113.239.5.99 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom Liaoning Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Unauthorised access (Sep 19) SRC=113.239.5.99 LEN=40 TTL=46 ID=53670 TCP DPT=8080 WINDOW=29782 SYN Unauthorised access (Sep 18) SRC=113.239.5.99 LEN=40 TTL=46 ID=57063 TCP DPT=8080 WINDOW=12294 SYN Unauthorised access (Sep 16) SRC=113.239.5.99 LEN=40 TTL=46 ID=11421 TCP DPT=23 WINDOW=43166 SYN Unauthorised access (Sep 16) SRC=113.239.5.99 LEN=40 TTL=46 ID=36339 TCP DPT=8080 WINDOW=29782 SYN Unauthorised access (Sep 15) SRC=113.239.5.99 LEN=40 TTL=45 ID=33250 TCP DPT=8080 WINDOW=29782 SYN Unauthorised access (Sep 15) SRC=113.239.5.99 LEN=40 TTL=46 ID=8839 TCP DPT=23 WINDOW=27726 SYN	2020-09-20 01:46:21
attackspambots	Port probing on unauthorized port 23	2020-09-19 17:36:12

类型

评论内容

时间

attackbots

Unauthorised access (Sep 19) SRC=113.239.5.99 LEN=40 TTL=46 ID=53670 TCP DPT=8080 WINDOW=29782 SYN 
Unauthorised access (Sep 18) SRC=113.239.5.99 LEN=40 TTL=46 ID=57063 TCP DPT=8080 WINDOW=12294 SYN 
Unauthorised access (Sep 16) SRC=113.239.5.99 LEN=40 TTL=46 ID=11421 TCP DPT=23 WINDOW=43166 SYN 
Unauthorised access (Sep 16) SRC=113.239.5.99 LEN=40 TTL=46 ID=36339 TCP DPT=8080 WINDOW=29782 SYN 
Unauthorised access (Sep 15) SRC=113.239.5.99 LEN=40 TTL=45 ID=33250 TCP DPT=8080 WINDOW=29782 SYN 
Unauthorised access (Sep 15) SRC=113.239.5.99 LEN=40 TTL=46 ID=8839 TCP DPT=23 WINDOW=27726 SYN

2020-09-20 01:46:21

attackspambots

Port probing on unauthorized port 23

2020-09-19 17:36:12

相同子网IP讨论:

IP	类型	评论内容	时间
113.239.58.248	attackbots	unauthorized connection attempt	2020-01-26 16:22:33

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.239.5.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25102
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.239.5.99.			IN	A

;; AUTHORITY SECTION:
.			584	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091802 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 19 17:36:06 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 99.5.239.113.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 99.5.239.113.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
123.235.246.120	attack	37215/tcp 37215/tcp 37215/tcp [2020-10-04]3pkt	2020-10-05 22:54:06
220.158.162.143	attack	445/tcp 445/tcp 445/tcp [2020-10-04]3pkt	2020-10-05 23:01:23
106.12.217.204	attackspam	sshd jail - ssh hack attempt	2020-10-05 22:34:50
68.183.90.61	attackspambots	<6 unauthorized SSH connections	2020-10-05 22:32:25
112.85.42.176	attackbotsspam	Oct 5 16:48:59 abendstille sshd\[17847\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.176 user=root Oct 5 16:49:00 abendstille sshd\[17855\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.176 user=root Oct 5 16:49:01 abendstille sshd\[17847\]: Failed password for root from 112.85.42.176 port 43656 ssh2 Oct 5 16:49:01 abendstille sshd\[17855\]: Failed password for root from 112.85.42.176 port 27093 ssh2 Oct 5 16:49:04 abendstille sshd\[17847\]: Failed password for root from 112.85.42.176 port 43656 ssh2 ...	2020-10-05 22:50:09
64.227.67.106	attack	64.227.67.106 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 5 10:51:49 server5 sshd[10577]: Failed password for root from 103.83.38.233 port 46872 ssh2 Oct 5 10:59:53 server5 sshd[13837]: Failed password for root from 119.45.223.42 port 41184 ssh2 Oct 5 10:50:47 server5 sshd[10207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.67.106 user=root Oct 5 10:50:49 server5 sshd[10207]: Failed password for root from 64.227.67.106 port 55756 ssh2 Oct 5 10:59:51 server5 sshd[13837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.223.42 user=root Oct 5 11:02:05 server5 sshd[14829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.156.221 user=root IP Addresses Blocked: 103.83.38.233 (US/United States/-) 119.45.223.42 (CN/China/-)	2020-10-05 23:02:56
139.59.102.170	attack	2020-10-04T21:26:56.310776linuxbox-skyline sshd[279316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.102.170 user=root 2020-10-04T21:26:57.612185linuxbox-skyline sshd[279316]: Failed password for root from 139.59.102.170 port 41688 ssh2 ...	2020-10-05 22:37:04
85.209.0.103	attack	Automatic report - Banned IP Access	2020-10-05 22:24:22
27.202.4.216	attackspam	2323/tcp [2020-10-04]1pkt	2020-10-05 22:35:55
90.146.196.115	attackspambots	TCP (SYN) 90.146.196.115:32934 -> port 23, len 44	2020-10-05 22:30:27
5.165.91.67	attackbots	TCP (SYN) 5.165.91.67:22295 -> port 23, len 40	2020-10-05 22:24:47
78.36.191.108	attackbots	5555/tcp [2020-10-04]1pkt	2020-10-05 22:39:55
111.230.157.219	attack	fail2ban: brute force SSH detected	2020-10-05 22:46:59
220.86.37.149	attackspambots	TCP (SYN) 220.86.37.149:38433 -> port 23, len 40	2020-10-05 22:39:42
187.139.188.126	attackbotsspam	1601843996 - 10/04/2020 22:39:56 Host: 187.139.188.126/187.139.188.126 Port: 445 TCP Blocked	2020-10-05 22:28:58

最近上报的IP列表

67.137.180.222	42.79.218.172	95.102.211.77	1.39.17.74
72.177.96.140	149.28.160.132	131.113.26.53	46.101.175.35
35.234.104.185	67.8.152.107	125.99.5.96	130.225.244.90
141.151.20.172	200.49.34.154	95.192.231.117	117.242.135.171
78.186.215.51	24.190.108.203	35.192.173.189	198.2.131.155