139.194.3.48 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): unknown

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
139.194.37.38	attackbotsspam	2019-03-11 12:24:47 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35687 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-11 12:24:50 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35711 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-11 12:24:53 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35730 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-02-05 00:58:03
139.194.38.89	attackbotsspam	Oct 2 05:33:00 mxgate1 postfix/postscreen[4705]: CONNECT from [139.194.38.89]:52583 to [176.31.12.44]:25 Oct 2 05:33:00 mxgate1 postfix/dnsblog[5004]: addr 139.194.38.89 listed by domain cbl.abuseat.org as 127.0.0.2 Oct 2 05:33:00 mxgate1 postfix/dnsblog[5006]: addr 139.194.38.89 listed by domain zen.spamhaus.org as 127.0.0.4 Oct 2 05:33:00 mxgate1 postfix/dnsblog[5006]: addr 139.194.38.89 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 2 05:33:01 mxgate1 postfix/dnsblog[5021]: addr 139.194.38.89 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Oct 2 05:33:01 mxgate1 postfix/dnsblog[5005]: addr 139.194.38.89 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 2 05:33:06 mxgate1 postfix/postscreen[4705]: DNSBL rank 5 for [139.194.38.89]:52583 Oct x@x Oct 2 05:33:07 mxgate1 postfix/postscreen[4705]: HANGUP after 1.1 from [139.194.38.89]:52583 in tests after SMTP handshake Oct 2 05:33:07 mxgate1 postfix/postscreen[4705]: DISCONNECT [139.194.38.89]:52583 ........ -------------------------------	2019-10-02 14:49:45

类型

评论内容

时间

139.194.37.38

attackbotsspam

2019-03-11 12:24:47 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35687 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-11 12:24:50 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35711 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-11 12:24:53 H=\(fm-dyn-139-194-37-38.fast.net.id\) \[139.194.37.38\]:35730 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...

2020-02-05 00:58:03

139.194.38.89

attackbotsspam

Oct  2 05:33:00 mxgate1 postfix/postscreen[4705]: CONNECT from [139.194.38.89]:52583 to [176.31.12.44]:25
Oct  2 05:33:00 mxgate1 postfix/dnsblog[5004]: addr 139.194.38.89 listed by domain cbl.abuseat.org as 127.0.0.2
Oct  2 05:33:00 mxgate1 postfix/dnsblog[5006]: addr 139.194.38.89 listed by domain zen.spamhaus.org as 127.0.0.4
Oct  2 05:33:00 mxgate1 postfix/dnsblog[5006]: addr 139.194.38.89 listed by domain zen.spamhaus.org as 127.0.0.11
Oct  2 05:33:01 mxgate1 postfix/dnsblog[5021]: addr 139.194.38.89 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Oct  2 05:33:01 mxgate1 postfix/dnsblog[5005]: addr 139.194.38.89 listed by domain b.barracudacentral.org as 127.0.0.2
Oct  2 05:33:06 mxgate1 postfix/postscreen[4705]: DNSBL rank 5 for [139.194.38.89]:52583
Oct x@x
Oct  2 05:33:07 mxgate1 postfix/postscreen[4705]: HANGUP after 1.1 from [139.194.38.89]:52583 in tests after SMTP handshake
Oct  2 05:33:07 mxgate1 postfix/postscreen[4705]: DISCONNECT [139.194.38.89]:52583
........
-------------------------------

2019-10-02 14:49:45

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.194.3.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28973
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.194.3.48.			IN	A

;; AUTHORITY SECTION:
.			592	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:16:59 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

48.3.194.139.in-addr.arpa domain name pointer fm-dyn-139-194-3-48.fast.net.id.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
48.3.194.139.in-addr.arpa	name = fm-dyn-139-194-3-48.fast.net.id.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
112.207.104.21	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-25 13:51:07,784 INFO [shellcode_manager] (112.207.104.21) no match, writing hexdump (78bef3e70ea53f7423ebd2f9d1b95dbe :2123022) - MS17010 (EternalBlue)	2019-07-26 18:14:39
185.244.25.108	attack	26.07.2019 09:06:35 Connection to port 8088 blocked by firewall	2019-07-26 18:13:20
45.168.64.10	attack	Jul 26 14:48:47 vibhu-HP-Z238-Microtower-Workstation sshd\[28643\]: Invalid user tester from 45.168.64.10 Jul 26 14:48:47 vibhu-HP-Z238-Microtower-Workstation sshd\[28643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.168.64.10 Jul 26 14:48:49 vibhu-HP-Z238-Microtower-Workstation sshd\[28643\]: Failed password for invalid user tester from 45.168.64.10 port 55978 ssh2 Jul 26 14:54:27 vibhu-HP-Z238-Microtower-Workstation sshd\[28792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.168.64.10 user=root Jul 26 14:54:29 vibhu-HP-Z238-Microtower-Workstation sshd\[28792\]: Failed password for root from 45.168.64.10 port 50958 ssh2 ...	2019-07-26 17:28:59
45.125.66.90	attack	Jul 26 12:14:03 OPSO sshd\[7819\]: Invalid user cui from 45.125.66.90 port 48280 Jul 26 12:14:03 OPSO sshd\[7819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.125.66.90 Jul 26 12:14:04 OPSO sshd\[7819\]: Failed password for invalid user cui from 45.125.66.90 port 48280 ssh2 Jul 26 12:18:36 OPSO sshd\[8602\]: Invalid user remote from 45.125.66.90 port 50824 Jul 26 12:18:36 OPSO sshd\[8602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.125.66.90	2019-07-26 18:21:39
223.241.247.214	attackspam	Jul 26 13:07:09 srv-4 sshd\[28768\]: Invalid user test from 223.241.247.214 Jul 26 13:07:09 srv-4 sshd\[28768\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.241.247.214 Jul 26 13:07:11 srv-4 sshd\[28768\]: Failed password for invalid user test from 223.241.247.214 port 56826 ssh2 ...	2019-07-26 18:46:37
180.125.253.247	attackspam	Brute force SMTP login attempts.	2019-07-26 18:03:08
103.99.2.216	attackbots	2019-07-26 12:07:27 dovecot_login authenticator failed for (User) [103.99.2.216]: 535 Incorrect authentication data (set_id=info@usmancity.ru) 2019-07-26 12:07:34 dovecot_login authenticator failed for (User) [103.99.2.216]: 535 Incorrect authentication data (set_id=info@usmancity.ru) ...	2019-07-26 17:35:10
117.69.47.153	attackspambots	[Aegis] @ 2019-07-26 10:07:03 0100 -> Sendmail rejected message.	2019-07-26 17:46:07
92.222.88.30	attackbots	2019-07-26T11:03:19.481136 sshd[26063]: Invalid user tech from 92.222.88.30 port 47534 2019-07-26T11:03:19.493999 sshd[26063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.88.30 2019-07-26T11:03:19.481136 sshd[26063]: Invalid user tech from 92.222.88.30 port 47534 2019-07-26T11:03:21.194934 sshd[26063]: Failed password for invalid user tech from 92.222.88.30 port 47534 ssh2 2019-07-26T11:07:32.097564 sshd[26124]: Invalid user user1 from 92.222.88.30 port 42080 ...	2019-07-26 17:39:46
196.112.35.43	attackspam	Autoban 196.112.35.43 AUTH/CONNECT	2019-07-26 17:26:47
180.120.163.90	attackbots	DATE:2019-07-26_11:06:14, IP:180.120.163.90, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc)	2019-07-26 18:25:25
213.55.225.121	attackspam	Jul2610:52:07server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin6secs\):user=\\,method=PLAIN\,rip=213.55.225.121\,lip=148.251.104.70\,TLS\,session=\Jul2610:52:17server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=213.55.225.121\,lip=148.251.104.70\,TLS\,session=\Jul2610:52:20server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=213.55.225.121\,lip=148.251.104.70\,TLS\,session=\Jul2610:52:20server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin12secs\):user=\\,method=PLAIN\,rip=213.55.225.121\,lip=148.251.104.70\,TLS:read\(size=344\)failed:Connectionresetbypeer\,session=\Jul2610:52:20server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin22secs\):user=\\,method=PLAIN\,rip=213.55.225.121\,lip=1	2019-07-26 17:21:38
79.137.77.131	attackspambots	Jul 26 10:08:42 MK-Soft-VM4 sshd\[17460\]: Invalid user wang from 79.137.77.131 port 42842 Jul 26 10:08:42 MK-Soft-VM4 sshd\[17460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.77.131 Jul 26 10:08:44 MK-Soft-VM4 sshd\[17460\]: Failed password for invalid user wang from 79.137.77.131 port 42842 ssh2 ...	2019-07-26 18:15:08
191.193.78.164	attackbots	Splunk® : port scan detected: Jul 26 05:07:18 testbed kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:c0:42:d0:39:2c:30:08:00 SRC=191.193.78.164 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=285 PROTO=TCP SPT=8142 DPT=9527 WINDOW=8438 RES=0x00 SYN URGP=0	2019-07-26 17:44:16
71.81.218.85	attackbotsspam	Jul 26 12:05:57 v22019058497090703 sshd[18293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.81.218.85 Jul 26 12:05:59 v22019058497090703 sshd[18293]: Failed password for invalid user ubuntu from 71.81.218.85 port 59942 ssh2 Jul 26 12:12:39 v22019058497090703 sshd[18869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.81.218.85 ...	2019-07-26 18:20:29

最近上报的IP列表

139.194.3.62	118.24.82.6	139.194.3.69	139.194.30.71
139.194.31.12	139.194.33.15	139.194.34.13	139.194.34.234
139.194.33.215	139.194.34.243	139.194.35.174	139.194.34.49
139.194.36.17	139.194.35.36	118.24.82.77	139.194.36.194
139.194.35.198	139.194.36.235	139.194.37.159	139.194.38.125