181.41.216.139

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Digital Energy Technologies Chile Spa

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Brute force attack stopped by firewall	2019-12-12 09:46:54
attackspam	Dec 1 19:37:13 relay postfix/smtpd\[2802\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.139\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Dec 1 19:37:13 relay postfix/smtpd\[2802\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.139\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Dec 1 19:37:13 relay postfix/smtpd\[2802\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.139\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Dec 1 19:37:13 relay postfix/smtpd\[2802\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.139\]: 554 5.7.1 \: Relay access denied\; from=\ to=\	2019-12-02 03:26:04
attack	Nov 30 15:37:20 relay postfix/smtpd\[24164\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.139\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Nov 30 15:37:20 relay postfix/smtpd\[24164\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.139\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Nov 30 15:37:20 relay postfix/smtpd\[24164\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.139\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Nov 30 15:37:20 relay postfix/smtpd\[24164\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.139\]: 554 5.7.1 \: Relay ...	2019-11-30 23:45:28
attack	[portscan] tcp/25 [smtp] [scan/connect: 48 time(s)] in blocklist.de:'listed [mail]' in sorbs:'listed [spam]' in gbudb.net:'listed' *(RWIN=7300)(11291316)	2019-11-29 19:18:17
attack	missing rdns	2019-11-27 09:45:36

相同子网IP讨论:

IP	类型	评论内容	时间
181.41.216.141	attackbots	[portscan] tcp/25 [smtp] [scan/connect: 54 time(s)] in blocklist.de:'listed [mail]' in gbudb.net:'listed' *(RWIN=7300)(12172003)	2019-12-18 01:45:33
181.41.216.142	attackspambots	Dec 17 14:10:47 grey postfix/smtpd\[19361\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.142\]: 554 5.7.1 Service unavailable\; Client host \[181.41.216.142\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.41.216.142\]\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.130\]\>Dec 17 14:10:47 grey postfix/smtpd\[19361\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.142\]: 554 5.7.1 Service unavailable\; Client host \[181.41.216.142\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.41.216.142\]\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> ...	2019-12-17 22:00:14
181.41.216.135	attackspambots	Dec 17 01:36:21 grey postfix/smtpd\[11921\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.135\]: 554 5.7.1 Service unavailable\; Client host \[181.41.216.135\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.41.216.135\]\; from=\<2gie65i5t4wbvv@mir-vs.ru\> to=\ proto=ESMTP helo=\<\[181.41.216.130\]\>Dec 17 01:36:21 grey postfix/smtpd\[11921\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.135\]: 554 5.7.1 Service unavailable\; Client host \[181.41.216.135\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.41.216.135\]\; from=\<2gie65i5t4wbvv@mir-vs.ru\> to=\ proto=ESMTP helo=\<\[181.41.216.130\]\>Dec 17 01:36:21 grey postfix/smtpd\[11921\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.135\]: 554 5.7.1 Service unavailable\; Client host \[181.41.216.135\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.41.216.135\]\; from=\<2gie65i5t4wbvv@mir-vs.ru\> to=\	2019-12-17 09:21:43
181.41.216.145	attack	postfix	2019-12-17 02:11:56
181.41.216.141	attack	IP blocked	2019-12-16 18:13:07
181.41.216.140	attackbotsspam	Dec 16 05:58:35 relay postfix/smtpd\[31600\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.140\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 16 05:58:35 relay postfix/smtpd\[31600\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.140\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 16 05:58:35 relay postfix/smtpd\[31600\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.140\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 16 05:58:35 relay postfix/smtpd\[31600\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.140\]: 554 5.7.1 \: Relay access denied\; from=\	2019-12-16 13:39:59
181.41.216.130	attackbots	Dec 15 23:50:44 grey postfix/smtpd\[4437\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.130\]: 554 5.7.1 Service unavailable\; Client host \[181.41.216.130\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.41.216.130\]\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.130\]\>Dec 15 23:50:44 grey postfix/smtpd\[4437\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.130\]: 554 5.7.1 Service unavailable\; Client host \[181.41.216.130\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.41.216.130\]\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.130\]\>Dec 15 23:50:44 grey postfix/smtpd\[4437\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.130\]: 554 5.7.1 Service unavailable\; Client host \[181.41.216.130\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.41.216.130\]\; from=\	2019-12-16 07:50:08
181.41.216.130	attackspambots	Dec 15 21:49:29 mail postfix/smtpd\[15093\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.130\]: 554 5.7.1 \: Relay access denied\; from=\<7btcvm0h1wk3jy57@titovmed.ru\> to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 15 21:49:29 mail postfix/smtpd\[15093\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.130\]: 554 5.7.1 \: Relay access denied\; from=\<7btcvm0h1wk3jy57@titovmed.ru\> to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 15 21:49:29 mail postfix/smtpd\[15093\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.130\]: 554 5.7.1 \: Relay access denied\; from=\<7btcvm0h1wk3jy57@titovmed.ru\> to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 15 21:49:29 mail postfix/smtpd\[15093\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.130\]: 554 5.7.1 \: Relay access denied\; from=\<7btcvm0h1wk3jy57@titovmed.ru\> to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> De	2019-12-16 03:23:43
181.41.216.131	attackspam	Postfix Brute-Force reported by Fail2Ban	2019-12-16 01:34:36
181.41.216.141	attackbots	Dec 15 14:01:29 relay postfix/smtpd\[13969\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.141\]: 554 5.7.1 \: Relay access denied\; from=\<0g82fixp6at7@suretypartners.cz\> to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 15 14:01:29 relay postfix/smtpd\[13969\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.141\]: 554 5.7.1 \: Relay access denied\; from=\<0g82fixp6at7@suretypartners.cz\> to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 15 14:01:29 relay postfix/smtpd\[13969\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.141\]: 554 5.7.1 \: Relay access denied\; from=\<0g82fixp6at7@suretypartners.cz\> to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 15 14:01:29 relay postfix/smtpd\[13969\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.141\]: 554 5.7.1 \: Relay ac ...	2019-12-15 22:08:21
181.41.216.142	attackbots	Dec 15 07:29:42 relay postfix/smtpd\[21871\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.142\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 15 07:29:42 relay postfix/smtpd\[21871\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.142\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 15 07:29:42 relay postfix/smtpd\[21871\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.142\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 15 07:29:42 relay postfix/smtpd\[21871\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.142\]: 554 5.7.1 \	2019-12-15 15:42:33
181.41.216.130	attackbots	Automatically reported by fail2ban report script (netz-treff)	2019-12-14 23:30:36
181.41.216.141	attackspambots	Dec 14 14:03:38 grey postfix/smtpd\[28941\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.141\]: 554 5.7.1 Service unavailable\; Client host \[181.41.216.141\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.41.216.141\]\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.130\]\>Dec 14 14:03:38 grey postfix/smtpd\[28941\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.141\]: 554 5.7.1 Service unavailable\; Client host \[181.41.216.141\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.41.216.141\]\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.130\]\>Dec 14 14:03:38 grey postfix/smtpd\[28941\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.141\]: 554 5.7.1 Service unavailable\; Client host \[181.41.216.141\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.41.216.141\]\; from=\ to=\	2019-12-14 21:27:01
181.41.216.142	attack	Dec 14 11:27:57 relay postfix/smtpd\[6683\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.142\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 14 11:27:57 relay postfix/smtpd\[6683\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.142\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 14 11:27:57 relay postfix/smtpd\[6683\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.142\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 14 11:27:57 relay postfix/smtpd\[6683\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.142\]: 554 5.7.1 \	2019-12-14 18:53:46
181.41.216.143	attack	Dec 14 07:32:47 xeon postfix/smtpd[51330]: NOQUEUE: reject: RCPT from unknown[181.41.216.143]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=<[181.41.216.130]>	2019-12-14 15:31:12

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 181.41.216.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14020
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;181.41.216.139.			IN	A

;; AUTHORITY SECTION:
.			536	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112602 1800 900 604800 86400

;; Query time: 896 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 27 09:45:32 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 139.216.41.181.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.216.41.181.in-addr.arpa: NXDOMAIN

IP	类型	评论内容	时间
114.239.105.164	attackspam	Brute force blocker - service: proftpd1 - aantal: 155 - Mon Jan 7 14:01:49 2019	2020-02-07 05:00:11
222.186.175.182	attackbots	Feb 6 22:12:57 vpn01 sshd[4166]: Failed password for root from 222.186.175.182 port 36122 ssh2 Feb 6 22:13:00 vpn01 sshd[4166]: Failed password for root from 222.186.175.182 port 36122 ssh2 ...	2020-02-07 05:17:50
159.203.161.141	attackbots	Feb 6 21:53:17 debian-2gb-nbg1-2 kernel: \[3281640.825188\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=159.203.161.141 DST=195.201.40.59 LEN=48 TOS=0x00 PREC=0x00 TTL=117 ID=1666 PROTO=TCP SPT=57393 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0	2020-02-07 04:56:02
49.82.8.142	attack	Brute force blocker - service: proftpd1 - aantal: 129 - Thu Jan 10 11:25:07 2019	2020-02-07 04:41:11
45.62.232.37	attackbots	lfd: (smtpauth) Failed SMTP AUTH login from 45.62.232.37 (CA/Canada/c999962067-cloudpro-711324902.cloudatcost.com): 5 in the last 3600 secs - Thu Dec 6 21:20:29 2018	2020-02-07 05:05:01
222.186.190.92	attackspambots	Too many connections or unauthorized access detected from Arctic banned ip	2020-02-07 05:14:02
182.38.108.46	attackspambots	lfd: (smtpauth) Failed SMTP AUTH login from 182.38.108.46 (CN/China/-): 5 in the last 3600 secs - Sun Nov 25 13:23:26 2018	2020-02-07 05:16:27
160.19.98.75	attack	SSH invalid-user multiple login attempts	2020-02-07 05:18:51
128.199.220.207	attackbotsspam	Feb 6 03:33:14 server sshd\[27055\]: Invalid user tdn from 128.199.220.207 Feb 6 03:33:14 server sshd\[27055\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.220.207 Feb 6 03:33:15 server sshd\[27055\]: Failed password for invalid user tdn from 128.199.220.207 port 50834 ssh2 Feb 6 22:57:02 server sshd\[1144\]: Invalid user tmg from 128.199.220.207 Feb 6 22:57:02 server sshd\[1144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.220.207 ...	2020-02-07 04:52:16
49.82.39.1	attackspam	Brute force blocker - service: proftpd1 - aantal: 130 - Fri Jan 11 09:00:10 2019	2020-02-07 04:39:50
180.118.72.212	attack	Brute force blocker - service: proftpd1 - aantal: 155 - Mon Jan 7 14:05:36 2019	2020-02-07 04:55:25
129.213.87.90	attackspam	Brute force blocker - service: proftpd1 - aantal: 171 - Thu Jan 10 08:10:07 2019	2020-02-07 04:43:13
185.234.217.194	attackspambots	Feb 6 20:56:52 mail postfix/smtpd[21044]: warning: unknown[185.234.217.194]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 6 20:56:58 mail postfix/smtpd[21044]: warning: unknown[185.234.217.194]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 6 20:57:08 mail postfix/smtpd[21044]: warning: unknown[185.234.217.194]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-02-07 04:48:39
84.53.192.243	attackspam	lfd: (smtpauth) Failed SMTP AUTH login from 84.53.192.243 (RU/Russia/-): 5 in the last 3600 secs - Tue Dec 4 03:11:59 2018	2020-02-07 05:06:58
222.186.175.140	attackspam	Unauthorized access to SSH at 6/Feb/2020:21:05:16 +0000. Received: (SSH-2.0-PuTTY)	2020-02-07 05:06:42

最近上报的IP列表

116.174.209.115	208.71.161.91	120.66.179.23	51.154.203.113
231.167.109.76	114.4.27.11	84.73.60.32	218.83.81.108
190.62.246.155	106.191.251.115	241.190.231.18	167.188.86.239
120.224.98.197	193.4.248.118	176.159.88.76	33.42.172.252
156.236.95.138	108.62.141.203	163.214.102.44	15.87.223.99