41.139.4.49 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Ghana

运营商(isp): Suhum WAN Customers

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Aug 14 23:50:09 mail.srvfarm.net postfix/smtpd[736663]: warning: unknown[41.139.4.49]: SASL PLAIN authentication failed: Aug 14 23:50:09 mail.srvfarm.net postfix/smtpd[736663]: lost connection after AUTH from unknown[41.139.4.49] Aug 14 23:53:54 mail.srvfarm.net postfix/smtps/smtpd[734614]: warning: unknown[41.139.4.49]: SASL PLAIN authentication failed: Aug 14 23:53:54 mail.srvfarm.net postfix/smtps/smtpd[734614]: lost connection after AUTH from unknown[41.139.4.49] Aug 14 23:56:14 mail.srvfarm.net postfix/smtps/smtpd[737375]: warning: unknown[41.139.4.49]: SASL PLAIN authentication failed:	2020-08-15 17:26:32

类型

评论内容

时间

attackspambots

Aug 14 23:50:09 mail.srvfarm.net postfix/smtpd[736663]: warning: unknown[41.139.4.49]: SASL PLAIN authentication failed: 
Aug 14 23:50:09 mail.srvfarm.net postfix/smtpd[736663]: lost connection after AUTH from unknown[41.139.4.49]
Aug 14 23:53:54 mail.srvfarm.net postfix/smtps/smtpd[734614]: warning: unknown[41.139.4.49]: SASL PLAIN authentication failed: 
Aug 14 23:53:54 mail.srvfarm.net postfix/smtps/smtpd[734614]: lost connection after AUTH from unknown[41.139.4.49]
Aug 14 23:56:14 mail.srvfarm.net postfix/smtps/smtpd[737375]: warning: unknown[41.139.4.49]: SASL PLAIN authentication failed:

2020-08-15 17:26:32

相同子网IP讨论:

IP	类型	评论内容	时间
41.139.4.90	attackspambots	Aug 27 04:59:50 mail.srvfarm.net postfix/smtpd[1342033]: warning: unknown[41.139.4.90]: SASL PLAIN authentication failed: Aug 27 04:59:50 mail.srvfarm.net postfix/smtpd[1342033]: lost connection after AUTH from unknown[41.139.4.90] Aug 27 05:00:51 mail.srvfarm.net postfix/smtpd[1347722]: warning: unknown[41.139.4.90]: SASL PLAIN authentication failed: Aug 27 05:00:51 mail.srvfarm.net postfix/smtpd[1347722]: lost connection after AUTH from unknown[41.139.4.90] Aug 27 05:01:30 mail.srvfarm.net postfix/smtps/smtpd[1337554]: warning: unknown[41.139.4.90]: SASL PLAIN authentication failed:	2020-08-28 08:42:48
41.139.4.16	attack	Aug 15 01:09:08 mail.srvfarm.net postfix/smtpd[910655]: warning: unknown[41.139.4.16]: SASL PLAIN authentication failed: Aug 15 01:09:08 mail.srvfarm.net postfix/smtpd[910655]: lost connection after AUTH from unknown[41.139.4.16] Aug 15 01:17:25 mail.srvfarm.net postfix/smtps/smtpd[927803]: warning: unknown[41.139.4.16]: SASL PLAIN authentication failed: Aug 15 01:17:25 mail.srvfarm.net postfix/smtps/smtpd[927803]: lost connection after AUTH from unknown[41.139.4.16] Aug 15 01:19:05 mail.srvfarm.net postfix/smtpd[929464]: warning: unknown[41.139.4.16]: SASL PLAIN authentication failed:	2020-08-15 16:03:30
41.139.4.83	attackspam	Aug 7 05:17:41 mail.srvfarm.net postfix/smtps/smtpd[3176100]: warning: unknown[41.139.4.83]: SASL PLAIN authentication failed: Aug 7 05:17:41 mail.srvfarm.net postfix/smtps/smtpd[3176100]: lost connection after AUTH from unknown[41.139.4.83] Aug 7 05:22:41 mail.srvfarm.net postfix/smtpd[3188840]: warning: unknown[41.139.4.83]: SASL PLAIN authentication failed: Aug 7 05:22:41 mail.srvfarm.net postfix/smtpd[3188840]: lost connection after AUTH from unknown[41.139.4.83] Aug 7 05:26:19 mail.srvfarm.net postfix/smtpd[3188836]: warning: unknown[41.139.4.83]: SASL PLAIN authentication failed:	2020-08-07 17:05:27

类型

评论内容

时间

41.139.4.90

attackspambots

Aug 27 04:59:50 mail.srvfarm.net postfix/smtpd[1342033]: warning: unknown[41.139.4.90]: SASL PLAIN authentication failed: 
Aug 27 04:59:50 mail.srvfarm.net postfix/smtpd[1342033]: lost connection after AUTH from unknown[41.139.4.90]
Aug 27 05:00:51 mail.srvfarm.net postfix/smtpd[1347722]: warning: unknown[41.139.4.90]: SASL PLAIN authentication failed: 
Aug 27 05:00:51 mail.srvfarm.net postfix/smtpd[1347722]: lost connection after AUTH from unknown[41.139.4.90]
Aug 27 05:01:30 mail.srvfarm.net postfix/smtps/smtpd[1337554]: warning: unknown[41.139.4.90]: SASL PLAIN authentication failed:

2020-08-28 08:42:48

41.139.4.16

attack

Aug 15 01:09:08 mail.srvfarm.net postfix/smtpd[910655]: warning: unknown[41.139.4.16]: SASL PLAIN authentication failed: 
Aug 15 01:09:08 mail.srvfarm.net postfix/smtpd[910655]: lost connection after AUTH from unknown[41.139.4.16]
Aug 15 01:17:25 mail.srvfarm.net postfix/smtps/smtpd[927803]: warning: unknown[41.139.4.16]: SASL PLAIN authentication failed: 
Aug 15 01:17:25 mail.srvfarm.net postfix/smtps/smtpd[927803]: lost connection after AUTH from unknown[41.139.4.16]
Aug 15 01:19:05 mail.srvfarm.net postfix/smtpd[929464]: warning: unknown[41.139.4.16]: SASL PLAIN authentication failed:

2020-08-15 16:03:30

41.139.4.83

attackspam

Aug  7 05:17:41 mail.srvfarm.net postfix/smtps/smtpd[3176100]: warning: unknown[41.139.4.83]: SASL PLAIN authentication failed: 
Aug  7 05:17:41 mail.srvfarm.net postfix/smtps/smtpd[3176100]: lost connection after AUTH from unknown[41.139.4.83]
Aug  7 05:22:41 mail.srvfarm.net postfix/smtpd[3188840]: warning: unknown[41.139.4.83]: SASL PLAIN authentication failed: 
Aug  7 05:22:41 mail.srvfarm.net postfix/smtpd[3188840]: lost connection after AUTH from unknown[41.139.4.83]
Aug  7 05:26:19 mail.srvfarm.net postfix/smtpd[3188836]: warning: unknown[41.139.4.83]: SASL PLAIN authentication failed:

2020-08-07 17:05:27

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.139.4.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12784
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;41.139.4.49.			IN	A

;; AUTHORITY SECTION:
.			211	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081500 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Aug 15 17:26:26 CST 2020
;; MSG SIZE  rcvd: 115

HOST信息:

Host 49.4.139.41.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 49.4.139.41.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
94.102.50.155	attackspam	firewall-block, port(s): 22422/tcp	2020-09-29 20:47:46
167.71.47.142	attack	Sep 29 10:14:26 MainVPS sshd[17471]: Invalid user vnc from 167.71.47.142 port 33764 Sep 29 10:14:26 MainVPS sshd[17471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.47.142 Sep 29 10:14:26 MainVPS sshd[17471]: Invalid user vnc from 167.71.47.142 port 33764 Sep 29 10:14:28 MainVPS sshd[17471]: Failed password for invalid user vnc from 167.71.47.142 port 33764 ssh2 Sep 29 10:17:51 MainVPS sshd[25216]: Invalid user ubuntu from 167.71.47.142 port 42486 ...	2020-09-29 20:36:12
88.230.26.130	attackbots	ang 88.230.26.130 [29/Sep/2020:03:38:41 "-" "POST /wp-login.php 500 514 88.230.26.130 [29/Sep/2020:03:38:42 "-" "GET /wp-login.php 500 514 88.230.26.130 [29/Sep/2020:03:39:04 "-" "GET /wp-login.php 500 514	2020-09-29 20:32:17
196.43.196.30	attackspam	TCP port : 14710	2020-09-29 20:50:17
218.241.154.197	attackbots	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-29 20:45:16
129.204.231.225	attackspambots	$f2bV_matches	2020-09-29 21:02:28
162.243.128.227	attackbots	TCP (SYN) 162.243.128.227:36613 -> port 22, len 40	2020-09-29 20:59:27
36.112.104.194	attackspam	(sshd) Failed SSH login from 36.112.104.194 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 29 07:40:22 jbs1 sshd[21654]: Invalid user db1inst1 from 36.112.104.194 Sep 29 07:40:22 jbs1 sshd[21654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.112.104.194 Sep 29 07:40:24 jbs1 sshd[21654]: Failed password for invalid user db1inst1 from 36.112.104.194 port 15105 ssh2 Sep 29 07:49:40 jbs1 sshd[24958]: Invalid user solr from 36.112.104.194 Sep 29 07:49:40 jbs1 sshd[24958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.112.104.194	2020-09-29 21:02:57
191.185.175.102	attackspam	hzb4 191.185.175.102 [29/Sep/2020:03:38:39 "-" "POST /wp-login.php 200 1918 191.185.175.102 [29/Sep/2020:03:38:42 "-" "GET /wp-login.php 200 1532 191.185.175.102 [29/Sep/2020:03:38:45 "-" "POST /wp-login.php 200 1898	2020-09-29 20:35:41
111.72.194.102	attack	Sep 29 00:22:52 srv01 postfix/smtpd\[19604\]: warning: unknown\[111.72.194.102\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 29 00:33:09 srv01 postfix/smtpd\[19604\]: warning: unknown\[111.72.194.102\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 29 00:36:35 srv01 postfix/smtpd\[22584\]: warning: unknown\[111.72.194.102\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 29 00:36:47 srv01 postfix/smtpd\[22584\]: warning: unknown\[111.72.194.102\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 29 00:37:03 srv01 postfix/smtpd\[22584\]: warning: unknown\[111.72.194.102\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-09-29 20:43:53
134.175.146.231	attackbots	SSH BruteForce Attack	2020-09-29 20:46:37
91.236.172.95	attack	$f2bV_matches	2020-09-29 20:53:34
210.184.2.66	attackspambots	Sep 29 14:29:04 localhost sshd[2289703]: Invalid user ak47 from 210.184.2.66 port 44570 ...	2020-09-29 20:42:19
51.38.36.9	attackspam	prod11 ...	2020-09-29 20:42:01
111.229.1.180	attackbotsspam	(sshd) Failed SSH login from 111.229.1.180 (CN/China/-): 5 in the last 3600 secs	2020-09-29 20:53:09

最近上报的IP列表

27.211.94.136	164.180.72.204	122.160.10.220	247.90.179.43
94.224.75.88	133.208.107.197	221.154.98.255	20.105.13.126
234.44.26.110	60.153.210.212	204.250.209.111	237.87.168.249
58.230.46.207	23.65.145.224	106.62.219.224	47.54.36.201
185.209.162.60	45.176.215.70	141.145.116.229	23.82.28.25