139.217.103.62

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Microsoft (China) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	2019-11-02T04:25:00.244485ns547587 sshd\[9839\]: Invalid user user6 from 139.217.103.62 port 44654 2019-11-02T04:25:00.250099ns547587 sshd\[9839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62 2019-11-02T04:25:01.976781ns547587 sshd\[9839\]: Failed password for invalid user user6 from 139.217.103.62 port 44654 ssh2 2019-11-02T04:30:12.087998ns547587 sshd\[19661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62 user=root 2019-11-02T04:40:29.925215ns547587 sshd\[6923\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62 user=root 2019-11-02T04:40:32.188370ns547587 sshd\[6923\]: Failed password for root from 139.217.103.62 port 52950 ssh2 2019-11-02T04:45:49.224267ns547587 sshd\[17122\]: Invalid user godfrey from 139.217.103.62 port 36918 2019-11-02T04:45:49.230066ns547587 sshd\[17122\]: pam_unix\(sshd:auth\): auth ...	2019-11-03 02:33:41
attackspam	Oct 21 16:26:15 MK-Soft-Root1 sshd[22940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62 Oct 21 16:26:17 MK-Soft-Root1 sshd[22940]: Failed password for invalid user scb from 139.217.103.62 port 54476 ssh2 ...	2019-10-21 22:39:17
attackbots	Oct 18 15:48:44 legacy sshd[11453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62 Oct 18 15:48:46 legacy sshd[11453]: Failed password for invalid user ts3 from 139.217.103.62 port 42392 ssh2 Oct 18 15:54:31 legacy sshd[11575]: Failed password for root from 139.217.103.62 port 36068 ssh2 ...	2019-10-18 22:06:53
attackspambots	Oct 10 09:22:07 dedicated sshd[22877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62 user=root Oct 10 09:22:09 dedicated sshd[22877]: Failed password for root from 139.217.103.62 port 40308 ssh2	2019-10-10 15:35:16
attackbots	Sep 28 14:26:46 friendsofhawaii sshd\[25162\]: Invalid user yg from 139.217.103.62 Sep 28 14:26:46 friendsofhawaii sshd\[25162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62 Sep 28 14:26:48 friendsofhawaii sshd\[25162\]: Failed password for invalid user yg from 139.217.103.62 port 42734 ssh2 Sep 28 14:31:05 friendsofhawaii sshd\[25559\]: Invalid user dwairiuko from 139.217.103.62 Sep 28 14:31:05 friendsofhawaii sshd\[25559\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62	2019-09-29 08:44:36
attack	Sep 24 04:38:06 amida sshd[198976]: Invalid user lw from 139.217.103.62 Sep 24 04:38:06 amida sshd[198976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62 Sep 24 04:38:08 amida sshd[198976]: Failed password for invalid user lw from 139.217.103.62 port 43240 ssh2 Sep 24 04:38:09 amida sshd[198976]: Received disconnect from 139.217.103.62: 11: Bye Bye [preauth] Sep 24 04:55:03 amida sshd[209612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62 user=ftp Sep 24 04:55:05 amida sshd[209612]: Failed password for ftp from 139.217.103.62 port 55534 ssh2 Sep 24 04:55:05 amida sshd[209612]: Received disconnect from 139.217.103.62: 11: Bye Bye [preauth] Sep 24 04:57:20 amida sshd[210572]: Invalid user both from 139.217.103.62 Sep 24 04:57:20 amida sshd[210572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62 Sep 24 ........ -------------------------------	2019-09-24 20:01:31
attack	Sep 13 22:25:15 MK-Soft-VM5 sshd\[25734\]: Invalid user metra from 139.217.103.62 port 45802 Sep 13 22:25:15 MK-Soft-VM5 sshd\[25734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62 Sep 13 22:25:17 MK-Soft-VM5 sshd\[25734\]: Failed password for invalid user metra from 139.217.103.62 port 45802 ssh2 ...	2019-09-14 06:41:51

相同子网IP讨论:

IP	类型	评论内容	时间
139.217.103.44	attack	Jul 22 08:57:28 gw1 sshd[28488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.44 Jul 22 08:57:29 gw1 sshd[28488]: Failed password for invalid user ron from 139.217.103.44 port 40088 ssh2 ...	2020-07-22 13:55:43
139.217.103.44	attackbots	Jul 12 05:49:09 raspberrypi sshd[16967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.44 Jul 12 05:49:11 raspberrypi sshd[16967]: Failed password for invalid user blinda from 139.217.103.44 port 43480 ssh2 ...	2020-07-12 18:23:03
139.217.103.44	attackbots	2020-07-07T12:51:09.459130mail.csmailer.org sshd[6286]: Failed password for root from 139.217.103.44 port 36088 ssh2 2020-07-07T12:52:48.325671mail.csmailer.org sshd[6375]: Invalid user System from 139.217.103.44 port 44858 2020-07-07T12:52:48.328475mail.csmailer.org sshd[6375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.44 2020-07-07T12:52:48.325671mail.csmailer.org sshd[6375]: Invalid user System from 139.217.103.44 port 44858 2020-07-07T12:52:50.949413mail.csmailer.org sshd[6375]: Failed password for invalid user System from 139.217.103.44 port 44858 ssh2 ...	2020-07-07 20:50:37
139.217.103.240	attackbotsspam	Oct 25 09:15:45 rotator sshd\[2644\]: Invalid user geography from 139.217.103.240Oct 25 09:15:47 rotator sshd\[2644\]: Failed password for invalid user geography from 139.217.103.240 port 51258 ssh2Oct 25 09:20:18 rotator sshd\[3405\]: Invalid user kk from 139.217.103.240Oct 25 09:20:20 rotator sshd\[3405\]: Failed password for invalid user kk from 139.217.103.240 port 57208 ssh2Oct 25 09:25:05 rotator sshd\[3490\]: Invalid user wpyan from 139.217.103.240Oct 25 09:25:07 rotator sshd\[3490\]: Failed password for invalid user wpyan from 139.217.103.240 port 34958 ssh2 ...	2019-10-25 15:27:41
139.217.103.92	attackbotsspam	Caught in portsentry honeypot	2019-07-26 03:18:08

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.217.103.62
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47798
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.217.103.62.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091302 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Sep 14 06:41:45 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 62.103.217.139.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 62.103.217.139.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
77.40.78.101	attackspambots	IP: 77.40.78.101 Ports affected Simple Mail Transfer (25) Message Submission (587) Abuse Confidence rating 18% Found in DNSBL('s) ASN Details AS12389 Rostelecom Russia (RU) CIDR 77.40.0.0/17 Log Date: 1/03/2020 1:18:00 PM UTC	2020-03-02 05:35:07
130.61.72.90	attackspambots	Mar 1 18:07:49 server sshd\[17209\]: Failed password for invalid user honda from 130.61.72.90 port 51810 ssh2 Mar 2 00:14:27 server sshd\[16096\]: Invalid user admissions from 130.61.72.90 Mar 2 00:14:27 server sshd\[16096\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.72.90 Mar 2 00:14:29 server sshd\[16096\]: Failed password for invalid user admissions from 130.61.72.90 port 37948 ssh2 Mar 2 00:22:05 server sshd\[17608\]: Invalid user furuiliu from 130.61.72.90 Mar 2 00:22:05 server sshd\[17608\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.72.90 ...	2020-03-02 05:24:47
5.130.72.9	attackspambots	DATE:2020-03-01 22:44:56, IP:5.130.72.9, PORT:1433 MSSQL brute force auth on honeypot server (epe-honey1-hq)	2020-03-02 05:51:49
1.80.218.61	attackspambots	Mar 1 11:41:36 kapalua sshd\[20160\]: Invalid user ftpuser from 1.80.218.61 Mar 1 11:41:36 kapalua sshd\[20160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.80.218.61 Mar 1 11:41:38 kapalua sshd\[20160\]: Failed password for invalid user ftpuser from 1.80.218.61 port 3454 ssh2 Mar 1 11:47:25 kapalua sshd\[20555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.80.218.61 user=kapalua Mar 1 11:47:27 kapalua sshd\[20555\]: Failed password for kapalua from 1.80.218.61 port 3558 ssh2	2020-03-02 05:48:16
190.102.159.178	attackbotsspam	Mar 1 14:15:44 grey postfix/smtpd\[20200\]: NOQUEUE: reject: RCPT from unknown\[190.102.159.178\]: 554 5.7.1 Service unavailable\; Client host \[190.102.159.178\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[190.102.159.178\]\; from=\ to=\ proto=ESMTP helo=\<\[190.102.159.178\]\> ...	2020-03-02 05:45:41
128.14.209.146	attackspam	[portscan] Port scan	2020-03-02 05:53:13
219.146.149.138	attackbots	Unauthorized connection attempt from IP address 219.146.149.138 on Port 445(SMB)	2020-03-02 05:26:13
79.175.133.118	attackbots	Automatic report - SSH Brute-Force Attack	2020-03-02 05:42:31
197.210.28.130	attack	Unauthorized connection attempt from IP address 197.210.28.130 on Port 445(SMB)	2020-03-02 05:42:02
27.254.137.144	attackbotsspam	Mar 1 10:15:28 main sshd[19876]: Failed password for invalid user appimgr from 27.254.137.144 port 41312 ssh2	2020-03-02 05:43:19
113.203.237.139	attackspambots	Unauthorized connection attempt detected from IP address 113.203.237.139 to port 1433 [J]	2020-03-02 05:36:04
183.83.172.113	attack	Unauthorized connection attempt from IP address 183.83.172.113 on Port 445(SMB)	2020-03-02 05:27:06
212.115.51.92	attackspambots	B: Magento admin pass test (wrong country)	2020-03-02 05:19:23
128.72.90.255	attack	20/3/1@08:15:55: FAIL: Alarm-Network address from=128.72.90.255 20/3/1@08:15:56: FAIL: Alarm-Network address from=128.72.90.255 ...	2020-03-02 05:32:55
91.207.40.44	attack	Mar 2 04:47:17 webhost01 sshd[20763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.207.40.44 Mar 2 04:47:19 webhost01 sshd[20763]: Failed password for invalid user sirius from 91.207.40.44 port 49900 ssh2 ...	2020-03-02 05:50:39

最近上报的IP列表

5.228.13.197	113.12.195.50	135.164.51.253	187.156.200.61
43.248.8.156	142.44.139.90	92.98.203.79	151.80.26.211
201.158.60.62	113.141.70.198	49.49.244.52	133.173.224.88
32.190.49.80	202.114.184.229	175.78.154.35	70.183.195.146
178.184.160.13	160.187.78.59	2a00:d680:30:50::67	41.50.83.201