91.106.64.139 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Iran (ISLAMIC Republic Of)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
91.106.64.82	attack	1596974937 - 08/09/2020 14:08:57 Host: 91.106.64.82/91.106.64.82 Port: 445 TCP Blocked	2020-08-10 01:37:57
91.106.64.254	attackspam	" "	2020-03-21 13:13:53
91.106.64.253	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/91.106.64.253/ IR - 1H : (42) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IR NAME ASN : ASN56503 IP : 91.106.64.253 CIDR : 91.106.64.0/24 PREFIX COUNT : 45 UNIQUE IP COUNT : 17920 WYKRYTE ATAKI Z ASN56503 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-13 05:50:37 INFO : Port SERVER 80 Scan Detected and Blocked by ADMIN - data recovery	2019-10-13 16:15:59

类型

评论内容

时间

91.106.64.82

attack

1596974937 - 08/09/2020 14:08:57 Host: 91.106.64.82/91.106.64.82 Port: 445 TCP Blocked

2020-08-10 01:37:57

91.106.64.254

attackspam

" "

2020-03-21 13:13:53

91.106.64.253

attackspam

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/91.106.64.253/ 
 IR - 1H : (42)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : IR 
 NAME ASN : ASN56503 
 
 IP : 91.106.64.253 
 
 CIDR : 91.106.64.0/24 
 
 PREFIX COUNT : 45 
 
 UNIQUE IP COUNT : 17920 
 
 
 WYKRYTE ATAKI Z ASN56503 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-10-13 05:50:37 
 
 INFO : Port SERVER 80 Scan Detected and Blocked by ADMIN  - data recovery

2019-10-13 16:15:59

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 91.106.64.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55247
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;91.106.64.139.			IN	A

;; AUTHORITY SECTION:
.			383	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400

;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 09:26:43 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 139.64.106.91.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.64.106.91.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
130.162.71.237	attackbotsspam	Jun 15 09:42:48 vps1 sshd[1630320]: Invalid user ctopup from 130.162.71.237 port 37201 Jun 15 09:42:50 vps1 sshd[1630320]: Failed password for invalid user ctopup from 130.162.71.237 port 37201 ssh2 ...	2020-06-15 20:02:04
51.178.52.245	attack	TCP (SYN) 51.178.52.245:60044 -> port 22, len 60	2020-06-15 20:12:13
41.93.32.88	attackspambots	2020-06-15T11:25:17.944997server.espacesoutien.com sshd[21616]: Invalid user paulo from 41.93.32.88 port 38972 2020-06-15T11:25:17.960192server.espacesoutien.com sshd[21616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.93.32.88 2020-06-15T11:25:17.944997server.espacesoutien.com sshd[21616]: Invalid user paulo from 41.93.32.88 port 38972 2020-06-15T11:25:19.640373server.espacesoutien.com sshd[21616]: Failed password for invalid user paulo from 41.93.32.88 port 38972 ssh2 ...	2020-06-15 20:22:42
45.134.179.102	attack	scans 92 times in preceeding hours on the ports (in chronological order) 5454 20202 3330 5489 9906 9140 9395 5790 36420 3416 9189 2626 3490 4984 18001 9079 2835 8193 24922 8606 54404 2390 60606 33392 63389 12166 9580 4462 12210 7247 5099 59999 2064 7672 3444 9527 12965 3306 2936 2231 5453 64646 8284 4172 9867 9100 4532 1900 3314 6013 61901 9251 3531 1886 2930 1975 5702 6329 14115 52567 52643 5487 10702 8571 3452 9667 21078 28382 1349 1065 9302 13900 2016 9395 32480 1952 4170 3108 3786 2700 55667 30157 5251 3337 2205 2429 10806 8141 2099 1647 5784 28878 resulting in total of 174 scans from 45.134.179.0/24 block.	2020-06-15 20:08:20
194.26.29.25	attackbots	Jun 15 13:31:09 debian-2gb-nbg1-2 kernel: \[14479376.722864\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.29.25 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=25383 PROTO=TCP SPT=46899 DPT=10555 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-15 19:58:51
51.178.83.124	attackbotsspam	2020-06-15T10:18:00.503373server.espacesoutien.com sshd[12687]: Invalid user ijc from 51.178.83.124 port 45520 2020-06-15T10:18:00.516440server.espacesoutien.com sshd[12687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.83.124 2020-06-15T10:18:00.503373server.espacesoutien.com sshd[12687]: Invalid user ijc from 51.178.83.124 port 45520 2020-06-15T10:18:02.654410server.espacesoutien.com sshd[12687]: Failed password for invalid user ijc from 51.178.83.124 port 45520 ssh2 ...	2020-06-15 20:24:11
222.186.175.23	attack	Too many connections or unauthorized access detected from Arctic banned ip	2020-06-15 20:33:37
94.102.51.7	attackbotsspam	Jun 15 14:16:20 ns3042688 courier-pop3d: LOGIN FAILED, user=info@makita-dolmar.net, ip=\[::ffff:94.102.51.7\] ...	2020-06-15 20:19:10
176.123.5.15	attackbotsspam	(smtpauth) Failed SMTP AUTH login from 176.123.5.15 (MD/Republic of Moldova/176-123-5-15.alexhost.md): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-15 08:17:33 plain authenticator failed for (rlra912lihbt3dhhp8nr) [176.123.5.15]: 535 Incorrect authentication data (set_id=info@gamnou.ir)	2020-06-15 20:06:35
84.1.30.70	attackspambots	Jun 15 15:22:08 root sshd[7105]: Invalid user ram from 84.1.30.70 ...	2020-06-15 20:26:31
46.38.150.153	attack	Jun 15 14:03:53 srv01 postfix/smtpd\[12240\]: warning: unknown\[46.38.150.153\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 15 14:03:58 srv01 postfix/smtpd\[23271\]: warning: unknown\[46.38.150.153\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 15 14:04:38 srv01 postfix/smtpd\[19748\]: warning: unknown\[46.38.150.153\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 15 14:05:01 srv01 postfix/smtpd\[23272\]: warning: unknown\[46.38.150.153\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 15 14:05:17 srv01 postfix/smtpd\[23272\]: warning: unknown\[46.38.150.153\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-06-15 20:07:11
195.54.160.228	attackbots	TCP ports : 3391 / 3394 / 3397 / 4444 / 9999 / 33985	2020-06-15 19:58:15
106.53.207.227	attackbotsspam	" "	2020-06-15 20:26:00
193.169.255.18	attack	Jun 15 14:21:53 srv01 dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=193.169.255.18, lip=144.76.84.212, session=\ Jun 15 14:24:14 srv01 dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=193.169.255.18, lip=144.76.89.190, session=\<0mUngR6odsLBqf8S\> Jun 15 14:25:43 srv01 dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=193.169.255.18, lip=144.76.89.190, session=\ Jun 15 14:26:06 srv01 dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=193.169.255.18, lip=144.76.84.212, session=\ Jun 15 14:29:04 srv01 dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=193.169. ...	2020-06-15 20:39:48
91.126.98.41	attackspambots	Invalid user iot from 91.126.98.41 port 38776	2020-06-15 20:20:33

最近上报的IP列表

91.109.145.53	91.109.146.180	91.106.85.107	91.109.141.45
91.109.156.174	91.109.156.15	91.109.147.73	91.109.158.238
91.11.35.39	91.11.43.5	91.109.239.229	91.115.194.79
91.120.181.180	91.117.65.156	91.110.135.50	91.121.47.223
91.121.47.213	91.122.47.7	91.122.40.227	91.124.106.150