114.40.161.11 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Republic of China (ROC)

运营商(isp): Chunghwa Telecom Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	TW - 1H : (207) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TW NAME ASN : ASN3462 IP : 114.40.161.11 CIDR : 114.40.0.0/16 PREFIX COUNT : 390 UNIQUE IP COUNT : 12267520 WYKRYTE ATAKI Z ASN3462 : 1H - 18 3H - 28 6H - 59 12H - 111 24H - 189 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl	2019-09-15 22:41:11

类型

评论内容

时间

attackspambots

TW - 1H : (207)  Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TW 
 NAME ASN : ASN3462 
 
 IP : 114.40.161.11 
 
 CIDR : 114.40.0.0/16 
 
 PREFIX COUNT : 390 
 
 UNIQUE IP COUNT : 12267520 
 
 
 WYKRYTE ATAKI Z ASN3462 :  
  1H - 18 
  3H - 28 
  6H - 59 
 12H - 111 
 24H - 189 
 
 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery 
  https://help-dysk.pl

2019-09-15 22:41:11

相同子网IP讨论:

IP	类型	评论内容	时间
114.40.161.50	attackspambots	Thu Feb 20 10:15:30 2020 - Child process 89707 handling connection Thu Feb 20 10:15:30 2020 - New connection from: 114.40.161.50:36506 Thu Feb 20 10:15:30 2020 - Sending data to client: [Login: ] Thu Feb 20 10:15:30 2020 - Got data: admin Thu Feb 20 10:15:31 2020 - Sending data to client: [Password: ] Thu Feb 20 10:15:31 2020 - Child aborting Thu Feb 20 10:15:31 2020 - Reporting IP address: 114.40.161.50 - mflag: 0	2020-02-21 03:50:26
114.40.161.62	attackspam	UTC: 2019-11-30 port: 23/tcp	2019-12-01 18:47:34
114.40.161.9	attackbots	Unauthorized connection attempt from IP address 114.40.161.9 on Port 445(SMB)	2019-11-29 08:12:34

类型

评论内容

时间

114.40.161.50

attackspambots

Thu Feb 20 10:15:30 2020 - Child process 89707 handling connection
Thu Feb 20 10:15:30 2020 - New connection from: 114.40.161.50:36506
Thu Feb 20 10:15:30 2020 - Sending data to client: [Login: ]
Thu Feb 20 10:15:30 2020 - Got data: admin
Thu Feb 20 10:15:31 2020 - Sending data to client: [Password: ]
Thu Feb 20 10:15:31 2020 - Child aborting
Thu Feb 20 10:15:31 2020 - Reporting IP address: 114.40.161.50 - mflag: 0

2020-02-21 03:50:26

114.40.161.62

attackspam

UTC: 2019-11-30 port: 23/tcp

2019-12-01 18:47:34

114.40.161.9

attackbots

Unauthorized connection attempt from IP address 114.40.161.9 on Port 445(SMB)

2019-11-29 08:12:34

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.40.161.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58394
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.40.161.11.			IN	A

;; AUTHORITY SECTION:
.			991	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091500 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Sep 15 22:40:56 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

11.161.40.114.in-addr.arpa domain name pointer 114-40-161-11.dynamic-ip.hinet.net.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
11.161.40.114.in-addr.arpa	name = 114-40-161-11.dynamic-ip.hinet.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
103.207.7.107	attack	Jul 31 05:11:50 mail.srvfarm.net postfix/smtps/smtpd[150913]: warning: unknown[103.207.7.107]: SASL PLAIN authentication failed: Jul 31 05:11:50 mail.srvfarm.net postfix/smtps/smtpd[150913]: lost connection after AUTH from unknown[103.207.7.107] Jul 31 05:14:56 mail.srvfarm.net postfix/smtpd[165366]: warning: unknown[103.207.7.107]: SASL PLAIN authentication failed: Jul 31 05:14:56 mail.srvfarm.net postfix/smtpd[165366]: lost connection after AUTH from unknown[103.207.7.107] Jul 31 05:18:17 mail.srvfarm.net postfix/smtps/smtpd[150826]: warning: unknown[103.207.7.107]: SASL PLAIN authentication failed:	2020-07-31 17:21:33
60.165.100.122	attackbots	Unauthorized connection attempt detected from IP address 60.165.100.122 to port 10314	2020-07-31 17:34:09
23.99.205.174	attackbotsspam	spam (f2b h2)	2020-07-31 17:06:22
67.205.180.70	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 68 - port: 17380 proto: tcp cat: Misc Attackbytes: 60	2020-07-31 17:32:40
179.154.56.227	attackbotsspam	Jul 31 14:21:05 dhoomketu sshd[2052928]: Failed password for root from 179.154.56.227 port 14466 ssh2 Jul 31 14:23:21 dhoomketu sshd[2052970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.154.56.227 user=root Jul 31 14:23:23 dhoomketu sshd[2052970]: Failed password for root from 179.154.56.227 port 23595 ssh2 Jul 31 14:25:36 dhoomketu sshd[2053039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.154.56.227 user=root Jul 31 14:25:37 dhoomketu sshd[2053039]: Failed password for root from 179.154.56.227 port 51316 ssh2 ...	2020-07-31 17:29:48
35.233.219.188	attackspambots	Fail2Ban	2020-07-31 17:10:52
117.210.188.252	attackspam	117.210.188.252 - - [31/Jul/2020:04:48:13 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 117.210.188.252 - - [31/Jul/2020:04:48:14 +0100] "POST /wp-login.php HTTP/1.1" 200 6150 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 117.210.188.252 - - [31/Jul/2020:04:50:16 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" ...	2020-07-31 17:12:59
61.2.180.130	attackbotsspam	Unauthorised access (Jul 31) SRC=61.2.180.130 LEN=48 TOS=0x08 PREC=0x20 TTL=112 ID=1006 DF TCP DPT=445 WINDOW=8192 SYN	2020-07-31 17:04:26
91.151.90.75	attackbots	spam	2020-07-31 17:32:09
130.43.109.170	attack	DATE:2020-07-31 05:49:44, IP:130.43.109.170, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-07-31 17:41:05
101.231.124.6	attack	Jul 31 10:25:48 server sshd[20090]: Failed password for root from 101.231.124.6 port 10848 ssh2 Jul 31 10:29:54 server sshd[21407]: Failed password for root from 101.231.124.6 port 40839 ssh2 Jul 31 10:38:06 server sshd[24262]: Failed password for root from 101.231.124.6 port 25599 ssh2	2020-07-31 17:01:43
62.234.74.168	attackspambots	2020-07-31T04:34:39.291516morrigan.ad5gb.com sshd[240953]: Failed password for root from 62.234.74.168 port 40442 ssh2 2020-07-31T04:34:39.798737morrigan.ad5gb.com sshd[240953]: Disconnected from authenticating user root 62.234.74.168 port 40442 [preauth]	2020-07-31 17:35:24
51.91.120.67	attackspambots	$f2bV_matches	2020-07-31 17:11:48
77.45.84.250	attackbotsspam	Jul 31 05:13:22 mail.srvfarm.net postfix/smtps/smtpd[151052]: warning: 77-45-84-250.sta.asta-net.com.pl[77.45.84.250]: SASL PLAIN authentication failed: Jul 31 05:13:22 mail.srvfarm.net postfix/smtps/smtpd[151052]: lost connection after AUTH from 77-45-84-250.sta.asta-net.com.pl[77.45.84.250] Jul 31 05:15:02 mail.srvfarm.net postfix/smtpd[165373]: warning: 77-45-84-250.sta.asta-net.com.pl[77.45.84.250]: SASL PLAIN authentication failed: Jul 31 05:15:02 mail.srvfarm.net postfix/smtpd[165373]: lost connection after AUTH from 77-45-84-250.sta.asta-net.com.pl[77.45.84.250] Jul 31 05:19:11 mail.srvfarm.net postfix/smtps/smtpd[150911]: warning: 77-45-84-250.sta.asta-net.com.pl[77.45.84.250]: SASL PLAIN authentication failed:	2020-07-31 17:25:06
92.50.89.178	attack	Jul 31 10:31:30 mail.srvfarm.net postfix/smtpd[262076]: NOQUEUE: reject: RCPT from mail.sixsixseven.com[92.50.89.178]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Jul 31 10:32:35 mail.srvfarm.net postfix/smtpd[274752]: NOQUEUE: reject: RCPT from mail.sixsixseven.com[92.50.89.178]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Jul 31 10:33:36 mail.srvfarm.net postfix/smtpd[274752]: NOQUEUE: reject: RCPT from mail.sixsixseven.com[92.50.89.178]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Jul 31 10:34:37 mail.srvfarm.net postfix/smtpd[261844]: NOQUEUE: reject: RCPT from mail.sixsixse	2020-07-31 17:22:04

最近上报的IP列表

213.19.171.203	206.189.138.242	66.249.66.196	117.4.13.145
136.85.201.195	175.125.165.85	1.40.168.125	90.131.22.207
129.28.132.29	182.38.150.144	253.236.166.195	113.53.50.225
88.105.183.89	152.214.10.18	165.22.218.26	73.97.91.56
165.231.46.243	194.165.182.244	117.93.33.141	94.191.56.254