139.5.242.19 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): India

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
139.5.242.59	attack	Fail2Ban Ban Triggered HTTP Attempted Bot Registration	2020-06-20 23:50:20
139.5.242.184	attackbotsspam	Dec 19 15:39:42 grey postfix/smtpd\[23398\]: NOQUEUE: reject: RCPT from unknown\[139.5.242.184\]: 554 5.7.1 Service unavailable\; Client host \[139.5.242.184\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[139.5.242.184\]\; from=\ to=\ proto=ESMTP helo=\<\[139.5.242.184\]\> ...	2019-12-19 22:46:32

类型

评论内容

时间

139.5.242.59

attack

Fail2Ban Ban Triggered
HTTP Attempted Bot Registration

2020-06-20 23:50:20

139.5.242.184

attackbotsspam

Dec 19 15:39:42 grey postfix/smtpd\[23398\]: NOQUEUE: reject: RCPT from unknown\[139.5.242.184\]: 554 5.7.1 Service unavailable\; Client host \[139.5.242.184\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[139.5.242.184\]\; from=\ to=\ proto=ESMTP helo=\<\[139.5.242.184\]\>
...

2019-12-19 22:46:32

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.5.242.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36916
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.5.242.19.			IN	A

;; AUTHORITY SECTION:
.			439	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 12:39:47 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 19.242.5.139.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 19.242.5.139.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
168.228.151.200	attack	$f2bV_matches	2019-07-20 08:04:26
187.120.132.164	attack	$f2bV_matches	2019-07-20 08:28:56
108.75.217.101	attackbotsspam	Jul 16 06:36:18 newdogma sshd[31677]: Invalid user je from 108.75.217.101 port 57602 Jul 16 06:36:18 newdogma sshd[31677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.75.217.101 Jul 16 06:36:21 newdogma sshd[31677]: Failed password for invalid user je from 108.75.217.101 port 57602 ssh2 Jul 16 06:36:21 newdogma sshd[31677]: Received disconnect from 108.75.217.101 port 57602:11: Bye Bye [preauth] Jul 16 06:36:21 newdogma sshd[31677]: Disconnected from 108.75.217.101 port 57602 [preauth] Jul 16 06:50:14 newdogma sshd[31914]: Connection closed by 108.75.217.101 port 54434 [preauth] Jul 16 06:59:35 newdogma sshd[32018]: Invalid user lu from 108.75.217.101 port 42098 Jul 16 06:59:35 newdogma sshd[32018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.75.217.101 Jul 16 06:59:37 newdogma sshd[32018]: Failed password for invalid user lu from 108.75.217.101 port 42098 ssh2 Jul 16 06:59:3........ -------------------------------	2019-07-20 08:08:23
172.253.7.5	attack	Misuse of DNS server	2019-07-20 08:16:37
121.157.82.194	attackbotsspam	Jul 20 02:05:43 [munged] sshd[32480]: Invalid user oracle from 121.157.82.194 port 58320 Jul 20 02:05:43 [munged] sshd[32480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.157.82.194	2019-07-20 08:34:47
187.44.126.204	attack	kidness.family 187.44.126.204 \[19/Jul/2019:18:34:10 +0200\] "POST /wp-login.php HTTP/1.1" 200 5615 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" kidness.family 187.44.126.204 \[19/Jul/2019:18:34:12 +0200\] "POST /wp-login.php HTTP/1.1" 200 5609 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-07-20 08:29:35
187.72.49.8	attackbots	TCP port 25 (SMTP) attempt blocked by hMailServer IP-check. Country not allowed to use this service.	2019-07-20 08:31:06
195.110.34.75	attackbots	WordPress XMLRPC scan :: 195.110.34.75 0.336 BYPASS [20/Jul/2019:08:24:12 1000] [censored_1] "POST /xmlrpc.php HTTP/1.1" 503 19382 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-07-20 07:53:08
191.53.238.44	attackspam	failed_logins	2019-07-20 08:10:31
27.122.28.99	attack	$f2bV_matches	2019-07-20 08:22:45
185.91.119.41	attackspambots	[ ?? ] From bounce5@seu-cartaovirtual.com.br Fri Jul 19 13:21:42 2019 Received: from mta8.seu-cartaovirtual.com.br ([185.91.119.41]:33973)	2019-07-20 08:22:25
42.201.165.26	attack	Caught in portsentry honeypot	2019-07-20 08:19:43
179.234.209.185	attackspambots	Jul 19 19:27:06 OPSO sshd\[32582\]: Invalid user git1 from 179.234.209.185 port 22845 Jul 19 19:27:06 OPSO sshd\[32582\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.234.209.185 Jul 19 19:27:08 OPSO sshd\[32582\]: Failed password for invalid user git1 from 179.234.209.185 port 22845 ssh2 Jul 19 19:33:34 OPSO sshd\[729\]: Invalid user lmg from 179.234.209.185 port 10089 Jul 19 19:33:34 OPSO sshd\[729\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.234.209.185	2019-07-20 08:23:02
178.128.183.90	attackspambots	Jul 19 20:35:18 TORMINT sshd\[18260\]: Invalid user projects from 178.128.183.90 Jul 19 20:35:18 TORMINT sshd\[18260\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.183.90 Jul 19 20:35:20 TORMINT sshd\[18260\]: Failed password for invalid user projects from 178.128.183.90 port 46988 ssh2 ...	2019-07-20 08:36:48
193.112.191.228	attack	SSH Brute Force	2019-07-20 08:31:57

最近上报的IP列表

139.5.242.241	139.5.248.52	139.5.36.108	139.5.254.117
139.5.27.165	139.5.36.21	139.5.36.175	139.5.36.26
139.5.36.222	139.5.36.192	139.5.36.209	139.5.37.110
139.5.36.54	139.5.37.161	139.5.37.226	139.5.37.156
139.5.37.24	139.5.37.42	139.5.38.133	139.5.38.15