162.243.139.146

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	scans once in preceeding hours on the ports (in chronological order) 2323 resulting in total of 94 scans from 162.243.0.0/16 block.	2020-05-02 00:32:02

相同子网IP讨论:

IP	类型	评论内容	时间
162.243.139.21	proxy	VPN fraud	2023-02-24 13:44:38
162.243.139.19	proxy	VPN	2023-01-23 14:02:03
162.243.139.98	attack	[Fri Jun 12 03:31:39 2020] - DDoS Attack From IP: 162.243.139.98 Port: 51724	2020-07-16 21:22:30
162.243.139.167	attack	[Sun Jun 14 03:12:01 2020] - DDoS Attack From IP: 162.243.139.167 Port: 58412	2020-07-16 20:56:22
162.243.139.150	attack	[Wed Jun 17 15:34:21 2020] - DDoS Attack From IP: 162.243.139.150 Port: 57028	2020-07-16 20:29:09
162.243.139.246	attack	[Wed Jun 17 21:52:27 2020] - DDoS Attack From IP: 162.243.139.246 Port: 58139	2020-07-16 20:26:41
162.243.139.98	attackspam	[Fri Jun 12 03:31:41 2020] - DDoS Attack From IP: 162.243.139.98 Port: 51724	2020-07-13 03:31:45
162.243.139.167	attackspambots	[Sun Jun 14 03:12:03 2020] - DDoS Attack From IP: 162.243.139.167 Port: 58412	2020-07-13 03:17:58
162.243.139.150	attackbotsspam	[Wed Jun 17 15:34:23 2020] - DDoS Attack From IP: 162.243.139.150 Port: 57028	2020-07-13 03:02:20
162.243.139.246	attackspam	[Wed Jun 17 21:52:29 2020] - DDoS Attack From IP: 162.243.139.246 Port: 58139	2020-07-13 03:00:05
162.243.139.196	attack	[Fri May 22 02:56:34 2020] - DDoS Attack From IP: 162.243.139.196 Port: 39583	2020-07-09 03:49:00
162.243.139.226	attackspam	[Mon May 25 12:06:40 2020] - DDoS Attack From IP: 162.243.139.226 Port: 59688	2020-07-09 03:24:42
162.243.139.40	attackspam	[Thu May 28 02:37:02 2020] - DDoS Attack From IP: 162.243.139.40 Port: 48945	2020-07-09 03:18:45
162.243.139.241	attackbotsspam	[Thu May 28 12:09:43 2020] - DDoS Attack From IP: 162.243.139.241 Port: 46028	2020-07-09 03:12:30
162.243.139.141	attackbots	[Fri May 29 12:54:48 2020] - DDoS Attack From IP: 162.243.139.141 Port: 55461	2020-07-09 02:53:20

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.243.139.146
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42136
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.243.139.146.		IN	A

;; AUTHORITY SECTION:
.			556	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050101 1800 900 604800 86400

;; Query time: 119 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 02 00:31:58 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

146.139.243.162.in-addr.arpa domain name pointer zg-0428c-362.stretchoid.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
146.139.243.162.in-addr.arpa	name = zg-0428c-362.stretchoid.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
157.245.112.238	attack	Mar 7 17:11:38 server sshd\[12726\]: Invalid user ubnt from 157.245.112.238 Mar 7 17:11:38 server sshd\[12726\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.112.238 Mar 7 17:11:39 server sshd\[12726\]: Failed password for invalid user ubnt from 157.245.112.238 port 49664 ssh2 Mar 7 23:50:54 server sshd\[21697\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.112.238 user=root Mar 7 23:50:57 server sshd\[21697\]: Failed password for root from 157.245.112.238 port 34360 ssh2 ...	2020-03-08 04:57:33
46.101.209.178	attackspam	Mar 7 18:36:36 sd-53420 sshd\[6555\]: User root from 46.101.209.178 not allowed because none of user's groups are listed in AllowGroups Mar 7 18:36:37 sd-53420 sshd\[6555\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.209.178 user=root Mar 7 18:36:38 sd-53420 sshd\[6555\]: Failed password for invalid user root from 46.101.209.178 port 52530 ssh2 Mar 7 18:42:30 sd-53420 sshd\[7175\]: Invalid user admin from 46.101.209.178 Mar 7 18:42:30 sd-53420 sshd\[7175\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.209.178 ...	2020-03-08 04:53:26
95.208.172.134	attackbots	Honeypot attack, port: 5555, PTR: HSI-KBW-095-208-172-134.hsi5.kabel-badenwuerttemberg.de.	2020-03-08 05:20:48
152.168.227.167	attackbots	Mar 7 05:46:12 mailrelay sshd[1914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.168.227.167 user=r.r Mar 7 05:46:15 mailrelay sshd[1914]: Failed password for r.r from 152.168.227.167 port 51337 ssh2 Mar 7 05:46:15 mailrelay sshd[1914]: Received disconnect from 152.168.227.167 port 51337:11: Bye Bye [preauth] Mar 7 05:46:15 mailrelay sshd[1914]: Disconnected from 152.168.227.167 port 51337 [preauth] Mar 7 05:57:47 mailrelay sshd[2064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.168.227.167 user=r.r Mar 7 05:57:49 mailrelay sshd[2064]: Failed password for r.r from 152.168.227.167 port 55691 ssh2 Mar 7 05:57:50 mailrelay sshd[2064]: Received disconnect from 152.168.227.167 port 55691:11: Bye Bye [preauth] Mar 7 05:57:50 mailrelay sshd[2064]: Disconnected from 152.168.227.167 port 55691 [preauth] Mar 7 06:05:32 mailrelay sshd[2181]: Invalid user ts3bot from 152.168.2........ -------------------------------	2020-03-08 05:19:46
14.186.211.157	attackbotsspam	2020-03-0714:27:211jAZU7-0004zG-VN\<=verena@rs-solution.chH=$localhost$[123.24.40.58]:44043P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=3126id=847be3d3d8f326d5f608feada6724b6744ae602b01@rs-solution.chT="YouhavenewlikefromMerissa"forgeraldmilford@gmail.commartinfigueroa457@gmail.com2020-03-0714:27:271jAZUE-0004zt-Kh\<=verena@rs-solution.chH=$localhost$[201.229.157.27]:59434P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=3167id=0e84f94e456ebb486b9563303befd6fad9332039e9@rs-solution.chT="NewlikereceivedfromBlondie"forbuggydune68@gmail.comeds365mail@gmail.com2020-03-0714:27:011jAZTp-0004xN-0R\<=verena@rs-solution.chH=$localhost$[114.86.93.44]:38518P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=3109id=04ef579a91ba6f9cbf41b7e4ef3b022e0de79ad0b9@rs-solution.chT="NewlikereceivedfromMelody"forgilbertross@yahoo.comgroundpounderfw@gmail.com2020-03-0714:26:511jAZTc-0004uR-	2020-03-08 05:05:07
78.235.221.141	attackbots	Mar 7 14:54:15 mout sshd[21770]: Invalid user user from 78.235.221.141 port 56958 Mar 7 14:54:17 mout sshd[21770]: Failed password for invalid user user from 78.235.221.141 port 56958 ssh2 Mar 7 14:54:18 mout sshd[21770]: Connection closed by 78.235.221.141 port 56958 [preauth]	2020-03-08 05:17:14
123.53.242.112	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-08 04:53:54
45.141.84.38	attack	Mar 7 19:20:56 host3 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=45.141.84.38, lip=207.180.241.50, session= Mar 7 19:29:32 host3 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=45.141.84.38, lip=207.180.241.50, session= Mar 7 19:45:21 host3 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=45.141.84.38, lip=207.180.241.50, session=<9D7zK0igJrItjVQm> Mar 7 19:51:32 host3 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=45.141.84.38, lip=207.180.241.50, session=<1rkSQkigVtYtjVQm> Mar 7 20:31:10 host3 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=45.141.84.38, lip=207.180.241.50, session=<3WjOz0ig ...	2020-03-08 05:11:24
222.186.15.18	attack	Mar 7 21:48:24 OPSO sshd\[12797\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.18 user=root Mar 7 21:48:26 OPSO sshd\[12797\]: Failed password for root from 222.186.15.18 port 16224 ssh2 Mar 7 21:48:28 OPSO sshd\[12797\]: Failed password for root from 222.186.15.18 port 16224 ssh2 Mar 7 21:48:31 OPSO sshd\[12797\]: Failed password for root from 222.186.15.18 port 16224 ssh2 Mar 7 21:49:39 OPSO sshd\[12819\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.18 user=root	2020-03-08 05:13:34
51.68.192.106	attackspam	$f2bV_matches	2020-03-08 04:58:22
194.27.125.32	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-08 05:32:22
222.186.30.145	attack	$f2bV_matches	2020-03-08 05:04:17
200.236.102.164	attackspambots	Honeypot attack, port: 81, PTR: PTR record not found	2020-03-08 05:29:53
61.84.223.39	attackspam	Honeypot attack, port: 81, PTR: PTR record not found	2020-03-08 05:33:28
123.24.40.58	attackbotsspam	2020-03-0714:27:211jAZU7-0004zG-VN\<=verena@rs-solution.chH=$localhost$[123.24.40.58]:44043P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=3126id=847be3d3d8f326d5f608feada6724b6744ae602b01@rs-solution.chT="YouhavenewlikefromMerissa"forgeraldmilford@gmail.commartinfigueroa457@gmail.com2020-03-0714:27:271jAZUE-0004zt-Kh\<=verena@rs-solution.chH=$localhost$[201.229.157.27]:59434P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=3167id=0e84f94e456ebb486b9563303befd6fad9332039e9@rs-solution.chT="NewlikereceivedfromBlondie"forbuggydune68@gmail.comeds365mail@gmail.com2020-03-0714:27:011jAZTp-0004xN-0R\<=verena@rs-solution.chH=$localhost$[114.86.93.44]:38518P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=3109id=04ef579a91ba6f9cbf41b7e4ef3b022e0de79ad0b9@rs-solution.chT="NewlikereceivedfromMelody"forgilbertross@yahoo.comgroundpounderfw@gmail.com2020-03-0714:26:511jAZTc-0004uR-	2020-03-08 05:10:07

最近上报的IP列表

62.180.14.83	146.119.93.222	114.232.207.5	221.197.101.253
91.84.105.27	73.206.168.105	103.120.168.115	92.50.147.89
96.37.33.98	57.82.155.167	47.110.173.88	59.109.157.110
192.254.107.86	195.51.32.27	9.246.43.139	220.8.175.110
203.109.113.111	182.222.165.68	184.150.213.54	176.47.62.158