5.139.117.58 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): OJSC Rostelecom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Aug 14 05:52:06 server2 sshd\[4109\]: User root from 5.139.117.58 not allowed because not listed in AllowUsers Aug 14 05:52:15 server2 sshd\[4134\]: User root from 5.139.117.58 not allowed because not listed in AllowUsers Aug 14 05:52:21 server2 sshd\[4140\]: User root from 5.139.117.58 not allowed because not listed in AllowUsers Aug 14 05:52:27 server2 sshd\[4147\]: Invalid user admin from 5.139.117.58 Aug 14 05:52:34 server2 sshd\[4151\]: Invalid user admin from 5.139.117.58 Aug 14 05:52:40 server2 sshd\[4155\]: Invalid user admin from 5.139.117.58	2019-08-14 19:24:20

类型

评论内容

时间

attackbots

Aug 14 05:52:06 server2 sshd\[4109\]: User root from 5.139.117.58 not allowed because not listed in AllowUsers
Aug 14 05:52:15 server2 sshd\[4134\]: User root from 5.139.117.58 not allowed because not listed in AllowUsers
Aug 14 05:52:21 server2 sshd\[4140\]: User root from 5.139.117.58 not allowed because not listed in AllowUsers
Aug 14 05:52:27 server2 sshd\[4147\]: Invalid user admin from 5.139.117.58
Aug 14 05:52:34 server2 sshd\[4151\]: Invalid user admin from 5.139.117.58
Aug 14 05:52:40 server2 sshd\[4155\]: Invalid user admin from 5.139.117.58

2019-08-14 19:24:20

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.139.117.58
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14878
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;5.139.117.58.			IN	A

;; AUTHORITY SECTION:
.			3583	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081400 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Aug 14 19:24:15 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

58.117.139.5.in-addr.arpa domain name pointer 58.117.139.5.donpac.ru.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
58.117.139.5.in-addr.arpa	name = 58.117.139.5.donpac.ru.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
139.59.211.245	attackbotsspam	$f2bV_matches	2020-03-31 18:34:12
51.38.130.205	attack	Mar 31 11:56:02 ns381471 sshd[4829]: Failed password for root from 51.38.130.205 port 54646 ssh2 Mar 31 11:59:59 ns381471 sshd[5092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.130.205	2020-03-31 18:26:32
123.20.106.104	attackbots	Mar 30 22:50:36 mailman postfix/smtpd[31608]: NOQUEUE: reject: RCPT from unknown[123.20.106.104]: 554 5.7.1 Service unavailable; Client host [123.20.106.104] blocked using dnsbl.dronebl.org; IRC spam drone (litmus/sdbot/fyle); from= to= proto=ESMTP helo= Mar 30 22:50:37 mailman postfix/smtpd[31608]: NOQUEUE: reject: RCPT from unknown[123.20.106.104]: 554 5.7.1 Service unavailable; Client host [123.20.106.104] blocked using dnsbl.dronebl.org; IRC spam drone (litmus/sdbot/fyle); from= to= proto=ESMTP helo=	2020-03-31 18:29:44
49.232.81.191	attack	Mar 31 07:10:54 ourumov-web sshd\[22312\]: Invalid user vd from 49.232.81.191 port 46348 Mar 31 07:10:54 ourumov-web sshd\[22312\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.81.191 Mar 31 07:10:56 ourumov-web sshd\[22312\]: Failed password for invalid user vd from 49.232.81.191 port 46348 ssh2 ...	2020-03-31 18:25:21
159.203.27.98	attack	Mar 31 07:44:48 vps647732 sshd[14657]: Failed password for root from 159.203.27.98 port 48138 ssh2 ...	2020-03-31 18:52:51
116.98.120.15	attackspambots	1585626601 - 03/31/2020 05:50:01 Host: 116.98.120.15/116.98.120.15 Port: 445 TCP Blocked	2020-03-31 19:02:09
122.152.219.138	attackbotsspam	Mar 31 05:50:50 debian-2gb-nbg1-2 kernel: \[7885705.216146\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=122.152.219.138 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=45 ID=0 DF PROTO=TCP SPT=22 DPT=60468 WINDOW=29200 RES=0x00 ACK SYN URGP=0	2020-03-31 18:22:35
210.0.225.194	attackspam	20/3/30@23:50:32: FAIL: Alarm-Network address from=210.0.225.194 ...	2020-03-31 18:37:46
202.184.32.35	attack	Web Probe / Attack	2020-03-31 19:01:36
213.74.176.36	attack	Mar 31 09:50:13 XXXXXX sshd[61192]: Invalid user wangwentao from 213.74.176.36 port 58496	2020-03-31 18:33:31
190.122.148.2	attackbotsspam	firewall-block, port(s): 8080/tcp	2020-03-31 18:46:33
23.76.239.217	attackspam	Mar 31 05:50:24 debian-2gb-nbg1-2 kernel: \[7885679.058365\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=23.76.239.217 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=0 DF PROTO=TCP SPT=80 DPT=62255 WINDOW=29200 RES=0x00 ACK SYN URGP=0	2020-03-31 18:42:22
185.220.100.254	attackbotsspam	Mar 31 10:53:57 srv-ubuntu-dev3 sshd[13104]: Invalid user admin from 185.220.100.254 Mar 31 10:53:57 srv-ubuntu-dev3 sshd[13104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.100.254 Mar 31 10:53:57 srv-ubuntu-dev3 sshd[13104]: Invalid user admin from 185.220.100.254 Mar 31 10:53:59 srv-ubuntu-dev3 sshd[13104]: Failed password for invalid user admin from 185.220.100.254 port 14322 ssh2 Mar 31 10:53:57 srv-ubuntu-dev3 sshd[13104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.100.254 Mar 31 10:53:57 srv-ubuntu-dev3 sshd[13104]: Invalid user admin from 185.220.100.254 Mar 31 10:53:59 srv-ubuntu-dev3 sshd[13104]: Failed password for invalid user admin from 185.220.100.254 port 14322 ssh2 Mar 31 10:54:01 srv-ubuntu-dev3 sshd[13104]: Failed password for invalid user admin from 185.220.100.254 port 14322 ssh2 Mar 31 10:53:57 srv-ubuntu-dev3 sshd[13104]: pam_unix(sshd:auth): authentication fai ...	2020-03-31 18:29:08
202.191.200.227	attack	2020-03-30 UTC: (30x) - ch,curt,dkp,edwin,fgh,gbj,geri,gv,it,jye,kacper,mzk,nginx,nproc,nvt,pramod,qah,qvf,rsl,rzk,tatjana,teamcity,uto,uuj,val,wk,wsk,xen,y,zhonghaoxi	2020-03-31 18:36:20
118.24.114.205	attack	Mar 31 04:18:00 dallas01 sshd[15436]: Failed password for root from 118.24.114.205 port 49342 ssh2 Mar 31 04:20:14 dallas01 sshd[16216]: Failed password for root from 118.24.114.205 port 40708 ssh2	2020-03-31 18:32:26

最近上报的IP列表

39.93.60.247	19.156.62.69	11.18.174.86	88.91.155.252
23.231.221.193	167.88.2.92	212.135.202.8	246.199.177.52
66.186.96.145	119.80.89.254	246.189.165.148	140.23.107.237
101.64.228.58	182.210.157.203	145.120.198.254	69.120.59.238
103.71.50.50	131.221.80.145	187.142.52.241	103.115.104.229