 ssh2 ...	2020-06-06 04:21:34
159.203.128.47	attack	Try to hack with python script or wget/shell or other script..	2020-06-06 04:27:14

最近上报的IP列表

113.118.46.44	113.118.47.81	113.118.85.131	113.118.86.244
113.119.3.105	113.119.77.144	113.119.47.193	113.12.195.11
113.12.192.230	113.12.67.37	113.120.101.65	113.120.108.227
113.120.11.23	113.120.11.212	113.120.11.71	113.120.15.17
113.120.15.161	113.120.15.225	113.120.14.38	113.120.15.87