45.139.239.5 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): Chernyshov Aleksandr Aleksandrovich

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Attempted Denial of Service PROTOCOL-DNS DNS query amplification attempt	2020-02-16 07:22:54

相同子网IP讨论:

IP	类型	评论内容	时间
45.139.239.8	attackbotsspam	Feb 18 11:27:14 WHD8 postfix/smtpd\[77793\]: warning: unknown\[45.139.239.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 18 11:27:33 WHD8 postfix/smtpd\[78255\]: warning: unknown\[45.139.239.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 18 11:27:34 WHD8 postfix/smtpd\[78014\]: warning: unknown\[45.139.239.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 18 11:27:53 WHD8 postfix/smtpd\[77793\]: warning: unknown\[45.139.239.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 18 11:28:13 WHD8 postfix/smtpd\[78255\]: warning: unknown\[45.139.239.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 18 11:28:16 WHD8 postfix/smtpd\[77793\]: warning: unknown\[45.139.239.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 18 11:28:34 WHD8 postfix/smtpd\[78302\]: warning: unknown\[45.139.239.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 18 11:28:35 WHD8 postfix/smtpd\[78255\]: warning: unknown\[45.139.239.8\]: SASL LOGIN authentication failed: UGFzc ...	2020-05-06 02:32:31
45.139.239.2	attackspambots	CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2019-10-04 09:10:19

类型

评论内容

时间

45.139.239.8

attackbotsspam

Feb 18 11:27:14 WHD8 postfix/smtpd\[77793\]: warning: unknown\[45.139.239.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Feb 18 11:27:33 WHD8 postfix/smtpd\[78255\]: warning: unknown\[45.139.239.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Feb 18 11:27:34 WHD8 postfix/smtpd\[78014\]: warning: unknown\[45.139.239.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Feb 18 11:27:53 WHD8 postfix/smtpd\[77793\]: warning: unknown\[45.139.239.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Feb 18 11:28:13 WHD8 postfix/smtpd\[78255\]: warning: unknown\[45.139.239.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Feb 18 11:28:16 WHD8 postfix/smtpd\[77793\]: warning: unknown\[45.139.239.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Feb 18 11:28:34 WHD8 postfix/smtpd\[78302\]: warning: unknown\[45.139.239.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Feb 18 11:28:35 WHD8 postfix/smtpd\[78255\]: warning: unknown\[45.139.239.8\]: SASL LOGIN authentication failed: UGFzc
...

2020-05-06 02:32:31

45.139.239.2

attackspambots

CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found

2019-10-04 09:10:19

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.139.239.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44139
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.139.239.5.			IN	A

;; AUTHORITY SECTION:
.			431	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021501 1800 900 604800 86400

;; Query time: 207 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 16 07:22:51 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 5.239.139.45.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 5.239.139.45.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
138.118.138.147	attack	Automatic report - Port Scan	2020-10-05 01:07:09
217.219.70.158	attackspambots	8080/tcp [2020-08-23/10-03]2pkt	2020-10-05 01:21:55
138.75.192.123	attackspambots	TCP (SYN) 138.75.192.123:42417 -> port 23, len 40	2020-10-05 01:08:49
95.79.104.203	attack	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-10-04T15:32:08Z	2020-10-05 00:51:49
111.229.235.119	attack	2020-10-04T19:08:41.213860ks3355764 sshd[6600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.235.119 user=root 2020-10-04T19:08:42.685262ks3355764 sshd[6600]: Failed password for root from 111.229.235.119 port 35188 ssh2 ...	2020-10-05 01:10:44
103.150.208.24	attackspam	445/tcp [2020-10-03]1pkt	2020-10-05 00:40:33
188.166.178.42	attack	Oct 4 18:15:40 hidden sshd[46725]: Failed password for hidden from 188.166.178.42 port 53032 ssh2 Oct 4 18:19:55 hidden sshd[48368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.178.42 user=root Oct 4 18:19:58 hidden sshd[48368]: Failed password for hidden from 188.166.178.42 port 59616 ssh2 Oct 4 18:24:20 hidden sshd[50038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.178.42 user=root Oct 4 18:24:22 hidden sshd[50038]: Failed password for hidden from 188.166.178.42 port 38398 ssh2	2020-10-05 01:01:38
188.16.149.112	attackbotsspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-10-05 01:18:35
80.229.157.225	attackspam	TCP (SYN) 80.229.157.225:54729 -> port 22, len 44	2020-10-05 00:52:12
14.192.144.242	attackbotsspam	445/tcp [2020-10-03]1pkt	2020-10-05 00:58:20
119.28.4.12	attackbots	Oct 4 18:35:33 host1 sshd[1006833]: Failed password for root from 119.28.4.12 port 42686 ssh2 Oct 4 18:41:01 host1 sshd[1010325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.4.12 user=root Oct 4 18:41:04 host1 sshd[1010325]: Failed password for root from 119.28.4.12 port 48266 ssh2 Oct 4 18:41:01 host1 sshd[1010325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.4.12 user=root Oct 4 18:41:04 host1 sshd[1010325]: Failed password for root from 119.28.4.12 port 48266 ssh2 ...	2020-10-05 01:13:45
103.142.25.169	attackbots	Oct 4 16:54:39 v2202009116398126984 sshd[1825195]: Failed password for root from 103.142.25.169 port 45210 ssh2 Oct 4 16:59:04 v2202009116398126984 sshd[1825470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.142.25.169 user=root Oct 4 16:59:06 v2202009116398126984 sshd[1825470]: Failed password for root from 103.142.25.169 port 48874 ssh2 Oct 4 16:59:04 v2202009116398126984 sshd[1825470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.142.25.169 user=root Oct 4 16:59:06 v2202009116398126984 sshd[1825470]: Failed password for root from 103.142.25.169 port 48874 ssh2 ...	2020-10-05 01:19:46
125.119.237.129	attackspam	Auto Detect Rule! proto TCP (SYN), 125.119.237.129:41321->gjan.info:1433, len 44	2020-10-05 01:18:11
218.92.0.198	attackbots	Oct 4 18:01:55 sip sshd[1814532]: Failed password for root from 218.92.0.198 port 33526 ssh2 Oct 4 18:01:58 sip sshd[1814532]: Failed password for root from 218.92.0.198 port 33526 ssh2 Oct 4 18:02:01 sip sshd[1814532]: Failed password for root from 218.92.0.198 port 33526 ssh2 ...	2020-10-05 01:00:11
51.79.55.141	attackbots	Oct 4 13:14:22 scw-gallant-ride sshd[7234]: Failed password for root from 51.79.55.141 port 34572 ssh2	2020-10-05 00:57:46

最近上报的IP列表

143.255.0.235	42.98.108.180	180.124.195.95	186.28.130.53
143.208.251.11	85.13.101.172	116.178.224.232	192.21.187.119
27.158.142.118	175.100.38.163	171.235.68.248	215.181.200.200
123.138.241.13	93.176.182.65	143.208.233.179	114.33.221.230
196.202.80.143	143.208.203.10	78.189.17.33	143.208.194.205