200.91.139.242

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Costa Rica

运营商(isp): Instituto Costarricense de Electricidad Y Telecom.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Automatic report - Port Scan Attack	2020-07-01 19:29:20

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 200.91.139.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51188
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;200.91.139.242.			IN	A

;; AUTHORITY SECTION:
.			557	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070101 1800 900 604800 86400

;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 01 19:29:14 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 242.139.91.200.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 242.139.91.200.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
153.232.157.83	attackspambots	445/tcp [2019-08-15]1pkt	2019-08-16 04:48:03
185.63.199.154	attack	139/tcp 139/tcp [2019-08-15]2pkt	2019-08-16 04:25:48
198.54.14.12	attackspambots	Aug 15 23:45:02 www1 sshd\[32335\]: Invalid user wd from 198.54.14.12Aug 15 23:45:04 www1 sshd\[32335\]: Failed password for invalid user wd from 198.54.14.12 port 56329 ssh2Aug 15 23:49:02 www1 sshd\[43524\]: Invalid user postgres from 198.54.14.12Aug 15 23:49:04 www1 sshd\[43524\]: Failed password for invalid user postgres from 198.54.14.12 port 51130 ssh2Aug 15 23:53:06 www1 sshd\[56525\]: Invalid user oraprod from 198.54.14.12Aug 15 23:53:08 www1 sshd\[56525\]: Failed password for invalid user oraprod from 198.54.14.12 port 45931 ssh2 ...	2019-08-16 04:58:24
122.194.232.220	attackspam	22/tcp [2019-08-15]1pkt	2019-08-16 05:04:26
174.138.191.36	attack	Aug 15 20:21:14 hermescis postfix/smtpd\[22918\]: NOQUEUE: reject: RCPT from unknown\[174.138.191.36\]: 550 5.1.1 \: Recipient address rejected:* from=\ to=\ proto=ESMTP helo=\	2019-08-16 04:37:35
54.37.71.235	attack	Aug 15 16:17:39 TORMINT sshd\[12774\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.71.235 user=root Aug 15 16:17:41 TORMINT sshd\[12774\]: Failed password for root from 54.37.71.235 port 53315 ssh2 Aug 15 16:23:42 TORMINT sshd\[13200\]: Invalid user test from 54.37.71.235 Aug 15 16:23:42 TORMINT sshd\[13200\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.71.235 ...	2019-08-16 04:29:45
202.169.62.187	attackbotsspam	Aug 15 16:21:30 TORMINT sshd\[13023\]: Invalid user vel from 202.169.62.187 Aug 15 16:21:30 TORMINT sshd\[13023\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.169.62.187 Aug 15 16:21:32 TORMINT sshd\[13023\]: Failed password for invalid user vel from 202.169.62.187 port 42309 ssh2 ...	2019-08-16 04:29:11
49.88.112.90	attackbots	Aug 15 16:56:46 TORMINT sshd\[15744\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.90 user=root Aug 15 16:56:47 TORMINT sshd\[15744\]: Failed password for root from 49.88.112.90 port 42395 ssh2 Aug 15 16:56:54 TORMINT sshd\[15748\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.90 user=root ...	2019-08-16 04:57:53
106.12.111.201	attackspam	Aug 15 21:39:44 mail sshd\[13564\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.201 user=root Aug 15 21:39:46 mail sshd\[13564\]: Failed password for root from 106.12.111.201 port 46638 ssh2 ...	2019-08-16 04:41:11
119.28.105.127	attack	Aug 15 10:14:25 web9 sshd\[27629\]: Invalid user debug from 119.28.105.127 Aug 15 10:14:25 web9 sshd\[27629\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.105.127 Aug 15 10:14:28 web9 sshd\[27629\]: Failed password for invalid user debug from 119.28.105.127 port 38906 ssh2 Aug 15 10:21:34 web9 sshd\[29250\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.105.127 user=root Aug 15 10:21:36 web9 sshd\[29250\]: Failed password for root from 119.28.105.127 port 58938 ssh2	2019-08-16 04:26:23
1.52.165.210	attack	Splunk® : Brute-Force login attempt on SSH: Aug 15 16:21:41 testbed sshd[4595]: Connection closed by 1.52.165.210 port 46409 [preauth]	2019-08-16 04:26:50
154.8.217.73	attackspam	$f2bV_matches_ltvn	2019-08-16 04:44:37
51.89.57.112	attackbots	Splunk® : port scan detected: Aug 15 16:39:34 testbed kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:c0:42:d0:39:2c:30:08:00 SRC=51.89.57.112 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=36573 PROTO=TCP SPT=48857 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0	2019-08-16 04:55:12
113.122.132.85	attackspam	445/tcp [2019-08-15]1pkt	2019-08-16 04:53:28
162.62.26.56	attackbotsspam	" "	2019-08-16 04:30:40

最近上报的IP列表

198.68.33.199	133.172.227.124	196.157.226.141	189.15.249.115
129.104.34.4	6.48.63.94	148.115.119.125	177.191.28.91
200.204.94.57	131.160.74.11	219.169.127.52	216.58.200.14
65.9.91.171	18.127.193.213	87.166.222.163	147.244.47.154
119.17.7.68	14.118.167.24	108.24.115.253	114.41.20.173