162.243.139.143

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	3389/tcp 1433/tcp 161/udp... [2020-04-29/06-11]34pkt,26pt.(tcp),4pt.(udp)	2020-06-12 03:12:38
attackspam	firewall-block, port(s): 1400/tcp	2020-05-30 05:42:12

相同子网IP讨论:

IP	类型	评论内容	时间
162.243.139.21	proxy	VPN fraud	2023-02-24 13:44:38
162.243.139.19	proxy	VPN	2023-01-23 14:02:03
162.243.139.98	attack	[Fri Jun 12 03:31:39 2020] - DDoS Attack From IP: 162.243.139.98 Port: 51724	2020-07-16 21:22:30
162.243.139.167	attack	[Sun Jun 14 03:12:01 2020] - DDoS Attack From IP: 162.243.139.167 Port: 58412	2020-07-16 20:56:22
162.243.139.150	attack	[Wed Jun 17 15:34:21 2020] - DDoS Attack From IP: 162.243.139.150 Port: 57028	2020-07-16 20:29:09
162.243.139.246	attack	[Wed Jun 17 21:52:27 2020] - DDoS Attack From IP: 162.243.139.246 Port: 58139	2020-07-16 20:26:41
162.243.139.98	attackspam	[Fri Jun 12 03:31:41 2020] - DDoS Attack From IP: 162.243.139.98 Port: 51724	2020-07-13 03:31:45
162.243.139.167	attackspambots	[Sun Jun 14 03:12:03 2020] - DDoS Attack From IP: 162.243.139.167 Port: 58412	2020-07-13 03:17:58
162.243.139.150	attackbotsspam	[Wed Jun 17 15:34:23 2020] - DDoS Attack From IP: 162.243.139.150 Port: 57028	2020-07-13 03:02:20
162.243.139.246	attackspam	[Wed Jun 17 21:52:29 2020] - DDoS Attack From IP: 162.243.139.246 Port: 58139	2020-07-13 03:00:05
162.243.139.196	attack	[Fri May 22 02:56:34 2020] - DDoS Attack From IP: 162.243.139.196 Port: 39583	2020-07-09 03:49:00
162.243.139.226	attackspam	[Mon May 25 12:06:40 2020] - DDoS Attack From IP: 162.243.139.226 Port: 59688	2020-07-09 03:24:42
162.243.139.40	attackspam	[Thu May 28 02:37:02 2020] - DDoS Attack From IP: 162.243.139.40 Port: 48945	2020-07-09 03:18:45
162.243.139.241	attackbotsspam	[Thu May 28 12:09:43 2020] - DDoS Attack From IP: 162.243.139.241 Port: 46028	2020-07-09 03:12:30
162.243.139.141	attackbots	[Fri May 29 12:54:48 2020] - DDoS Attack From IP: 162.243.139.141 Port: 55461	2020-07-09 02:53:20

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.243.139.143
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36402
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.243.139.143.		IN	A

;; AUTHORITY SECTION:
.			497	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052901 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 30 05:42:09 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

143.139.243.162.in-addr.arpa domain name pointer zg-0428c-360.stretchoid.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
143.139.243.162.in-addr.arpa	name = zg-0428c-360.stretchoid.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
187.188.191.43	attackbotsspam	Jul 1 21:32:37 Server10 sshd[30090]: Invalid user ts3 from 187.188.191.43 port 40415 Jul 1 21:32:37 Server10 sshd[30090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.188.191.43 Jul 1 21:32:39 Server10 sshd[30090]: Failed password for invalid user ts3 from 187.188.191.43 port 40415 ssh2 Jul 1 21:36:53 Server10 sshd[32446]: Invalid user sftp from 187.188.191.43 port 37925 Jul 1 21:36:53 Server10 sshd[32446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.188.191.43 Jul 1 21:36:55 Server10 sshd[32446]: Failed password for invalid user sftp from 187.188.191.43 port 37925 ssh2	2019-09-04 08:26:08
200.111.137.132	attackspambots	Sep 3 14:13:14 lcprod sshd\[6913\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.111.137.132 user=root Sep 3 14:13:16 lcprod sshd\[6913\]: Failed password for root from 200.111.137.132 port 44504 ssh2 Sep 3 14:22:50 lcprod sshd\[7801\]: Invalid user plotter from 200.111.137.132 Sep 3 14:22:50 lcprod sshd\[7801\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.111.137.132 Sep 3 14:22:52 lcprod sshd\[7801\]: Failed password for invalid user plotter from 200.111.137.132 port 59794 ssh2	2019-09-04 08:36:10
177.69.245.93	attackspambots	Sep 3 20:34:27 arianus postfix/smtps/smtpd\[19119\]: warning: unknown\[177.69.245.93\]: SASL PLAIN authentication failed: ...	2019-09-04 08:34:36
187.188.169.123	attackspam	Sep 3 23:57:40 hcbbdb sshd\[25962\]: Invalid user uno8 from 187.188.169.123 Sep 3 23:57:40 hcbbdb sshd\[25962\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=fixed-187-188-169-123.totalplay.net Sep 3 23:57:43 hcbbdb sshd\[25962\]: Failed password for invalid user uno8 from 187.188.169.123 port 51096 ssh2 Sep 4 00:02:32 hcbbdb sshd\[26518\]: Invalid user sftptest from 187.188.169.123 Sep 4 00:02:32 hcbbdb sshd\[26518\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=fixed-187-188-169-123.totalplay.net	2019-09-04 08:42:08
187.183.84.178	attackbotsspam	Aug 11 13:17:50 Server10 sshd[13349]: Invalid user plex from 187.183.84.178 port 56698 Aug 11 13:17:50 Server10 sshd[13349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.183.84.178 Aug 11 13:17:52 Server10 sshd[13349]: Failed password for invalid user plex from 187.183.84.178 port 56698 ssh2	2019-09-04 08:41:11
51.77.140.244	attack	Sep 3 13:58:24 eddieflores sshd\[30558\]: Invalid user mya from 51.77.140.244 Sep 3 13:58:24 eddieflores sshd\[30558\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=244.ip-51-77-140.eu Sep 3 13:58:25 eddieflores sshd\[30558\]: Failed password for invalid user mya from 51.77.140.244 port 54208 ssh2 Sep 3 14:05:17 eddieflores sshd\[31143\]: Invalid user juliette from 51.77.140.244 Sep 3 14:05:17 eddieflores sshd\[31143\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=244.ip-51-77-140.eu	2019-09-04 08:24:19
49.234.62.55	attackbotsspam	Sep 3 21:07:09 localhost sshd\[110926\]: Invalid user amon from 49.234.62.55 port 51148 Sep 3 21:07:09 localhost sshd\[110926\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.62.55 Sep 3 21:07:11 localhost sshd\[110926\]: Failed password for invalid user amon from 49.234.62.55 port 51148 ssh2 Sep 3 21:10:52 localhost sshd\[111146\]: Invalid user sprd!@\#$%sapphire from 49.234.62.55 port 55070 Sep 3 21:10:52 localhost sshd\[111146\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.62.55 ...	2019-09-04 08:46:53
112.85.42.179	attack	Sep 4 06:50:43 webhost01 sshd[3297]: Failed password for root from 112.85.42.179 port 9193 ssh2 Sep 4 06:50:56 webhost01 sshd[3297]: error: maximum authentication attempts exceeded for root from 112.85.42.179 port 9193 ssh2 [preauth] ...	2019-09-04 08:54:16
218.92.0.143	attackbotsspam	Sep 4 01:57:32 cvbmail sshd\[27401\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.143 user=root Sep 4 01:57:34 cvbmail sshd\[27401\]: Failed password for root from 218.92.0.143 port 4078 ssh2 Sep 4 01:58:03 cvbmail sshd\[27405\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.143 user=root	2019-09-04 08:41:41
23.129.64.160	attackbots	frenzy	2019-09-04 08:24:48
61.219.84.108	attack	Too many connections or unauthorized access detected from Yankee banned ip	2019-09-04 08:57:36
185.176.145.194	attackspam	2019-09-03 13:33:45 H=(locopress.it) [185.176.145.194]:52682 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/185.176.145.194) 2019-09-03 13:33:45 H=(locopress.it) [185.176.145.194]:52682 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/185.176.145.194) 2019-09-03 13:33:46 H=(locopress.it) [185.176.145.194]:52682 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/185.176.145.194) ...	2019-09-04 09:01:23
67.205.136.215	attackspambots	Sep 3 13:45:15 hiderm sshd\[7183\]: Invalid user gmod from 67.205.136.215 Sep 3 13:45:15 hiderm sshd\[7183\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.136.215 Sep 3 13:45:17 hiderm sshd\[7183\]: Failed password for invalid user gmod from 67.205.136.215 port 38444 ssh2 Sep 3 13:50:50 hiderm sshd\[7698\]: Invalid user devuser from 67.205.136.215 Sep 3 13:50:50 hiderm sshd\[7698\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.136.215	2019-09-04 08:49:31
66.212.170.244	attack	Unauthorized connection attempt from IP address 66.212.170.244 on Port 445(SMB)	2019-09-04 09:00:31
112.168.237.171	attack	$f2bV_matches	2019-09-04 08:44:10

最近上报的IP列表

116.29.25.242	196.62.153.47	199.105.168.175	72.126.24.21
2.66.85.188	37.217.142.205	109.141.127.35	176.193.219.217
177.68.108.235	136.35.14.188	178.198.205.55	216.123.28.230
69.203.26.100	129.183.241.165	31.237.144.152	121.157.146.57
105.137.182.17	98.200.199.8	208.255.249.28	178.148.139.158