18.140.52.58 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): Amazon Technologies Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Unauthorized connection attempt detected from IP address 18.140.52.58 to port 2323 [J]	2020-03-01 07:46:42

相同子网IP讨论:

IP	类型	评论内容	时间
18.140.52.143	attackbots	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-06-21 01:59:39

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.140.52.58
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37358
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;18.140.52.58.			IN	A

;; AUTHORITY SECTION:
.			423	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022901 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 01 07:46:35 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

58.52.140.18.in-addr.arpa domain name pointer ec2-18-140-52-58.ap-southeast-1.compute.amazonaws.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
58.52.140.18.in-addr.arpa	name = ec2-18-140-52-58.ap-southeast-1.compute.amazonaws.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
114.67.166.50	attack	Aug 7 06:54:15 ns3033917 sshd[1554]: Failed password for root from 114.67.166.50 port 41162 ssh2 Aug 7 06:58:29 ns3033917 sshd[1603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.166.50 user=root Aug 7 06:58:32 ns3033917 sshd[1603]: Failed password for root from 114.67.166.50 port 54670 ssh2 ...	2020-08-07 20:00:22
190.123.91.151	attack	Automatic report - Port Scan Attack	2020-08-07 20:09:56
159.89.115.126	attackbots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-08-07 19:45:37
187.191.96.60	attackspambots	Aug 7 14:06:12 ns381471 sshd[23007]: Failed password for root from 187.191.96.60 port 34652 ssh2	2020-08-07 20:15:17
106.55.149.60	attack	B: f2b 404 5x	2020-08-07 20:11:50
147.135.253.94	attack	[2020-08-06 23:47:35] NOTICE[1248] chan_sip.c: Registration from '' failed for '147.135.253.94:63385' - Wrong password [2020-08-06 23:47:35] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-06T23:47:35.192-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1556",SessionID="0x7f27204d2b88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/147.135.253.94/63385",Challenge="0a6db31c",ReceivedChallenge="0a6db31c",ReceivedHash="6f647d6049dfc81c57c21c8c166e6cb3" [2020-08-06 23:47:54] NOTICE[1248] chan_sip.c: Registration from '' failed for '147.135.253.94:59913' - Wrong password [2020-08-06 23:47:54] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-06T23:47:54.895-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1557",SessionID="0x7f2720259e98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/147.135.25 ...	2020-08-07 19:50:21
219.150.93.157	attack	Aug 7 11:07:06 ovpn sshd\[25333\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.150.93.157 user=root Aug 7 11:07:08 ovpn sshd\[25333\]: Failed password for root from 219.150.93.157 port 48799 ssh2 Aug 7 11:21:55 ovpn sshd\[31457\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.150.93.157 user=root Aug 7 11:21:57 ovpn sshd\[31457\]: Failed password for root from 219.150.93.157 port 43043 ssh2 Aug 7 11:24:03 ovpn sshd\[32444\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.150.93.157 user=root	2020-08-07 19:57:30
82.140.43.210	attackspam	Lines containing failures of 82.140.43.210 Aug 7 05:52:23 siirappi sshd[13502]: Invalid user console from 82.140.43.210 port 59204 Aug 7 05:52:23 siirappi sshd[13502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.140.43.210 Aug 7 05:52:25 siirappi sshd[13502]: Failed password for invalid user console from 82.140.43.210 port 59204 ssh2 Aug 7 05:52:27 siirappi sshd[13502]: Connection closed by invalid user console 82.140.43.210 port 59204 [preauth] Aug 7 06:38:55 siirappi sshd[14439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.140.43.210 user=daemon Aug 7 06:38:57 siirappi sshd[14439]: Failed password for daemon from 82.140.43.210 port 65099 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=82.140.43.210	2020-08-07 19:59:30
51.91.251.20	attack	$f2bV_matches	2020-08-07 19:48:16
159.65.12.43	attackbotsspam	Aug 7 14:09:44 fhem-rasp sshd[815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.12.43 user=root Aug 7 14:09:46 fhem-rasp sshd[815]: Failed password for root from 159.65.12.43 port 48830 ssh2 ...	2020-08-07 20:12:58
20.52.32.27	attack	DDoS Attack	2020-08-07 19:52:25
192.162.51.99	attack	SMTP Bruteforcing	2020-08-07 20:09:32
104.236.203.29	attackbotsspam	xmlrpc attack	2020-08-07 20:25:41
113.89.71.90	attackbots	$f2bV_matches	2020-08-07 19:52:03
167.99.99.10	attackbotsspam	k+ssh-bruteforce	2020-08-07 20:05:22

最近上报的IP列表

160.206.194.39	125.180.18.9	13.63.54.131	50.44.254.16
60.221.91.132	202.63.209.65	229.92.210.243	218.137.16.71
58.201.126.97	82.104.28.180	187.154.245.90	97.35.213.201
136.79.156.117	198.199.85.241	78.219.162.230	63.212.67.229
15.51.135.205	109.116.225.209	91.126.229.51	113.247.132.144