140.143.139.97

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	2020-07-27T08:19:23.260395vps751288.ovh.net sshd\[31022\]: Invalid user user1 from 140.143.139.97 port 53806 2020-07-27T08:19:23.267678vps751288.ovh.net sshd\[31022\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.97 2020-07-27T08:19:25.303389vps751288.ovh.net sshd\[31022\]: Failed password for invalid user user1 from 140.143.139.97 port 53806 ssh2 2020-07-27T08:24:11.746286vps751288.ovh.net sshd\[31038\]: Invalid user chenpq from 140.143.139.97 port 36528 2020-07-27T08:24:11.755588vps751288.ovh.net sshd\[31038\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.97	2020-07-27 14:43:32
attackspambots	Unauthorized connection attempt detected from IP address 140.143.139.97 to port 815	2020-07-20 05:33:46
attack	2020-07-06T23:58:16.207245mail.standpoint.com.ua sshd[31798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.97 2020-07-06T23:58:16.204574mail.standpoint.com.ua sshd[31798]: Invalid user daniel from 140.143.139.97 port 48236 2020-07-06T23:58:18.378922mail.standpoint.com.ua sshd[31798]: Failed password for invalid user daniel from 140.143.139.97 port 48236 ssh2 2020-07-07T00:01:59.796834mail.standpoint.com.ua sshd[32322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.97 user=root 2020-07-07T00:02:01.581467mail.standpoint.com.ua sshd[32322]: Failed password for root from 140.143.139.97 port 58712 ssh2 ...	2020-07-07 05:28:57
attackbots	Jun 17 00:46:12 Host-KLAX-C sshd[29368]: User root from 140.143.139.97 not allowed because not listed in AllowUsers ...	2020-06-17 15:36:22

相同子网IP讨论:

IP	类型	评论内容	时间
140.143.139.14	attackbotsspam	Unauthorized SSH login attempts	2020-03-11 12:37:25
140.143.139.14	attackbotsspam	Mar 7 15:39:52 * sshd[5437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.14 Mar 7 15:39:54 * sshd[5437]: Failed password for invalid user hadoop from 140.143.139.14 port 50048 ssh2	2020-03-07 22:41:04
140.143.139.14	attackbots	5x Failed Password	2020-03-04 06:31:16
140.143.139.14	attack	Feb 11 03:04:33 legacy sshd[9262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.14 Feb 11 03:04:35 legacy sshd[9262]: Failed password for invalid user oov from 140.143.139.14 port 58434 ssh2 Feb 11 03:08:58 legacy sshd[9593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.14 ...	2020-02-11 10:31:12
140.143.139.14	attackbotsspam	$f2bV_matches	2020-01-21 13:30:27
140.143.139.14	attackspambots	Dec 16 07:04:19 OPSO sshd\[10034\]: Invalid user test from 140.143.139.14 port 44044 Dec 16 07:04:19 OPSO sshd\[10034\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.14 Dec 16 07:04:21 OPSO sshd\[10034\]: Failed password for invalid user test from 140.143.139.14 port 44044 ssh2 Dec 16 07:11:55 OPSO sshd\[11550\]: Invalid user valerio from 140.143.139.14 port 43956 Dec 16 07:11:55 OPSO sshd\[11550\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.14	2019-12-16 14:14:37
140.143.139.14	attack	Dec 15 20:46:48 gw1 sshd[23724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.14 Dec 15 20:46:50 gw1 sshd[23724]: Failed password for invalid user roebling from 140.143.139.14 port 55976 ssh2 ...	2019-12-16 04:19:09
140.143.139.14	attackspam	Dec 4 08:28:04 eventyay sshd[2787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.14 Dec 4 08:28:06 eventyay sshd[2787]: Failed password for invalid user hhhhhhh from 140.143.139.14 port 39298 ssh2 Dec 4 08:34:49 eventyay sshd[3030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.14 ...	2019-12-04 15:49:50
140.143.139.14	attack	Nov 30 10:18:44 srv01 sshd[15211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.14 user=root Nov 30 10:18:46 srv01 sshd[15211]: Failed password for root from 140.143.139.14 port 49344 ssh2 Nov 30 10:22:25 srv01 sshd[15597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.14 user=root Nov 30 10:22:27 srv01 sshd[15597]: Failed password for root from 140.143.139.14 port 54306 ssh2 Nov 30 10:26:05 srv01 sshd[15838]: Invalid user nilesh from 140.143.139.14 port 59272 ...	2019-11-30 22:22:27
140.143.139.14	attackbots	Nov 22 13:27:47 vibhu-HP-Z238-Microtower-Workstation sshd\[8412\]: Invalid user betsabe from 140.143.139.14 Nov 22 13:27:47 vibhu-HP-Z238-Microtower-Workstation sshd\[8412\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.14 Nov 22 13:27:49 vibhu-HP-Z238-Microtower-Workstation sshd\[8412\]: Failed password for invalid user betsabe from 140.143.139.14 port 57918 ssh2 Nov 22 13:32:00 vibhu-HP-Z238-Microtower-Workstation sshd\[8653\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.14 user=lp Nov 22 13:32:02 vibhu-HP-Z238-Microtower-Workstation sshd\[8653\]: Failed password for lp from 140.143.139.14 port 59216 ssh2 ...	2019-11-22 17:43:24
140.143.139.14	attackbots	Nov 4 07:35:10 vmanager6029 sshd\[12910\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.14 user=root Nov 4 07:35:12 vmanager6029 sshd\[12910\]: Failed password for root from 140.143.139.14 port 53878 ssh2 Nov 4 07:40:20 vmanager6029 sshd\[13057\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.139.14 user=mysql	2019-11-04 14:58:22

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.143.139.97
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48672
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;140.143.139.97.			IN	A

;; AUTHORITY SECTION:
.			597	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020061700 1800 900 604800 86400

;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 17 15:36:10 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 97.139.143.140.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 97.139.143.140.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
139.208.85.57	attackspambots	23/tcp [2019-12-03]1pkt	2019-12-04 06:24:13
116.203.209.23	attackbots	2019-12-03T14:23:31.415868abusebot.cloudsearch.cf sshd\[9957\]: Invalid user opencrm from 116.203.209.23 port 46560	2019-12-04 05:58:06
129.211.113.29	attackbotsspam	Dec 3 21:57:21 venus sshd\[11919\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.113.29 user=root Dec 3 21:57:22 venus sshd\[11919\]: Failed password for root from 129.211.113.29 port 37768 ssh2 Dec 3 22:03:45 venus sshd\[12241\]: Invalid user heinrich from 129.211.113.29 port 48624 ...	2019-12-04 06:08:40
152.136.102.131	attackspam	Dec 3 23:16:01 mail sshd[3388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.102.131 Dec 3 23:16:04 mail sshd[3388]: Failed password for invalid user scatena from 152.136.102.131 port 52042 ssh2 Dec 3 23:21:46 mail sshd[5951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.102.131	2019-12-04 06:31:52
157.245.66.174	attack	IPS Sensor Hit - Port Scan detected	2019-12-04 06:11:49
65.30.40.226	attack	Exploit Attempt	2019-12-04 06:12:59
178.213.207.178	attackspambots	Port 1433 Scan	2019-12-04 06:07:53
68.183.236.29	attackspam	Dec 3 09:23:35 php1 sshd\[6444\]: Invalid user l2ldemo from 68.183.236.29 Dec 3 09:23:35 php1 sshd\[6444\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.236.29 Dec 3 09:23:36 php1 sshd\[6444\]: Failed password for invalid user l2ldemo from 68.183.236.29 port 52044 ssh2 Dec 3 09:29:44 php1 sshd\[7186\]: Invalid user tetris from 68.183.236.29 Dec 3 09:29:44 php1 sshd\[7186\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.236.29	2019-12-04 06:11:16
111.198.88.86	attack	Dec 3 23:04:54 sso sshd[28709]: Failed password for root from 111.198.88.86 port 38510 ssh2 ...	2019-12-04 06:19:11
218.92.0.175	attackspam	Dec 3 23:15:34 jane sshd[18454]: Failed password for root from 218.92.0.175 port 1277 ssh2 Dec 3 23:15:39 jane sshd[18454]: Failed password for root from 218.92.0.175 port 1277 ssh2 ...	2019-12-04 06:20:23
221.214.74.10	attackspambots	2019-12-03 00:04:51 server sshd[23362]: Failed password for invalid user yoyo from 221.214.74.10 port 2160 ssh2	2019-12-04 06:04:08
63.80.184.116	attack	Dec 3 15:22:49 exim[21087]: [1\53] 1ic94g-0005U7-1U H=doubt.sapuxfiori.com (doubt.inebolupansiyon.com) [63.80.184.116] F= rejected after DATA: This message scored 102.7 spam points.	2019-12-04 06:22:11
210.227.113.18	attack	Dec 3 23:02:42 Ubuntu-1404-trusty-64-minimal sshd\[32022\]: Invalid user ovh from 210.227.113.18 Dec 3 23:02:42 Ubuntu-1404-trusty-64-minimal sshd\[32022\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.227.113.18 Dec 3 23:02:44 Ubuntu-1404-trusty-64-minimal sshd\[32022\]: Failed password for invalid user ovh from 210.227.113.18 port 56632 ssh2 Dec 3 23:09:12 Ubuntu-1404-trusty-64-minimal sshd\[2552\]: Invalid user pidgeon from 210.227.113.18 Dec 3 23:09:12 Ubuntu-1404-trusty-64-minimal sshd\[2552\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.227.113.18	2019-12-04 06:17:47
103.120.118.106	attackbotsspam	Automatic report - Port Scan Attack	2019-12-04 06:00:27
80.17.244.2	attack	Dec 3 21:44:21 yesfletchmain sshd\[5199\]: Invalid user http from 80.17.244.2 port 57006 Dec 3 21:44:21 yesfletchmain sshd\[5199\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.17.244.2 Dec 3 21:44:23 yesfletchmain sshd\[5199\]: Failed password for invalid user http from 80.17.244.2 port 57006 ssh2 Dec 3 21:52:03 yesfletchmain sshd\[5613\]: Invalid user nazar from 80.17.244.2 port 33766 Dec 3 21:52:03 yesfletchmain sshd\[5613\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.17.244.2 ...	2019-12-04 06:00:07

最近上报的IP列表

93.117.224.209	225.234.199.71	80.30.255.180	17.27.59.224
183.116.195.70	40.2.151.16	142.217.202.21	72.223.188.123
61.177.172.159	3.70.14.140	245.57.226.225	106.172.180.250
151.178.96.94	51.149.182.227	88.233.182.162	9.228.179.12
15.179.78.246	240.155.156.143	183.91.7.53	232.133.242.127