162.243.139.116

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-05-02 00:19:06

相同子网IP讨论:

IP	类型	评论内容	时间
162.243.139.21	proxy	VPN fraud	2023-02-24 13:44:38
162.243.139.19	proxy	VPN	2023-01-23 14:02:03
162.243.139.98	attack	[Fri Jun 12 03:31:39 2020] - DDoS Attack From IP: 162.243.139.98 Port: 51724	2020-07-16 21:22:30
162.243.139.167	attack	[Sun Jun 14 03:12:01 2020] - DDoS Attack From IP: 162.243.139.167 Port: 58412	2020-07-16 20:56:22
162.243.139.150	attack	[Wed Jun 17 15:34:21 2020] - DDoS Attack From IP: 162.243.139.150 Port: 57028	2020-07-16 20:29:09
162.243.139.246	attack	[Wed Jun 17 21:52:27 2020] - DDoS Attack From IP: 162.243.139.246 Port: 58139	2020-07-16 20:26:41
162.243.139.98	attackspam	[Fri Jun 12 03:31:41 2020] - DDoS Attack From IP: 162.243.139.98 Port: 51724	2020-07-13 03:31:45
162.243.139.167	attackspambots	[Sun Jun 14 03:12:03 2020] - DDoS Attack From IP: 162.243.139.167 Port: 58412	2020-07-13 03:17:58
162.243.139.150	attackbotsspam	[Wed Jun 17 15:34:23 2020] - DDoS Attack From IP: 162.243.139.150 Port: 57028	2020-07-13 03:02:20
162.243.139.246	attackspam	[Wed Jun 17 21:52:29 2020] - DDoS Attack From IP: 162.243.139.246 Port: 58139	2020-07-13 03:00:05
162.243.139.196	attack	[Fri May 22 02:56:34 2020] - DDoS Attack From IP: 162.243.139.196 Port: 39583	2020-07-09 03:49:00
162.243.139.226	attackspam	[Mon May 25 12:06:40 2020] - DDoS Attack From IP: 162.243.139.226 Port: 59688	2020-07-09 03:24:42
162.243.139.40	attackspam	[Thu May 28 02:37:02 2020] - DDoS Attack From IP: 162.243.139.40 Port: 48945	2020-07-09 03:18:45
162.243.139.241	attackbotsspam	[Thu May 28 12:09:43 2020] - DDoS Attack From IP: 162.243.139.241 Port: 46028	2020-07-09 03:12:30
162.243.139.141	attackbots	[Fri May 29 12:54:48 2020] - DDoS Attack From IP: 162.243.139.141 Port: 55461	2020-07-09 02:53:20

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.243.139.116
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50541
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.243.139.116.		IN	A

;; AUTHORITY SECTION:
.			222	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050101 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 02 00:19:00 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

116.139.243.162.in-addr.arpa domain name pointer zg-0428c-352.stretchoid.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
116.139.243.162.in-addr.arpa	name = zg-0428c-352.stretchoid.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
183.83.78.180	attack	Jun 7 16:49:09 Ubuntu-1404-trusty-64-minimal sshd\[20280\]: Invalid user admin from 183.83.78.180 Jun 7 16:49:09 Ubuntu-1404-trusty-64-minimal sshd\[20280\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.83.78.180 Jun 7 16:49:11 Ubuntu-1404-trusty-64-minimal sshd\[20280\]: Failed password for invalid user admin from 183.83.78.180 port 37045 ssh2 Jun 7 18:09:35 Ubuntu-1404-trusty-64-minimal sshd\[3134\]: Invalid user admin from 183.83.78.180 Jun 7 18:09:35 Ubuntu-1404-trusty-64-minimal sshd\[3134\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.83.78.180	2020-06-08 01:14:31
87.246.7.111	attackspambots	Jun 7 16:00:04 lnxmail61 postfix/smtpd[28331]: warning: unknown[87.246.7.111]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 7 16:00:04 lnxmail61 postfix/smtpd[28331]: lost connection after AUTH from unknown[87.246.7.111] Jun 7 16:00:17 lnxmail61 postfix/smtpd[28331]: warning: unknown[87.246.7.111]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 7 16:00:17 lnxmail61 postfix/smtpd[28331]: lost connection after AUTH from unknown[87.246.7.111] Jun 7 16:00:34 lnxmail61 postfix/smtpd[28331]: warning: unknown[87.246.7.111]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 7 16:00:34 lnxmail61 postfix/smtpd[28331]: lost connection after AUTH from unknown[87.246.7.111]	2020-06-08 00:51:53
31.170.61.73	attackspambots	$f2bV_matches	2020-06-08 01:16:51
186.216.71.50	attackbotsspam	Jun 5 14:48:38 mail.srvfarm.net postfix/smtpd[3095007]: warning: unknown[186.216.71.50]: SASL PLAIN authentication failed: Jun 5 14:48:38 mail.srvfarm.net postfix/smtpd[3095007]: lost connection after AUTH from unknown[186.216.71.50] Jun 5 14:55:01 mail.srvfarm.net postfix/smtps/smtpd[3094396]: warning: unknown[186.216.71.50]: SASL PLAIN authentication failed: Jun 5 14:55:01 mail.srvfarm.net postfix/smtps/smtpd[3094396]: lost connection after AUTH from unknown[186.216.71.50] Jun 5 14:57:10 mail.srvfarm.net postfix/smtpd[3093305]: warning: unknown[186.216.71.50]: SASL PLAIN authentication failed:	2020-06-08 00:57:01
186.216.71.26	attackbotsspam	Jun 5 15:19:31 mail.srvfarm.net postfix/smtps/smtpd[3110631]: warning: unknown[186.216.71.26]: SASL PLAIN authentication failed: Jun 5 15:19:32 mail.srvfarm.net postfix/smtps/smtpd[3110631]: lost connection after AUTH from unknown[186.216.71.26] Jun 5 15:25:25 mail.srvfarm.net postfix/smtps/smtpd[3108732]: warning: unknown[186.216.71.26]: SASL PLAIN authentication failed: Jun 5 15:25:25 mail.srvfarm.net postfix/smtps/smtpd[3108732]: lost connection after AUTH from unknown[186.216.71.26] Jun 5 15:29:14 mail.srvfarm.net postfix/smtpd[3109485]: warning: unknown[186.216.71.26]: SASL PLAIN authentication failed:	2020-06-08 00:57:27
139.59.7.105	attackspam	Jun 7 11:56:56 game-panel sshd[10592]: Failed password for root from 139.59.7.105 port 50360 ssh2 Jun 7 12:00:59 game-panel sshd[10731]: Failed password for root from 139.59.7.105 port 53456 ssh2	2020-06-08 01:32:03
77.40.3.205	attackbots	2020-06-07T12:29:32.694376MailD postfix/smtpd[24837]: warning: unknown[77.40.3.205]: SASL PLAIN authentication failed: authentication failure 2020-06-07T12:29:32.850548MailD postfix/smtpd[24837]: warning: unknown[77.40.3.205]: SASL LOGIN authentication failed: authentication failure 2020-06-07T14:05:25.251798MailD postfix/smtpd[31566]: warning: unknown[77.40.3.205]: SASL PLAIN authentication failed: authentication failure 2020-06-07T14:05:25.408781MailD postfix/smtpd[31566]: warning: unknown[77.40.3.205]: SASL LOGIN authentication failed: authentication failure	2020-06-08 01:09:32
45.7.224.232	attackspam	Jun 5 14:58:42 mail.srvfarm.net postfix/smtpd[3095776]: warning: 45-7-224-232.insideprovider.com.br[45.7.224.232]: SASL PLAIN authentication failed: Jun 5 14:58:42 mail.srvfarm.net postfix/smtpd[3095776]: lost connection after AUTH from 45-7-224-232.insideprovider.com.br[45.7.224.232] Jun 5 15:07:22 mail.srvfarm.net postfix/smtps/smtpd[3108780]: warning: 45-7-224-232.insideprovider.com.br[45.7.224.232]: SASL PLAIN authentication failed: Jun 5 15:07:23 mail.srvfarm.net postfix/smtps/smtpd[3108780]: lost connection after AUTH from 45-7-224-232.insideprovider.com.br[45.7.224.232] Jun 5 15:08:40 mail.srvfarm.net postfix/smtps/smtpd[3109591]: warning: 45-7-224-232.insideprovider.com.br[45.7.224.232]: SASL PLAIN authentication failed:	2020-06-08 01:02:35
223.247.223.194	attackspambots	2020-06-07T15:47:43.780560vps773228.ovh.net sshd[18773]: Failed password for root from 223.247.223.194 port 59902 ssh2 2020-06-07T15:52:55.476388vps773228.ovh.net sshd[18831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.223.194 user=root 2020-06-07T15:52:57.486437vps773228.ovh.net sshd[18831]: Failed password for root from 223.247.223.194 port 55900 ssh2 2020-06-07T15:57:54.376747vps773228.ovh.net sshd[18887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.223.194 user=root 2020-06-07T15:57:56.432264vps773228.ovh.net sshd[18887]: Failed password for root from 223.247.223.194 port 51886 ssh2 ...	2020-06-08 01:05:16
178.17.170.178	attack	Jun 7 11:11:11 rudra sshd[694461]: reveeclipse mapping checking getaddrinfo for 178-17-170-178.static.as43289.net [178.17.170.178] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 7 11:11:11 rudra sshd[694461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.17.170.178 user=r.r Jun 7 11:11:12 rudra sshd[694461]: Failed password for r.r from 178.17.170.178 port 55678 ssh2 Jun 7 11:11:15 rudra sshd[694461]: Failed password for r.r from 178.17.170.178 port 55678 ssh2 Jun 7 11:11:17 rudra sshd[694461]: Failed password for r.r from 178.17.170.178 port 55678 ssh2 Jun 7 11:11:19 rudra sshd[694461]: Failed password for r.r from 178.17.170.178 port 55678 ssh2 Jun 7 11:11:22 rudra sshd[694461]: Failed password for r.r from 178.17.170.178 port 55678 ssh2 Jun 7 11:11:24 rudra sshd[694461]: Failed password for r.r from 178.17.170.178 port 55678 ssh2 Jun 7 11:11:24 rudra sshd[694461]: PAM 5 more authentication failures; logname= uid=0 euid........ -------------------------------	2020-06-08 01:03:04
132.232.92.86	attackbotsspam	Jun 7 17:46:32 buvik sshd[27506]: Failed password for root from 132.232.92.86 port 56972 ssh2 Jun 7 17:52:09 buvik sshd[28368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.92.86 user=root Jun 7 17:52:11 buvik sshd[28368]: Failed password for root from 132.232.92.86 port 58880 ssh2 ...	2020-06-08 01:23:27
87.246.7.106	attackspambots	Jun 6 11:58:38 mail.srvfarm.net postfix/smtpd[3671807]: warning: unknown[87.246.7.106]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 6 11:58:38 mail.srvfarm.net postfix/smtpd[3671807]: lost connection after AUTH from unknown[87.246.7.106] Jun 6 11:58:58 mail.srvfarm.net postfix/smtpd[3671808]: warning: unknown[87.246.7.106]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 6 11:58:58 mail.srvfarm.net postfix/smtpd[3671808]: lost connection after AUTH from unknown[87.246.7.106] Jun 6 11:59:13 mail.srvfarm.net postfix/smtpd[3671713]: warning: unknown[87.246.7.106]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 6 11:59:13 mail.srvfarm.net postfix/smtpd[3671713]: lost connection after AUTH from unknown[87.246.7.106]	2020-06-08 00:52:18
78.128.113.114	attack	Jun 7 14:57:07 web01.agentur-b-2.de postfix/smtps/smtpd[1020336]: lost connection after CONNECT from unknown[78.128.113.114] Jun 7 14:57:10 web01.agentur-b-2.de postfix/smtps/smtpd[1020352]: warning: unknown[78.128.113.114]: SASL PLAIN authentication failed: Jun 7 14:57:10 web01.agentur-b-2.de postfix/smtps/smtpd[1020352]: lost connection after AUTH from unknown[78.128.113.114] Jun 7 14:57:15 web01.agentur-b-2.de postfix/smtps/smtpd[1020336]: lost connection after AUTH from unknown[78.128.113.114] Jun 7 14:57:20 web01.agentur-b-2.de postfix/smtps/smtpd[1020352]: lost connection after AUTH from unknown[78.128.113.114]	2020-06-08 01:24:39
121.162.33.188	attackbots	Brute-force attempt banned	2020-06-08 01:04:01
217.112.142.173	attackspambots	Jun 5 15:04:13 mail.srvfarm.net postfix/smtpd[3096555]: NOQUEUE: reject: RCPT from unknown[217.112.142.173]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 5 15:04:16 mail.srvfarm.net postfix/smtpd[3096554]: NOQUEUE: reject: RCPT from unknown[217.112.142.173]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 5 15:06:14 mail.srvfarm.net postfix/smtpd[3109253]: NOQUEUE: reject: RCPT from unknown[217.112.142.173]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 5 15:06:16 mail.srvfarm.net postfix/smtpd[3096560]: NOQUEUE: reject: RCPT from unknown[217.112.142	2020-06-08 00:55:51

最近上报的IP列表

181.127.5.51	105.11.103.144	160.169.239.81	20.169.207.7
139.227.55.14	64.249.65.10	84.16.116.51	175.131.90.68
97.230.102.199	97.59.124.48	135.53.6.61	102.42.62.77
182.46.131.186	42.118.136.125	73.129.115.185	64.17.160.227
114.211.109.41	138.197.68.228	15.238.192.42	214.186.229.147