54.240.1.139 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
54.240.11.157	attack	Received: from 10.200.77.175 by atlas103.free.mail.ir2.yahoo.com with HTTP; Thu, 10 Sep 2020 13:49:06 +0000 Return-Path: <010001747846e4ef-e82af807-a135-478d-9248-09afeae6110c-000000@amazonses.com> Received: from 54.240.11.157 (EHLO a11-157.smtp-out.amazonses.com) by 10.200.77.175 with SMTPs; Thu, 10 Sep 2020 13:49:06 +0000 X-Originating-Ip: [54.240.11.157] Received-SPF: pass (domain of amazonses.com designates 54.240.11.157 as permitted sender) Authentication-Results: atlas103.free.mail.ir2.yahoo.com; dkim=pass header.i=@amazonses.com header.s=224i4yxa5dv7c2xz3womw6peuasteono; spf=pass smtp.mailfrom=amazonses.com; dmarc=unknown X-Apparently-To: aftpriv@yahoo.de; Thu, 10 Sep 2020 13:49:06 +0000	2020-09-12 01:09:48
54.240.11.157	attackspambots	Received: from 10.200.77.175 by atlas103.free.mail.ir2.yahoo.com with HTTP; Thu, 10 Sep 2020 13:49:06 +0000 Return-Path: <010001747846e4ef-e82af807-a135-478d-9248-09afeae6110c-000000@amazonses.com> Received: from 54.240.11.157 (EHLO a11-157.smtp-out.amazonses.com) by 10.200.77.175 with SMTPs; Thu, 10 Sep 2020 13:49:06 +0000 X-Originating-Ip: [54.240.11.157] Received-SPF: pass (domain of amazonses.com designates 54.240.11.157 as permitted sender) Authentication-Results: atlas103.free.mail.ir2.yahoo.com; dkim=pass header.i=@amazonses.com header.s=224i4yxa5dv7c2xz3womw6peuasteono; spf=pass smtp.mailfrom=amazonses.com; dmarc=unknown X-Apparently-To: aftpriv@yahoo.de; Thu, 10 Sep 2020 13:49:06 +0000	2020-09-11 17:05:48
54.240.11.157	attackbotsspam	Received: from 10.200.77.175 by atlas103.free.mail.ir2.yahoo.com with HTTP; Thu, 10 Sep 2020 13:49:06 +0000 Return-Path: <010001747846e4ef-e82af807-a135-478d-9248-09afeae6110c-000000@amazonses.com> Received: from 54.240.11.157 (EHLO a11-157.smtp-out.amazonses.com) by 10.200.77.175 with SMTPs; Thu, 10 Sep 2020 13:49:06 +0000 X-Originating-Ip: [54.240.11.157] Received-SPF: pass (domain of amazonses.com designates 54.240.11.157 as permitted sender) Authentication-Results: atlas103.free.mail.ir2.yahoo.com; dkim=pass header.i=@amazonses.com header.s=224i4yxa5dv7c2xz3womw6peuasteono; spf=pass smtp.mailfrom=amazonses.com; dmarc=unknown X-Apparently-To: aftpriv@yahoo.de; Thu, 10 Sep 2020 13:49:06 +0000	2020-09-11 09:18:56
54.240.11.144	attackspambots	From: "Lanterna Tática" (🔦 Super Lanterna Recarregável 88.000w com entrega sem custo.)	2020-06-04 00:40:28
54.240.14.85	attackspam	Mar 16 15:37:53 mail postfix/smtpd[23258]: lost connection after MAIL from a14-85.smtp-out.amazonses.com[54.240.14.85]	2020-03-17 04:54:33
54.240.14.192	spam	I'm not a member of netflix crap, and i didn't ask for that crap. And laugauge is spanisch too.	2020-02-26 19:42:03
54.240.14.183	attackbots	Sending SPAM email	2020-02-26 10:42:42
54.240.197.226	attackbotsspam	$f2bV_matches	2020-01-04 02:23:42
54.240.1.11	attack	Try access to SMTP/POP/IMAP server.	2019-12-07 03:04:31
54.240.168.56	attackbots	TCP Port Scanning	2019-12-06 18:35:38
54.240.10.77	attack	spam	2019-11-25 23:02:09
54.240.1.25	attackspambots	Try access to SMTP/POP/IMAP server.	2019-11-16 23:34:19
54.240.10.123	attack	Spam/Phish - smtp.mailfrom=reply.lexlegis-mailers.com; live.com; dkim=pass (signature wasReceived: from DB3EUR04HT013.eop-eur04.prod.protection.outlook.com Received: from DB3EUR04FT043.eop-eur04.prod.protection.outlook.com Received: from a10-123.smtp-out.amazonses.com (54.240.10.123) by	2019-10-12 07:28:44
54.240.14.174	attack	Sending out Netflix spam from IP 54.240.14.174 (amazon.com / amazonaws.com) I have NEVER been a Netflix customer and never asked for this junk. The website spammed out is https://www.netflix.com/signup/creditoption?nftoken=BQAbAAEBEA77T6CHfer3tv8qolkSAduAkLFC%2FFYUyiUS4Sdi62TDOAptLP7WiMxUQK74rIuN%2BRXrWDnwU8vxCNSC2khWG0ZmflN2tsqMsqNHMDWRdKmlf6XFVqwlgd%2BFLY2Nz88IH4y3pcuOeFYD5X9L4G9ZZfbRHvrmZF%2FjsAyUI1f5mpTFg3eEFWfNQayYDiVrbb%2FU65EF%2B0XXrVI0T4jKa2zmCB8w5g%3D%3D&lnktrk=EMP&g=AEF2F71097E503EBEB44921E2720235C64526E40&lkid=URL_SIGNUP_CREDIT IPs: 54.69.16.110, 54.70.73.70, 54.149.101.155, 54.201.91.38, 54.213.182.74, 52.37.77.112, 52.41.20.47, 52.41.193.16 (amazon.com / amazonaws.com) amazon are pure scumbags who allow their customers to send out spam and do nothing about it! Report via email and website at https://support.aws.amazon.com/#/contacts/report-abuse	2019-09-26 19:53:02
54.240.14.147	attackspam	Attempt to login to email server on SMTP service on 05-09-2019 09:34:42.	2019-09-05 17:13:16

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.240.1.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4048
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;54.240.1.139.			IN	A

;; AUTHORITY SECTION:
.			309	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022012900 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 29 23:12:16 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

139.1.240.54.in-addr.arpa domain name pointer a1-139.smtp-out.eu-west-1.amazonses.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
139.1.240.54.in-addr.arpa	name = a1-139.smtp-out.eu-west-1.amazonses.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
185.216.140.6	attackspambots	10/07/2019-18:03:47.700123 185.216.140.6 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-10-08 07:36:48
85.9.65.209	attackbotsspam	10/07/2019-23:59:35.543321 85.9.65.209 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2019-10-08 12:00:29
148.70.23.121	attackspambots	2019-10-07T23:44:51.1221631495-001 sshd\[33902\]: Invalid user Par0la123!@\# from 148.70.23.121 port 41680 2019-10-07T23:44:51.1250721495-001 sshd\[33902\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.23.121 2019-10-07T23:44:53.2235261495-001 sshd\[33902\]: Failed password for invalid user Par0la123!@\# from 148.70.23.121 port 41680 ssh2 2019-10-07T23:50:02.7213231495-001 sshd\[34394\]: Invalid user P@$$wort_1@3 from 148.70.23.121 port 53162 2019-10-07T23:50:02.7247181495-001 sshd\[34394\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.23.121 2019-10-07T23:50:04.8488311495-001 sshd\[34394\]: Failed password for invalid user P@$$wort_1@3 from 148.70.23.121 port 53162 ssh2 ...	2019-10-08 12:07:05
203.69.6.187	attackbotsspam	Oct 7 23:59:23 localhost kernel: [4244982.445171] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=203.69.6.187 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=236 ID=56077 PROTO=TCP SPT=49764 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 7 23:59:23 localhost kernel: [4244982.445187] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=203.69.6.187 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=236 ID=56077 PROTO=TCP SPT=49764 DPT=445 SEQ=2728901326 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 7 23:59:23 localhost kernel: [4244982.454396] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=203.69.6.187 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=237 ID=56077 PROTO=TCP SPT=49764 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 7 23:59:23 localhost kernel: [4244982.454403] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=203.69.6.187 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 T	2019-10-08 12:09:16
193.70.40.191	attackspambots	Oct 8 05:59:16 icinga sshd[2776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.40.191 Oct 8 05:59:18 icinga sshd[2776]: Failed password for invalid user user from 193.70.40.191 port 44440 ssh2 ...	2019-10-08 12:14:35
106.13.65.18	attack	2019-10-07T19:16:46.5707441495-001 sshd\[13045\]: Invalid user 123Fastfood from 106.13.65.18 port 41004 2019-10-07T19:16:46.5777251495-001 sshd\[13045\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.65.18 2019-10-07T19:16:48.1516501495-001 sshd\[13045\]: Failed password for invalid user 123Fastfood from 106.13.65.18 port 41004 ssh2 2019-10-07T19:20:30.6921981495-001 sshd\[13328\]: Invalid user xsw2zaq1 from 106.13.65.18 port 43706 2019-10-07T19:20:30.6987331495-001 sshd\[13328\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.65.18 2019-10-07T19:20:32.6893801495-001 sshd\[13328\]: Failed password for invalid user xsw2zaq1 from 106.13.65.18 port 43706 ssh2 ...	2019-10-08 07:40:50
139.155.121.230	attackspambots	Oct 8 00:18:55 lnxded64 sshd[20552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230	2019-10-08 07:46:52
67.198.128.26	attack	Oct 8 01:00:03 MK-Soft-VM4 sshd[11014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.198.128.26 Oct 8 01:00:05 MK-Soft-VM4 sshd[11014]: Failed password for invalid user qwerty1234 from 67.198.128.26 port 35128 ssh2 ...	2019-10-08 07:49:58
79.137.84.144	attackspambots	Oct 7 23:37:06 hcbbdb sshd\[13453\]: Invalid user test from 79.137.84.144 Oct 7 23:37:06 hcbbdb sshd\[13453\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.ip-79-137-84.eu Oct 7 23:37:09 hcbbdb sshd\[13453\]: Failed password for invalid user test from 79.137.84.144 port 51614 ssh2 Oct 7 23:41:23 hcbbdb sshd\[13863\]: Invalid user giselle from 79.137.84.144 Oct 7 23:41:23 hcbbdb sshd\[13863\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.ip-79-137-84.eu	2019-10-08 07:42:18
128.199.200.225	attackbots	C1,WP GET /suche/wp-login.php	2019-10-08 12:09:28
218.4.163.146	attack	Oct 8 06:59:29 www5 sshd\[59526\]: Invalid user 1QaZ2WsX3EdC4RfV from 218.4.163.146 Oct 8 06:59:29 www5 sshd\[59526\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.4.163.146 Oct 8 06:59:30 www5 sshd\[59526\]: Failed password for invalid user 1QaZ2WsX3EdC4RfV from 218.4.163.146 port 47136 ssh2 ...	2019-10-08 12:00:45
103.233.76.254	attackbots	2019-10-07T23:36:45.587573abusebot-5.cloudsearch.cf sshd\[27858\]: Invalid user lxm from 103.233.76.254 port 49468	2019-10-08 07:53:09
185.232.67.6	attack	Sep 28 04:13:44 microserver sshd[57011]: Invalid user admin from 185.232.67.6 port 58059 Sep 28 04:13:44 microserver sshd[57011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.232.67.6 Sep 28 04:13:46 microserver sshd[57011]: Failed password for invalid user admin from 185.232.67.6 port 58059 ssh2 Sep 28 04:21:18 microserver sshd[58238]: Invalid user admin from 185.232.67.6 port 41914 Sep 28 04:21:18 microserver sshd[58238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.232.67.6 Sep 28 11:46:24 microserver sshd[53405]: Invalid user admin from 185.232.67.6 port 57284 Sep 28 11:46:24 microserver sshd[53405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.232.67.6 Sep 28 11:46:26 microserver sshd[53405]: Failed password for invalid user admin from 185.232.67.6 port 57284 ssh2 Sep 28 11:51:41 microserver sshd[54084]: Invalid user admin from 185.232.67.6 port 40188 Sep 28 11:51:4	2019-10-08 12:01:07
62.234.128.16	attackbots	2019-10-07T18:57:18.0733641495-001 sshd\[11609\]: Failed password for invalid user Chicken123 from 62.234.128.16 port 34026 ssh2 2019-10-07T19:09:07.8700101495-001 sshd\[12485\]: Invalid user Amigo123 from 62.234.128.16 port 54550 2019-10-07T19:09:07.8782871495-001 sshd\[12485\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.128.16 2019-10-07T19:09:09.7734081495-001 sshd\[12485\]: Failed password for invalid user Amigo123 from 62.234.128.16 port 54550 ssh2 2019-10-07T19:13:04.3074451495-001 sshd\[12761\]: Invalid user Passw0rd@1 from 62.234.128.16 port 33160 2019-10-07T19:13:04.3159421495-001 sshd\[12761\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.128.16 ...	2019-10-08 07:30:55
220.130.135.10	attack	Oct 7 13:44:46 hanapaa sshd\[26866\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220-130-135-10.hinet-ip.hinet.net user=root Oct 7 13:44:48 hanapaa sshd\[26866\]: Failed password for root from 220.130.135.10 port 33598 ssh2 Oct 7 13:48:58 hanapaa sshd\[27245\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220-130-135-10.hinet-ip.hinet.net user=root Oct 7 13:48:59 hanapaa sshd\[27245\]: Failed password for root from 220.130.135.10 port 53689 ssh2 Oct 7 13:53:00 hanapaa sshd\[27590\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220-130-135-10.hinet-ip.hinet.net user=root	2019-10-08 07:55:07

最近上报的IP列表

62.171.153.106	47.215.0.211	48.130.167.41	24.85.100.16
45.172.15.83	211.141.7.203	162.255.87.220	74.42.190.174
92.114.186.128	248.28.190.156	92.83.191.249	213.110.78.250
3.255.103.230	91.76.175.12	28.233.195.154	234.173.249.177
97.202.127.48	215.189.222.18	228.21.160.126	62.176.113.48

基本信息:

用户上报:

相同子网IP讨论:

WHOIS信息:

DIG信息:

HOST信息:

NSLOOKUP信息:

相关IP信息:

最新评论:

最近上报的IP列表