119.187.140.11

基本信息:

城市(city): unknown

省份(region): Shandong

国家(country): China

运营商(isp): China Unicom Shandong Province Network

主机名(hostname): unknown

机构(organization): CHINA UNICOM China169 Backbone

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Unauthorised access (Aug 24) SRC=119.187.140.11 LEN=40 TTL=49 ID=45300 TCP DPT=8080 WINDOW=12995 SYN Unauthorised access (Aug 24) SRC=119.187.140.11 LEN=40 TTL=49 ID=39056 TCP DPT=8080 WINDOW=60910 SYN	2019-08-25 01:04:01

类型

评论内容

时间

attackspam

Unauthorised access (Aug 24) SRC=119.187.140.11 LEN=40 TTL=49 ID=45300 TCP DPT=8080 WINDOW=12995 SYN 
Unauthorised access (Aug 24) SRC=119.187.140.11 LEN=40 TTL=49 ID=39056 TCP DPT=8080 WINDOW=60910 SYN

2019-08-25 01:04:01

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.187.140.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21322
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;119.187.140.11.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082400 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 25 01:03:51 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 11.140.187.119.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 11.140.187.119.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
157.230.57.112	attack	Nov 30 10:27:43 plusreed sshd[6802]: Invalid user doret from 157.230.57.112 ...	2019-11-30 23:47:23
46.38.144.32	attackspambots	Nov 30 16:38:20 relay postfix/smtpd\[16726\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 30 16:38:54 relay postfix/smtpd\[21732\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 30 16:39:39 relay postfix/smtpd\[14422\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 30 16:40:08 relay postfix/smtpd\[21732\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 30 16:40:55 relay postfix/smtpd\[16726\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-11-30 23:46:37
51.38.176.147	attack	Nov 30 16:38:07 MK-Soft-VM4 sshd[15564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.176.147 Nov 30 16:38:08 MK-Soft-VM4 sshd[15564]: Failed password for invalid user neptune from 51.38.176.147 port 46457 ssh2 ...	2019-12-01 00:00:42
111.93.4.174	attackbotsspam	F2B jail: sshd. Time: 2019-11-30 16:06:45, Reported by: VKReport	2019-11-30 23:27:00
218.92.0.179	attackbots	Nov 30 16:38:37 eventyay sshd[7372]: Failed password for root from 218.92.0.179 port 47389 ssh2 Nov 30 16:38:41 eventyay sshd[7372]: Failed password for root from 218.92.0.179 port 47389 ssh2 Nov 30 16:38:43 eventyay sshd[7372]: Failed password for root from 218.92.0.179 port 47389 ssh2 Nov 30 16:38:46 eventyay sshd[7372]: Failed password for root from 218.92.0.179 port 47389 ssh2 ...	2019-11-30 23:41:20
218.92.0.158	attackspambots	Nov 30 16:51:50 vps666546 sshd\[16377\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.158 user=root Nov 30 16:51:52 vps666546 sshd\[16377\]: Failed password for root from 218.92.0.158 port 51065 ssh2 Nov 30 16:51:56 vps666546 sshd\[16377\]: Failed password for root from 218.92.0.158 port 51065 ssh2 Nov 30 16:52:00 vps666546 sshd\[16377\]: Failed password for root from 218.92.0.158 port 51065 ssh2 Nov 30 16:52:03 vps666546 sshd\[16377\]: Failed password for root from 218.92.0.158 port 51065 ssh2 ...	2019-11-30 23:53:59
194.143.231.202	attackspam	Nov 26 18:15:57 shadeyouvpn sshd[6519]: Address 194.143.231.202 maps to colop.hu, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Nov 26 18:15:57 shadeyouvpn sshd[6519]: Invalid user webshostnamee8 from 194.143.231.202 Nov 26 18:15:57 shadeyouvpn sshd[6519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.143.231.202 Nov 26 18:15:59 shadeyouvpn sshd[6519]: Failed password for invalid user webshostnamee8 from 194.143.231.202 port 54822 ssh2 Nov 26 18:15:59 shadeyouvpn sshd[6519]: Received disconnect from 194.143.231.202: 11: Bye Bye [preauth] Nov 26 18:47:27 shadeyouvpn sshd[30303]: Address 194.143.231.202 maps to colop.hu, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Nov 26 18:47:27 shadeyouvpn sshd[30303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.143.231.202 user=r.r Nov 26 18:47:29 shadeyouvpn sshd[30303]: Failed password fo........ -------------------------------	2019-11-30 23:47:06
93.48.65.53	attackspambots	Automatic report - Banned IP Access	2019-11-30 23:39:35
113.162.146.196	attack	Nov 30 15:07:46 mail postfix/smtpd[24893]: warning: unknown[113.162.146.196]: SASL PLAIN authentication failed: Nov 30 15:08:44 mail postfix/smtpd[25441]: warning: unknown[113.162.146.196]: SASL PLAIN authentication failed: Nov 30 15:09:09 mail postfix/smtpd[25586]: warning: unknown[113.162.146.196]: SASL PLAIN authentication failed:	2019-11-30 23:55:52
181.41.216.139	attack	Nov 30 15:37:20 relay postfix/smtpd\[24164\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.139\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Nov 30 15:37:20 relay postfix/smtpd\[24164\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.139\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Nov 30 15:37:20 relay postfix/smtpd\[24164\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.139\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Nov 30 15:37:20 relay postfix/smtpd\[24164\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.139\]: 554 5.7.1 \: Relay ...	2019-11-30 23:45:28
60.165.53.188	attackspambots	firewall-block, port(s): 1433/tcp	2019-11-30 23:21:17
52.160.125.155	attackspambots	Nov 26 01:59:26 pl3server sshd[17332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.160.125.155 user=r.r Nov 26 01:59:28 pl3server sshd[17332]: Failed password for r.r from 52.160.125.155 port 55790 ssh2 Nov 26 01:59:28 pl3server sshd[17332]: Received disconnect from 52.160.125.155: 11: Bye Bye [preauth] Nov 26 02:15:28 pl3server sshd[6764]: Invalid user leutzinger from 52.160.125.155 Nov 26 02:15:28 pl3server sshd[6764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.160.125.155 Nov 26 02:15:30 pl3server sshd[6764]: Failed password for invalid user leutzinger from 52.160.125.155 port 37842 ssh2 Nov 26 02:15:30 pl3server sshd[6764]: Received disconnect from 52.160.125.155: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=52.160.125.155	2019-11-30 23:35:47
222.186.175.169	attackspam	Nov 30 10:46:09 linuxvps sshd\[16439\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.169 user=root Nov 30 10:46:12 linuxvps sshd\[16439\]: Failed password for root from 222.186.175.169 port 45842 ssh2 Nov 30 10:46:29 linuxvps sshd\[16646\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.169 user=root Nov 30 10:46:31 linuxvps sshd\[16646\]: Failed password for root from 222.186.175.169 port 56594 ssh2 Nov 30 10:46:52 linuxvps sshd\[16837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.169 user=root	2019-11-30 23:52:20
222.186.180.147	attackspambots	Nov 30 16:50:14 sso sshd[4267]: Failed password for root from 222.186.180.147 port 47666 ssh2 Nov 30 16:50:17 sso sshd[4267]: Failed password for root from 222.186.180.147 port 47666 ssh2 ...	2019-11-30 23:51:48
23.98.38.160	attackbotsspam	Nov 30 14:21:27 web02 sshd[27568]: Did not receive identification string from 23.98.38.160 Nov 30 14:22:45 web02 sshd[27720]: Invalid user dup from 23.98.38.160 Nov 30 14:22:45 web02 sshd[27720]: Received disconnect from 23.98.38.160: 11: Bye Bye [preauth] Nov 30 14:25:42 web02 sshd[28109]: Invalid user testuser from 23.98.38.160 Nov 30 14:25:43 web02 sshd[28109]: Received disconnect from 23.98.38.160: 11: Bye Bye [preauth] Nov 30 14:28:40 web02 sshd[28460]: User r.r from 23.98.38.160 not allowed because none of user's groups are listed in AllowGroups Nov 30 14:28:40 web02 sshd[28460]: Received disconnect from 23.98.38.160: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=23.98.38.160	2019-11-30 23:49:34

最近上报的IP列表

99.244.84.51	62.82.88.209	17.100.73.12	194.248.13.13
200.57.41.182	180.29.170.70	182.49.34.67	195.112.81.174
90.236.27.18	60.82.160.80	116.194.179.119	83.13.73.185
116.21.210.2	187.36.18.212	14.88.242.161	60.184.60.0
76.188.73.149	91.139.211.153	14.64.166.101	140.209.177.228