167.99.104.139

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	20/3/7@08:32:22: FAIL: Alarm-Intrusion address from=167.99.104.139 ...	2020-03-08 00:11:11

相同子网IP讨论:

IP	类型	评论内容	时间
167.99.104.93	attackspambots	Unauthorized connection attempt detected from IP address 167.99.104.93 to port 8080 [T]	2020-06-05 19:22:36
167.99.104.226	attack	" "	2020-04-30 07:34:18
167.99.104.226	attackspambots	Attempted connection to port 3001.	2020-04-26 00:09:40
167.99.104.129	attackbots	20/1/9@16:26:32: FAIL: Alarm-Intrusion address from=167.99.104.129 ...	2020-01-10 06:01:53
167.99.104.28	attack	WP_xmlrpc_attack	2020-01-04 01:44:50
167.99.104.28	attack	Automatic report - XMLRPC Attack	2020-01-02 14:45:57
167.99.104.129	attack	Unauthorized connection attempt detected from IP address 167.99.104.129 to port 5901	2019-12-30 04:51:02
167.99.104.28	attackspambots	167.99.104.28 - - [27/Dec/2019:21:32:58 +0000] "POST /wp-login.php HTTP/1.1" 200 6393 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.99.104.28 - - [27/Dec/2019:21:32:59 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-12-28 06:26:26

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 167.99.104.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11556
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;167.99.104.139.			IN	A

;; AUTHORITY SECTION:
.			318	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030700 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 08 00:11:04 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 139.104.99.167.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.104.99.167.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
167.71.209.2	attackbotsspam	Jun 7 11:44:35 ws22vmsma01 sshd[101305]: Failed password for root from 167.71.209.2 port 56506 ssh2 ...	2020-06-08 00:38:44
47.188.41.97	attackbots	Jun 7 13:40:41 ns382633 sshd\[32290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.188.41.97 user=root Jun 7 13:40:43 ns382633 sshd\[32290\]: Failed password for root from 47.188.41.97 port 54570 ssh2 Jun 7 13:56:31 ns382633 sshd\[2474\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.188.41.97 user=root Jun 7 13:56:32 ns382633 sshd\[2474\]: Failed password for root from 47.188.41.97 port 50228 ssh2 Jun 7 14:05:58 ns382633 sshd\[4303\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.188.41.97 user=root	2020-06-08 00:01:06
156.196.236.71	attackspam	Automatic report - XMLRPC Attack	2020-06-08 00:25:55
195.136.95.154	attackbots	Jun 5 17:37:26 mail.srvfarm.net postfix/smtps/smtpd[3155319]: warning: unknown[195.136.95.154]: SASL PLAIN authentication failed: Jun 5 17:37:26 mail.srvfarm.net postfix/smtps/smtpd[3155319]: lost connection after AUTH from unknown[195.136.95.154] Jun 5 17:44:45 mail.srvfarm.net postfix/smtps/smtpd[3155811]: warning: unknown[195.136.95.154]: SASL PLAIN authentication failed: Jun 5 17:44:45 mail.srvfarm.net postfix/smtps/smtpd[3155811]: lost connection after AUTH from unknown[195.136.95.154] Jun 5 17:45:20 mail.srvfarm.net postfix/smtpd[3155922]: warning: unknown[195.136.95.154]: SASL PLAIN authentication failed:	2020-06-08 00:08:30
139.59.18.197	attackbots	Jun 7 16:50:05 mellenthin sshd[30921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.18.197 user=root Jun 7 16:50:08 mellenthin sshd[30921]: Failed password for invalid user root from 139.59.18.197 port 60820 ssh2	2020-06-08 00:26:17
201.55.179.57	attack	Jun 5 16:14:32 mail.srvfarm.net postfix/smtps/smtpd[3115656]: warning: 201-55-179-57.witelecom.com.br[201.55.179.57]: SASL PLAIN authentication failed: Jun 5 16:14:33 mail.srvfarm.net postfix/smtps/smtpd[3115656]: lost connection after AUTH from 201-55-179-57.witelecom.com.br[201.55.179.57] Jun 5 16:16:03 mail.srvfarm.net postfix/smtps/smtpd[3128930]: warning: 201-55-179-57.witelecom.com.br[201.55.179.57]: SASL PLAIN authentication failed: Jun 5 16:16:04 mail.srvfarm.net postfix/smtps/smtpd[3128930]: lost connection after AUTH from 201-55-179-57.witelecom.com.br[201.55.179.57] Jun 5 16:23:46 mail.srvfarm.net postfix/smtps/smtpd[3128930]: warning: 201-55-179-57.witelecom.com.br[201.55.179.57]: SASL PLAIN authentication failed:	2020-06-08 00:23:15
189.89.211.157	attackspambots	Jun 5 15:52:26 mail.srvfarm.net postfix/smtps/smtpd[3112685]: warning: 189-089-211-157.static.stratus.com.br[189.89.211.157]: SASL PLAIN authentication failed: Jun 5 15:52:27 mail.srvfarm.net postfix/smtps/smtpd[3112685]: lost connection after AUTH from 189-089-211-157.static.stratus.com.br[189.89.211.157] Jun 5 15:59:28 mail.srvfarm.net postfix/smtpd[3113804]: warning: 189-089-211-157.static.stratus.com.br[189.89.211.157]: SASL PLAIN authentication failed: Jun 5 15:59:28 mail.srvfarm.net postfix/smtpd[3113804]: lost connection after AUTH from 189-089-211-157.static.stratus.com.br[189.89.211.157] Jun 5 16:02:09 mail.srvfarm.net postfix/smtpd[3113438]: warning: 189-089-211-157.static.stratus.com.br[189.89.211.157]: SASL PLAIN authentication failed:	2020-06-08 00:45:39
191.53.221.214	attack	Jun 7 09:13:45 mail.srvfarm.net postfix/smtps/smtpd[37941]: warning: unknown[191.53.221.214]: SASL PLAIN authentication failed: Jun 7 09:13:45 mail.srvfarm.net postfix/smtps/smtpd[37941]: lost connection after AUTH from unknown[191.53.221.214] Jun 7 09:14:34 mail.srvfarm.net postfix/smtpd[54135]: warning: unknown[191.53.221.214]: SASL PLAIN authentication failed: Jun 7 09:14:34 mail.srvfarm.net postfix/smtpd[54135]: lost connection after AUTH from unknown[191.53.221.214] Jun 7 09:21:54 mail.srvfarm.net postfix/smtps/smtpd[55338]: warning: unknown[191.53.221.214]: SASL PLAIN authentication failed:	2020-06-08 00:09:14
170.84.140.10	attackbots	DATE:2020-06-07 14:05:41, IP:170.84.140.10, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-06-08 00:35:36
65.31.127.80	attackbotsspam	Jun 7 15:12:08 xeon sshd[60090]: Failed password for root from 65.31.127.80 port 38312 ssh2	2020-06-08 00:03:15
208.186.112.103	attackbotsspam	Jun 5 17:36:07 mail.srvfarm.net postfix/smtpd[3156520]: NOQUEUE: reject: RCPT from unknown[208.186.112.103]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 5 17:36:16 mail.srvfarm.net postfix/smtpd[3136971]: NOQUEUE: reject: RCPT from unknown[208.186.112.103]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 5 17:41:43 mail.srvfarm.net postfix/smtpd[3150162]: NOQUEUE: reject: RCPT from unknown[208.186.112.103]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 5 17:42:19 mail.srvfarm.net postfix/smtpd[3156520]: NOQUEUE: reject: RCPT from unknown[	2020-06-08 00:07:47
89.248.167.141	attackspambots	TCP (SYN) 89.248.167.141:8080 -> port 5128, len 44	2020-06-07 23:58:10
39.41.152.225	attackbotsspam	Automatic report - Port Scan Attack	2020-06-08 00:31:19
217.197.40.130	attackspambots	Jun 5 16:13:14 mail.srvfarm.net postfix/smtps/smtpd[3115646]: warning: unknown[217.197.40.130]: SASL PLAIN authentication failed: Jun 5 16:13:14 mail.srvfarm.net postfix/smtps/smtpd[3115646]: lost connection after AUTH from unknown[217.197.40.130] Jun 5 16:17:33 mail.srvfarm.net postfix/smtps/smtpd[3115649]: warning: unknown[217.197.40.130]: SASL PLAIN authentication failed: Jun 5 16:17:33 mail.srvfarm.net postfix/smtps/smtpd[3115649]: lost connection after AUTH from unknown[217.197.40.130] Jun 5 16:22:08 mail.srvfarm.net postfix/smtps/smtpd[3130804]: warning: unknown[217.197.40.130]: SASL PLAIN authentication failed:	2020-06-08 00:42:34
217.75.222.130	attack	Jun 5 16:20:44 mail.srvfarm.net postfix/smtps/smtpd[3130797]: warning: unknown[217.75.222.130]: SASL PLAIN authentication failed: Jun 5 16:20:44 mail.srvfarm.net postfix/smtps/smtpd[3130797]: lost connection after AUTH from unknown[217.75.222.130] Jun 5 16:22:37 mail.srvfarm.net postfix/smtps/smtpd[3130812]: warning: unknown[217.75.222.130]: SASL PLAIN authentication failed: Jun 5 16:22:37 mail.srvfarm.net postfix/smtps/smtpd[3130812]: lost connection after AUTH from unknown[217.75.222.130] Jun 5 16:26:26 mail.srvfarm.net postfix/smtps/smtpd[3129519]: warning: unknown[217.75.222.130]: SASL PLAIN authentication failed:	2020-06-08 00:22:28

最近上报的IP列表

191.96.249.215	190.200.24.108	182.52.137.45	202.86.223.42
176.115.66.231	61.223.79.196	114.34.225.45	14.174.236.20
94.243.181.199	191.96.249.184	123.148.241.18	113.170.201.120
87.26.48.139	179.102.235.85	171.4.238.114	138.122.61.66
186.91.224.124	78.236.74.146	194.190.110.239	186.250.130.4