139.5.239.139 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): India

运营商(isp): Mayekar Broadband Pvt Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	unauthorized connection attempt	2020-02-19 14:29:55
attackbots	Automatic report - Port Scan Attack	2020-02-05 19:32:15

相同子网IP讨论:

IP	类型	评论内容	时间
139.5.239.17	attackspambots	Automatic report - Banned IP Access	2020-02-21 04:10:23
139.5.239.17	attack	Automatic report - Banned IP Access	2019-11-11 03:51:14

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.5.239.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36873
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.5.239.139.			IN	A

;; AUTHORITY SECTION:
.			156	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020401 1800 900 604800 86400

;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 19:32:06 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 139.239.5.139.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.239.5.139.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
142.11.209.120	attackspam	tries sending from the domain to his own mail address. hoping to find a relay spot	2019-09-13 08:45:46
51.83.72.243	attackspambots	Brute force attempt	2019-09-13 08:43:17
220.140.2.25	attackbotsspam	port scan and connect, tcp 23 (telnet)	2019-09-13 09:13:58
198.16.54.106	attackbots	445/tcp [2019-09-12]1pkt	2019-09-13 09:05:21
110.49.70.248	attackbots	detected by Fail2Ban	2019-09-13 08:38:33
37.59.224.39	attack	Sep 12 14:17:30 lcprod sshd\[7861\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.224.39 user=root Sep 12 14:17:32 lcprod sshd\[7861\]: Failed password for root from 37.59.224.39 port 57745 ssh2 Sep 12 14:21:43 lcprod sshd\[8219\]: Invalid user ftptest from 37.59.224.39 Sep 12 14:21:43 lcprod sshd\[8219\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.224.39 Sep 12 14:21:45 lcprod sshd\[8219\]: Failed password for invalid user ftptest from 37.59.224.39 port 52121 ssh2	2019-09-13 08:32:51
128.199.136.129	attackspam	Automatic report - Banned IP Access	2019-09-13 09:09:07
62.234.96.175	attackspambots	Automatic report - Banned IP Access	2019-09-13 08:40:29
104.196.50.15	attack	Sep 12 13:37:02 tdfoods sshd\[22677\]: Invalid user 12345 from 104.196.50.15 Sep 12 13:37:02 tdfoods sshd\[22677\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=15.50.196.104.bc.googleusercontent.com Sep 12 13:37:03 tdfoods sshd\[22677\]: Failed password for invalid user 12345 from 104.196.50.15 port 48396 ssh2 Sep 12 13:42:49 tdfoods sshd\[23269\]: Invalid user password123 from 104.196.50.15 Sep 12 13:42:49 tdfoods sshd\[23269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=15.50.196.104.bc.googleusercontent.com	2019-09-13 08:40:49
167.71.107.201	attackspambots	Sep 12 08:16:01 hiderm sshd\[29978\]: Invalid user password from 167.71.107.201 Sep 12 08:16:01 hiderm sshd\[29978\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.107.201 Sep 12 08:16:03 hiderm sshd\[29978\]: Failed password for invalid user password from 167.71.107.201 port 53366 ssh2 Sep 12 08:21:23 hiderm sshd\[30425\]: Invalid user abcd1234 from 167.71.107.201 Sep 12 08:21:23 hiderm sshd\[30425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.107.201	2019-09-13 08:41:41
60.29.241.2	attackspambots	Sep 12 10:34:42 aat-srv002 sshd[14271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.29.241.2 Sep 12 10:34:44 aat-srv002 sshd[14271]: Failed password for invalid user upload from 60.29.241.2 port 25169 ssh2 Sep 12 10:41:59 aat-srv002 sshd[14414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.29.241.2 Sep 12 10:42:01 aat-srv002 sshd[14414]: Failed password for invalid user mysql from 60.29.241.2 port 51467 ssh2 ...	2019-09-13 08:30:13
111.246.80.78	attack	23/tcp [2019-09-12]1pkt	2019-09-13 08:59:40
216.170.114.3	attackbots	\[2019-09-12 20:45:07\] NOTICE\[20685\] chan_sip.c: Registration from '\' failed for '216.170.114.3:60862' - Wrong password \[2019-09-12 20:45:07\] SECURITY\[20693\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-12T20:45:07.623-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="708",SessionID="0x7f8a6c03a738",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.170.114.3/60862",Challenge="79c8f2bf",ReceivedChallenge="79c8f2bf",ReceivedHash="b57f837a05c7ba05a5bf064368d02ec8" \[2019-09-12 20:47:02\] NOTICE\[20685\] chan_sip.c: Registration from '\' failed for '216.170.114.3:50612' - Wrong password \[2019-09-12 20:47:02\] SECURITY\[20693\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-12T20:47:02.142-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="708",SessionID="0x7f8a6c03a738",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.170.1	2019-09-13 08:48:19
159.203.197.3	attackspambots	1 pkts, ports: TCP:1723	2019-09-13 08:52:54
217.182.253.230	attackspambots	Sep 13 04:03:52 site1 sshd\[52394\]: Invalid user 12345 from 217.182.253.230Sep 13 04:03:55 site1 sshd\[52394\]: Failed password for invalid user 12345 from 217.182.253.230 port 41276 ssh2Sep 13 04:07:31 site1 sshd\[52544\]: Invalid user abc@123 from 217.182.253.230Sep 13 04:07:33 site1 sshd\[52544\]: Failed password for invalid user abc@123 from 217.182.253.230 port 56062 ssh2Sep 13 04:11:12 site1 sshd\[53133\]: Invalid user 1234 from 217.182.253.230Sep 13 04:11:14 site1 sshd\[53133\]: Failed password for invalid user 1234 from 217.182.253.230 port 42620 ssh2 ...	2019-09-13 09:16:21

最近上报的IP列表

103.51.44.102	101.128.72.200	95.53.79.172	89.186.84.150
83.143.31.38	77.236.93.28	77.120.146.154	59.127.130.207
59.127.11.50	46.176.6.91	46.158.49.229	42.116.158.1
31.223.122.231	31.207.73.51	23.129.64.224	2.134.242.89
222.80.41.132	221.201.251.125	221.154.110.186	218.32.154.131

基本信息:

用户上报:

相同子网IP讨论:

WHOIS信息:

DIG信息:

HOST信息:

NSLOOKUP信息:

相关IP信息:

最新评论:

最近上报的IP列表