120.5.132.64 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom Heibei Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Port scan detected on ports: 1433[TCP], 1433[TCP], 65529[TCP]	2020-04-19 20:02:26

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.5.132.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18459
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;120.5.132.64.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041900 1800 900 604800 86400

;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 19 20:02:23 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 64.132.5.120.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 64.132.5.120.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
138.197.140.184	attackspambots	Oct 14 23:37:13 * sshd[23583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.140.184 Oct 14 23:37:15 * sshd[23583]: Failed password for invalid user 12345 from 138.197.140.184 port 48164 ssh2	2019-10-15 06:56:37
37.187.74.146	attackspam	Oct 14 23:09:24 yesfletchmain sshd\[6063\]: Invalid user cisco from 37.187.74.146 port 39072 Oct 14 23:09:25 yesfletchmain sshd\[6063\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.74.146 Oct 14 23:09:27 yesfletchmain sshd\[6063\]: Failed password for invalid user cisco from 37.187.74.146 port 39072 ssh2 Oct 14 23:17:07 yesfletchmain sshd\[6257\]: Invalid user xbian from 37.187.74.146 port 41252 Oct 14 23:17:08 yesfletchmain sshd\[6257\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.74.146 ...	2019-10-15 07:08:02
222.186.173.180	attack	Oct 14 12:48:04 hpm sshd\[9493\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.180 user=root Oct 14 12:48:06 hpm sshd\[9493\]: Failed password for root from 222.186.173.180 port 9748 ssh2 Oct 14 12:48:23 hpm sshd\[9493\]: Failed password for root from 222.186.173.180 port 9748 ssh2 Oct 14 12:48:31 hpm sshd\[9537\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.180 user=root Oct 14 12:48:33 hpm sshd\[9537\]: Failed password for root from 222.186.173.180 port 11506 ssh2	2019-10-15 06:54:56
190.196.60.203	attack	Oct 14 22:09:08 web8 sshd\[9849\]: Invalid user server@3dp from 190.196.60.203 Oct 14 22:09:08 web8 sshd\[9849\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.196.60.203 Oct 14 22:09:10 web8 sshd\[9849\]: Failed password for invalid user server@3dp from 190.196.60.203 port 44832 ssh2 Oct 14 22:14:40 web8 sshd\[12370\]: Invalid user 654321 from 190.196.60.203 Oct 14 22:14:40 web8 sshd\[12370\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.196.60.203	2019-10-15 07:14:44
123.30.154.184	attackbots	$f2bV_matches	2019-10-15 06:39:57
45.170.83.38	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 14-10-2019 20:55:22.	2019-10-15 06:41:00
12.189.126.59	attackbots	Oct 14 21:51:14 imap-login: Info: Disconnected $auth failed, 1 attempts in 5 secs$: user=\, method=PLAIN, rip=12.189.126.59, lip=192.168.100.101, session=\\ Oct 14 21:51:21 imap-login: Info: Disconnected $no auth attempts in 0 secs$: user=\<\>, rip=12.189.126.59, lip=192.168.100.101, session=\\ Oct 14 21:51:31 imap-login: Info: Disconnected $auth failed, 1 attempts in 10 secs$: user=\, method=PLAIN, rip=12.189.126.59, lip=192.168.100.101, session=\\ Oct 14 21:51:53 imap-login: Info: Disconnected $auth failed, 1 attempts in 4 secs$: user=\, method=PLAIN, rip=12.189.126.59, lip=192.168.100.101, session=\\ Oct 14 21:52:28 imap-login: Info: Disconnected $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=12.189.126.59, lip=192.168.100.101, session=\\ Oct 14 21:52:37 imap-login: Info: Disconnected \(no auth atte	2019-10-15 06:53:08
180.249.116.70	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 14-10-2019 20:55:21.	2019-10-15 06:41:52
79.11.50.196	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 14-10-2019 20:55:23.	2019-10-15 06:37:26
89.105.202.97	attack	14,19-03/01 [bc01/m41] PostRequest-Spammer scoring: berlin	2019-10-15 06:57:19
133.167.100.109	attackbots	detected by Fail2Ban	2019-10-15 06:53:44
178.46.164.91	attack	IMAP brute force ...	2019-10-15 06:45:12
64.150.183.27	attack	Brute force SMTP login attempts.	2019-10-15 06:54:42
117.55.241.3	attackbots	Oct 14 23:11:11 ns381471 sshd[760]: Failed password for root from 117.55.241.3 port 40796 ssh2 Oct 14 23:16:03 ns381471 sshd[907]: Failed password for root from 117.55.241.3 port 49854 ssh2	2019-10-15 06:43:54
83.212.105.80	attackspam	IP attempted unauthorised action	2019-10-15 07:06:48

最近上报的IP列表

177.138.234.118	69.46.37.143	193.248.193.118	33.239.187.95
114.63.53.174	83.164.252.242	126.133.123.231	139.63.208.161
64.14.245.110	110.139.186.211	34.80.153.175	79.7.179.104
117.131.60.58	14.248.238.204	80.211.56.72	2c0f:fc89:8019:b366:c8ec:def5:fa50:cf02
159.203.74.94	115.192.243.8	226.188.237.44	150.109.100.65