200.68.139.6 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Mexico

运营商(isp): RadioMovil Dipsa S.A. de C.V.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Mobile ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	2019-10-21 x@x 2019-10-21 21:20:07 unexpected disconnection while reading SMTP command from ([200.68.139.6]) [200.68.139.6]:12609 I=[10.100.18.21]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=200.68.139.6	2019-10-22 05:41:57

类型

评论内容

时间

attack

2019-10-21 x@x
2019-10-21 21:20:07 unexpected disconnection while reading SMTP command from ([200.68.139.6]) [200.68.139.6]:12609 I=[10.100.18.21]:25 (error: Connection reset by peer)
2019-10-21 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=200.68.139.6

2019-10-22 05:41:57

相同子网IP讨论:

IP	类型	评论内容	时间
200.68.139.206	spambotsattackproxynormal	Busco mi celular	2021-06-29 09:38:52
200.68.139.23	normal	Localizador	2021-03-07 12:32:13
200.68.139.42	attack	2019-07-06 21:53:56 1hjqku-0001v9-4X SMTP connection from $\[200.68.139.42\]$ \[200.68.139.42\]:17549 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-06 21:54:11 1hjql8-0001vh-4k SMTP connection from $\[200.68.139.42\]$ \[200.68.139.42\]:24876 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-06 21:54:21 1hjqlI-0001vz-Rh SMTP connection from $\[200.68.139.42\]$ \[200.68.139.42\]:24583 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-01-29 23:43:21
200.68.139.23	attackspam	SSH invalid-user multiple login try	2019-09-28 06:21:03

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 200.68.139.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34736
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;200.68.139.6.			IN	A

;; AUTHORITY SECTION:
.			549	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102101 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 22 05:41:54 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 6.139.68.200.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 6.139.68.200.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
52.78.189.104	attackspam	2019-10-05T12:11:17.582669abusebot-3.cloudsearch.cf sshd\[24830\]: Invalid user Eternite from 52.78.189.104 port 58500	2019-10-05 20:22:41
207.154.239.128	attack	2019-10-05T12:42:16.676470abusebot-6.cloudsearch.cf sshd\[16278\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.239.128 user=root	2019-10-05 20:52:47
193.154.102.197	attackbotsspam	Automatic report - Port Scan Attack	2019-10-05 20:36:05
51.89.247.173	attack	Oct 05 14:21:25 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=51.89.247.173, lip=192.168.100.101, session=\\ Oct 05 14:21:30 pop3-login: Info: Aborted login $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=51.89.247.173, lip=192.168.100.101, session=\<7Zdu2yiUfAAzWfet\>\ Oct 05 14:21:30 pop3-login: Info: Aborted login $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=51.89.247.173, lip=192.168.100.101, session=\\ Oct 05 14:21:38 pop3-login: Info: Aborted login $auth failed, 1 attempts in 10 secs$: user=\, method=PLAIN, rip=51.89.247.173, lip=192.168.100.101, session=\\ Oct 05 14:21:46 pop3-login: Info: Aborted login $auth failed, 1 attempts in 10 secs$: user=\, method=PLAIN, rip=51.89.247.173, lip=192.168.100.101, session=\\ Oct 05 14:21:56 pop	2019-10-05 20:52:18
27.254.130.69	attack	Oct 5 13:40:21 bouncer sshd\[3341\]: Invalid user Santos_123 from 27.254.130.69 port 54327 Oct 5 13:40:21 bouncer sshd\[3341\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.130.69 Oct 5 13:40:23 bouncer sshd\[3341\]: Failed password for invalid user Santos_123 from 27.254.130.69 port 54327 ssh2 ...	2019-10-05 20:44:31
206.189.166.172	attack	Invalid user user from 206.189.166.172 port 50530	2019-10-05 20:23:08
140.143.206.137	attackspam	Invalid user syslog from 140.143.206.137 port 33700	2019-10-05 20:55:50
147.78.53.121	attack	Automatic report - Banned IP Access	2019-10-05 20:55:01
112.85.42.171	attack	web-1 [ssh] SSH Attack	2019-10-05 20:45:52
185.176.27.98	attack	firewall-block, port(s): 39096/tcp	2019-10-05 20:43:24
218.92.0.180	attack	$f2bV_matches	2019-10-05 20:50:04
112.85.42.174	attack	$f2bV_matches	2019-10-05 20:55:35
54.39.187.138	attackspam	2019-10-05T12:05:30.095967shield sshd\[21157\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=srv-test.faceldi.net user=root 2019-10-05T12:05:31.713018shield sshd\[21157\]: Failed password for root from 54.39.187.138 port 45161 ssh2 2019-10-05T12:09:06.670096shield sshd\[21605\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=srv-test.faceldi.net user=root 2019-10-05T12:09:08.615930shield sshd\[21605\]: Failed password for root from 54.39.187.138 port 36713 ssh2 2019-10-05T12:12:45.114047shield sshd\[22230\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=srv-test.faceldi.net user=root	2019-10-05 20:27:19
222.186.169.192	attackbotsspam	2019-10-05T14:31:17.426575lon01.zurich-datacenter.net sshd\[1090\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.192 user=root 2019-10-05T14:31:20.082558lon01.zurich-datacenter.net sshd\[1090\]: Failed password for root from 222.186.169.192 port 28684 ssh2 2019-10-05T14:31:23.992219lon01.zurich-datacenter.net sshd\[1090\]: Failed password for root from 222.186.169.192 port 28684 ssh2 2019-10-05T14:31:27.450100lon01.zurich-datacenter.net sshd\[1090\]: Failed password for root from 222.186.169.192 port 28684 ssh2 2019-10-05T14:31:31.986762lon01.zurich-datacenter.net sshd\[1090\]: Failed password for root from 222.186.169.192 port 28684 ssh2 ...	2019-10-05 20:37:56
139.162.124.90	attackbots	firewall-block, port(s): 47808/tcp	2019-10-05 20:59:23

最近上报的IP列表

223.104.65.204	89.169.110.159	152.81.75.114	81.171.56.207
114.236.203.9	113.184.233.206	194.44.219.75	190.73.40.14
49.213.187.44	187.157.97.230	149.188.146.174	171.236.158.162
253.168.49.168	114.34.101.37	37.107.182.211	86.135.130.23
116.97.213.13	61.240.198.173	103.221.69.246	100.128.238.49