201.139.91.20 - IPInfo

基本信息:

城市(city): Leopoldina

省份(region): Minas Gerais

国家(country): Brazil

运营商(isp): P. R. Lima & Cia Ltda

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Automatic report - Port Scan Attack	2019-08-03 22:27:35

相同子网IP讨论:

IP	类型	评论内容	时间
201.139.91.178	attackspambots	(From lindsey.lira@outlook.com) Dear, This particular is Flora via Particular Care Promotions. Facial area covers up in good quality which will certificated by FOOD AND DRUG ADMINISTRATION can certainly maintain an individual as well as your household security. Below all of us wish to inform you that we get a new a great deal involving KN95 deal with face mask and also clinical 3 or more coatings ply mask together with wonderful price. If anyone have any kind of interest, be sure to feel free to let you recognize, we are going to mail you often the rate regarding your variety reference. For information, make sure you see all of our official internet site: www.face-mask.ltd and www.n95us.com Intended for wholesale contact: candace@face-mask.ltd Thanks and also Ideal relates to, Flora	2020-03-13 22:16:48

类型

评论内容

时间

201.139.91.178

attackspambots

(From lindsey.lira@outlook.com) Dear,

This particular is Flora via Particular Care Promotions.

Facial area  covers up in good quality which will certificated by FOOD AND DRUG ADMINISTRATION can certainly  maintain an individual  as well as your  household  security.

 Below all of us  wish to  inform you that we get a new  a great deal involving KN95 deal with face mask  and also  clinical 3 or more coatings ply mask together with  wonderful price.

If anyone have  any kind of interest, be sure to feel free to let you  recognize, we are going to mail you often the  rate regarding your variety reference.

For  information, make sure you  see all of our official  internet site: www.face-mask.ltd and www.n95us.com

Intended for wholesale contact: candace@face-mask.ltd

Thanks and also  Ideal  relates to,

Flora

2020-03-13 22:16:48

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.139.91.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3581
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;201.139.91.20.			IN	A

;; AUTHORITY SECTION:
.			1906	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080300 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 03 22:27:13 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 20.91.139.201.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 20.91.139.201.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
83.17.166.241	attackspam	Apr 19 13:26:28 sxvn sshd[362059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.17.166.241	2020-04-19 19:35:39
51.79.157.173	attackbotsspam	GB_RIPE-NCC-HM-MNT_<177>1587294128 [1:2403370:56800] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 36 [Classification: Misc Attack] [Priority: 2]: {TCP} 51.79.157.173:62568	2020-04-19 19:42:54
163.172.60.213	attackbotsspam	C1,DEF GET /wp-login.php	2020-04-19 19:15:35
58.213.90.34	attackbotsspam	Bruteforce detected by fail2ban	2020-04-19 19:27:27
190.60.94.189	attackspam	Apr 19 10:23:25 ws25vmsma01 sshd[156396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.60.94.189 Apr 19 10:23:28 ws25vmsma01 sshd[156396]: Failed password for invalid user vt from 190.60.94.189 port 58963 ssh2 ...	2020-04-19 19:54:36
122.51.248.146	attack	Apr 19 12:11:56 ns381471 sshd[12500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.248.146 Apr 19 12:11:59 ns381471 sshd[12500]: Failed password for invalid user mc from 122.51.248.146 port 46592 ssh2	2020-04-19 19:36:55
49.234.6.105	attack	(sshd) Failed SSH login from 49.234.6.105 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 19 09:50:30 amsweb01 sshd[8817]: Invalid user ko from 49.234.6.105 port 38926 Apr 19 09:50:33 amsweb01 sshd[8817]: Failed password for invalid user ko from 49.234.6.105 port 38926 ssh2 Apr 19 10:00:39 amsweb01 sshd[10254]: Invalid user vj from 49.234.6.105 port 59498 Apr 19 10:00:41 amsweb01 sshd[10254]: Failed password for invalid user vj from 49.234.6.105 port 59498 ssh2 Apr 19 10:05:34 amsweb01 sshd[11342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.6.105 user=root	2020-04-19 19:50:30
47.188.41.97	attackspambots	SSH Authentication Attempts Exceeded	2020-04-19 19:49:05
68.183.124.53	attackspambots	2020-04-19T13:01:40.907490vps751288.ovh.net sshd\[28461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.124.53 user=root 2020-04-19T13:01:43.458056vps751288.ovh.net sshd\[28461\]: Failed password for root from 68.183.124.53 port 40962 ssh2 2020-04-19T13:05:40.911223vps751288.ovh.net sshd\[28495\]: Invalid user zi from 68.183.124.53 port 59266 2020-04-19T13:05:40.917785vps751288.ovh.net sshd\[28495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.124.53 2020-04-19T13:05:43.086338vps751288.ovh.net sshd\[28495\]: Failed password for invalid user zi from 68.183.124.53 port 59266 ssh2	2020-04-19 19:13:57
156.232.2.2	attack	prod6 ...	2020-04-19 19:59:30
94.191.24.214	attack	odoo8 ...	2020-04-19 19:21:00
185.147.215.14	attack	[2020-04-19 07:20:24] NOTICE[1170] chan_sip.c: Registration from '' failed for '185.147.215.14:50015' - Wrong password [2020-04-19 07:20:24] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-19T07:20:24.288-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3159",SessionID="0x7f6c0817f3c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.14/50015",Challenge="3d0d9232",ReceivedChallenge="3d0d9232",ReceivedHash="231aed60a1c259792e9e1b0fd4392bab" [2020-04-19 07:22:40] NOTICE[1170] chan_sip.c: Registration from '' failed for '185.147.215.14:61091' - Wrong password [2020-04-19 07:22:40] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-19T07:22:40.201-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3160",SessionID="0x7f6c08341c08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.21 ...	2020-04-19 19:23:49
41.221.168.168	attackspambots	" "	2020-04-19 19:20:31
106.13.31.176	attackbots	SSH Brute-Force. Ports scanning.	2020-04-19 19:58:17
45.143.220.48	attackbotsspam	45.143.220.48 was recorded 6 times by 2 hosts attempting to connect to the following ports: 4460,6660,7760. Incident counter (4h, 24h, all-time): 6, 24, 343	2020-04-19 19:55:34

最近上报的IP列表

103.229.92.15	87.96.130.90	159.89.169.153	45.95.33.244
1.203.115.141	103.125.176.7	96.79.187.57	69.120.198.155
118.175.46.191	91.239.125.172	220.201.55.10	49.224.160.183
114.33.172.244	182.254.163.139	48.75.182.185	107.170.65.115
149.249.245.42	2.56.242.36	76.35.198.53	227.207.131.32