193.17.6.139 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Turkey

运营商(isp): Hop Bilisim Teknolojileri Anonim Sirketi

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Postfix RBL failed	2020-02-24 17:38:34

相同子网IP讨论:

IP	类型	评论内容	时间
193.17.6.126	attackspam	Apr 20 14:25:02 our-server-hostname postfix/smtpd[26991]: connect from unknown[193.17.6.126] Apr x@x Apr 20 14:25:16 our-server-hostname postfix/smtpd[21305]: connect from unknown[193.17.6.126] Apr 20 14:25:16 our-server-hostname postfix/smtpd[26761]: connect from unknown[193.17.6.126] Apr x@x Apr 20 14:25:16 our-server-hostname postfix/smtpd[23008]: connect from unknown[193.17.6.126] Apr x@x Apr x@x Apr x@x Apr x@x Apr x@x Apr x@x Apr x@x Apr x@x Apr x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=193.17.6.126	2020-04-20 16:23:16
193.17.6.94	attackbotsspam	Apr 19 14:37:14 our-server-hostname postfix/smtpd[13097]: connect from unknown[193.17.6.94] Apr 19 14:37:15 our-server-hostname postfix/smtpd[13529]: connect from unknown[193.17.6.94] Apr 19 14:37:19 our-server-hostname sqlgrey: grey: new: 193.17.6.94(193.17.6.94), x@x -> x@x Apr x@x Apr x@x Apr x@x Apr x@x Apr x@x Apr 19 14:37:19 our-server-hostname postfix/smtpd[13529]: CF9FFA40026: client=unknown[193.17.6.94] Apr 19 14:37:20 our-server-hostname postfix/smtpd[15489]: BF9DDA4003C: client=unknown[127.0.0.1], orig_client=unknown[193.17.6.94] Apr 19 14:37:20 our-server-hostname amavis[2194]: (02194-13) Passed CLEAN, [193.17.6.94] [193.17.6.94] , mail_id: dLum5v8aeZy2, Hhostnames: -, size: 11293, queued_as: BF9DDA4003C, 156 ms Apr 19 14:37:25 our-server-hostname sqlgrey: grey: new: 193.17.6.94(193.17.6.94), x@x -> x@x Apr x@x Apr x@x Apr x@x Apr 19 14:37:27 our-server-hostname sqlgrey: grey: new: 193.17.6.94(193.17.6.94), x@x -> x@x Apr x@x Apr x@x Apr x@x Apr x@x Apr........ -------------------------------	2020-04-19 21:48:30
193.17.6.82	attack	Brute force SMTP login attempts.	2020-01-26 00:09:26
193.17.6.61	attackbots	Nov 22 15:11:38 our-server-hostname postfix/smtpd[23736]: connect from unknown[193.17.6.61] Nov x@x Nov 22 15:11:41 our-server-hostname postfix/smtpd[23736]: ACEDDA40057: client=unknown[193.17.6.61] Nov 22 15:11:42 our-server-hostname postfix/smtpd[17348]: 90966A4012F: client=unknown[127.0.0.1], orig_client=unknown[193.17.6.61] Nov 22 15:11:42 our-server-hostname amavis[12517]: (12517-10) Passed CLEAN, [193.17.6.61] [193.17.6.61] , mail_id: NE21hqYBCJDy, Hhostnames: -, size: 15430, queued_as: 90966A4012F, 130 ms Nov x@x Nov 22 15:11:42 our-server-hostname postfix/smtpd[23736]: D76F5A40057: client=unknown[193.17.6.61] Nov 22 15:11:43 our-server-hostname postfix/smtpd[11505]: 5DADBA4012D: client=unknown[127.0.0.1], orig_client=unknown[193.17.6.61] Nov 22 15:11:43 our-server-hostname amavis[16808]: (16808-04) Passed CLEAN, [193.17.6.61] [193.17.6.61] , mail_id: GccOSgUHlFDv, Hhostnames: -, size: 15686, queued_as: 5DADBA4012D, 127 ms Nov x@x Nov 22 15:11:43 our-se........ -------------------------------	2019-11-22 13:20:47
193.17.6.36	attack	Jun 27 05:51:16 h2421860 postfix/postscreen[15085]: CONNECT from [193.17.6.36]:58419 to [85.214.119.52]:25 Jun 27 05:51:16 h2421860 postfix/dnsblog[15088]: addr 193.17.6.36 listed by domain b.barracudacentral.org as 127.0.0.2 Jun 27 05:51:16 h2421860 postfix/dnsblog[15087]: addr 193.17.6.36 listed by domain Unknown.trblspam.com as 185.53.179.7 Jun 27 05:51:22 h2421860 postfix/postscreen[15085]: DNSBL rank 3 for [193.17.6.36]:58419 Jun x@x Jun 27 05:51:23 h2421860 postfix/postscreen[15085]: DISCONNECT [193.17.6.36]:58419 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=193.17.6.36	2019-06-27 14:33:39
193.17.6.29	attackbots	Jun 27 00:53:52 h2421860 postfix/postscreen[5252]: CONNECT from [193.17.6.29]:53776 to [85.214.119.52]:25 Jun 27 00:53:52 h2421860 postfix/dnsblog[5255]: addr 193.17.6.29 listed by domain b.barracudacentral.org as 127.0.0.2 Jun 27 00:53:52 h2421860 postfix/dnsblog[5257]: addr 193.17.6.29 listed by domain Unknown.trblspam.com as 185.53.179.7 Jun 27 00:53:58 h2421860 postfix/postscreen[5252]: DNSBL rank 3 for [193.17.6.29]:53776 Jun x@x Jun 27 00:53:59 h2421860 postfix/postscreen[5252]: DISCONNECT [193.17.6.29]:53776 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=193.17.6.29	2019-06-27 10:23:47

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 193.17.6.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23403
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;193.17.6.139.			IN	A

;; AUTHORITY SECTION:
.			232	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022400 1800 900 604800 86400

;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 24 17:38:31 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

139.6.17.193.in-addr.arpa domain name pointer decreasememorial.icu.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
139.6.17.193.in-addr.arpa	name = decreasememorial.icu.

Authoritative answers can be found from:

IP	类型	评论内容	时间
185.173.35.17	attack	138/tcp 5061/tcp 16010/tcp... [2019-04-28/06-28]86pkt,45pt.(tcp),5pt.(udp)	2019-06-29 13:54:31
178.128.217.135	attackspam	Jun 29 04:46:50 vmd17057 sshd\[22512\]: Invalid user admin from 178.128.217.135 port 47946 Jun 29 04:46:50 vmd17057 sshd\[22512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.217.135 Jun 29 04:46:52 vmd17057 sshd\[22512\]: Failed password for invalid user admin from 178.128.217.135 port 47946 ssh2 ...	2019-06-29 14:13:46
157.230.38.113	attackspam	SNORT TCP Port: 25 Classtype misc-attack - ET DROP Spamhaus DROP Listed Traffic Inbound group 12 - - Destination xx.xx.4.1 Port: 25 - - Source 157.230.38.113 Port: 35332 _ (Listed on dnsbl-sorbs abuseat-org spamcop zen-spamhaus eatingmonkey spam-sorbs) _ _ (1)	2019-06-29 13:55:09
140.143.30.191	attackbotsspam	$f2bV_matches	2019-06-29 14:08:04
195.3.146.88	attack	20089/tcp 40089/tcp 8977/tcp... [2019-06-08/28]516pkt,146pt.(tcp)	2019-06-29 13:59:39
109.233.110.33	attack	firewall-block, port(s): 445/tcp	2019-06-29 14:23:42
89.38.150.236	attackbotsspam	TCP src-port=59338 dst-port=25 dnsbl-sorbs abuseat-org barracuda (3)	2019-06-29 13:46:59
45.79.192.71	attack	24/tcp 15/tcp 18246/tcp... [2019-05-23/06-28]94pkt,74pt.(tcp)	2019-06-29 13:57:01
185.176.27.34	attackbots	29.06.2019 04:32:49 Connection to port 15697 blocked by firewall	2019-06-29 14:16:37
186.209.99.194	attack	445/tcp 445/tcp 445/tcp... [2019-06-19/28]4pkt,1pt.(tcp)	2019-06-29 13:40:21
54.187.73.80	attackbots	EMAIL SPAM	2019-06-29 14:01:48
221.160.100.14	attack	Invalid user netika from 221.160.100.14 port 40502	2019-06-29 14:04:03
220.178.18.42	attackbots	Jun 29 01:11:09 ns3042688 courier-imapd: LOGIN FAILED, method=PLAIN, ip=\[::ffff:220.178.18.42\] ...	2019-06-29 13:58:15
185.209.0.26	attack	Port Scan detected from 185.209.0.26 (LV/Latvia/-). 4 hits in the last 70 seconds	2019-06-29 14:08:27
125.64.94.211	attackbots	29.06.2019 05:34:18 Connection to port 7776 blocked by firewall	2019-06-29 14:23:12

最近上报的IP列表

66.241.77.81	180.124.201.158	49.34.172.150	39.148.44.55
185.137.233.164	132.237.191.58	91.111.163.33	46.154.180.251
245.219.192.155	234.166.93.167	246.101.74.57	229.160.80.216
37.108.50.41	7.240.232.97	21.3.150.209	111.248.114.251
168.27.149.48	209.147.57.42	14.177.114.208	160.158.68.209