139.228.161.11

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT. First Media TBK

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	2019-06-21 08:27:32 1heD1D-0003lC-5N SMTP connection from \(fm-dyn-139-228-161-11.fast.net.id\) \[139.228.161.11\]:49615 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-06-21 08:27:46 1heD1S-0003lN-4j SMTP connection from \(fm-dyn-139-228-161-11.fast.net.id\) \[139.228.161.11\]:49664 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-06-21 08:27:54 1heD1b-0003lV-Ip SMTP connection from \(fm-dyn-139-228-161-11.fast.net.id\) \[139.228.161.11\]:49707 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-02-05 00:49:46

类型

评论内容

时间

attackspambots

2019-06-21 08:27:32 1heD1D-0003lC-5N SMTP connection from \(fm-dyn-139-228-161-11.fast.net.id\) \[139.228.161.11\]:49615 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-06-21 08:27:46 1heD1S-0003lN-4j SMTP connection from \(fm-dyn-139-228-161-11.fast.net.id\) \[139.228.161.11\]:49664 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-06-21 08:27:54 1heD1b-0003lV-Ip SMTP connection from \(fm-dyn-139-228-161-11.fast.net.id\) \[139.228.161.11\]:49707 I=\[193.107.88.166\]:25 closed by DROP in ACL
...

2020-02-05 00:49:46

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.228.161.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29209
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.228.161.11.			IN	A

;; AUTHORITY SECTION:
.			420	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020400 1800 900 604800 86400

;; Query time: 94 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 00:49:42 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

11.161.228.139.in-addr.arpa domain name pointer fm-dyn-139-228-161-11.fast.net.id.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
11.161.228.139.in-addr.arpa	name = fm-dyn-139-228-161-11.fast.net.id.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
185.97.116.222	attackspam	Invalid user tecnici from 185.97.116.222 port 42400	2020-07-26 06:27:46
94.102.50.166	attackbotsspam	SmallBizIT.US 3 packets to tcp(13031,13032,13089)	2020-07-26 06:23:36
136.143.146.254	attack	Port 22 Scan, PTR: None	2020-07-26 06:28:43
51.81.34.227	attackspam	Invalid user administrator from 51.81.34.227 port 42296	2020-07-26 06:46:33
121.61.67.46	attackbotsspam	Exploited Host.	2020-07-26 06:52:30
98.127.36.22	attack	Port 22 Scan, PTR: None	2020-07-26 06:56:43
139.59.56.23	attackbotsspam	(sshd) Failed SSH login from 139.59.56.23 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 25 23:19:03 grace sshd[6444]: Invalid user qwy from 139.59.56.23 port 42040 Jul 25 23:19:05 grace sshd[6444]: Failed password for invalid user qwy from 139.59.56.23 port 42040 ssh2 Jul 25 23:24:04 grace sshd[7112]: Invalid user goyette from 139.59.56.23 port 35376 Jul 25 23:24:06 grace sshd[7112]: Failed password for invalid user goyette from 139.59.56.23 port 35376 ssh2 Jul 25 23:28:27 grace sshd[7781]: Invalid user estudiantes from 139.59.56.23 port 48668	2020-07-26 06:42:55
80.82.64.98	attackbots	Jul 25 23:59:06 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.64.98, lip=185.118.197.126, session= Jul 25 23:59:13 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=80.82.64.98, lip=185.118.197.126, session= Jul 25 23:59:59 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.64.98, lip=185.118.197.126, session= Jul 26 00:00:21 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.64.98, lip=185.118.197.126, session= Jul 26 00:00:38 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN,	2020-07-26 06:53:28
122.166.237.117	attackspam	Invalid user damian from 122.166.237.117 port 9395	2020-07-26 06:31:18
82.17.113.19	attackbotsspam	Port 22 Scan, PTR: None	2020-07-26 06:36:23
183.220.146.248	attackspambots	Portscan or hack attempt detected by psad/fwsnort	2020-07-26 06:38:46
122.155.174.36	attack	Invalid user yangyi from 122.155.174.36 port 33360	2020-07-26 06:37:26
219.93.121.22	attackspambots	(imapd) Failed IMAP login from 219.93.121.22 (MY/Malaysia/san-121-22.tm.net.my): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 25 19:41:16 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=219.93.121.22, lip=5.63.12.44, session=	2020-07-26 06:24:30
85.172.11.101	attackspambots	Jul 25 18:10:08 l02a sshd[14883]: Invalid user ncadmin from 85.172.11.101 Jul 25 18:10:08 l02a sshd[14883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.172.11.101 Jul 25 18:10:08 l02a sshd[14883]: Invalid user ncadmin from 85.172.11.101 Jul 25 18:10:09 l02a sshd[14883]: Failed password for invalid user ncadmin from 85.172.11.101 port 38314 ssh2	2020-07-26 06:35:13
122.165.119.171	attackbots	Exploited Host.	2020-07-26 06:33:07

最近上报的IP列表

182.223.144.227	111.122.213.175	123.129.54.187	250.244.178.61
145.29.7.146	156.58.59.150	71.233.120.247	8.24.76.33
148.231.198.60	110.132.18.90	139.193.214.10	101.131.86.102
67.234.173.105	254.180.214.243	171.26.227.211	112.1.64.254
187.70.50.78	75.214.152.34	51.164.244.27	94.1.114.58