89.107.139.136

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
89.107.139.49	attackbots	Unauthorized connection attempt from IP address 89.107.139.49 on Port 445(SMB)	2020-08-02 08:06:59
89.107.139.112	attackbots	1595429526 - 07/22/2020 16:52:06 Host: 89.107.139.112/89.107.139.112 Port: 445 TCP Blocked	2020-07-22 23:48:15
89.107.139.103	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-23 11:41:18

类型

评论内容

时间

89.107.139.49

attackbots

Unauthorized connection attempt from IP address 89.107.139.49 on Port 445(SMB)

2020-08-02 08:06:59

89.107.139.112

attackbots

1595429526 - 07/22/2020 16:52:06 Host: 89.107.139.112/89.107.139.112 Port: 445 TCP Blocked

2020-07-22 23:48:15

89.107.139.103

attack

Honeypot attack, port: 445, PTR: PTR record not found

2020-01-23 11:41:18

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.107.139.136
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32742
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;89.107.139.136.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 08:12:59 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

Host 136.139.107.89.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 136.139.107.89.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
104.236.33.155	attackbotsspam	(sshd) Failed SSH login from 104.236.33.155 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 11 19:32:22 amsweb01 sshd[32218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.33.155 user=root Aug 11 19:32:24 amsweb01 sshd[32218]: Failed password for root from 104.236.33.155 port 39122 ssh2 Aug 11 19:36:41 amsweb01 sshd[338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.33.155 user=root Aug 11 19:36:44 amsweb01 sshd[338]: Failed password for root from 104.236.33.155 port 57036 ssh2 Aug 11 19:40:30 amsweb01 sshd[898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.33.155 user=root	2020-08-12 02:53:19
220.180.192.152	attackbots	Aug 11 14:40:31 haigwepa sshd[21127]: Failed password for root from 220.180.192.152 port 55018 ssh2 ...	2020-08-12 03:13:06
49.150.98.23	attackbotsspam	1597147573 - 08/11/2020 14:06:13 Host: 49.150.98.23/49.150.98.23 Port: 445 TCP Blocked	2020-08-12 03:12:51
191.235.73.85	attack	Aug 11 19:12:18 sso sshd[1833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.235.73.85 Aug 11 19:12:20 sso sshd[1833]: Failed password for invalid user administratrice123 from 191.235.73.85 port 53698 ssh2 ...	2020-08-12 03:21:11
212.166.68.146	attackspam	Aug 11 18:21:01 hidden sshd[16959]: Failed password for hidden from 212.166.68.146 port 51848 ssh2 Aug 11 18:25:33 hidden sshd[21158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.166.68.146 user=root Aug 11 18:25:35 hidden sshd[21158]: Failed password for hidden from 212.166.68.146 port 33646 ssh2	2020-08-12 03:00:33
106.54.98.89	attackspam	prod6 ...	2020-08-12 03:09:44
49.88.112.112	attack	Aug 11 15:18:27 plusreed sshd[2509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.112 user=root Aug 11 15:18:30 plusreed sshd[2509]: Failed password for root from 49.88.112.112 port 33408 ssh2 ...	2020-08-12 03:24:00
102.44.245.161	attackbotsspam	Aug 10 07:58:01 lvps5-35-247-183 sshd[16351]: reveeclipse mapping checking getaddrinfo for host-102.44.245.161.tedata.net [102.44.245.161] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 10 07:58:01 lvps5-35-247-183 sshd[16351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.44.245.161 user=r.r Aug 10 07:58:03 lvps5-35-247-183 sshd[16351]: Failed password for r.r from 102.44.245.161 port 54028 ssh2 Aug 10 07:58:03 lvps5-35-247-183 sshd[16351]: Received disconnect from 102.44.245.161: 11: Bye Bye [preauth] Aug 10 08:02:34 lvps5-35-247-183 sshd[16417]: reveeclipse mapping checking getaddrinfo for host-102.44.245.161.tedata.net [102.44.245.161] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 10 08:02:34 lvps5-35-247-183 sshd[16417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.44.245.161 user=r.r Aug 10 08:02:37 lvps5-35-247-183 sshd[16417]: Failed password for r.r from 102.44.245.161 port 37502 ........ -------------------------------	2020-08-12 03:11:52
145.239.19.252	attackbots	[portscan] Port scan	2020-08-12 02:58:53
212.29.219.12	attackbotsspam	TCP (SYN) 212.29.219.12:13460 -> port 23, len 44	2020-08-12 02:56:09
198.1.67.59	attackspambots	(ftpd) Failed FTP login from 198.1.67.59 (US/United States/ole.oleimports.com): 3 in the last 3600 secs	2020-08-12 03:30:31
190.171.133.10	attackbots	k+ssh-bruteforce	2020-08-12 03:25:16
192.241.175.115	attackbotsspam	Aug 11 08:06:35 bilbo sshd[3135]: User root from employee.customcarpetcenters.com not allowed because not listed in AllowUsers Aug 11 08:06:35 bilbo sshd[3137]: User root from employee.customcarpetcenters.com not allowed because not listed in AllowUsers Aug 11 08:06:35 bilbo sshd[3140]: Invalid user bilbo from 192.241.175.115 ...	2020-08-12 02:57:49
45.143.220.59	attack	45.143.220.59 was recorded 5 times by 4 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 38, 1279	2020-08-12 03:28:54
193.56.28.102	attackspam	Aug 11 20:48:27 statusweb1.srvfarm.net postfix/smtpd[26314]: warning: unknown[193.56.28.102]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 11 20:50:25 statusweb1.srvfarm.net postfix/smtpd[26314]: warning: unknown[193.56.28.102]: SASL LOGIN authentication failed: VXNlcm5hbWU6 Aug 11 20:52:19 statusweb1.srvfarm.net postfix/smtpd[26617]: warning: unknown[193.56.28.102]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 11 20:54:11 statusweb1.srvfarm.net postfix/smtpd[26680]: warning: unknown[193.56.28.102]: SASL LOGIN authentication failed: VXNlcm5hbWU6 Aug 11 20:56:01 statusweb1.srvfarm.net postfix/smtpd[26680]: warning: unknown[193.56.28.102]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-08-12 03:30:52

最近上报的IP列表

107.173.200.68	117.215.241.3	191.196.54.240	197.3.4.189
36.42.232.26	137.184.18.139	202.124.226.150	186.78.117.174
72.50.61.186	104.252.179.202	81.198.17.4	37.150.150.111
123.245.25.180	38.107.125.100	31.162.4.170	46.1.128.114
115.58.183.167	201.156.38.213	167.94.138.155	182.100.1.129