1.196.140.101 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
1.196.140.43	attack	Unauthorized connection attempt detected from IP address 1.196.140.43 to port 139 [T]	2020-05-20 09:37:30
1.196.140.54	attack	Unauthorized connection attempt detected from IP address 1.196.140.54 to port 139 [T]	2020-05-20 09:11:19
1.196.140.103	attackbotsspam	Unauthorized connection attempt detected from IP address 1.196.140.103 to port 139 [T]	2020-05-20 09:10:59

类型

评论内容

时间

1.196.140.43

attack

Unauthorized connection attempt detected from IP address 1.196.140.43 to port 139 [T]

2020-05-20 09:37:30

1.196.140.54

attack

Unauthorized connection attempt detected from IP address 1.196.140.54 to port 139 [T]

2020-05-20 09:11:19

1.196.140.103

attackbotsspam

Unauthorized connection attempt detected from IP address 1.196.140.103 to port 139 [T]

2020-05-20 09:10:59

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.196.140.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40598
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.196.140.101.			IN	A

;; AUTHORITY SECTION:
.			374	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022112700 1800 900 604800 86400

;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 27 21:39:49 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

b';; connection timed out; no servers could be reached
'

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 101.140.196.1.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
176.107.131.58	attack	SIPVicious Scanner Detection	2020-02-09 10:44:23
1.171.50.231	attack	port scan and connect, tcp 23 (telnet)	2020-02-09 13:04:16
175.6.133.182	attackspambots	2020-02-09T02:30:45.800417beta postfix/smtpd[15790]: warning: unknown[175.6.133.182]: SASL LOGIN authentication failed: authentication failure 2020-02-09T02:30:48.733675beta postfix/smtpd[15790]: warning: unknown[175.6.133.182]: SASL LOGIN authentication failed: authentication failure 2020-02-09T02:30:51.735811beta postfix/smtpd[15790]: warning: unknown[175.6.133.182]: SASL LOGIN authentication failed: authentication failure ...	2020-02-09 10:55:19
222.186.175.215	attackbotsspam	Feb 9 03:28:25 dedicated sshd[27853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.215 user=root Feb 9 03:28:27 dedicated sshd[27853]: Failed password for root from 222.186.175.215 port 60634 ssh2	2020-02-09 10:34:03
118.25.250.156	attackbotsspam	Feb 9 01:14:05 XXX sshd[63260]: Invalid user sql from 118.25.250.156 port 43346	2020-02-09 10:47:33
80.254.104.24	attackbotsspam	Unauthorized connection attempt from IP address 80.254.104.24 on Port 445(SMB)	2020-02-09 10:43:16
223.113.74.54	attack	$f2bV_matches	2020-02-09 10:54:47
141.101.76.164	attackbotsspam	IP blocked	2020-02-09 10:41:14
78.49.132.212	attackbots	Feb 9 01:44:54 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=78.49.132.212, lip=144.91.77.193, session= Feb 9 01:45:01 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=78.49.132.212, lip=144.91.77.193, session=<8W1g7hmePcVOMYTU> Feb 9 01:45:08 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=78.49.132.212, lip=144.91.77.193, session= Feb 9 01:45:10 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=78.49.132.212, lip=144.91.77.193, session=<5oVA7xmeP8VOMYTU> Feb 9 01:45:12 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=78.49.132.212, lip=144.91.77.193, session=<6l9c7xmeQMVOMYTU>	2020-02-09 11:03:18
222.186.169.192	attackbotsspam	SSH brutforce	2020-02-09 11:06:22
194.26.29.114	attackspam	Fail2Ban Ban Triggered	2020-02-09 13:10:31
222.186.30.248	attackbotsspam	Feb 9 03:32:32 MK-Soft-Root1 sshd[14063]: Failed password for root from 222.186.30.248 port 61845 ssh2 Feb 9 03:32:35 MK-Soft-Root1 sshd[14063]: Failed password for root from 222.186.30.248 port 61845 ssh2 ...	2020-02-09 10:43:52
139.226.78.111	attack	Feb 3 17:36:26 hostnameghostname sshd[7857]: Invalid user db from 139.226.78.111 Feb 3 17:36:28 hostnameghostname sshd[7857]: Failed password for invalid user db from 139.226.78.111 port 44714 ssh2 Feb 3 17:38:53 hostnameghostname sshd[8310]: Invalid user whoopsie from 139.226.78.111 Feb 3 17:38:55 hostnameghostname sshd[8310]: Failed password for invalid user whoopsie from 139.226.78.111 port 35390 ssh2 Feb 3 17:41:19 hostnameghostname sshd[8741]: Invalid user wangwi from 139.226.78.111 Feb 3 17:41:20 hostnameghostname sshd[8741]: Failed password for invalid user wangwi from 139.226.78.111 port 54268 ssh2 Feb 3 17:43:49 hostnameghostname sshd[9222]: Invalid user doudou from 139.226.78.111 Feb 3 17:43:51 hostnameghostname sshd[9222]: Failed password for invalid user doudou from 139.226.78.111 port 44938 ssh2 Feb 3 17:46:05 hostnameghostname sshd[9635]: Invalid user rgakii from 139.226.78.111 Feb 3 17:46:07 hostnameghostname sshd[9635]: Failed password for inval........ ------------------------------	2020-02-09 10:53:25
61.160.82.82	attackspam	Feb 9 00:43:09 yesfletchmain sshd\[4238\]: Invalid user uxu from 61.160.82.82 port 15773 Feb 9 00:43:09 yesfletchmain sshd\[4238\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.160.82.82 Feb 9 00:43:11 yesfletchmain sshd\[4238\]: Failed password for invalid user uxu from 61.160.82.82 port 15773 ssh2 Feb 9 00:45:40 yesfletchmain sshd\[4270\]: Invalid user lla from 61.160.82.82 port 31896 Feb 9 00:45:40 yesfletchmain sshd\[4270\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.160.82.82 ...	2020-02-09 10:40:07
190.72.32.75	attack	1581209126 - 02/09/2020 01:45:26 Host: 190.72.32.75/190.72.32.75 Port: 445 TCP Blocked	2020-02-09 10:52:51

最近上报的IP列表

1.196.57.192	1.151.68.221	1.151.124.45	1.195.216.29
1.141.48.115	1.14.171.75	1.137.112.82	123.253.232.234
1.130.25.207	1.12.17.104	1.119.70.253	1.12.174.127
1.118.99.57	1.119.196.78	1.118.231.125	1.118.204.34
1.117.34.228	1.117.192.239	1.115.252.2	1.114.244.207