139.0.26.14 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT. First Media TBK

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	SSH/22 MH Probe, BF, Hack -	2019-07-29 21:00:36
attack	Jul 27 05:08:09 vmd24909 sshd[5622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.0.26.14 user=r.r Jul 27 05:08:11 vmd24909 sshd[5622]: Failed password for r.r from 139.0.26.14 port 40968 ssh2 Jul 27 05:20:28 vmd24909 sshd[17182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.0.26.14 user=r.r Jul 27 05:20:30 vmd24909 sshd[17182]: Failed password for r.r from 139.0.26.14 port 43611 ssh2 Jul 27 05:26:55 vmd24909 sshd[23005]: Invalid user com321 from 139.0.26.14 port 33046 Jul 27 05:26:55 vmd24909 sshd[23005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.0.26.14 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=139.0.26.14	2019-07-29 09:58:54
attackspam	Jul 28 12:37:05 localhost sshd\[41931\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.0.26.14 user=root Jul 28 12:37:07 localhost sshd\[41931\]: Failed password for root from 139.0.26.14 port 35201 ssh2 ...	2019-07-28 22:21:15

类型

评论内容

时间

attackspam

SSH/22 MH Probe, BF, Hack -

2019-07-29 21:00:36

attack

Jul 27 05:08:09 vmd24909 sshd[5622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.0.26.14  user=r.r
Jul 27 05:08:11 vmd24909 sshd[5622]: Failed password for r.r from 139.0.26.14 port 40968 ssh2
Jul 27 05:20:28 vmd24909 sshd[17182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.0.26.14  user=r.r
Jul 27 05:20:30 vmd24909 sshd[17182]: Failed password for r.r from 139.0.26.14 port 43611 ssh2
Jul 27 05:26:55 vmd24909 sshd[23005]: Invalid user com321 from 139.0.26.14 port 33046
Jul 27 05:26:55 vmd24909 sshd[23005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.0.26.14

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=139.0.26.14

2019-07-29 09:58:54

attackspam

Jul 28 12:37:05 localhost sshd\[41931\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.0.26.14  user=root
Jul 28 12:37:07 localhost sshd\[41931\]: Failed password for root from 139.0.26.14 port 35201 ssh2
...

2019-07-28 22:21:15

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.0.26.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24897
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.0.26.14.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072800 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jul 28 22:21:04 CST 2019
;; MSG SIZE  rcvd: 115

HOST信息:

14.26.0.139.in-addr.arpa domain name pointer ln-static-139-0-26-14.link.net.id.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
14.26.0.139.in-addr.arpa	name = ln-static-139-0-26-14.link.net.id.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
41.128.78.2	attackbots	Unauthorized connection attempt detected from IP address 41.128.78.2 to port 1433 [J]	2020-02-04 00:02:34
61.161.155.100	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-03 23:43:36
185.175.93.3	attack	02/03/2020-16:30:33.530131 185.175.93.3 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-02-03 23:36:19
188.166.109.87	attackspambots	...	2020-02-03 23:44:49
5.182.26.22	attackspambots	2020-02-03T16:09:04.153129scmdmz1 sshd[28162]: Invalid user cx from 5.182.26.22 port 33558 2020-02-03T16:09:04.156149scmdmz1 sshd[28162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.182.26.22 2020-02-03T16:09:04.153129scmdmz1 sshd[28162]: Invalid user cx from 5.182.26.22 port 33558 2020-02-03T16:09:05.506841scmdmz1 sshd[28162]: Failed password for invalid user cx from 5.182.26.22 port 33558 ssh2 2020-02-03T16:13:03.572119scmdmz1 sshd[28574]: Invalid user eng from 5.182.26.22 port 60418 ...	2020-02-03 23:13:32
122.161.195.19	attackbotsspam	Feb 3 14:17:57 amida sshd[872826]: Address 122.161.195.19 maps to abts-north-static-19.195.161.122-airtelbroadband.in, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Feb 3 14:17:57 amida sshd[872826]: Invalid user elloise from 122.161.195.19 Feb 3 14:17:57 amida sshd[872826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.161.195.19 Feb 3 14:18:00 amida sshd[872826]: Failed password for invalid user elloise from 122.161.195.19 port 47572 ssh2 Feb 3 14:18:00 amida sshd[872826]: Received disconnect from 122.161.195.19: 11: Bye Bye [preauth] Feb 3 14:27:35 amida sshd[875720]: Address 122.161.195.19 maps to abts-north-static-19.195.161.122-airtelbroadband.in, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Feb 3 14:27:35 amida sshd[875720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.161.195.19 user=backup Feb 3 14:27:37 amida........ -------------------------------	2020-02-03 23:45:20
14.170.233.44	attack	Feb 3 15:40:08 grey postfix/smtpd\[10053\]: NOQUEUE: reject: RCPT from unknown\[14.170.233.44\]: 554 5.7.1 Service unavailable\; Client host \[14.170.233.44\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=14.170.233.44\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-03 23:26:53
83.39.198.114	attack	Unauthorized connection attempt detected from IP address 83.39.198.114 to port 23 [J]	2020-02-03 23:58:07
140.143.73.184	attack	Feb 3 10:10:58 plusreed sshd[22421]: Invalid user codi from 140.143.73.184 Feb 3 10:10:58 plusreed sshd[22421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.73.184 Feb 3 10:10:58 plusreed sshd[22421]: Invalid user codi from 140.143.73.184 Feb 3 10:11:00 plusreed sshd[22421]: Failed password for invalid user codi from 140.143.73.184 port 33394 ssh2 Feb 3 10:14:38 plusreed sshd[23165]: Invalid user iQ from 140.143.73.184 ...	2020-02-03 23:21:54
60.173.79.120	attackbots	invalid login attempt	2020-02-03 23:11:29
37.152.177.160	attack	Unauthorized connection attempt detected from IP address 37.152.177.160 to port 2220 [J]	2020-02-04 00:03:06
80.82.70.211	attack	trying to access non-authorized port	2020-02-03 23:23:22
189.89.73.75	attackspambots	Unauthorized connection attempt from IP address 189.89.73.75 on Port 445(SMB)	2020-02-03 23:31:19
54.36.94.69	attack	#14827 - [54.36.94.69] Error: 550 5.7.1 Forged HELO hostname detected #14827 - [54.36.94.69] Error: 550 5.7.1 Forged HELO hostname detected #14827 - [54.36.94.69] Error: 550 5.7.1 Forged HELO hostname detected #14827 - [54.36.94.69] Error: 550 5.7.1 Forged HELO hostname detected ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=54.36.94.69	2020-02-03 23:37:08
169.45.77.194	attackspambots	ICMP MH Probe, Scan /Distributed -	2020-02-03 23:25:11

最近上报的IP列表

2.206.26.156	178.72.73.147	134.73.129.144	193.144.61.81
104.24.121.159	61.50.255.248	145.239.91.37	84.109.74.138
153.126.144.31	234.171.28.21	36.7.168.224	47.4.42.50
119.197.26.181	191.53.239.169	86.47.209.207	191.53.223.217
2.84.50.167	223.144.121.69	182.61.165.209	219.156.182.30