118.140.5.212 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
118.140.57.146	attackbotsspam	Microsoft SQL Server User Authentication Brute Force Attempt , PTR: PTR record not found	2020-08-15 21:18:15
118.140.55.30	attackbots	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-07-24 17:22:24
118.140.55.30	attack	langenachtfulda.de 118.140.55.30 [04/Jun/2020:05:47:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4276 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" langenachtfulda.de 118.140.55.30 [04/Jun/2020:05:47:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4276 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"	2020-06-04 18:48:47

类型

评论内容

时间

118.140.57.146

attackbotsspam

Microsoft SQL Server User Authentication Brute Force Attempt , PTR: PTR record not found

2020-08-15 21:18:15

118.140.55.30

attackbots

"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:

2020-07-24 17:22:24

118.140.55.30

attack

langenachtfulda.de 118.140.55.30 [04/Jun/2020:05:47:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4276 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"
langenachtfulda.de 118.140.55.30 [04/Jun/2020:05:47:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4276 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"

2020-06-04 18:48:47

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.140.5.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15683
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;118.140.5.212.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 20:42:02 CST 2025
;; MSG SIZE  rcvd: 106

HOST信息:

Host 212.5.140.118.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 212.5.140.118.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
206.189.142.10	attackbots	Feb 26 22:50:36 nextcloud sshd\[31974\]: Invalid user openvpn from 206.189.142.10 Feb 26 22:50:36 nextcloud sshd\[31974\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.142.10 Feb 26 22:50:39 nextcloud sshd\[31974\]: Failed password for invalid user openvpn from 206.189.142.10 port 46714 ssh2	2020-02-27 06:23:34
222.186.175.140	attack	Feb 26 12:14:08 php1 sshd\[17747\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.140 user=root Feb 26 12:14:10 php1 sshd\[17747\]: Failed password for root from 222.186.175.140 port 4254 ssh2 Feb 26 12:14:26 php1 sshd\[17760\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.140 user=root Feb 26 12:14:28 php1 sshd\[17760\]: Failed password for root from 222.186.175.140 port 9166 ssh2 Feb 26 12:14:32 php1 sshd\[17760\]: Failed password for root from 222.186.175.140 port 9166 ssh2	2020-02-27 06:23:07
165.16.1.18	attackbots	Feb 26 22:50:12 grey postfix/smtpd\[24854\]: NOQUEUE: reject: RCPT from unknown\[165.16.1.18\]: 554 5.7.1 Service unavailable\; Client host \[165.16.1.18\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[165.16.1.18\]\; from=\ to=\ proto=SMTP helo=\ ...	2020-02-27 06:46:39
185.200.118.66	attackspam	" "	2020-02-27 06:24:58
162.243.133.88	attackspambots	Automatic report - Port Scan Attack	2020-02-27 06:35:21
5.249.159.37	attackspambots	Feb 26 23:21:20 ns381471 sshd[12931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.249.159.37 Feb 26 23:21:22 ns381471 sshd[12931]: Failed password for invalid user bruno from 5.249.159.37 port 39290 ssh2	2020-02-27 06:47:08
181.55.188.187	attackbots	$f2bV_matches	2020-02-27 06:20:26
112.85.42.174	attackspambots	Feb 26 19:15:18 firewall sshd[26558]: Failed password for root from 112.85.42.174 port 20258 ssh2 Feb 26 19:15:33 firewall sshd[26558]: error: maximum authentication attempts exceeded for root from 112.85.42.174 port 20258 ssh2 [preauth] Feb 26 19:15:33 firewall sshd[26558]: Disconnecting: Too many authentication failures [preauth] ...	2020-02-27 06:17:43
122.51.167.43	attack	Feb 26 22:50:15 * sshd[12380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.167.43 Feb 26 22:50:17 * sshd[12380]: Failed password for invalid user hirayama from 122.51.167.43 port 33008 ssh2	2020-02-27 06:42:14
190.83.230.229	attackspambots	[26/Feb/2020:22:50:31 +0100] Web-Request: "GET /wp-login.php", User-Agent: "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1"	2020-02-27 06:33:48
223.71.167.165	attackbotsspam	223.71.167.165 was recorded 23 times by 7 hosts attempting to connect to the following ports: 9418,30005,49151,4343,60001,43,8334,2055,10162,1701,8112,28015,8010,37777,4063,444,85,50050,22222,2332. Incident counter (4h, 24h, all-time): 23, 152, 6917	2020-02-27 06:14:44
51.89.21.206	attack	Feb 26 23:00:08 debian-2gb-nbg1-2 kernel: \[5013604.012102\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=51.89.21.206 DST=195.201.40.59 LEN=435 TOS=0x00 PREC=0x00 TTL=50 ID=27207 DF PROTO=UDP SPT=5090 DPT=5060 LEN=415	2020-02-27 06:33:26
114.32.186.34	attackbots	scan z	2020-02-27 06:41:15
5.2.79.82	attack	DATE:2020-02-26 22:50:41, IP:5.2.79.82, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2020-02-27 06:22:08
222.186.173.215	attackspam	Feb 26 23:22:46 amit sshd\[1412\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.215 user=root Feb 26 23:22:48 amit sshd\[1412\]: Failed password for root from 222.186.173.215 port 27382 ssh2 Feb 26 23:23:05 amit sshd\[1414\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.215 user=root ...	2020-02-27 06:24:29

最近上报的IP列表

235.242.199.209	247.106.211.231	31.231.252.237	80.60.31.148
159.50.166.204	143.41.41.114	91.37.163.51	188.223.204.83
244.104.205.19	96.103.156.231	14.203.123.44	5.150.1.77
147.212.1.26	85.55.179.197	169.198.159.25	66.176.179.71
67.154.110.9	174.38.205.253	108.72.123.153	56.11.94.101