139.0.135.147 - IPInfo

基本信息:

城市(city): Bekasi

省份(region): West Java

国家(country): Indonesia

运营商(isp): Esia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
139.0.135.195	attack	Feb 3 14:29:44 grey postfix/smtpd\[28888\]: NOQUEUE: reject: RCPT from unknown\[139.0.135.195\]: 554 5.7.1 Service unavailable\; Client host \[139.0.135.195\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[139.0.135.195\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-03 22:07:54

类型

评论内容

时间

139.0.135.195

attack

Feb  3 14:29:44 grey postfix/smtpd\[28888\]: NOQUEUE: reject: RCPT from unknown\[139.0.135.195\]: 554 5.7.1 Service unavailable\; Client host \[139.0.135.195\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[139.0.135.195\]\; from=\ to=\ proto=ESMTP helo=\
...

2020-02-03 22:07:54

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.0.135.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22506
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.0.135.147.			IN	A

;; AUTHORITY SECTION:
.			419	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:03:02 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

147.135.0.139.in-addr.arpa domain name pointer fm-dyn-139-0-135-147.fast.net.id.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
147.135.0.139.in-addr.arpa	name = fm-dyn-139-0-135-147.fast.net.id.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
206.189.73.164	attack	Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-08-24 15:51:29
37.187.73.206	attackbotsspam	37.187.73.206 - - [24/Aug/2020:08:01:57 +0100] "POST /wp-login.php HTTP/1.1" 200 2264 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 37.187.73.206 - - [24/Aug/2020:08:01:58 +0100] "POST /wp-login.php HTTP/1.1" 200 2195 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 37.187.73.206 - - [24/Aug/2020:08:01:58 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-24 15:43:48
80.92.113.84	attackbots	Aug 24 08:45:15 ns382633 sshd\[9452\]: Invalid user jennifer from 80.92.113.84 port 39918 Aug 24 08:45:15 ns382633 sshd\[9452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.92.113.84 Aug 24 08:45:17 ns382633 sshd\[9452\]: Failed password for invalid user jennifer from 80.92.113.84 port 39918 ssh2 Aug 24 08:55:05 ns382633 sshd\[10759\]: Invalid user payment from 80.92.113.84 port 56762 Aug 24 08:55:05 ns382633 sshd\[10759\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.92.113.84	2020-08-24 15:40:20
88.99.244.181	attackspambots	88.99.244.181 - - [24/Aug/2020:07:19:31 +0000] "POST /wp-login.php HTTP/1.1" 200 2077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 88.99.244.181 - - [24/Aug/2020:07:19:32 +0000] "POST /wp-login.php HTTP/1.1" 200 2055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 88.99.244.181 - - [24/Aug/2020:07:19:33 +0000] "POST /wp-login.php HTTP/1.1" 200 2052 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 88.99.244.181 - - [24/Aug/2020:07:19:35 +0000] "POST /wp-login.php HTTP/1.1" 200 2052 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 88.99.244.181 - - [24/Aug/2020:07:19:36 +0000] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-"	2020-08-24 15:39:55
203.195.198.235	attackspam	2020-08-24T07:47:21+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)	2020-08-24 16:14:28
203.186.54.237	attack	bruteforce detected	2020-08-24 16:17:14
122.156.219.212	attackbotsspam	Aug 24 04:46:56 marvibiene sshd[53037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.156.219.212 user=root Aug 24 04:46:58 marvibiene sshd[53037]: Failed password for root from 122.156.219.212 port 41530 ssh2 Aug 24 04:52:30 marvibiene sshd[53132]: Invalid user amadeus from 122.156.219.212 port 12441	2020-08-24 16:10:57
110.171.101.232	attackbots	SSH brutforce	2020-08-24 15:24:34
122.226.155.61	attackbotsspam	Port probing on unauthorized port 445	2020-08-24 15:25:42
218.56.11.236	attackspam	Aug 24 07:26:47 ip106 sshd[4625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.56.11.236 Aug 24 07:26:49 ip106 sshd[4625]: Failed password for invalid user yuyue from 218.56.11.236 port 44036 ssh2 ...	2020-08-24 16:13:19
118.69.173.199	attackbots	118.69.173.199 - - [24/Aug/2020:07:02:44 +0200] "GET /wp-login.php HTTP/1.1" 200 8775 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 118.69.173.199 - - [24/Aug/2020:07:02:48 +0200] "POST /wp-login.php HTTP/1.1" 200 9026 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 118.69.173.199 - - [24/Aug/2020:07:02:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-24 15:57:52
210.211.107.3	attack	Aug 24 09:13:22 abendstille sshd\[21650\]: Invalid user r00t from 210.211.107.3 Aug 24 09:13:22 abendstille sshd\[21650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.211.107.3 Aug 24 09:13:24 abendstille sshd\[21650\]: Failed password for invalid user r00t from 210.211.107.3 port 38820 ssh2 Aug 24 09:17:48 abendstille sshd\[26080\]: Invalid user giga from 210.211.107.3 Aug 24 09:17:48 abendstille sshd\[26080\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.211.107.3 ...	2020-08-24 15:34:22
193.112.72.251	attack	2020-08-24T02:36:27.5304991495-001 sshd[40818]: Invalid user ubuntu from 193.112.72.251 port 56054 2020-08-24T02:36:29.5038401495-001 sshd[40818]: Failed password for invalid user ubuntu from 193.112.72.251 port 56054 ssh2 2020-08-24T02:38:59.3394761495-001 sshd[40928]: Invalid user mxy from 193.112.72.251 port 54496 2020-08-24T02:38:59.3436241495-001 sshd[40928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.72.251 2020-08-24T02:38:59.3394761495-001 sshd[40928]: Invalid user mxy from 193.112.72.251 port 54496 2020-08-24T02:39:01.5145451495-001 sshd[40928]: Failed password for invalid user mxy from 193.112.72.251 port 54496 ssh2 ...	2020-08-24 16:02:46
144.217.85.124	attackspambots	Aug 23 20:23:52 web9 sshd\[1577\]: Invalid user jyu from 144.217.85.124 Aug 23 20:23:52 web9 sshd\[1577\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.85.124 Aug 23 20:23:54 web9 sshd\[1577\]: Failed password for invalid user jyu from 144.217.85.124 port 51776 ssh2 Aug 23 20:28:01 web9 sshd\[2200\]: Invalid user hyd from 144.217.85.124 Aug 23 20:28:01 web9 sshd\[2200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.85.124	2020-08-24 15:46:32
89.249.73.212	attackbotsspam	1 attempts against mh-modsecurity-ban on hail	2020-08-24 15:39:31

最近上报的IP列表

139.0.15.82	139.0.149.66	139.0.15.220	139.0.157.24
139.0.133.54	139.0.16.98	139.0.16.100	139.0.16.186
118.208.236.26	139.0.16.42	139.0.178.217	139.0.16.202
139.0.18.250	139.0.178.162	139.0.178.28	139.0.161.154
139.0.168.221	139.0.175.188	118.208.236.77	139.0.192.198