131.221.149.139

基本信息:

城市(city): Guaira

省份(region): Sao Paulo

国家(country): Brazil

运营商(isp): Guedes e Lopes Comunicacao e Informatica Ltda-ME

主机名(hostname): unknown

机构(organization): GUEDES E LOPES COMUNICACAO E INFORMATICA LTDA-ME

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Unauthorized connection attempt from IP address 131.221.149.139 on Port 587(SMTP-MSA)	2019-08-03 04:20:33

相同子网IP讨论:

IP	类型	评论内容	时间
131.221.149.92	attackspam	$f2bV_matches	2019-09-03 21:17:02
131.221.149.52	attackspambots	Aug 3 00:52:41 web1 postfix/smtpd[10512]: warning: unknown[131.221.149.52]: SASL PLAIN authentication failed: authentication failure ...	2019-08-03 13:46:27
131.221.149.103	attackspambots	SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2019-07-08 19:28:49
131.221.149.137	attackbotsspam	SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2019-07-08 19:26:46

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.221.149.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45077
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;131.221.149.139.		IN	A

;; AUTHORITY SECTION:
.			1544	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080201 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 03 04:20:27 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

Host 139.149.221.131.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 139.149.221.131.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
47.105.223.120	attackspam	2020-07-08T18:38:24.754659SusPend.routelink.net.id sshd[104454]: Invalid user bill from 47.105.223.120 port 36346 2020-07-08T18:38:26.099335SusPend.routelink.net.id sshd[104454]: Failed password for invalid user bill from 47.105.223.120 port 36346 ssh2 2020-07-08T18:48:13.806291SusPend.routelink.net.id sshd[105724]: Invalid user Michelle from 47.105.223.120 port 34138 ...	2020-07-08 20:51:27
88.214.26.93	attackbotsspam	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-07-08T12:02:00Z and 2020-07-08T12:35:26Z	2020-07-08 21:19:50
18.230.187.67	attackbots	Jul 8 08:51:24 ny01 sshd[13093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.230.187.67 Jul 8 08:51:26 ny01 sshd[13093]: Failed password for invalid user kamk from 18.230.187.67 port 40318 ssh2 Jul 8 08:55:46 ny01 sshd[13997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.230.187.67	2020-07-08 21:28:12
37.187.117.187	attack	SSH Brute-Force. Ports scanning.	2020-07-08 21:21:11
128.199.220.197	attack	Jul 8 14:41:23 electroncash sshd[34254]: Invalid user vagrant from 128.199.220.197 port 52880 Jul 8 14:41:23 electroncash sshd[34254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.220.197 Jul 8 14:41:23 electroncash sshd[34254]: Invalid user vagrant from 128.199.220.197 port 52880 Jul 8 14:41:25 electroncash sshd[34254]: Failed password for invalid user vagrant from 128.199.220.197 port 52880 ssh2 Jul 8 14:44:06 electroncash sshd[34949]: Invalid user rabbitmq from 128.199.220.197 port 39046 ...	2020-07-08 21:17:35
39.97.120.26	attackspambots	Telnet Server BruteForce Attack	2020-07-08 20:50:26
45.143.222.101	attack	2020-07-08 06:39:15.626161-0500 localhost smtpd[96634]: NOQUEUE: reject: RCPT from unknown[45.143.222.101]: 554 5.7.1 Service unavailable; Client host [45.143.222.101] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/45.143.222.101; from= to= proto=ESMTP helo=	2020-07-08 21:03:59
193.169.253.27	attackspam	Jul 8 13:11:04 heicom postfix/smtpd\[13094\]: warning: unknown\[193.169.253.27\]: SASL LOGIN authentication failed: authentication failure Jul 8 13:23:26 heicom postfix/smtpd\[13077\]: warning: unknown\[193.169.253.27\]: SASL LOGIN authentication failed: authentication failure Jul 8 13:35:49 heicom postfix/smtpd\[14932\]: warning: unknown\[193.169.253.27\]: SASL LOGIN authentication failed: authentication failure Jul 8 13:48:11 heicom postfix/smtpd\[15141\]: warning: unknown\[193.169.253.27\]: SASL LOGIN authentication failed: authentication failure ...	2020-07-08 21:01:34
132.232.10.144	attackbotsspam	2020-07-08T14:36:50.218056vps751288.ovh.net sshd\[4521\]: Invalid user user from 132.232.10.144 port 44868 2020-07-08T14:36:50.226334vps751288.ovh.net sshd\[4521\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.10.144 2020-07-08T14:36:51.874359vps751288.ovh.net sshd\[4521\]: Failed password for invalid user user from 132.232.10.144 port 44868 ssh2 2020-07-08T14:38:56.552889vps751288.ovh.net sshd\[4533\]: Invalid user crai from 132.232.10.144 port 36794 2020-07-08T14:38:56.564387vps751288.ovh.net sshd\[4533\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.10.144	2020-07-08 20:54:38
140.207.48.242	attackbotsspam	Dovecot Invalid User Login Attempt.	2020-07-08 21:11:53
46.38.145.254	attackbotsspam	2020-07-08 12:56:22 auth_plain authenticator failed for (User) [46.38.145.254]: 535 Incorrect authentication data (set_id=zhangl@mail.csmailer.org) 2020-07-08 12:57:12 auth_plain authenticator failed for (User) [46.38.145.254]: 535 Incorrect authentication data (set_id=colleague@mail.csmailer.org) 2020-07-08 12:57:57 auth_plain authenticator failed for (User) [46.38.145.254]: 535 Incorrect authentication data (set_id=admin-staging@mail.csmailer.org) 2020-07-08 12:58:46 auth_plain authenticator failed for (User) [46.38.145.254]: 535 Incorrect authentication data (set_id=koken@mail.csmailer.org) 2020-07-08 12:59:33 auth_plain authenticator failed for (User) [46.38.145.254]: 535 Incorrect authentication data (set_id=steel@mail.csmailer.org) ...	2020-07-08 20:57:07
49.233.197.193	attack	Jul 8 05:39:36 dignus sshd[32129]: Failed password for invalid user git-reps from 49.233.197.193 port 51020 ssh2 Jul 8 05:43:17 dignus sshd[32482]: Invalid user margarita from 49.233.197.193 port 34170 Jul 8 05:43:17 dignus sshd[32482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.197.193 Jul 8 05:43:19 dignus sshd[32482]: Failed password for invalid user margarita from 49.233.197.193 port 34170 ssh2 Jul 8 05:46:47 dignus sshd[384]: Invalid user whitley from 49.233.197.193 port 45540 ...	2020-07-08 20:48:32
92.118.161.33	attack	Unauthorized connection attempt detected from IP address 92.118.161.33 to port 10443 [T]	2020-07-08 21:27:07
201.122.102.140	attack	Automatic report - Banned IP Access	2020-07-08 21:11:27
212.102.33.204	attackspambots	0,53-03/04 [bc01/m75] PostRequest-Spammer scoring: Lusaka01	2020-07-08 20:55:07

最近上报的IP列表

178.145.2.223	118.130.172.171	17.51.108.249	221.12.165.235
106.12.60.117	223.245.39.186	111.124.253.75	123.226.189.203
63.89.147.70	32.169.139.224	81.38.58.69	154.224.154.239
14.170.211.76	35.176.26.175	105.51.167.166	70.192.173.220
87.96.14.208	1.128.0.178	89.155.201.164	72.144.128.210