119.132.4.148 - IPInfo

基本信息:

城市(city): Shenzhen

省份(region): Guangdong

国家(country): China

运营商(isp): ChinaNet Guangdong Province Network

主机名(hostname): unknown

机构(organization): No.31,Jin-rong Street

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
119.132.40.22	attackspambots	Unauthorized connection attempt detected from IP address 119.132.40.22 to port 6656 [T]	2020-01-30 14:15:14
119.132.4.230	attack	Unauthorized connection attempt detected from IP address 119.132.4.230 to port 6656 [T]	2020-01-29 17:16:45
119.132.47.75	attackbotsspam	Aug 31 23:30:28 georgia postfix/smtpd[14488]: connect from unknown[119.132.47.75] Aug 31 23:30:29 georgia postfix/smtpd[14488]: warning: unknown[119.132.47.75]: SASL LOGIN authentication failed: authentication failure Aug 31 23:30:29 georgia postfix/smtpd[14488]: lost connection after AUTH from unknown[119.132.47.75] Aug 31 23:30:29 georgia postfix/smtpd[14488]: disconnect from unknown[119.132.47.75] ehlo=1 auth=0/1 commands=1/2 Aug 31 23:30:29 georgia postfix/smtpd[14488]: connect from unknown[119.132.47.75] Aug 31 23:30:30 georgia postfix/smtpd[14488]: warning: unknown[119.132.47.75]: SASL LOGIN authentication failed: authentication failure Aug 31 23:30:31 georgia postfix/smtpd[14488]: lost connection after AUTH from unknown[119.132.47.75] Aug 31 23:30:31 georgia postfix/smtpd[14488]: disconnect from unknown[119.132.47.75] ehlo=1 auth=0/1 commands=1/2 Aug 31 23:30:31 georgia postfix/smtpd[14488]: connect from unknown[119.132.47.75] Aug 31 23:30:32 georgia postfix/smtp........ -------------------------------	2019-09-01 11:25:34
119.132.46.251	attack	smtp brute force login	2019-08-08 09:14:54

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.132.4.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41396
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;119.132.4.148.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081100 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 12 03:07:11 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 148.4.132.119.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 148.4.132.119.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
106.12.60.246	attackspam	$f2bV_matches	2020-07-08 18:59:29
211.173.58.253	attack	SSH/22 MH Probe, BF, Hack -	2020-07-08 19:14:04
221.163.133.48	attackspambots	Port probing on unauthorized port 9530	2020-07-08 18:51:51
209.141.50.157	attackbots	Fail2Ban Ban Triggered	2020-07-08 18:54:32
178.210.39.78	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-07-08T09:21:20Z and 2020-07-08T09:27:29Z	2020-07-08 19:16:13
185.143.73.103	attackspambots	Jul 8 12:56:46 web02.agentur-b-2.de postfix/smtpd[91058]: warning: unknown[185.143.73.103]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 8 12:57:24 web02.agentur-b-2.de postfix/smtpd[88750]: warning: unknown[185.143.73.103]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 8 12:58:03 web02.agentur-b-2.de postfix/smtpd[91058]: warning: unknown[185.143.73.103]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 8 12:58:41 web02.agentur-b-2.de postfix/smtpd[91058]: warning: unknown[185.143.73.103]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 8 12:59:20 web02.agentur-b-2.de postfix/smtpd[91058]: warning: unknown[185.143.73.103]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-07-08 19:05:55
217.11.65.146	attackbots	Email Virus Return-Path: Received: from [217.11.65.146] (unknown [217.11.65.146]) From: Justin Cruz Subject: You like this photo? Date: Wed, 8 Jul 2020 09:42:11 +0600 Message-ID: <4_____8.com> ;) Content-Type: application/zip Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename= "PIC162170.jpg.js.zip"	2020-07-08 18:52:41
139.59.89.45	attackbots	TCP (SYN) 139.59.89.45:54668 -> port 8080, len 44	2020-07-08 19:11:17
206.189.124.254	attackspambots	SSH BruteForce Attack	2020-07-08 19:08:43
139.198.17.144	attack	Jul 8 10:59:49 ajax sshd[15232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.17.144 Jul 8 10:59:51 ajax sshd[15232]: Failed password for invalid user admin from 139.198.17.144 port 48344 ssh2	2020-07-08 18:59:59
45.232.75.253	attackbots	Lines containing failures of 45.232.75.253 Jul 8 05:16:58 shared03 sshd[7271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.232.75.253 user=mail Jul 8 05:16:59 shared03 sshd[7271]: Failed password for mail from 45.232.75.253 port 41032 ssh2 Jul 8 05:16:59 shared03 sshd[7271]: Received disconnect from 45.232.75.253 port 41032:11: Bye Bye [preauth] Jul 8 05:16:59 shared03 sshd[7271]: Disconnected from authenticating user mail 45.232.75.253 port 41032 [preauth] Jul 8 05:34:52 shared03 sshd[13606]: Invalid user geffrey from 45.232.75.253 port 57886 Jul 8 05:34:52 shared03 sshd[13606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.232.75.253 Jul 8 05:34:54 shared03 sshd[13606]: Failed password for invalid user geffrey from 45.232.75.253 port 57886 ssh2 Jul 8 05:34:55 shared03 sshd[13606]: Received disconnect from 45.232.75.253 port 57886:11: Bye Bye [preauth] Jul 8 05:34:55 sh........ ------------------------------	2020-07-08 18:55:46
51.77.212.179	attackbotsspam	5x Failed Password	2020-07-08 19:04:11
92.63.197.55	attack	SmallBizIT.US 3 packets to tcp(3711,3733,3737)	2020-07-08 19:17:50
219.240.99.110	attackspambots	2020-07-08T06:46:32.044091server.espacesoutien.com sshd[30984]: Invalid user caiwch from 219.240.99.110 port 55176 2020-07-08T06:46:32.055251server.espacesoutien.com sshd[30984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.240.99.110 2020-07-08T06:46:32.044091server.espacesoutien.com sshd[30984]: Invalid user caiwch from 219.240.99.110 port 55176 2020-07-08T06:46:33.966175server.espacesoutien.com sshd[30984]: Failed password for invalid user caiwch from 219.240.99.110 port 55176 ssh2 ...	2020-07-08 19:02:04
49.235.90.32	attackspam	Jul 8 05:40:37 sxvn sshd[155024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.90.32	2020-07-08 18:56:55

最近上报的IP列表

41.179.246.240	201.161.111.246	70.196.229.1	47.169.245.216
217.107.131.47	65.104.107.251	165.90.95.114	80.17.180.17
45.46.60.238	66.227.64.97	81.182.55.44	203.62.214.94
38.103.237.175	213.63.210.9	134.174.170.4	17.206.159.4
74.235.176.174	181.12.166.235	187.249.78.145	187.50.124.76