191.217.139.12

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Brazil

运营商(isp): Brasil Telecom S.A.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	2020-05-21T06:06:10.5633381240 sshd\[12332\]: Invalid user ubnt from 191.217.139.12 port 2925 2020-05-21T06:06:10.8596681240 sshd\[12332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.217.139.12 2020-05-21T06:06:12.8433321240 sshd\[12332\]: Failed password for invalid user ubnt from 191.217.139.12 port 2925 ssh2 ...	2020-05-21 13:41:10

类型

评论内容

时间

attack

2020-05-21T06:06:10.5633381240 sshd\[12332\]: Invalid user ubnt from 191.217.139.12 port 2925
2020-05-21T06:06:10.8596681240 sshd\[12332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.217.139.12
2020-05-21T06:06:12.8433321240 sshd\[12332\]: Failed password for invalid user ubnt from 191.217.139.12 port 2925 ssh2
...

2020-05-21 13:41:10

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 191.217.139.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28909
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;191.217.139.12.			IN	A

;; AUTHORITY SECTION:
.			525	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052101 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 21 13:41:02 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 12.139.217.191.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 12.139.217.191.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
218.92.0.249	attackbotsspam	Sep 17 17:09:12 minden010 sshd[10069]: Failed password for root from 218.92.0.249 port 1858 ssh2 Sep 17 17:09:22 minden010 sshd[10069]: Failed password for root from 218.92.0.249 port 1858 ssh2 Sep 17 17:09:25 minden010 sshd[10069]: Failed password for root from 218.92.0.249 port 1858 ssh2 Sep 17 17:09:25 minden010 sshd[10069]: error: maximum authentication attempts exceeded for root from 218.92.0.249 port 1858 ssh2 [preauth] ...	2020-09-17 23:14:44
196.28.226.146	attack	RDP Bruteforce	2020-09-17 23:19:28
106.54.42.50	attack	RDP Bruteforce	2020-09-17 23:27:50
91.192.175.230	attack	Unauthorized connection attempt from IP address 91.192.175.230 on Port 445(SMB)	2020-09-17 22:56:08
120.53.117.206	attackbotsspam	RDP Bruteforce	2020-09-17 23:25:13
134.122.23.226	attack	TCP (SYN) 134.122.23.226:33558 -> port 8080, len 40	2020-09-17 22:51:32
65.40.253.240	attackbotsspam	Unauthorized connection attempt from IP address 65.40.253.240 on Port 445(SMB)	2020-09-17 23:04:35
185.193.90.98	attackspambots	scans 5 times in preceeding hours on the ports (in chronological order) 7250 1988 3411 7250 3899	2020-09-17 22:58:52
178.209.71.119	attackspambots	Unauthorized connection attempt from IP address 178.209.71.119 on Port 445(SMB)	2020-09-17 23:13:41
212.55.214.194	attackbotsspam	RDP Bruteforce	2020-09-17 23:18:17
37.120.153.210	attackspambots	[2020-09-16 17:25:01] NOTICE[1239] chan_sip.c: Registration from '"171"' failed for '37.120.153.210:22977' - Wrong password [2020-09-16 17:25:01] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-16T17:25:01.866-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="171",SessionID="0x7f4d480d6c18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.120.153.210/22977",Challenge="7ab7eb6e",ReceivedChallenge="7ab7eb6e",ReceivedHash="a23281c4ab54b8f5e3daf95335e418f1" [2020-09-16 17:25:09] NOTICE[1239] chan_sip.c: Registration from '"173"' failed for '37.120.153.210:51970' - Wrong password [2020-09-16 17:25:09] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-16T17:25:09.883-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="173",SessionID="0x7f4d481972d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.1 ...	2020-09-17 23:02:53
121.229.63.151	attackbotsspam	$f2bV_matches	2020-09-17 23:24:47
69.160.4.155	attack	RDP Bruteforce	2020-09-17 23:30:09
190.152.245.102	attackbotsspam	RDP Bruteforce	2020-09-17 23:21:20
192.241.238.214	attackbots	Attempted connection to port 990.	2020-09-17 22:55:10

最近上报的IP列表

36.74.120.20	211.24.2.134	85.21.78.213	119.145.73.35
45.235.31.5	217.146.180.254	110.44.123.116	92.96.166.65
191.127.56.134	121.231.8.70	77.68.92.242	162.243.143.225
35.197.250.45	118.173.219.234	173.88.208.182	122.51.133.201
117.212.94.229	187.58.160.206	174.219.29.152	81.89.58.153