41.139.12.151 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Ghana

运营商(isp): Y-Zone Service

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	TCP (SYN) 41.139.12.151:56658 -> port 445, len 40	2020-10-02 03:35:26
attack	Icarus honeypot on github	2020-10-01 19:48:17
attackspambots	SMB Server BruteForce Attack	2020-02-08 09:24:01
attackbots	445/tcp 445/tcp [2019-07-24/08-06]2pkt	2019-08-07 09:40:26

相同子网IP讨论:

IP	类型	评论内容	时间
41.139.12.109	attackspam	Aug 11 05:14:33 mail.srvfarm.net postfix/smtps/smtpd[2148611]: warning: unknown[41.139.12.109]: SASL PLAIN authentication failed: Aug 11 05:14:33 mail.srvfarm.net postfix/smtps/smtpd[2148611]: lost connection after AUTH from unknown[41.139.12.109] Aug 11 05:19:02 mail.srvfarm.net postfix/smtpd[2163446]: warning: unknown[41.139.12.109]: SASL PLAIN authentication failed: Aug 11 05:19:02 mail.srvfarm.net postfix/smtpd[2163446]: lost connection after AUTH from unknown[41.139.12.109] Aug 11 05:19:49 mail.srvfarm.net postfix/smtps/smtpd[2147252]: warning: unknown[41.139.12.109]: SASL PLAIN authentication failed:	2020-08-11 15:44:36
41.139.128.113	attack	Dovecot Invalid User Login Attempt.	2020-05-29 18:35:01

类型

评论内容

时间

41.139.12.109

attackspam

Aug 11 05:14:33 mail.srvfarm.net postfix/smtps/smtpd[2148611]: warning: unknown[41.139.12.109]: SASL PLAIN authentication failed: 
Aug 11 05:14:33 mail.srvfarm.net postfix/smtps/smtpd[2148611]: lost connection after AUTH from unknown[41.139.12.109]
Aug 11 05:19:02 mail.srvfarm.net postfix/smtpd[2163446]: warning: unknown[41.139.12.109]: SASL PLAIN authentication failed: 
Aug 11 05:19:02 mail.srvfarm.net postfix/smtpd[2163446]: lost connection after AUTH from unknown[41.139.12.109]
Aug 11 05:19:49 mail.srvfarm.net postfix/smtps/smtpd[2147252]: warning: unknown[41.139.12.109]: SASL PLAIN authentication failed:

2020-08-11 15:44:36

41.139.128.113

attack

Dovecot Invalid User Login Attempt.

2020-05-29 18:35:01

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.139.12.151
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26842
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;41.139.12.151.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080602 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Aug 07 09:40:17 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 151.12.139.41.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 151.12.139.41.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
222.186.175.167	attackspambots	SSH auth scanning - multiple failed logins	2019-12-02 06:21:56
3.115.49.134	attackbotsspam	Message ID Created at: Sun, Dec 1, 2019 at 8:37 AM (Delivered after -2424 seconds) From: Alert Subject: (36) Your account will be closed in 10 Hours SPF: PASS with IP 3.115.49.134 ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of bighpbiw@3veqv---3veqv----us-west-2.compute.amazonaws.com designates 3.115.49.134 as permitted sender) smtp.mailfrom=BiGHPbIw@3veqv---3veqv----us-west-2.compute.amazonaws.com Return-Path: Received: from cyborganic.com (ec2-3-115-49-134.ap-northeast-1.compute.amazonaws.com. [3.115.49.134]) by mx.google.com with ESMTP id x15si15785153pgk.593.2019.12.01.05.56.36	2019-12-02 06:01:21
61.8.69.98	attack	Dec 1 22:55:03 [host] sshd[7380]: Invalid user pcap from 61.8.69.98 Dec 1 22:55:03 [host] sshd[7380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.8.69.98 Dec 1 22:55:05 [host] sshd[7380]: Failed password for invalid user pcap from 61.8.69.98 port 42100 ssh2	2019-12-02 06:27:10
92.50.151.170	attackspam	Dec 1 16:35:52 sso sshd[21046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.50.151.170 Dec 1 16:35:54 sso sshd[21046]: Failed password for invalid user test2 from 92.50.151.170 port 37122 ssh2 ...	2019-12-02 06:05:53
210.16.189.87	attack	Dec 1 22:36:46 server sshd\[3176\]: Invalid user franki from 210.16.189.87 Dec 1 22:36:46 server sshd\[3176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.16.189.87 Dec 1 22:36:47 server sshd\[3176\]: Failed password for invalid user franki from 210.16.189.87 port 35162 ssh2 Dec 1 23:04:44 server sshd\[10796\]: Invalid user skullestad from 210.16.189.87 Dec 1 23:04:44 server sshd\[10796\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.16.189.87 ...	2019-12-02 06:31:53
183.150.139.62	attackbots	WordPress brute force	2019-12-02 06:24:27
218.93.114.155	attackspam	Dec 1 22:31:55 vps666546 sshd\[9345\]: Invalid user lcap_oracle from 218.93.114.155 port 63901 Dec 1 22:31:55 vps666546 sshd\[9345\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.93.114.155 Dec 1 22:31:56 vps666546 sshd\[9345\]: Failed password for invalid user lcap_oracle from 218.93.114.155 port 63901 ssh2 Dec 1 22:38:35 vps666546 sshd\[9662\]: Invalid user fabisch from 218.93.114.155 port 63303 Dec 1 22:38:35 vps666546 sshd\[9662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.93.114.155 ...	2019-12-02 06:04:54
49.234.199.232	attackbotsspam	Dec 1 18:39:26 raspberrypi sshd\[22702\]: Invalid user webmaster from 49.234.199.232Dec 1 18:39:28 raspberrypi sshd\[22702\]: Failed password for invalid user webmaster from 49.234.199.232 port 37948 ssh2Dec 1 18:51:02 raspberrypi sshd\[22987\]: Failed password for root from 49.234.199.232 port 39528 ssh2 ...	2019-12-02 06:04:33
68.183.91.147	attackbotsspam	Automatic report - XMLRPC Attack	2019-12-02 06:05:07
189.232.27.112	attack	sshd jail - ssh hack attempt	2019-12-02 06:28:30
168.121.198.14	attackbotsspam	Telnet/23 MH Probe, BF, Hack -	2019-12-02 06:19:28
182.61.36.38	attackbotsspam	Dec 1 22:28:29 vps666546 sshd\[9238\]: Invalid user viduya from 182.61.36.38 port 59786 Dec 1 22:28:29 vps666546 sshd\[9238\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.36.38 Dec 1 22:28:32 vps666546 sshd\[9238\]: Failed password for invalid user viduya from 182.61.36.38 port 59786 ssh2 Dec 1 22:34:28 vps666546 sshd\[9483\]: Invalid user myhrvold from 182.61.36.38 port 39810 Dec 1 22:34:28 vps666546 sshd\[9483\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.36.38 ...	2019-12-02 05:55:51
37.49.230.34	attackspam	\[2019-12-01 14:25:00\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-01T14:25:00.414-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="40040048422069033",SessionID="0x7f26c4276ea8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.34/50891",ACLName="no_extension_match" \[2019-12-01 14:25:13\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-01T14:25:13.073-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="33410048422069026",SessionID="0x7f26c40cecf8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.34/64731",ACLName="no_extension_match" \[2019-12-01 14:26:06\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-01T14:26:06.247-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="52470048422069032",SessionID="0x7f26c445f668",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.34/60324",ACLName="no_	2019-12-02 06:03:00
113.178.120.104	attackbots	[ER hit] Tried to deliver spam. Already well known.	2019-12-02 06:04:06
185.143.223.146	attack	Port scan: Attack repeated for 24 hours	2019-12-02 06:11:07

最近上报的IP列表

249.144.39.70	10.253.163.150	155.255.78.28	49.218.71.28
166.184.103.70	64.87.62.213	73.131.81.130	63.148.113.133
29.181.240.185	172.105.4.63	192.64.86.92	115.68.15.78
208.47.6.216	125.155.158.49	220.176.196.214	91.13.32.82
107.79.117.159	45.89.230.156	150.228.233.246	101.43.79.203