219.140.119.220

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
219.140.119.44	attackspambots	219.140.119.44 - - \[31/Jan/2020:10:43:47 +0200\] "GET http://www.rfa.org/english/ HTTP/1.1" 404 206 "-" "Mozilla/5.0 \(Windows NT 10.0\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/45.0.2454.101 Safari/537.36"	2020-01-31 22:39:59
219.140.119.231	attackbots	Unauthorized connection attempt detected from IP address 219.140.119.231 to port 8082 [J]	2020-01-29 07:49:39
219.140.119.139	attack	Unauthorized connection attempt detected from IP address 219.140.119.139 to port 80 [J]	2020-01-14 15:03:45
219.140.119.159	attackspambots	Unauthorized connection attempt detected from IP address 219.140.119.159 to port 2053	2019-12-31 06:17:35
219.140.119.132	attack	The IP has triggered Cloudflare WAF. CF-Ray: 54315a9eca57e82d \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.096783921 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 05:31:12
219.140.119.250	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 54160cf68976996b \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: Mozilla/4.047745454 Mozilla/4.0 (compatible; MSIE 5.00; Windows 98) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 04:06:05

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 219.140.119.220
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8240
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;219.140.119.220.		IN	A

;; AUTHORITY SECTION:
.			402	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 11:00:51 CST 2022
;; MSG SIZE  rcvd: 108

Host info

Host 220.119.140.219.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 220.119.140.219.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
193.150.109.152	attackbots	Sep 10 02:16:57 hanapaa sshd\[27529\]: Invalid user sftpuser from 193.150.109.152 Sep 10 02:16:57 hanapaa sshd\[27529\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.150.109.152 Sep 10 02:17:00 hanapaa sshd\[27529\]: Failed password for invalid user sftpuser from 193.150.109.152 port 12298 ssh2 Sep 10 02:22:45 hanapaa sshd\[28039\]: Invalid user testuser from 193.150.109.152 Sep 10 02:22:45 hanapaa sshd\[28039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.150.109.152	2019-09-10 20:23:04
103.236.253.28	attack	Sep 10 13:58:37 eventyay sshd[28472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.236.253.28 Sep 10 13:58:39 eventyay sshd[28472]: Failed password for invalid user admin from 103.236.253.28 port 58985 ssh2 Sep 10 14:04:24 eventyay sshd[28593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.236.253.28 ...	2019-09-10 20:08:24
208.100.26.236	attack	Aug 13 11:02:23 mercury smtpd[1187]: 17a8d4458a5b8b44 smtp event=bad-input address=208.100.26.236 host=ip236.208-100-26.static.steadfastdns.net result="500 5.5.1 Invalid command: Pipelining not supported" ...	2019-09-10 20:18:29
159.203.203.234	attackspambots	Sep 6 11:26:47 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:5a:1a:41:08:00 SRC=159.203.203.234 DST=109.74.200.221 LEN=76 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=UDP SPT=41818 DPT=123 LEN=56 ...	2019-09-10 20:20:44
200.110.137.82	attackbotsspam	Aug 15 01:04:18 mercury smtpd[1187]: 17a8d66a3197caa3 smtp event=failed-command address=200.110.137.82 host=host82.200.110.137.ifxnw.com.ar command="RCPT to:" result="550 Invalid recipient" ...	2019-09-10 20:46:18
178.128.174.202	attack	Sep 10 01:42:26 hcbb sshd\[13560\]: Invalid user test1 from 178.128.174.202 Sep 10 01:42:26 hcbb sshd\[13560\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.174.202 Sep 10 01:42:27 hcbb sshd\[13560\]: Failed password for invalid user test1 from 178.128.174.202 port 42012 ssh2 Sep 10 01:48:24 hcbb sshd\[14120\]: Invalid user sinusbot from 178.128.174.202 Sep 10 01:48:24 hcbb sshd\[14120\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.174.202	2019-09-10 20:10:25
222.186.52.124	attackbots	Sep 10 08:10:32 ny01 sshd[16578]: Failed password for root from 222.186.52.124 port 11832 ssh2 Sep 10 08:10:32 ny01 sshd[16576]: Failed password for root from 222.186.52.124 port 41764 ssh2 Sep 10 08:10:34 ny01 sshd[16578]: Failed password for root from 222.186.52.124 port 11832 ssh2	2019-09-10 20:13:55
27.14.44.163	attackspambots	" "	2019-09-10 19:54:37
128.14.209.154	attackspam	Login scan, accessed by IP not domain: 128.14.209.154 - - [10/Sep/2019:13:19:36 +0100] "GET /global-protect/login.esp HTTP/1.1" 404 343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"	2019-09-10 20:36:31
202.131.152.2	attackbotsspam	Sep 10 14:06:59 legacy sshd[28428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.131.152.2 Sep 10 14:07:01 legacy sshd[28428]: Failed password for invalid user admin from 202.131.152.2 port 59646 ssh2 Sep 10 14:14:03 legacy sshd[28726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.131.152.2 ...	2019-09-10 20:19:03
169.239.95.127	attackspambots	May 1 00:37:35 mercury wordpress(lukegirvin.com)[13969]: XML-RPC authentication failure for luke from 169.239.95.127 ...	2019-09-10 20:41:17
112.85.42.229	attack	F2B jail: sshd. Time: 2019-09-10 14:18:52, Reported by: VKReport	2019-09-10 20:21:56
162.243.142.154	attack	Aug 18 21:41:28 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:5a:1a:41:08:00 SRC=162.243.142.154 DST=109.74.200.221 LEN=76 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=UDP SPT=60225 DPT=123 LEN=56 ...	2019-09-10 20:01:07
170.84.51.74	attackbotsspam	Sep 8 10:29:01 mercury wordpress(www.learnargentinianspanish.com)[27683]: XML-RPC authentication failure for josh from 170.84.51.74 ...	2019-09-10 20:31:55
171.5.110.80	attack	May 2 21:25:59 mercury wordpress(lukegirvin.com)[22469]: XML-RPC authentication failure for luke from 171.5.110.80 ...	2019-09-10 20:09:10

Recently Reported IPs

219.142.99.28	219.142.246.122	219.143.174.119	219.143.174.138
219.140.119.114	219.143.174.148	219.140.119.196	219.143.174.164
219.143.174.175	219.143.174.237	219.143.174.171	219.143.174.27
219.143.174.151	219.143.174.56	219.143.174.245	219.148.109.192
219.143.174.234	219.148.89.209	219.147.238.60	219.145.77.171