185.11.139.130

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): Hosting.de GmbH

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Aug 19 00:04:47 pegasus sshd[9505]: Failed password for invalid user ttest from 185.11.139.130 port 55891 ssh2 Aug 19 00:04:47 pegasus sshd[9505]: Received disconnect from 185.11.139.130 port 55891:11: Bye Bye [preauth] Aug 19 00:04:47 pegasus sshd[9505]: Disconnected from 185.11.139.130 port 55891 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=185.11.139.130	2019-08-19 09:34:52

类型

评论内容

时间

attackbots

Aug 19 00:04:47 pegasus sshd[9505]: Failed password for invalid user ttest from 185.11.139.130 port 55891 ssh2
Aug 19 00:04:47 pegasus sshd[9505]: Received disconnect from 185.11.139.130 port 55891:11: Bye Bye [preauth]
Aug 19 00:04:47 pegasus sshd[9505]: Disconnected from 185.11.139.130 port 55891 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=185.11.139.130

2019-08-19 09:34:52

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 185.11.139.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34181
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;185.11.139.130.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081801 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 19 09:34:47 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

130.139.11.185.in-addr.arpa domain name pointer vsrv547861.customer.xenway.de.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
130.139.11.185.in-addr.arpa	name = vsrv547861.customer.xenway.de.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
212.64.29.136	attackbots	SSH Brute Force	2020-09-08 02:17:55
222.186.175.169	attackspam	Sep 7 20:29:44 prod4 sshd\[21567\]: Failed password for root from 222.186.175.169 port 50136 ssh2 Sep 7 20:29:47 prod4 sshd\[21567\]: Failed password for root from 222.186.175.169 port 50136 ssh2 Sep 7 20:29:51 prod4 sshd\[21567\]: Failed password for root from 222.186.175.169 port 50136 ssh2 ...	2020-09-08 02:35:33
112.85.42.172	attack	Sep 7 20:36:42 server sshd[14804]: Failed none for root from 112.85.42.172 port 48823 ssh2 Sep 7 20:36:44 server sshd[14804]: Failed password for root from 112.85.42.172 port 48823 ssh2 Sep 7 20:36:47 server sshd[14804]: Failed password for root from 112.85.42.172 port 48823 ssh2	2020-09-08 02:44:12
168.151.116.105	attack	Automatic report - Banned IP Access	2020-09-08 02:42:36
31.7.105.92	attackbotsspam	LinkSys E-series Routers Remote Code Execution Vulnerability , PTR: PTR record not found	2020-09-08 02:16:49
52.185.161.47	attack	2020-09-07 20:23:43 dovecot_login authenticator failed for \(ADMIN\) \[52.185.161.47\]: 535 Incorrect authentication data \(set_id=support@opso.it\) 2020-09-07 20:25:22 dovecot_login authenticator failed for \(ADMIN\) \[52.185.161.47\]: 535 Incorrect authentication data \(set_id=support@opso.it\) 2020-09-07 20:27:01 dovecot_login authenticator failed for \(ADMIN\) \[52.185.161.47\]: 535 Incorrect authentication data \(set_id=support@opso.it\) 2020-09-07 20:28:39 dovecot_login authenticator failed for \(ADMIN\) \[52.185.161.47\]: 535 Incorrect authentication data \(set_id=support@opso.it\) 2020-09-07 20:30:17 dovecot_login authenticator failed for \(ADMIN\) \[52.185.161.47\]: 535 Incorrect authentication data \(set_id=support@opso.it\)	2020-09-08 02:30:42
46.238.122.54	attackbotsspam	Sep 7 13:56:23 ws22vmsma01 sshd[160820]: Failed password for root from 46.238.122.54 port 53101 ssh2 Sep 7 14:09:51 ws22vmsma01 sshd[209609]: Failed password for root from 46.238.122.54 port 48269 ssh2 Sep 7 14:13:22 ws22vmsma01 sshd[222341]: Failed password for root from 46.238.122.54 port 51232 ssh2 Sep 7 14:20:54 ws22vmsma01 sshd[4258]: Failed password for root from 46.238.122.54 port 57167 ssh2 ...	2020-09-08 02:20:54
109.111.172.39	attackspambots	TCP (SYN) 109.111.172.39:41162 -> port 23, len 44	2020-09-08 02:18:36
157.230.53.57	attackbots	Sep 7 19:07:22 xeon sshd[36050]: Failed password for root from 157.230.53.57 port 52642 ssh2	2020-09-08 02:40:49
106.12.89.154	attack	Sep 7 18:41:06 marvibiene sshd[54514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.89.154 user=root Sep 7 18:41:09 marvibiene sshd[54514]: Failed password for root from 106.12.89.154 port 44188 ssh2 Sep 7 18:43:49 marvibiene sshd[56193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.89.154 user=root Sep 7 18:43:51 marvibiene sshd[56193]: Failed password for root from 106.12.89.154 port 44220 ssh2	2020-09-08 02:49:12
178.62.187.136	attack	Sep 7 15:41:35 localhost sshd[44880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.187.136 user=root Sep 7 15:41:38 localhost sshd[44880]: Failed password for root from 178.62.187.136 port 36652 ssh2 Sep 7 15:45:34 localhost sshd[45238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.187.136 user=root Sep 7 15:45:36 localhost sshd[45238]: Failed password for root from 178.62.187.136 port 43462 ssh2 Sep 7 15:49:31 localhost sshd[45624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.187.136 user=root Sep 7 15:49:33 localhost sshd[45624]: Failed password for root from 178.62.187.136 port 50262 ssh2 ...	2020-09-08 02:24:49
200.111.83.76	attackspam	Cluster member 67.227.229.95 (US/United States/host.cjthedj97.me) said, DENY 200.111.83.76, Reason:[(sshd) Failed SSH login from 200.111.83.76 (CL/Chile/-): 1 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER	2020-09-08 02:38:49
58.182.119.33	attack	Port 22 Scan, PTR: None	2020-09-08 02:46:30
185.153.196.126	attackspambots	SIP/5060 Probe, BF, Hack -	2020-09-08 02:33:24
103.120.160.178	attack	Wordpress attack	2020-09-08 02:45:04

最近上报的IP列表

183.224.77.205	157.253.205.51	200.210.145.234	171.236.90.250
190.167.8.252	81.91.85.130	185.244.241.60	220.143.15.243
165.22.218.87	222.129.148.221	76.126.84.98	5.189.147.230
207.174.217.97	58.87.114.13	167.86.111.233	175.139.242.49
195.199.80.201	107.172.29.141	45.32.158.225	109.252.49.138