103.139.44.130

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Trung Hieu Services Trading Investment Company Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Port scan on 6 port(s): 3090 3375 3403 5389 8899 33894	2020-02-29 23:22:46

相同子网IP讨论:

IP	类型	评论内容	时间
103.139.44.90	attack	Auto Detect Rule! proto TCP (SYN), 103.139.44.90:48829->gjan.info:3389, len 40	2020-08-19 03:10:02
103.139.44.90	attackbotsspam	Unauthorized connection attempt from IP address 103.139.44.90 on Port 3389(RDP)	2020-08-06 01:12:29
103.139.44.210	attackspam	Jun 7 03:31:44 mail postfix/postscreen[31795]: DNSBL rank 3 for [103.139.44.210]:59910 ...	2020-06-29 05:17:47
103.139.44.210	attack	Jun 6 07:19:20 mail postfix/smtpd[73955]: warning: unknown[103.139.44.210]: SASL LOGIN authentication failed: generic failure Jun 6 07:19:21 mail postfix/smtpd[73955]: warning: unknown[103.139.44.210]: SASL LOGIN authentication failed: generic failure Jun 6 07:19:23 mail postfix/smtpd[73955]: warning: unknown[103.139.44.210]: SASL LOGIN authentication failed: generic failure ...	2020-06-06 15:41:46
103.139.44.210	attackspam	Unauthorized connection attempt detected from IP address 103.139.44.210 to port 25	2020-06-05 14:56:40
103.139.44.210	attackbotsspam	2020-06-04T01:26:01.009692www postfix/smtpd[16129]: warning: unknown[103.139.44.210]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-06-04T01:26:09.230288www postfix/smtpd[16129]: warning: unknown[103.139.44.210]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-06-04T01:26:22.274870www postfix/smtpd[16129]: warning: unknown[103.139.44.210]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-06-04 07:43:22
103.139.44.210	attack	Unauthorized connection attempt detected from IP address 103.139.44.210 to port 25	2020-06-04 02:36:11
103.139.44.210	attack	2020-06-03T11:59:01+02:00 exim[4041]: fixed_login authenticator failed for (User) [103.139.44.210]: 535 Incorrect authentication data (set_id=jim@mail.sma.hu)	2020-06-03 18:50:58
103.139.44.159	attackbots	2020-06-02T15:19:10.428004vps773228.ovh.net sshd[12488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.44.159 user=root 2020-06-02T15:19:12.696979vps773228.ovh.net sshd[12488]: Failed password for root from 103.139.44.159 port 65167 ssh2 2020-06-02T15:19:10.428004vps773228.ovh.net sshd[12488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.44.159 user=root 2020-06-02T15:19:12.696979vps773228.ovh.net sshd[12488]: Failed password for root from 103.139.44.159 port 65167 ssh2 2020-06-02T15:19:12.997781vps773228.ovh.net sshd[12488]: error: Received disconnect from 103.139.44.159 port 65167:3: com.jcraft.jsch.JSchException: Auth fail [preauth] ...	2020-06-03 00:14:37
103.139.44.210	attackbots	May 29 07:09:25 mail postfix/smtpd\[5149\]: warning: unknown\[103.139.44.210\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 29 07:09:32 mail postfix/smtpd\[5149\]: warning: unknown\[103.139.44.210\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 29 07:09:35 mail postfix/smtpd\[5274\]: warning: unknown\[103.139.44.210\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-05-29 16:06:22
103.139.44.210	attack	May 26 02:06:05 mail postfix/smtpd[57254]: warning: unknown[103.139.44.210]: SASL LOGIN authentication failed: generic failure May 26 02:06:06 mail postfix/smtpd[57254]: warning: unknown[103.139.44.210]: SASL LOGIN authentication failed: generic failure May 26 02:06:07 mail postfix/smtpd[57254]: warning: unknown[103.139.44.210]: SASL LOGIN authentication failed: generic failure ...	2020-05-26 11:41:45
103.139.44.210	attackspam	May 22 16:56:45 localhost postfix/smtpd[52743]: warning: unknown[103.139.44.210]: SASL LOGIN authentication failed: authentication failure May 22 16:56:48 localhost postfix/smtpd[52743]: warning: unknown[103.139.44.210]: SASL LOGIN authentication failed: authentication failure May 22 16:56:52 localhost postfix/smtpd[52743]: warning: unknown[103.139.44.210]: SASL LOGIN authentication failed: authentication failure ...	2020-05-22 22:10:22
103.139.44.210	attack	May 16 04:41:40 h2779839 postfix/smtpd[18519]: warning: unknown[103.139.44.210]: SASL LOGIN authentication failed: authentication failure May 16 04:41:43 h2779839 postfix/smtpd[18519]: warning: unknown[103.139.44.210]: SASL LOGIN authentication failed: authentication failure May 16 04:41:44 h2779839 postfix/smtpd[18519]: warning: unknown[103.139.44.210]: SASL LOGIN authentication failed: authentication failure May 16 04:41:45 h2779839 postfix/smtpd[18519]: warning: unknown[103.139.44.210]: SASL LOGIN authentication failed: authentication failure May 16 04:41:47 h2779839 postfix/smtpd[18519]: warning: unknown[103.139.44.210]: SASL LOGIN authentication failed: authentication failure ...	2020-05-16 22:02:32
103.139.44.55	attack	SMTP brute-force	2020-05-04 15:24:31
103.139.44.122	attack	Invalid user ubnt from 103.139.44.122 port 51170	2020-04-19 03:43:58

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.139.44.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28848
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.139.44.130.			IN	A

;; AUTHORITY SECTION:
.			534	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022900 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 29 23:22:43 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 130.44.139.103.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 130.44.139.103.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
185.200.118.53	attack	Dec 31 16:15:29 debian-2gb-nbg1-2 kernel: \[64663.516713\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.200.118.53 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=40412 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0	2019-12-31 23:19:31
205.185.113.140	attackspambots	Dec 31 18:16:54 server sshd\[28361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.185.113.140 user=root Dec 31 18:16:56 server sshd\[28361\]: Failed password for root from 205.185.113.140 port 38226 ssh2 Dec 31 18:25:05 server sshd\[30114\]: Invalid user shung from 205.185.113.140 Dec 31 18:25:05 server sshd\[30114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.185.113.140 Dec 31 18:25:07 server sshd\[30114\]: Failed password for invalid user shung from 205.185.113.140 port 37916 ssh2 ...	2019-12-31 23:43:19
202.91.69.156	attack	" "	2019-12-31 23:13:28
148.255.53.92	attack	MLV GET /wp-login.php	2019-12-31 23:24:53
207.148.69.217	attack	Chat Spam	2019-12-31 23:51:40
211.25.218.210	attackbots	19/12/31@09:53:27: FAIL: Alarm-Network address from=211.25.218.210 ...	2019-12-31 23:38:30
190.225.97.120	attackspambots	Automatic report - Port Scan Attack	2019-12-31 23:53:21
45.148.10.19	attackbotsspam	Dec 31 15:06:24 h1655903 dovecot: pop3-login: Disconnected \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=45.148.10.19, lip=85.214.28.7, session=\ Dec 31 15:48:14 h1655903 dovecot: pop3-login: Disconnected \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=45.148.10.19, lip=85.214.28.7, session=\ Dec 31 16:13:12 h1655903 dovecot: pop3-login: Disconnected \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=45.148.10.19, lip=85.214.28.7, session=\ ...	2019-12-31 23:35:26
178.62.0.138	attack	Dec 31 15:53:24 srv206 sshd[28593]: Invalid user mysql from 178.62.0.138 Dec 31 15:53:24 srv206 sshd[28593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.0.138 Dec 31 15:53:24 srv206 sshd[28593]: Invalid user mysql from 178.62.0.138 Dec 31 15:53:26 srv206 sshd[28593]: Failed password for invalid user mysql from 178.62.0.138 port 52670 ssh2 ...	2019-12-31 23:38:49
52.24.190.101	attack	Brute force attack against VPN service	2019-12-31 23:14:54
219.135.139.245	attackbots	Dec 31 09:53:11 web1 postfix/smtpd[27446]: warning: unknown[219.135.139.245]: SASL LOGIN authentication failed: authentication failure ...	2019-12-31 23:43:37
103.216.60.83	attack	xmlrpc attack	2019-12-31 23:25:34
222.186.175.140	attackspambots	Dec 31 18:36:55 server sshd\[318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.140 user=root Dec 31 18:36:55 server sshd\[325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.140 user=root Dec 31 18:36:56 server sshd\[322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.140 user=root Dec 31 18:36:57 server sshd\[318\]: Failed password for root from 222.186.175.140 port 58242 ssh2 Dec 31 18:36:57 server sshd\[325\]: Failed password for root from 222.186.175.140 port 41066 ssh2 ...	2019-12-31 23:37:59
222.186.175.154	attackbotsspam	Dec 31 16:14:59 v22018076622670303 sshd\[1776\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.154 user=root Dec 31 16:15:01 v22018076622670303 sshd\[1776\]: Failed password for root from 222.186.175.154 port 55172 ssh2 Dec 31 16:15:04 v22018076622670303 sshd\[1776\]: Failed password for root from 222.186.175.154 port 55172 ssh2 ...	2019-12-31 23:18:41
111.161.41.156	attackbotsspam	Dec 31 15:53:20 serwer sshd\[28165\]: Invalid user server from 111.161.41.156 port 43974 Dec 31 15:53:20 serwer sshd\[28165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.41.156 Dec 31 15:53:22 serwer sshd\[28165\]: Failed password for invalid user server from 111.161.41.156 port 43974 ssh2 ...	2019-12-31 23:40:01

最近上报的IP列表

87.166.58.219	122.116.58.35	91.199.118.136	172.81.224.233
193.29.15.107	79.56.21.170	207.148.85.151	193.164.133.20
109.185.181.156	168.195.253.57	177.86.172.203	122.116.242.8
190.8.52.93	203.228.51.2	122.116.225.237	106.3.44.235
85.99.96.209	91.192.244.66	201.111.126.137	223.167.32.245