37.139.19.169 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Mar 29 08:12:25 tuotantolaitos sshd[8654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.19.169 Mar 29 08:12:27 tuotantolaitos sshd[8654]: Failed password for invalid user pqk from 37.139.19.169 port 40842 ssh2 ...	2020-03-29 13:32:30

类型

评论内容

时间

attack

Mar 29 08:12:25 tuotantolaitos sshd[8654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.19.169
Mar 29 08:12:27 tuotantolaitos sshd[8654]: Failed password for invalid user pqk from 37.139.19.169 port 40842 ssh2
...

2020-03-29 13:32:30

相同子网IP讨论:

IP	类型	评论内容	时间
37.139.191.179	attackbots	Port probing on unauthorized port 8080	2020-10-01 04:08:47
37.139.191.179	attackspambots	Port probing on unauthorized port 8080	2020-09-30 20:18:45
37.139.191.179	attack	Port probing on unauthorized port 8080	2020-09-30 12:46:29

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 37.139.19.169
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20004
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;37.139.19.169.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032802 1800 900 604800 86400

;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 29 13:32:26 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 169.19.139.37.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 169.19.139.37.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
106.13.43.192	attackbotsspam	Sep 2 13:03:48 lcprod sshd\[13453\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.43.192 user=root Sep 2 13:03:50 lcprod sshd\[13453\]: Failed password for root from 106.13.43.192 port 39766 ssh2 Sep 2 13:06:47 lcprod sshd\[13930\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.43.192 user=root Sep 2 13:06:49 lcprod sshd\[13930\]: Failed password for root from 106.13.43.192 port 36282 ssh2 Sep 2 13:09:45 lcprod sshd\[14307\]: Invalid user test from 106.13.43.192 Sep 2 13:09:45 lcprod sshd\[14307\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.43.192	2019-09-03 07:24:36
106.12.11.160	attack	Sep 3 00:54:59 server sshd[46549]: Failed password for root from 106.12.11.160 port 41520 ssh2 Sep 3 01:04:30 server sshd[49025]: Failed password for invalid user mark from 106.12.11.160 port 39924 ssh2 Sep 3 01:09:01 server sshd[50114]: Failed password for invalid user oracle from 106.12.11.160 port 55304 ssh2	2019-09-03 07:57:28
185.93.2.120	attackspam	\[2019-09-02 19:30:53\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '185.93.2.120:3001' - Wrong password \[2019-09-02 19:30:53\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-02T19:30:53.099-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4621",SessionID="0x7f7b30db7498",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.93.2.120/59516",Challenge="4f908abc",ReceivedChallenge="4f908abc",ReceivedHash="21c975d3d2029079bddc033db70ed959" \[2019-09-02 19:31:26\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '185.93.2.120:3126' - Wrong password \[2019-09-02 19:31:26\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-02T19:31:26.015-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9209",SessionID="0x7f7b30133f58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.93.2.120/5	2019-09-03 07:35:30
157.230.163.6	attack	Sep 3 01:48:05 dedicated sshd[11256]: Invalid user admin from 157.230.163.6 port 59386	2019-09-03 07:59:38
147.135.199.1	attackbots	Sep 2 13:08:32 tdfoods sshd\[11279\]: Invalid user anathan from 147.135.199.1 Sep 2 13:08:32 tdfoods sshd\[11279\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip1.ip-147-135-199.eu Sep 2 13:08:33 tdfoods sshd\[11279\]: Failed password for invalid user anathan from 147.135.199.1 port 36470 ssh2 Sep 2 13:12:53 tdfoods sshd\[11736\]: Invalid user sylvestre from 147.135.199.1 Sep 2 13:12:53 tdfoods sshd\[11736\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip1.ip-147-135-199.eu	2019-09-03 07:28:36
91.121.205.83	attack	Sep 3 01:09:14 [host] sshd[21560]: Invalid user admin from 91.121.205.83 Sep 3 01:09:14 [host] sshd[21560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.205.83 Sep 3 01:09:17 [host] sshd[21560]: Failed password for invalid user admin from 91.121.205.83 port 48898 ssh2	2019-09-03 07:38:28
106.14.44.239	attackspambots	Unauthorised access (Sep 3) SRC=106.14.44.239 LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=29095 TCP DPT=8080 WINDOW=58840 SYN Unauthorised access (Sep 2) SRC=106.14.44.239 LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=20592 TCP DPT=8080 WINDOW=19238 SYN	2019-09-03 07:24:09
223.171.32.55	attack	Sep 3 01:09:38 MK-Soft-Root1 sshd\[23064\]: Invalid user pink from 223.171.32.55 port 38679 Sep 3 01:09:38 MK-Soft-Root1 sshd\[23064\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.171.32.55 Sep 3 01:09:40 MK-Soft-Root1 sshd\[23064\]: Failed password for invalid user pink from 223.171.32.55 port 38679 ssh2 ...	2019-09-03 07:31:14
191.53.194.157	attackbots	$f2bV_matches	2019-09-03 07:34:08
167.99.52.34	attackbotsspam	Sep 3 02:37:10 yabzik sshd[23220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.52.34 Sep 3 02:37:11 yabzik sshd[23220]: Failed password for invalid user info from 167.99.52.34 port 33048 ssh2 Sep 3 02:41:19 yabzik sshd[24825]: Failed password for root from 167.99.52.34 port 48938 ssh2	2019-09-03 07:47:12
138.68.212.91	attack	Honeypot hit.	2019-09-03 07:31:58
191.53.58.168	attackspambots	$f2bV_matches	2019-09-03 07:59:14
177.131.19.122	attack	2019-09-03T01:05:29.888111lon01.zurich-datacenter.net sshd\[26318\]: Invalid user info2 from 177.131.19.122 port 51448 2019-09-03T01:05:29.893598lon01.zurich-datacenter.net sshd\[26318\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.131.19.122.webflash.net.br 2019-09-03T01:05:32.280124lon01.zurich-datacenter.net sshd\[26318\]: Failed password for invalid user info2 from 177.131.19.122 port 51448 ssh2 2019-09-03T01:08:59.532293lon01.zurich-datacenter.net sshd\[26362\]: Invalid user admin from 177.131.19.122 port 51642 2019-09-03T01:08:59.541245lon01.zurich-datacenter.net sshd\[26362\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.131.19.122.webflash.net.br ...	2019-09-03 07:57:50
177.8.249.148	attackspambots	Unauthorized access to SSH at 2/Sep/2019:23:09:44 +0000. Received: (SSH-2.0-libssh2_1.8.0)	2019-09-03 07:27:44
167.71.203.150	attackspambots	Sep 2 13:09:13 tdfoods sshd\[11421\]: Invalid user myrhodesiaiscom from 167.71.203.150 Sep 2 13:09:13 tdfoods sshd\[11421\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.203.150 Sep 2 13:09:15 tdfoods sshd\[11421\]: Failed password for invalid user myrhodesiaiscom from 167.71.203.150 port 43704 ssh2 Sep 2 13:18:21 tdfoods sshd\[12296\]: Invalid user postgres from 167.71.203.150 Sep 2 13:18:21 tdfoods sshd\[12296\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.203.150	2019-09-03 07:45:00

最近上报的IP列表

157.208.232.2	129.40.21.93	120.45.58.220	159.197.4.191
149.182.219.208	170.144.161.82	207.61.123.76	111.229.3.209
96.56.162.138	42.2.80.196	85.208.140.29	118.175.223.192
196.19.56.80	51.158.96.229	196.19.53.139	114.40.85.12
196.19.56.131	188.227.18.48	191.95.21.180	193.228.109.171