69.94.139.105 - IPInfo

基本信息:

城市(city): Sacramento

省份(region): California

国家(country): United States

运营商(isp): Lanset America Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	SpamScore above: 10.0	2020-03-04 06:37:50

相同子网IP讨论:

IP	类型	评论内容	时间
69.94.139.243	attackspambots	Autoban 69.94.139.243 AUTH/CONNECT	2020-02-13 09:17:47

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 69.94.139.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48169
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;69.94.139.105.			IN	A

;; AUTHORITY SECTION:
.			471	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030300 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 04 06:37:46 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

105.139.94.69.in-addr.arpa domain name pointer even.dlitmtk.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
105.139.94.69.in-addr.arpa	name = even.dlitmtk.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
104.206.128.58	attackspam	" "	2019-08-20 11:05:33
89.248.174.3	attack	Port Scan detected from 89.248.174.3 (NL/Netherlands/security.criminalip.com). 4 hits in the last 280 seconds	2019-08-20 10:51:30
185.254.122.22	attack	Aug 20 02:19:00 TCP Attack: SRC=185.254.122.22 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=246 PROTO=TCP SPT=45860 DPT=18252 WINDOW=1024 RES=0x00 SYN URGP=0	2019-08-20 11:03:15
103.111.52.54	attack	103.111.52.54 - - [19/Aug/2019:20:49:38 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.111.52.54 - - [19/Aug/2019:20:49:40 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.111.52.54 - - [19/Aug/2019:20:49:41 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.111.52.54 - - [19/Aug/2019:20:49:41 +0200] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.111.52.54 - - [19/Aug/2019:20:49:42 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.111.52.54 - - [19/Aug/2019:20:49:43 +0200] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-08-20 11:11:20
104.243.41.97	attackbots	Invalid user he from 104.243.41.97 port 59532	2019-08-20 10:49:06
45.77.16.163	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-19 22:09:48,070 INFO [amun_request_handler] PortScan Detected on Port: 139 (45.77.16.163)	2019-08-20 10:49:39
171.25.193.25	attackbots	Automated report - ssh fail2ban: Aug 20 04:36:44 wrong password, user=root, port=13937, ssh2 Aug 20 04:36:48 wrong password, user=root, port=13937, ssh2 Aug 20 04:36:52 wrong password, user=root, port=13937, ssh2	2019-08-20 10:45:03
123.152.186.49	attackspambots	Telnet Server BruteForce Attack	2019-08-20 10:41:28
146.255.180.188	attack	SSH invalid-user multiple login try	2019-08-20 10:56:31
178.116.159.202	attackbotsspam	SSH Bruteforce attempt	2019-08-20 11:10:30
62.210.180.84	attackbots	\[2019-08-19 22:24:43\] NOTICE\[2288\] chan_sip.c: Registration from '"100"\' failed for '62.210.180.84:48380' - Wrong password \[2019-08-19 22:24:43\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-19T22:24:43.848-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7ff4d0348688",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.180.84/48380",Challenge="6ba01b41",ReceivedChallenge="6ba01b41",ReceivedHash="dc1344a84e52ee344a8fe7dce5b8d1f7" \[2019-08-19 22:30:20\] NOTICE\[2288\] chan_sip.c: Registration from '"334455"\' failed for '62.210.180.84:34280' - Wrong password \[2019-08-19 22:30:20\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-19T22:30:20.736-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="334455",SessionID="0x7ff4d09702e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210	2019-08-20 10:46:19
138.197.5.191	attackspambots	Aug 19 14:41:19 sachi sshd\[23859\]: Invalid user jader from 138.197.5.191 Aug 19 14:41:19 sachi sshd\[23859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.5.191 Aug 19 14:41:21 sachi sshd\[23859\]: Failed password for invalid user jader from 138.197.5.191 port 50946 ssh2 Aug 19 14:45:25 sachi sshd\[24269\]: Invalid user tomato from 138.197.5.191 Aug 19 14:45:25 sachi sshd\[24269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.5.191	2019-08-20 10:45:39
58.21.178.92	attackspam	Seq 2995002506	2019-08-20 10:57:43
103.86.135.187	attackbotsspam	port scan and connect, tcp 23 (telnet)	2019-08-20 11:17:04
170.82.48.34	attackbotsspam	firewall-block, port(s): 80/tcp	2019-08-20 10:35:08

最近上报的IP列表

186.92.45.237	47.74.234.121	88.246.152.50	70.220.102.158
192.241.211.149	37.43.46.236	36.63.233.12	131.202.234.221
187.181.100.75	40.136.128.196	42.144.180.236	44.199.225.198
113.176.131.131	97.231.206.0	216.58.120.66	5.107.236.225
63.84.22.26	49.68.170.110	179.198.19.76	175.24.135.91