139.28.223.152

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): NTX Technologies S.R.O.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	email spam	2019-12-19 20:38:11

相同子网IP讨论:

IP	类型	评论内容	时间
139.28.223.235	attack	2019-12-31 05:07:29 H=\(switch.berdecak.com\) \[139.28.223.235\]:35071 I=\[193.107.88.166\]:25 sender verify fail for \: Unrouteable address 2019-12-31 05:07:29 H=\(switch.berdecak.com\) \[139.28.223.235\]:41187 I=\[193.107.88.166\]:25 sender verify fail for \: Unrouteable address 2019-12-31 05:07:29 H=\(switch.berdecak.com\) \[139.28.223.235\]:35071 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-12-31 05:07:29 H=\(switch.berdecak.com\) \[139.28.223.235\]:41187 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-02-05 00:35:31
139.28.223.237	attack	2019-12-31 08:06:14 H=\(desk.berdecak.com\) \[139.28.223.237\]:36374 I=\[193.107.88.166\]:25 sender verify fail for \: Unrouteable address 2019-12-31 08:06:14 H=\(desk.berdecak.com\) \[139.28.223.237\]:49550 I=\[193.107.88.166\]:25 sender verify fail for \: Unrouteable address 2019-12-31 08:06:14 H=\(desk.berdecak.com\) \[139.28.223.237\]:36374 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-12-31 08:06:14 H=\(desk.berdecak.com\) \[139.28.223.237\]:49550 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-02-05 00:33:02
139.28.223.239	attack	2019-12-31 11:06:21 H=\(penitent.berdecak.com\) \[139.28.223.239\]:45966 I=\[193.107.88.166\]:25 sender verify fail for \: Unrouteable address 2019-12-31 11:06:21 H=\(penitent.berdecak.com\) \[139.28.223.239\]:57688 I=\[193.107.88.166\]:25 sender verify fail for \: Unrouteable address 2019-12-31 11:06:21 H=\(penitent.berdecak.com\) \[139.28.223.239\]:45966 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-12-31 11:06:21 H=\(penitent.berdecak.com\) \[139.28.223.239\]:57688 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-02-05 00:32:18
139.28.223.210	attackspam	Jan x@x Jan x@x Jan x@x Jan x@x Jan x@x Jan x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=139.28.223.210	2020-01-14 07:23:16
139.28.223.122	attackbots	Jan 11 06:49:43 grey postfix/smtpd\[28581\]: NOQUEUE: reject: RCPT from unknown\[139.28.223.122\]: 554 5.7.1 Service unavailable\; Client host \[139.28.223.122\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[139.28.223.122\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-11 19:45:10
139.28.223.164	attackspambots	Postfix RBL failed	2020-01-11 16:15:05
139.28.223.25	attack	Jan 10 08:34:53 grey postfix/smtpd\[8412\]: NOQUEUE: reject: RCPT from unknown\[139.28.223.25\]: 554 5.7.1 Service unavailable\; Client host \[139.28.223.25\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[139.28.223.25\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-10 19:49:23
139.28.223.181	attackbotsspam	Autoban 139.28.223.181 AUTH/CONNECT	2020-01-04 22:17:21
139.28.223.130	attackspambots	Jan 1 07:19:55 h2421860 postfix/postscreen[27911]: CONNECT from [139.28.223.130]:54755 to [85.214.119.52]:25 Jan 1 07:19:55 h2421860 postfix/dnsblog[27913]: addr 139.28.223.130 listed by domain b.barracudacentral.org as 127.0.0.2 Jan 1 07:19:55 h2421860 postfix/dnsblog[27915]: addr 139.28.223.130 listed by domain Unknown.trblspam.com as 185.53.179.7 Jan 1 07:20:01 h2421860 postfix/postscreen[27911]: DNSBL rank 3 for [139.28.223.130]:54755 Jan x@x Jan 1 07:20:01 h2421860 postfix/postscreen[27911]: DISCONNECT [139.28.223.130]:54755 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=139.28.223.130	2020-01-01 17:00:15
139.28.223.224	attack	Dec 30 07:14:24 h2421860 postfix/postscreen[25037]: CONNECT from [139.28.223.224]:48377 to [85.214.119.52]:25 Dec 30 07:14:24 h2421860 postfix/dnsblog[25039]: addr 139.28.223.224 listed by domain b.barracudacentral.org as 127.0.0.2 Dec 30 07:14:24 h2421860 postfix/dnsblog[25041]: addr 139.28.223.224 listed by domain Unknown.trblspam.com as 185.53.179.7 Dec 30 07:14:30 h2421860 postfix/postscreen[25037]: DNSBL rank 3 for [139.28.223.224]:48377 Dec x@x Dec 30 07:14:30 h2421860 postfix/postscreen[25037]: DISCONNECT [139.28.223.224]:48377 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=139.28.223.224	2019-12-30 19:00:33
139.28.223.160	attackspam	Dec 26 07:19:58 web01 postfix/smtpd[22995]: connect from unknown[139.28.223.160] Dec 26 07:19:58 web01 policyd-spf[23000]: None; identhostnamey=helo; client-ip=139.28.223.160; helo=jeans.elevotal.com; envelope-from=x@x Dec 26 07:19:58 web01 policyd-spf[23000]: Pass; identhostnamey=mailfrom; client-ip=139.28.223.160; helo=jeans.elevotal.com; envelope-from=x@x Dec x@x Dec 26 07:19:58 web01 postfix/smtpd[22995]: disconnect from unknown[139.28.223.160] Dec 26 07:21:13 web01 postfix/smtpd[23321]: connect from unknown[139.28.223.160] Dec 26 07:21:13 web01 policyd-spf[23395]: None; identhostnamey=helo; client-ip=139.28.223.160; helo=jeans.elevotal.com; envelope-from=x@x Dec 26 07:21:13 web01 policyd-spf[23395]: Pass; identhostnamey=mailfrom; client-ip=139.28.223.160; helo=jeans.elevotal.com; envelope-from=x@x Dec x@x Dec 26 07:21:13 web01 postfix/smtpd[23321]: disconnect from unknown[139.28.223.160] Dec 26 07:22:27 web01 postfix/smtpd[22995]: connect from unknown[139.28.223.16........ -------------------------------	2019-12-26 14:53:06
139.28.223.142	attackbots	Dec 25 07:05:51 web01 postfix/smtpd[18756]: connect from unknown[139.28.223.142] Dec 25 07:05:51 web01 policyd-spf[20379]: None; identhostnamey=helo; client-ip=139.28.223.142; helo=deer.elevotal.com; envelope-from=x@x Dec 25 07:05:51 web01 policyd-spf[20379]: Pass; identhostnamey=mailfrom; client-ip=139.28.223.142; helo=deer.elevotal.com; envelope-from=x@x Dec x@x Dec 25 07:05:51 web01 postfix/smtpd[18756]: disconnect from unknown[139.28.223.142] Dec 25 07:08:03 web01 postfix/smtpd[20713]: connect from unknown[139.28.223.142] Dec 25 07:08:03 web01 policyd-spf[20715]: None; identhostnamey=helo; client-ip=139.28.223.142; helo=deer.elevotal.com; envelope-from=x@x Dec 25 07:08:03 web01 policyd-spf[20715]: Pass; identhostnamey=mailfrom; client-ip=139.28.223.142; helo=deer.elevotal.com; envelope-from=x@x Dec x@x Dec 25 07:08:03 web01 postfix/smtpd[20713]: disconnect from unknown[139.28.223.142] Dec 25 07:10:40 web01 postfix/smtpd[20713]: connect from unknown[139.28.223.142] D........ -------------------------------	2019-12-25 17:00:07
139.28.223.132	attackbotsspam	Dec 24 16:06:44 web01 postfix/smtpd[13364]: connect from unknown[139.28.223.132] Dec 24 16:06:44 web01 policyd-spf[13395]: None; identhostnamey=helo; client-ip=139.28.223.132; helo=material.elevotal.com; envelope-from=x@x Dec 24 16:06:44 web01 policyd-spf[13395]: Pass; identhostnamey=mailfrom; client-ip=139.28.223.132; helo=material.elevotal.com; envelope-from=x@x Dec x@x Dec 24 16:06:44 web01 postfix/smtpd[13364]: disconnect from unknown[139.28.223.132] Dec 24 16:11:45 web01 postfix/smtpd[14103]: connect from unknown[139.28.223.132] Dec 24 16:11:45 web01 policyd-spf[14106]: None; identhostnamey=helo; client-ip=139.28.223.132; helo=material.elevotal.com; envelope-from=x@x Dec 24 16:11:45 web01 policyd-spf[14106]: Pass; identhostnamey=mailfrom; client-ip=139.28.223.132; helo=material.elevotal.com; envelope-from=x@x Dec x@x Dec 24 16:11:45 web01 postfix/smtpd[14103]: disconnect from unknown[139.28.223.132] Dec 24 16:17:36 web01 postfix/smtpd[13364]: connect from unknown[1........ -------------------------------	2019-12-25 05:32:46
139.28.223.249	attackbotsspam	Autoban 139.28.223.249 AUTH/CONNECT	2019-12-24 19:38:13
139.28.223.204	attack	Postfix DNSBL listed. Trying to send SPAM.	2019-12-21 20:46:41

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.28.223.152
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34155
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.28.223.152.			IN	A

;; AUTHORITY SECTION:
.			530	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121900 1800 900 604800 86400

;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 19 20:38:05 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 152.223.28.139.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 152.223.28.139.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
182.160.115.180	attackbots	" "	2020-08-04 16:35:40
45.141.84.219	attack	[MK-VM1] Blocked by UFW	2020-08-04 16:04:59
180.183.70.129	attackspam	[portscan] Port scan	2020-08-04 16:02:13
103.226.250.28	attackspambots	103.226.250.28 - - [04/Aug/2020:08:15:37 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.226.250.28 - - [04/Aug/2020:08:32:06 +0100] "POST /wp-login.php HTTP/1.1" 200 1836 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.226.250.28 - - [04/Aug/2020:08:32:07 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-04 16:00:15
217.61.125.97	attackspam	2020-08-04T04:30:29.964901abusebot-8.cloudsearch.cf sshd[26626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.61.125.97 user=root 2020-08-04T04:30:32.047856abusebot-8.cloudsearch.cf sshd[26626]: Failed password for root from 217.61.125.97 port 43104 ssh2 2020-08-04T04:33:19.519009abusebot-8.cloudsearch.cf sshd[26653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.61.125.97 user=root 2020-08-04T04:33:21.275460abusebot-8.cloudsearch.cf sshd[26653]: Failed password for root from 217.61.125.97 port 34848 ssh2 2020-08-04T04:36:02.218624abusebot-8.cloudsearch.cf sshd[26671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.61.125.97 user=root 2020-08-04T04:36:04.350805abusebot-8.cloudsearch.cf sshd[26671]: Failed password for root from 217.61.125.97 port 54824 ssh2 2020-08-04T04:38:53.887951abusebot-8.cloudsearch.cf sshd[26696]: pam_unix(sshd:auth): authe ...	2020-08-04 15:59:44
94.200.247.166	attack	Aug 4 10:11:48 lukav-desktop sshd\[22464\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.200.247.166 user=root Aug 4 10:11:51 lukav-desktop sshd\[22464\]: Failed password for root from 94.200.247.166 port 18323 ssh2 Aug 4 10:16:02 lukav-desktop sshd\[15951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.200.247.166 user=root Aug 4 10:16:04 lukav-desktop sshd\[15951\]: Failed password for root from 94.200.247.166 port 45434 ssh2 Aug 4 10:20:17 lukav-desktop sshd\[16008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.200.247.166 user=root	2020-08-04 15:59:25
120.24.92.233	attack	120.24.92.233 - - [04/Aug/2020:06:27:59 +0100] "POST /wp-login.php HTTP/1.1" 200 2345 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 120.24.92.233 - - [04/Aug/2020:06:28:32 +0100] "POST /wp-login.php HTTP/1.1" 200 2329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 120.24.92.233 - - [04/Aug/2020:06:28:36 +0100] "POST /wp-login.php HTTP/1.1" 200 2329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-04 16:33:58
209.85.215.200	attackbots	Received: from 209.85.215.200 (EHLO mail-pg1-f200.google.com)	2020-08-04 16:28:08
177.154.226.38	attackbotsspam	Aug 4 05:13:42 mail.srvfarm.net postfix/smtps/smtpd[1213769]: lost connection after CONNECT from unknown[177.154.226.38] Aug 4 05:15:45 mail.srvfarm.net postfix/smtpd[1212439]: warning: unknown[177.154.226.38]: SASL PLAIN authentication failed: Aug 4 05:15:46 mail.srvfarm.net postfix/smtpd[1212439]: lost connection after AUTH from unknown[177.154.226.38] Aug 4 05:20:11 mail.srvfarm.net postfix/smtpd[1214562]: warning: unknown[177.154.226.38]: SASL PLAIN authentication failed: Aug 4 05:20:13 mail.srvfarm.net postfix/smtpd[1214562]: lost connection after AUTH from unknown[177.154.226.38]	2020-08-04 16:08:17
183.147.1.167	attack	20/8/3@23:52:58: FAIL: Alarm-Network address from=183.147.1.167 20/8/3@23:52:58: FAIL: Alarm-Network address from=183.147.1.167 ...	2020-08-04 16:29:57
165.22.94.219	attack	165.22.94.219 - - [04/Aug/2020:09:34:02 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.22.94.219 - - [04/Aug/2020:09:34:03 +0200] "POST /wp-login.php HTTP/1.1" 200 1811 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.22.94.219 - - [04/Aug/2020:09:34:03 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.22.94.219 - - [04/Aug/2020:09:34:04 +0200] "POST /wp-login.php HTTP/1.1" 200 1790 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.22.94.219 - - [04/Aug/2020:09:34:04 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.22.94.219 - - [04/Aug/2020:09:34:04 +0200] "POST /wp-login.php HTTP/1.1" 200 1790 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Fir ...	2020-08-04 16:34:22
49.88.112.115	attackspambots	Aug 4 09:39:46 vps sshd[962155]: Failed password for root from 49.88.112.115 port 10378 ssh2 Aug 4 09:39:48 vps sshd[962155]: Failed password for root from 49.88.112.115 port 10378 ssh2 Aug 4 09:40:36 vps sshd[970010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.115 user=root Aug 4 09:40:37 vps sshd[970010]: Failed password for root from 49.88.112.115 port 44518 ssh2 Aug 4 09:40:39 vps sshd[970010]: Failed password for root from 49.88.112.115 port 44518 ssh2 ...	2020-08-04 15:57:17
1.4.186.39	attackbotsspam	Automatic report - Port Scan Attack	2020-08-04 15:58:32
138.255.35.77	attackbotsspam	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2020-08-04 16:10:11
35.224.204.56	attack	bruteforce detected	2020-08-04 15:57:38

最近上报的IP列表

27.129.128.222	177.209.84.99	226.149.55.151	39.223.230.85
9.110.16.59	139.175.189.132	85.116.125.149	145.37.95.121
79.108.207.194	64.193.90.181	46.16.43.91	11.192.134.91
162.158.27.134	77.40.2.244	185.118.142.174	162.134.108.163
91.136.251.141	98.31.102.158	216.65.53.235	205.126.240.33