116.212.131.138

基本信息:

城市(city): Phnom Penh

省份(region): Phnom Penh

国家(country): Cambodia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
116.212.131.90	attackspam	srvr3: (mod_security) mod_security (id:920350) triggered by 116.212.131.90 (AU/Australia/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/09/03 18:43:28 [error] 365944#0: 1946 [client 116.212.131.90] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "159915140894.207379"] [ref "o0,14v21,14"], client: 116.212.131.90, [redacted] request: "GET / HTTP/1.1" [redacted]	2020-09-05 03:39:55
116.212.131.90	attackbots	srvr3: (mod_security) mod_security (id:920350) triggered by 116.212.131.90 (AU/Australia/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/09/03 18:43:28 [error] 365944#0: 1946 [client 116.212.131.90] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "159915140894.207379"] [ref "o0,14v21,14"], client: 116.212.131.90, [redacted] request: "GET / HTTP/1.1" [redacted]	2020-09-04 19:08:47
116.212.131.174	attackbots	CMS (WordPress or Joomla) login attempt.	2020-03-05 08:42:09
116.212.131.27	attack	email spam	2019-12-17 17:25:03
116.212.131.27	attack	SPF Fail sender not permitted to send mail for @17guagua.com / Sent mail to target address hacked/leaked from abandonia in 2016	2019-11-27 20:31:07
116.212.131.27	attackspambots	proto=tcp . spt=38089 . dpt=25 . (Found on Blocklist de Nov 01) (675)	2019-11-02 06:04:01
116.212.131.27	attack	SPAM Delivery Attempt	2019-10-25 07:40:40
116.212.131.27	attackbots	Autoban 116.212.131.27 AUTH/CONNECT	2019-10-16 05:19:09
116.212.131.27	attackbotsspam	proto=tcp . spt=46668 . dpt=25 . (Found on Dark List de Oct 13) (764)	2019-10-14 07:40:42

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.212.131.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40195
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.212.131.138.		IN	A

;; AUTHORITY SECTION:
.			191	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023070802 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 09 13:23:13 CST 2023
;; MSG SIZE  rcvd: 108

HOST信息:

Host 138.131.212.116.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.131.212.116.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
113.21.126.88	attack	(imapd) Failed IMAP login from 113.21.126.88 (NC/New Caledonia/host-113-21-126-88.canl.nc): 1 in the last 3600 secs	2020-06-19 05:48:29
113.68.151.99	attackbotsspam	2020-06-18T23:17:54.577906galaxy.wi.uni-potsdam.de sshd[29680]: Invalid user user6 from 113.68.151.99 port 33751 2020-06-18T23:17:54.579636galaxy.wi.uni-potsdam.de sshd[29680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.68.151.99 2020-06-18T23:17:54.577906galaxy.wi.uni-potsdam.de sshd[29680]: Invalid user user6 from 113.68.151.99 port 33751 2020-06-18T23:17:56.594351galaxy.wi.uni-potsdam.de sshd[29680]: Failed password for invalid user user6 from 113.68.151.99 port 33751 ssh2 2020-06-18T23:19:33.385997galaxy.wi.uni-potsdam.de sshd[29861]: Invalid user www from 113.68.151.99 port 46507 2020-06-18T23:19:33.388291galaxy.wi.uni-potsdam.de sshd[29861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.68.151.99 2020-06-18T23:19:33.385997galaxy.wi.uni-potsdam.de sshd[29861]: Invalid user www from 113.68.151.99 port 46507 2020-06-18T23:19:35.328643galaxy.wi.uni-potsdam.de sshd[29861]: Failed password fo ...	2020-06-19 05:26:36
85.113.137.52	attack	Attempted connection to port 445.	2020-06-19 05:45:36
180.250.55.195	attackspam	Jun 18 23:46:42 OPSO sshd\[23295\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.55.195 user=root Jun 18 23:46:44 OPSO sshd\[23295\]: Failed password for root from 180.250.55.195 port 36618 ssh2 Jun 18 23:49:54 OPSO sshd\[23725\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.55.195 user=admin Jun 18 23:49:56 OPSO sshd\[23725\]: Failed password for admin from 180.250.55.195 port 49734 ssh2 Jun 18 23:53:11 OPSO sshd\[24819\]: Invalid user rac from 180.250.55.195 port 34614 Jun 18 23:53:11 OPSO sshd\[24819\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.55.195	2020-06-19 05:58:39
125.21.227.181	attackbots	Jun 18 21:14:37 rush sshd[5263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.21.227.181 Jun 18 21:14:39 rush sshd[5263]: Failed password for invalid user ubuntu from 125.21.227.181 port 60908 ssh2 Jun 18 21:18:45 rush sshd[5384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.21.227.181 ...	2020-06-19 05:26:01
200.52.78.118	attackspambots	Unauthorized connection attempt from IP address 200.52.78.118 on Port 445(SMB)	2020-06-19 05:54:58
106.13.223.23	attackbotsspam	Attempted connection to port 445.	2020-06-19 06:03:29
46.188.144.116	attack	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-06-19 05:51:34
46.214.142.156	attackspambots	Attempted connection to port 8000.	2020-06-19 05:51:08
103.145.12.180	attackspam	\[Jun 19 06:46:07\] NOTICE\[2019\] chan_sip.c: Registration from '"102" \' failed for '103.145.12.180:5305' - Wrong password \[Jun 19 06:46:08\] NOTICE\[2019\] chan_sip.c: Registration from '"102" \' failed for '103.145.12.180:5305' - Wrong password \[Jun 19 06:46:08\] NOTICE\[2019\] chan_sip.c: Registration from '"102" \' failed for '103.145.12.180:5305' - Wrong password \[Jun 19 06:46:08\] NOTICE\[2019\] chan_sip.c: Registration from '"102" \' failed for '103.145.12.180:5305' - Wrong password \[Jun 19 06:46:08\] NOTICE\[2019\] chan_sip.c: Registration from '"102" \' failed for '103.145.12.180:5305' - Wrong password \[Jun 19 06:46:08\] NOTICE\[2019\] chan_sip.c: Registration from '"102" \' failed for '103.145.12.180:5305' - Wrong password \[Jun 19 06:46:08\] NOTICE\[2019\] chan_sip.c: Registration from '"102" \	2020-06-19 05:32:29
103.53.113.34	attack	Attempted connection to port 81.	2020-06-19 06:04:00
122.144.134.27	attackbotsspam	Jun 18 23:37:39 srv-ubuntu-dev3 sshd[6470]: Invalid user test from 122.144.134.27 Jun 18 23:37:39 srv-ubuntu-dev3 sshd[6470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.144.134.27 Jun 18 23:37:39 srv-ubuntu-dev3 sshd[6470]: Invalid user test from 122.144.134.27 Jun 18 23:37:42 srv-ubuntu-dev3 sshd[6470]: Failed password for invalid user test from 122.144.134.27 port 11103 ssh2 Jun 18 23:40:49 srv-ubuntu-dev3 sshd[7065]: Invalid user botuser from 122.144.134.27 Jun 18 23:40:49 srv-ubuntu-dev3 sshd[7065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.144.134.27 Jun 18 23:40:49 srv-ubuntu-dev3 sshd[7065]: Invalid user botuser from 122.144.134.27 Jun 18 23:40:51 srv-ubuntu-dev3 sshd[7065]: Failed password for invalid user botuser from 122.144.134.27 port 11104 ssh2 Jun 18 23:43:55 srv-ubuntu-dev3 sshd[7608]: Invalid user mena from 122.144.134.27 ...	2020-06-19 05:44:47
190.72.196.138	attackspam	1592513690 - 06/18/2020 22:54:50 Host: 190.72.196.138/190.72.196.138 Port: 445 TCP Blocked	2020-06-19 05:27:21
185.244.39.106	attackspambots	Jun 18 23:42:54 vps687878 sshd\[14314\]: Failed password for invalid user ftp from 185.244.39.106 port 44228 ssh2 Jun 18 23:46:54 vps687878 sshd\[14883\]: Invalid user hyg from 185.244.39.106 port 45230 Jun 18 23:46:54 vps687878 sshd\[14883\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.244.39.106 Jun 18 23:46:56 vps687878 sshd\[14883\]: Failed password for invalid user hyg from 185.244.39.106 port 45230 ssh2 Jun 18 23:51:09 vps687878 sshd\[15538\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.244.39.106 user=root ...	2020-06-19 05:57:54
182.184.58.173	attack	Jun 18 23:12:39 PorscheCustomer sshd[7505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.184.58.173 Jun 18 23:12:42 PorscheCustomer sshd[7505]: Failed password for invalid user server from 182.184.58.173 port 45312 ssh2 Jun 18 23:21:38 PorscheCustomer sshd[7838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.184.58.173 ...	2020-06-19 05:34:36

最近上报的IP列表

220.83.120.103	83.167.130.132	68.52.49.144	171.8.172.242
8.38.41.144	132.238.4.68	185.233.19.92	171.233.61.115
9.145.0.3	92.188.71.154	210.151.8.43	9.89.50.229
106.13.115.62	69.73.96.49	165.5.113.31	133.255.26.115
45.178.186.10	141.98.6.7	42.81.89.195	143.88.37.89