41.139.171.139

基本信息:

城市(city): Nairobi

省份(region): Nairobi Province

国家(country): Kenya

运营商(isp): For Converged Services in Eastern Region

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Brute force attempt	2020-02-05 05:06:59

相同子网IP讨论:

IP	类型	评论内容	时间
41.139.171.117	attackbots	(imapd) Failed IMAP login from 41.139.171.117 (KE/Kenya/41-139-171-117.safaricombusiness.co.ke): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 29 08:22:25 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=41.139.171.117, lip=5.63.12.44, session=	2020-04-29 19:05:13
41.139.171.137	attackbots	(imapd) Failed IMAP login from 41.139.171.137 (KE/Kenya/41-139-171-137.safaricombusiness.co.ke): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 26 16:30:00 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=, method=PLAIN, rip=41.139.171.137, lip=5.63.12.44, TLS, session=<1O1HVjCk784pi6uJ>	2020-04-27 01:56:53
41.139.171.35	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 04:43:17

类型

评论内容

时间

41.139.171.117

attackbots

(imapd) Failed IMAP login from 41.139.171.117 (KE/Kenya/41-139-171-117.safaricombusiness.co.ke): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 29 08:22:25 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=41.139.171.117, lip=5.63.12.44, session=

2020-04-29 19:05:13

41.139.171.137

attackbots

(imapd) Failed IMAP login from 41.139.171.137 (KE/Kenya/41-139-171-137.safaricombusiness.co.ke): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 26 16:30:00 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=, method=PLAIN, rip=41.139.171.137, lip=5.63.12.44, TLS, session=<1O1HVjCk784pi6uJ>

2020-04-27 01:56:53

41.139.171.35

attackbotsspam

MultiHost/MultiPort Probe, Scan, Hack -

2020-02-29 04:43:17

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.139.171.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27287
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;41.139.171.139.			IN	A

;; AUTHORITY SECTION:
.			288	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020401 1800 900 604800 86400

;; Query time: 99 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 05:06:56 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

139.171.139.41.in-addr.arpa domain name pointer 41-139-171-139.safaricombusiness.co.ke.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
139.171.139.41.in-addr.arpa	name = 41-139-171-139.safaricombusiness.co.ke.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
77.88.21.158	attack	SSH login attempts.	2020-02-17 19:40:12
109.107.65.184	attackspam	Feb 17 10:55:01 debian-2gb-nbg1-2 kernel: \[4192519.799755\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=109.107.65.184 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=65161 PROTO=TCP SPT=1564 DPT=23 WINDOW=24481 RES=0x00 SYN URGP=0	2020-02-17 19:59:28
106.12.55.170	attackspambots	Triggered by Fail2Ban at Ares web server	2020-02-17 20:00:36
95.73.233.147	attackbotsspam	0,42-03/22 [bc01/m14] PostRequest-Spammer scoring: brussels	2020-02-17 19:26:05
196.218.104.53	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-17 19:19:01
27.78.85.191	attackspambots	Automatic report - Port Scan Attack	2020-02-17 19:40:43
106.13.138.225	attackspam	Feb 17 06:40:29 dedicated sshd[19171]: Invalid user whitehat from 106.13.138.225 port 58318	2020-02-17 19:19:30
37.49.229.174	attackbotsspam	ET CINS Active Threat Intelligence Poor Reputation IP group 20 - port: 1024 proto: UDP cat: Misc Attack	2020-02-17 20:01:08
185.176.27.2	attack	02/17/2020-12:36:58.568475 185.176.27.2 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-02-17 19:51:31
123.181.121.230	attack	SSH login attempts.	2020-02-17 19:54:29
140.213.59.254	attackbotsspam	[Mon Feb 17 11:54:56.501374 2020] [:error] [pid 11333:tid 140577555363584] [client 140.213.59.254:42402] [client 140.213.59.254] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "118"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-hujan-bulanan/prakiraan-curah-hujan-bulanan/555557608-prakiraan-bulanan-curah-hujan-bulan-januari-tahun-2020-update-dari-analisis-bulan-september-2019"] [unique_id "XkocoCKsjobM@NabR@cILAAAAAE"], refe ...	2020-02-17 19:54:13
128.14.136.158	attackspambots	Automatic report - Banned IP Access	2020-02-17 19:59:08
125.161.131.120	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 17-02-2020 04:55:09.	2020-02-17 19:32:05
62.171.137.194	attack	Failed password for invalid user ubnt from 62.171.137.194 port 37782 ssh2	2020-02-17 19:29:50
98.136.96.92	attack	SSH login attempts.	2020-02-17 19:23:19

最近上报的IP列表

64.225.12.217	120.111.215.186	45.82.167.10	197.43.232.181
204.179.140.190	191.51.225.235	173.164.196.170	185.43.11.168
218.229.232.215	32.239.3.199	12.137.68.124	119.83.34.92
66.229.161.229	110.64.120.146	95.55.242.88	139.59.4.101
75.103.199.221	125.237.146.218	105.156.84.43	79.40.107.125