140.116.101.1 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Taiwan, China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.116.101.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7186
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;140.116.101.1.			IN	A

;; AUTHORITY SECTION:
.			472	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023050500 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 05 16:46:06 CST 2023
;; MSG SIZE  rcvd: 106

HOST信息:

Host 1.101.116.140.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 1.101.116.140.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
208.109.14.122	attackbots	Aug 11 21:57:40 hidden sshd[4733]: Failed password for hidden from 208.109.14.122 port 59962 ssh2 Aug 11 21:59:48 hidden sshd[9679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.14.122 user=root Aug 11 21:59:50 hidden sshd[9679]: Failed password for hidden from 208.109.14.122 port 35384 ssh2 Aug 11 22:02:04 hidden sshd[15400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.14.122 user=root Aug 11 22:02:06 hidden sshd[15400]: Failed password for hidden from 208.109.14.122 port 39038 ssh2	2020-08-12 04:09:47
91.134.138.46	attackspambots	Port Scan detected from 91.134.138.46 (FR/France/Hauts-de-France/Gravelines/46.ip-91-134-138.eu). 4 hits in the last 295 seconds	2020-08-12 04:10:55
66.249.79.200	attackbots	[Tue Aug 11 19:04:43.267312 2020] [:error] [pid 12131:tid 140198558357248] [client 66.249.79.200:64633] [client 66.249.79.200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "((?:[~!@#\\\\$%\\\\^&\\\\\\\$\\\$\\\\-\\\\+=\\\\{\\\\}\\\\[\\\\]\\\\\|:;\"'\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98`<>][^~!@#\\\\$%\\\\^&\\\\\\\$\\\$\\\\-\\\\+=\\\\{\\\\}\\\\[\\\\]\\\\\|:;\"'\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98`<>]*?){12})" at ARGS:id. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "1255"] [id "942430"] [msg "Restricted SQL Character Anomaly Detection (args): # of special characters exceeded (12)"] [data "Matched Data: :prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal- found within ARGS:id: 2454:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-7-13-maret-2017"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "pla ...	2020-08-12 04:31:06
122.51.218.122	attack	Aug 11 21:35:39 gw1 sshd[8879]: Failed password for root from 122.51.218.122 port 49488 ssh2 ...	2020-08-12 04:26:41
110.136.217.200	attackbotsspam	fail2ban detected bruce force on ssh iptables	2020-08-12 04:15:32
2600:3000:2710:200::1d	attackspambots	Tried to connect (16x) -	2020-08-12 04:17:12
185.40.4.206	attackbots	[2020-08-11 12:36:01] NOTICE[1185] chan_sip.c: Registration from '"1532"' failed for '185.40.4.206:5902' - Wrong password [2020-08-11 12:36:01] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-11T12:36:01.089-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1532",SessionID="0x7f10c43e3a48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.40.4.206/5902",Challenge="3b09517a",ReceivedChallenge="3b09517a",ReceivedHash="009674402867bf8e12213fa46021a4b0" [2020-08-11 12:36:15] NOTICE[1185] chan_sip.c: Registration from '"1512"' failed for '185.40.4.206:9819' - Wrong password [2020-08-11 12:36:15] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-11T12:36:15.098-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1512",SessionID="0x7f10c4270ff8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.40. ...	2020-08-12 04:10:14
104.248.56.150	attackbotsspam	Aug 11 21:38:34 ns381471 sshd[9858]: Failed password for root from 104.248.56.150 port 52296 ssh2	2020-08-12 04:02:48
151.80.46.138	attackbotsspam	[portscan] Port scan	2020-08-12 04:22:39
138.68.233.112	attack	Automatic report - Banned IP Access	2020-08-12 04:26:55
117.44.46.109	attackbots	Aug 11 13:42:01 xenon postfix/smtpd[53839]: connect from unknown[117.44.46.109] Aug 11 13:42:15 xenon postfix/smtpd[53839]: lost connection after AUTH from unknown[117.44.46.109] Aug 11 13:42:15 xenon postfix/smtpd[53839]: disconnect from unknown[117.44.46.109] Aug 11 13:42:29 xenon postfix/smtpd[53839]: connect from unknown[117.44.46.109] Aug 11 13:42:40 xenon postfix/smtpd[53839]: lost connection after CONNECT from unknown[117.44.46.109] Aug 11 13:42:40 xenon postfix/smtpd[53839]: disconnect from unknown[117.44.46.109] Aug 11 13:42:43 xenon postfix/smtpd[53839]: connect from unknown[117.44.46.109] Aug 11 13:42:53 xenon postfix/smtpd[53839]: lost connection after CONNECT from unknown[117.44.46.109] Aug 11 13:42:53 xenon postfix/smtpd[53839]: disconnect from unknown[117.44.46.109] Aug 11 13:42:55 xenon postfix/smtpd[53839]: connect from unknown[117.44.46.109] Aug 11 13:43:09 xenon postfix/smtpd[53839]: lost connection after EHLO from unknown[117.44.46.109] Aug 11 13:43:........ -------------------------------	2020-08-12 04:23:05
118.69.55.141	attackbotsspam	$f2bV_matches	2020-08-12 04:24:03
211.117.142.155	attack	Lines containing failures of 211.117.142.155 Aug 11 13:51:31 kmh-vmh-001-fsn07 sshd[21416]: Bad protocol version identification '' from 211.117.142.155 port 53216 Aug 11 13:51:33 kmh-vmh-001-fsn07 sshd[21480]: Invalid user support from 211.117.142.155 port 53355 Aug 11 13:51:33 kmh-vmh-001-fsn07 sshd[21480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.117.142.155 Aug 11 13:51:35 kmh-vmh-001-fsn07 sshd[21480]: Failed password for invalid user support from 211.117.142.155 port 53355 ssh2 Aug 11 13:51:36 kmh-vmh-001-fsn07 sshd[21480]: Connection closed by invalid user support 211.117.142.155 port 53355 [preauth] Aug 11 13:51:37 kmh-vmh-001-fsn07 sshd[21499]: Invalid user misp from 211.117.142.155 port 54251 Aug 11 13:51:37 kmh-vmh-001-fsn07 sshd[21499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.117.142.155 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=211.117.1	2020-08-12 04:31:41
202.51.98.226	attack	2020-08-11 21:41:43,654 fail2ban.actions: WARNING [ssh] Ban 202.51.98.226	2020-08-12 04:32:13
47.251.38.185	attackspambots	10 attempts against mh_ha-misc-ban on sonic	2020-08-12 04:33:36

最近上报的IP列表

130.159.236.1	114.142.173.38	130.91.45.250	120.114.100.20
128.163.209.180	140.116.178.57	140.138.181.237	159.226.117.205
140.116.100.24	140.116.38.48	30.168.162.68	140.116.164.33
124.238.104.245	209.79.64.59	140.116.162.10	165.91.8.44
160.217.228.53	140.116.199.174	140.116.52.161	140.116.140.46