159.138.139.4 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Huawei International Pte Ltd

主机名(hostname): unknown

机构(organization): HUAWEI CLOUDS

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Jul 1 15:56:16 giegler sshd[15635]: Invalid user both from 159.138.139.4 port 59656 Jul 1 15:56:17 giegler sshd[15635]: Failed password for invalid user both from 159.138.139.4 port 59656 ssh2 Jul 1 15:56:16 giegler sshd[15635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.139.4 Jul 1 15:56:16 giegler sshd[15635]: Invalid user both from 159.138.139.4 port 59656 Jul 1 15:56:17 giegler sshd[15635]: Failed password for invalid user both from 159.138.139.4 port 59656 ssh2	2019-07-02 03:04:37

类型

评论内容

时间

attack

Jul  1 15:56:16 giegler sshd[15635]: Invalid user both from 159.138.139.4 port 59656
Jul  1 15:56:17 giegler sshd[15635]: Failed password for invalid user both from 159.138.139.4 port 59656 ssh2
Jul  1 15:56:16 giegler sshd[15635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.139.4
Jul  1 15:56:16 giegler sshd[15635]: Invalid user both from 159.138.139.4 port 59656
Jul  1 15:56:17 giegler sshd[15635]: Failed password for invalid user both from 159.138.139.4 port 59656 ssh2

2019-07-02 03:04:37

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.138.139.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35507
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;159.138.139.4.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070101 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 02 03:04:32 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

4.139.138.159.in-addr.arpa domain name pointer ecs-159-138-139-4.compute.hwclouds-dns.com.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
4.139.138.159.in-addr.arpa	name = ecs-159-138-139-4.compute.hwclouds-dns.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
178.128.150.158	attack	$f2bV_matches_ltvn	2019-10-14 20:02:08
12.153.230.182	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 14-10-2019 12:55:21.	2019-10-14 20:36:49
185.36.81.236	attackbotsspam	Oct 14 12:02:58 mail postfix/smtpd\[4117\]: warning: unknown\[185.36.81.236\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Oct 14 12:31:24 mail postfix/smtpd\[4887\]: warning: unknown\[185.36.81.236\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Oct 14 13:00:19 mail postfix/smtpd\[6301\]: warning: unknown\[185.36.81.236\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Oct 14 13:56:37 mail postfix/smtpd\[8323\]: warning: unknown\[185.36.81.236\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\	2019-10-14 20:15:05
222.186.175.183	attack	Oct 14 14:10:45 MK-Soft-Root1 sshd[17467]: Failed password for root from 222.186.175.183 port 33096 ssh2 Oct 14 14:10:54 MK-Soft-Root1 sshd[17467]: Failed password for root from 222.186.175.183 port 33096 ssh2 ...	2019-10-14 20:23:04
61.185.139.72	attack	Oct 14 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 5 secs$: user=\, method=PLAIN, rip=61.185.139.72, lip=REMOVED, TLS, session=\ Oct 14 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=61.185.139.72, lip=REMOVED, TLS: Disconnected, session=\ Oct 14 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 7 secs$: user=\, method=PLAIN, rip=61.185.139.72, lip=REMOVED, TLS, session=\	2019-10-14 20:30:26
157.44.20.190	attackbots	Unauthorised access (Oct 14) SRC=157.44.20.190 LEN=52 TTL=107 ID=27246 DF TCP DPT=445 WINDOW=8192 SYN	2019-10-14 20:29:57
207.154.206.212	attackbots	2019-10-14T11:56:22.787807abusebot-8.cloudsearch.cf sshd\[22332\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.206.212 user=root	2019-10-14 20:01:51
8.28.0.17	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-10-14 20:26:34
14.136.134.199	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-10-14 20:10:48
185.90.117.5	attackbots	10/14/2019-07:56:17.179336 185.90.117.5 Protocol: 6 ET SCAN Potential SSH Scan	2019-10-14 20:01:07
92.63.194.26	attack	Oct 14 13:59:54 MK-Soft-Root1 sshd[15485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.26 Oct 14 13:59:55 MK-Soft-Root1 sshd[15485]: Failed password for invalid user admin from 92.63.194.26 port 46178 ssh2 ...	2019-10-14 20:08:17
103.17.38.41	attackspam	Oct 14 11:46:28 web8 sshd\[28174\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.17.38.41 user=root Oct 14 11:46:30 web8 sshd\[28174\]: Failed password for root from 103.17.38.41 port 53846 ssh2 Oct 14 11:51:21 web8 sshd\[30462\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.17.38.41 user=root Oct 14 11:51:23 web8 sshd\[30462\]: Failed password for root from 103.17.38.41 port 37312 ssh2 Oct 14 11:56:18 web8 sshd\[378\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.17.38.41 user=root	2019-10-14 20:05:14
203.110.166.51	attackbots	Oct 14 13:50:30 tux-35-217 sshd\[28335\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.110.166.51 user=root Oct 14 13:50:32 tux-35-217 sshd\[28335\]: Failed password for root from 203.110.166.51 port 3834 ssh2 Oct 14 13:55:43 tux-35-217 sshd\[28357\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.110.166.51 user=root Oct 14 13:55:44 tux-35-217 sshd\[28357\]: Failed password for root from 203.110.166.51 port 3836 ssh2 ...	2019-10-14 20:23:43
83.110.110.135	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 14-10-2019 12:55:22.	2019-10-14 20:34:18
118.217.181.116	attackbots	Automatic report - XMLRPC Attack	2019-10-14 20:11:53

最近上报的IP列表

157.108.16.80	209.28.61.161	39.108.97.62	90.108.12.27
150.109.67.152	35.160.220.175	195.114.121.66	107.14.166.230
39.33.84.231	175.199.101.12	145.138.227.178	62.251.155.157
91.225.57.171	117.35.90.213	220.48.17.224	125.148.41.108
103.114.107.234	182.157.175.32	31.204.12.36	55.182.188.119