114.118.6.141 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
114.118.6.206	attack	port scan and connect, tcp 1433 (ms-sql-s)	2019-10-13 05:28:28
114.118.6.133	attack	Automatic report - SSH Brute-Force Attack	2019-08-14 08:54:04
114.118.6.133	attackspam	Aug 11 15:48:31 itv-usvr-02 sshd[30165]: Invalid user azureuser from 114.118.6.133 port 46918 Aug 11 15:48:31 itv-usvr-02 sshd[30165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.118.6.133 Aug 11 15:48:31 itv-usvr-02 sshd[30165]: Invalid user azureuser from 114.118.6.133 port 46918 Aug 11 15:48:32 itv-usvr-02 sshd[30165]: Failed password for invalid user azureuser from 114.118.6.133 port 46918 ssh2 Aug 11 15:55:06 itv-usvr-02 sshd[30170]: Invalid user ftp from 114.118.6.133 port 43154	2019-08-11 18:36:44

类型

评论内容

时间

114.118.6.206

attack

port scan and connect, tcp 1433 (ms-sql-s)

2019-10-13 05:28:28

114.118.6.133

attack

Automatic report - SSH Brute-Force Attack

2019-08-14 08:54:04

114.118.6.133

attackspam

Aug 11 15:48:31 itv-usvr-02 sshd[30165]: Invalid user azureuser from 114.118.6.133 port 46918
Aug 11 15:48:31 itv-usvr-02 sshd[30165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.118.6.133
Aug 11 15:48:31 itv-usvr-02 sshd[30165]: Invalid user azureuser from 114.118.6.133 port 46918
Aug 11 15:48:32 itv-usvr-02 sshd[30165]: Failed password for invalid user azureuser from 114.118.6.133 port 46918 ssh2
Aug 11 15:55:06 itv-usvr-02 sshd[30170]: Invalid user ftp from 114.118.6.133 port 43154

2019-08-11 18:36:44

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.118.6.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7667
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;114.118.6.141.			IN	A

;; AUTHORITY SECTION:
.			475	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022101100 1800 900 604800 86400

;; Query time: 133 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 12 00:28:20 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 141.6.118.114.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 141.6.118.114.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
171.248.55.212	attackspam	Honeypot attack, port: 81, PTR: dynamic-ip-adsl.viettel.vn.	2020-09-05 05:09:34
124.152.118.131	attackbots	Sep 4 10:14:35 mockhub sshd[8044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.152.118.131 Sep 4 10:14:38 mockhub sshd[8044]: Failed password for invalid user qwt from 124.152.118.131 port 7689 ssh2 ...	2020-09-05 05:25:19
212.70.149.83	attack	Sep 4 23:46:01 srv01 postfix/smtpd\[32602\]: warning: unknown\[212.70.149.83\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 4 23:46:03 srv01 postfix/smtpd\[29655\]: warning: unknown\[212.70.149.83\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 4 23:46:03 srv01 postfix/smtpd\[8679\]: warning: unknown\[212.70.149.83\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 4 23:46:08 srv01 postfix/smtpd\[2522\]: warning: unknown\[212.70.149.83\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 4 23:46:29 srv01 postfix/smtpd\[2521\]: warning: unknown\[212.70.149.83\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-09-05 05:51:12
185.220.102.248	attack	Sep 4 23:35:52 santamaria sshd\[23229\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.102.248 user=root Sep 4 23:35:54 santamaria sshd\[23229\]: Failed password for root from 185.220.102.248 port 23648 ssh2 Sep 4 23:35:56 santamaria sshd\[23229\]: Failed password for root from 185.220.102.248 port 23648 ssh2 ...	2020-09-05 05:45:43
91.250.242.12	attack	Failed password for invalid user from 91.250.242.12 port 38450 ssh2	2020-09-05 05:34:38
43.248.106.103	attackspam	Sep 4 23:20:43 ns381471 sshd[31150]: Failed password for root from 43.248.106.103 port 56932 ssh2	2020-09-05 05:43:50
108.62.121.180	attackbots	[2020-09-04 17:08:36] NOTICE[1194] chan_sip.c: Registration from '"4005" ' failed for '108.62.121.180:5576' - Wrong password [2020-09-04 17:08:36] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-04T17:08:36.517-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4005",SessionID="0x7f2ddc1178e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/108.62.121.180/5576",Challenge="230c35e5",ReceivedChallenge="230c35e5",ReceivedHash="d95df77b37ada77a48fc4e45ad4dffa4" [2020-09-04 17:08:36] NOTICE[1194] chan_sip.c: Registration from '"4005" ' failed for '108.62.121.180:5576' - Wrong password [2020-09-04 17:08:36] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-04T17:08:36.559-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4005",SessionID="0x7f2ddc00cc78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-09-05 05:35:23
222.186.175.154	attackspambots	Sep 4 23:07:28 dev0-dcde-rnet sshd[7772]: Failed password for root from 222.186.175.154 port 56058 ssh2 Sep 4 23:07:41 dev0-dcde-rnet sshd[7772]: error: maximum authentication attempts exceeded for root from 222.186.175.154 port 56058 ssh2 [preauth] Sep 4 23:07:47 dev0-dcde-rnet sshd[7774]: Failed password for root from 222.186.175.154 port 2578 ssh2	2020-09-05 05:16:28
24.76.121.101	attackspam	Honeypot attack, port: 5555, PTR: S0106889e681b91c0.wp.shawcable.net.	2020-09-05 05:26:06
211.155.225.104	attackbots	leo_www	2020-09-05 05:46:57
93.113.111.193	attackspambots	93.113.111.193 - - [04/Sep/2020:17:52:40 +0100] "POST /wp-login.php HTTP/1.1" 200 2254 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 93.113.111.193 - - [04/Sep/2020:17:52:40 +0100] "POST /wp-login.php HTTP/1.1" 200 2257 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 93.113.111.193 - - [04/Sep/2020:17:52:41 +0100] "POST /wp-login.php HTTP/1.1" 200 2253 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-05 05:23:57
160.251.9.246	attackspam	SpamScore above: 10.0	2020-09-05 05:29:22
222.186.42.137	attackbotsspam	sshd jail - ssh hack attempt	2020-09-05 05:11:23
122.141.13.219	attackbotsspam	Port probing on unauthorized port 23	2020-09-05 05:20:54
222.186.175.150	attackspam	Sep 4 21:39:29 localhost sshd[7001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root Sep 4 21:39:31 localhost sshd[7001]: Failed password for root from 222.186.175.150 port 39732 ssh2 Sep 4 21:39:34 localhost sshd[7001]: Failed password for root from 222.186.175.150 port 39732 ssh2 Sep 4 21:39:29 localhost sshd[7001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root Sep 4 21:39:31 localhost sshd[7001]: Failed password for root from 222.186.175.150 port 39732 ssh2 Sep 4 21:39:34 localhost sshd[7001]: Failed password for root from 222.186.175.150 port 39732 ssh2 Sep 4 21:39:29 localhost sshd[7001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root Sep 4 21:39:31 localhost sshd[7001]: Failed password for root from 222.186.175.150 port 39732 ssh2 Sep 4 21:39:34 localhost sshd[7001]: Fai ...	2020-09-05 05:47:21

最近上报的IP列表

118.45.173.34	182.61.55.98	129.154.54.81	111.70.7.58
101.109.156.129	45.120.203.148	87.9.197.77	116.110.88.39
149.18.28.125	183.162.224.57	184.188.81.186	103.17.198.56
102.45.52.79	103.17.196.45	103.27.221.246	232.180.80.60
38.133.229.227	45.86.74.142	177.50.29.132	128.90.115.87