114.99.0.140 - IPInfo

基本信息:

城市(city): Anqing

省份(region): Anhui

国家(country): China

运营商(isp): ChinaNet Anhui Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt detected from IP address 114.99.0.140 to port 6656 [T]	2020-01-27 04:32:38

相同子网IP讨论:

IP	类型	评论内容	时间
114.99.0.204	attackbots	MAIL: User Login Brute Force Attempt	2020-03-12 06:36:16
114.99.0.62	attackbots	Lines containing failures of 114.99.0.62 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=114.99.0.62	2020-02-26 10:31:16
114.99.0.3	attack	Unauthorized connection attempt detected from IP address 114.99.0.3 to port 6656 [T]	2020-01-30 14:48:32
114.99.0.120	attackbots	Brute force attempt	2020-01-11 05:46:41
114.99.0.30	attack	Brute force attempt	2020-01-10 07:21:34
114.99.0.221	attackspambots	Nov 9 01:05:41 eola postfix/smtpd[31453]: connect from unknown[114.99.0.221] Nov 9 01:05:41 eola postfix/smtpd[31453]: NOQUEUE: reject: RCPT from unknown[114.99.0.221]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=<36hp89k> Nov 9 01:05:41 eola postfix/smtpd[31453]: disconnect from unknown[114.99.0.221] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 Nov 9 01:05:42 eola postfix/smtpd[31453]: connect from unknown[114.99.0.221] Nov 9 01:05:43 eola postfix/smtpd[31453]: lost connection after AUTH from unknown[114.99.0.221] Nov 9 01:05:43 eola postfix/smtpd[31453]: disconnect from unknown[114.99.0.221] ehlo=1 auth=0/1 commands=1/2 Nov 9 01:05:43 eola postfix/smtpd[31453]: connect from unknown[114.99.0.221] Nov 9 01:05:44 eola postfix/smtpd[31453]: lost connection after AUTH from unknown[114.99.0.221] Nov 9 01:05:44 eola postfix/smtpd[31453]: disconnect from unknown[114.99.0.221] ehlo=1 auth=0/1 commands=1/2 Nov 9 01:05:44 eola........ -------------------------------	2019-11-09 17:59:40
114.99.0.39	attackbotsspam	Oct 1 04:33:59 mxgate1 postfix/postscreen[15902]: CONNECT from [114.99.0.39]:51190 to [176.31.12.44]:25 Oct 1 04:33:59 mxgate1 postfix/dnsblog[15906]: addr 114.99.0.39 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 1 04:33:59 mxgate1 postfix/dnsblog[15906]: addr 114.99.0.39 listed by domain zen.spamhaus.org as 127.0.0.4 Oct 1 04:33:59 mxgate1 postfix/dnsblog[15904]: addr 114.99.0.39 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 1 04:34:00 mxgate1 postfix/dnsblog[15907]: addr 114.99.0.39 listed by domain cbl.abuseat.org as 127.0.0.2 Oct 1 04:34:05 mxgate1 postfix/postscreen[15902]: DNSBL rank 4 for [114.99.0.39]:51190 Oct x@x Oct 1 04:34:06 mxgate1 postfix/postscreen[15902]: DISCONNECT [114.99.0.39]:51190 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=114.99.0.39	2019-10-04 14:58:59

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.99.0.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47656
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.99.0.140.			IN	A

;; AUTHORITY SECTION:
.			449	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012601 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 04:32:35 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 140.0.99.114.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 140.0.99.114.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
129.226.113.144	attackspam	2020-04-27T22:08:41.779123vps751288.ovh.net sshd\[12051\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.113.144 user=root 2020-04-27T22:08:43.804266vps751288.ovh.net sshd\[12051\]: Failed password for root from 129.226.113.144 port 42750 ssh2 2020-04-27T22:12:54.592618vps751288.ovh.net sshd\[12124\]: Invalid user mysql from 129.226.113.144 port 54754 2020-04-27T22:12:54.602353vps751288.ovh.net sshd\[12124\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.113.144 2020-04-27T22:12:56.692741vps751288.ovh.net sshd\[12124\]: Failed password for invalid user mysql from 129.226.113.144 port 54754 ssh2	2020-04-28 04:27:09
123.207.78.83	attackbotsspam	Apr 27 22:25:16 * sshd[3417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.78.83 Apr 27 22:25:18 * sshd[3417]: Failed password for invalid user coffer from 123.207.78.83 port 37600 ssh2	2020-04-28 04:26:17
123.153.1.189	attack	Apr 27 19:00:54 ip-172-31-62-245 sshd\[31548\]: Failed password for mysql from 123.153.1.189 port 43270 ssh2\ Apr 27 19:02:43 ip-172-31-62-245 sshd\[31568\]: Invalid user user0 from 123.153.1.189\ Apr 27 19:02:45 ip-172-31-62-245 sshd\[31568\]: Failed password for invalid user user0 from 123.153.1.189 port 40328 ssh2\ Apr 27 19:04:58 ip-172-31-62-245 sshd\[31590\]: Invalid user tanja from 123.153.1.189\ Apr 27 19:05:00 ip-172-31-62-245 sshd\[31590\]: Failed password for invalid user tanja from 123.153.1.189 port 37384 ssh2\	2020-04-28 04:15:54
189.91.239.194	attackbotsspam	Apr 27 14:09:12 server1 sshd\[2460\]: Invalid user zym from 189.91.239.194 Apr 27 14:09:12 server1 sshd\[2460\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.91.239.194 Apr 27 14:09:15 server1 sshd\[2460\]: Failed password for invalid user zym from 189.91.239.194 port 34025 ssh2 Apr 27 14:13:02 server1 sshd\[4255\]: Invalid user cvs from 189.91.239.194 Apr 27 14:13:02 server1 sshd\[4255\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.91.239.194 ...	2020-04-28 04:19:06
95.249.112.169	attackbotsspam	Automatic report - Port Scan Attack	2020-04-28 04:30:51
140.143.9.142	attack	Apr 27 22:38:37 OPSO sshd\[24892\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.9.142 user=root Apr 27 22:38:40 OPSO sshd\[24892\]: Failed password for root from 140.143.9.142 port 53652 ssh2 Apr 27 22:43:52 OPSO sshd\[25770\]: Invalid user vasile from 140.143.9.142 port 55692 Apr 27 22:43:52 OPSO sshd\[25770\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.9.142 Apr 27 22:43:54 OPSO sshd\[25770\]: Failed password for invalid user vasile from 140.143.9.142 port 55692 ssh2	2020-04-28 04:44:28
41.73.213.148	attackbotsspam	$f2bV_matches	2020-04-28 04:18:21
117.158.175.167	attack	Apr 27 16:08:47 NPSTNNYC01T sshd[9169]: Failed password for root from 117.158.175.167 port 33246 ssh2 Apr 27 16:12:55 NPSTNNYC01T sshd[9549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.158.175.167 Apr 27 16:12:58 NPSTNNYC01T sshd[9549]: Failed password for invalid user sensor from 117.158.175.167 port 54458 ssh2 ...	2020-04-28 04:26:33
217.112.128.159	attackbots	Apr 27 22:06:27 mail.srvfarm.net postfix/smtpd[579250]: NOQUEUE: reject: RCPT from palliate.kranbery.com[217.112.128.159]: 554 5.7.1 Service unavailable; Client host [217.112.128.159] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBL461503 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= Apr 27 22:06:32 mail.srvfarm.net postfix/smtpd[578441]: NOQUEUE: reject: RCPT from palliate.kranbery.com[217.112.128.159]: 554 5.7.1 Service unavailable; Client host [217.112.128.159] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBL461503 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= Apr 27 22:07:00 mail.srvfarm.net postfix/smtpd[583779]: NOQUEUE: reject: RCPT from palliate.kranbery.com[217.112.128.159]: 554 5.7.1 Service unavailable; Client host [217.112.128.	2020-04-28 04:45:58
189.240.225.205	attackspambots	Apr 27 11:04:11 vps46666688 sshd[22121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.240.225.205 Apr 27 11:04:13 vps46666688 sshd[22121]: Failed password for invalid user linode from 189.240.225.205 port 33168 ssh2 ...	2020-04-28 04:09:08
45.14.148.95	attack	DATE:2020-04-27 22:12:34, IP:45.14.148.95, PORT:ssh SSH brute force auth (docker-dc)	2020-04-28 04:45:40
78.233.47.106	attack	Bruteforce detected by fail2ban	2020-04-28 04:37:22
222.188.209.204	attack	" "	2020-04-28 04:24:59
121.183.203.60	attackspambots	Apr 27 13:48:23 cloud sshd[8552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.183.203.60	2020-04-28 04:07:57
180.76.182.215	attackspambots	Apr 27 18:58:43 eventyay sshd[7080]: Failed password for root from 180.76.182.215 port 57600 ssh2 Apr 27 19:02:12 eventyay sshd[7179]: Failed password for root from 180.76.182.215 port 42136 ssh2 Apr 27 19:05:40 eventyay sshd[7297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.182.215 ...	2020-04-28 04:07:02

最近上报的IP列表

111.197.210.113	68.199.105.193	110.87.221.109	2.98.16.27
106.122.169.247	122.157.68.24	209.152.36.152	153.121.144.234
74.168.166.70	84.13.204.83	197.53.170.151	134.219.61.48
128.122.167.219	5.180.61.53	61.138.222.57	122.36.143.159
195.162.116.49	60.189.155.224	177.126.96.72	60.185.36.183

基本信息:

用户上报:

相同子网IP讨论:

WHOIS信息:

DIG信息:

HOST信息:

NSLOOKUP信息:

相关IP信息:

最新评论:

最近上报的IP列表