139.217.98.0 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): unknown

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
139.217.98.39	attackspambots	Nov 22 21:58:51 w sshd[27159]: Invalid user xbian from 139.217.98.39 Nov 22 21:58:51 w sshd[27159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.98.39 Nov 22 21:58:53 w sshd[27159]: Failed password for invalid user xbian from 139.217.98.39 port 58660 ssh2 Nov 22 21:58:54 w sshd[27159]: Received disconnect from 139.217.98.39: 11: Bye Bye [preauth] Nov 22 22:20:39 w sshd[27372]: Invalid user sales from 139.217.98.39 Nov 22 22:20:39 w sshd[27372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.98.39 Nov 22 22:20:42 w sshd[27372]: Failed password for invalid user sales from 139.217.98.39 port 33114 ssh2 Nov 22 22:20:42 w sshd[27372]: Received disconnect from 139.217.98.39: 11: Bye Bye [preauth] Nov 22 22:25:58 w sshd[27392]: Invalid user chantry from 139.217.98.39 Nov 22 22:25:58 w sshd[27392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser........ -------------------------------	2019-11-23 06:03:43
139.217.98.122	attackspam	Port probe, failed login attempt SMTP:25.	2019-08-11 17:08:31

类型

评论内容

时间

139.217.98.39

attackspambots

Nov 22 21:58:51 w sshd[27159]: Invalid user xbian from 139.217.98.39
Nov 22 21:58:51 w sshd[27159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.98.39 
Nov 22 21:58:53 w sshd[27159]: Failed password for invalid user xbian from 139.217.98.39 port 58660 ssh2
Nov 22 21:58:54 w sshd[27159]: Received disconnect from 139.217.98.39: 11: Bye Bye [preauth]
Nov 22 22:20:39 w sshd[27372]: Invalid user sales from 139.217.98.39
Nov 22 22:20:39 w sshd[27372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.98.39 
Nov 22 22:20:42 w sshd[27372]: Failed password for invalid user sales from 139.217.98.39 port 33114 ssh2
Nov 22 22:20:42 w sshd[27372]: Received disconnect from 139.217.98.39: 11: Bye Bye [preauth]
Nov 22 22:25:58 w sshd[27392]: Invalid user chantry from 139.217.98.39
Nov 22 22:25:58 w sshd[27392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser........
-------------------------------

2019-11-23 06:03:43

139.217.98.122

attackspam

Port probe, failed login attempt SMTP:25.

2019-08-11 17:08:31

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.217.98.0
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18749
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.217.98.0.			IN	A

;; AUTHORITY SECTION:
.			595	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 139 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:23:32 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 0.98.217.139.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 0.98.217.139.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
106.12.181.184	attackbots	Sep 28 06:30:49 ip-172-31-62-245 sshd\[23983\]: Invalid user exegesis from 106.12.181.184\ Sep 28 06:30:51 ip-172-31-62-245 sshd\[23983\]: Failed password for invalid user exegesis from 106.12.181.184 port 34764 ssh2\ Sep 28 06:35:45 ip-172-31-62-245 sshd\[24040\]: Invalid user vs from 106.12.181.184\ Sep 28 06:35:47 ip-172-31-62-245 sshd\[24040\]: Failed password for invalid user vs from 106.12.181.184 port 44902 ssh2\ Sep 28 06:40:41 ip-172-31-62-245 sshd\[24168\]: Invalid user aric from 106.12.181.184\	2019-09-28 15:42:17
222.186.15.101	attackbots	Fail2Ban Ban Triggered	2019-09-28 16:22:21
41.159.18.20	attack	Sep 27 21:27:56 friendsofhawaii sshd\[26987\]: Invalid user centos from 41.159.18.20 Sep 27 21:27:56 friendsofhawaii sshd\[26987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.159.18.20 Sep 27 21:27:58 friendsofhawaii sshd\[26987\]: Failed password for invalid user centos from 41.159.18.20 port 41698 ssh2 Sep 27 21:33:18 friendsofhawaii sshd\[27429\]: Invalid user aamdal from 41.159.18.20 Sep 27 21:33:18 friendsofhawaii sshd\[27429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.159.18.20	2019-09-28 15:48:41
94.154.18.59	attack	email spam	2019-09-28 16:03:25
145.239.196.248	attackspambots	Invalid user manfred from 145.239.196.248 port 58234	2019-09-28 16:06:35
185.216.140.43	attackbots	Blocked for port scanning. Time: Sat Sep 28. 04:34:35 2019 +0200 IP: 185.216.140.43 (NL/Netherlands/-) Sample of block hits: Sep 28 04:30:19 vserv kernel: [803141.813341] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=185.216.140.43 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=25115 PROTO=TCP SPT=52306 DPT=8095 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 04:30:44 vserv kernel: [803166.673570] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=185.216.140.43 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=12160 PROTO=TCP SPT=52306 DPT=9994 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 04:31:20 vserv kernel: [803202.887431] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=185.216.140.43 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=14527 PROTO=TCP SPT=52306 DPT=7000 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 04:31:38 vserv kernel: [803221.316894] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=185.216.140.43 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=36769 PROTO=TCP SPT=52306 DPT=8022 ....	2019-09-28 15:42:01
124.251.19.213	attackbotsspam	Sep 28 10:00:47 eventyay sshd[15802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.251.19.213 Sep 28 10:00:49 eventyay sshd[15802]: Failed password for invalid user ubnt from 124.251.19.213 port 42460 ssh2 Sep 28 10:06:57 eventyay sshd[15886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.251.19.213 ...	2019-09-28 16:16:18
34.237.4.125	attackspam	Invalid user umountsys from 34.237.4.125 port 46290	2019-09-28 16:04:17
177.86.40.52	attackbots	2019-09-28T08:01:04.921584abusebot-5.cloudsearch.cf sshd\[23397\]: Invalid user chao from 177.86.40.52 port 57470	2019-09-28 16:07:57
125.160.17.32	attack	[portscan] tcp/22 [SSH] *(RWIN=49512)(09280917)	2019-09-28 16:08:54
200.196.239.30	attackbots	Sep 27 23:07:16 mailman postfix/smtpd[5705]: NOQUEUE: reject: RCPT from unknown[200.196.239.30]: 554 5.7.1 Service unavailable; Client host [200.196.239.30] blocked using dnsbl.dronebl.org; Open SOCKS proxy; from= to= proto=ESMTP helo= Sep 27 23:07:16 mailman postfix/smtpd[5705]: NOQUEUE: reject: RCPT from unknown[200.196.239.30]: 554 5.7.1 Service unavailable; Client host [200.196.239.30] blocked using dnsbl.dronebl.org; Open SOCKS proxy; from= to= proto=ESMTP helo=	2019-09-28 16:18:20
107.13.186.21	attackbotsspam	Repeated brute force against a port	2019-09-28 15:40:04
189.19.236.204	attackbotsspam	" "	2019-09-28 16:06:52
209.17.97.2	attackbots	8000/tcp 8088/tcp 9000/tcp... [2019-07-30/09-28]81pkt,11pt.(tcp),1pt.(udp)	2019-09-28 15:55:07
103.19.117.155	attackspambots	A spam used this IP for the URL in the message. This kind of spams used ns177.change-d.net and ns177-02 as the name servers for the domains of its email addresses and URLs (ex. iyye667.com).	2019-09-28 16:02:53

最近上报的IP列表

139.217.97.70	139.217.98.44	139.217.98.38	118.25.52.232
139.217.98.29	139.217.98.33	139.217.98.40	139.217.98.67
139.219.10.3	139.219.101.43	139.217.98.48	139.218.100.223
139.217.98.47	139.219.109.226	139.219.146.214	139.219.14.15
139.219.139.70	139.219.141.70	139.219.146.221	118.25.53.181