必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): San Francisco

省份(region): California

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
104.131.139.147 attack
104.131.139.147 - - [11/Jun/2020:15:45:12 +0200] "GET /wp-login.php HTTP/1.1" 200 6302 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.139.147 - - [11/Jun/2020:15:45:18 +0200] "POST /wp-login.php HTTP/1.1" 200 6469 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.139.147 - - [11/Jun/2020:15:45:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-12 01:34:56
104.131.139.147 attackbotsspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-05-24 16:39:26
104.131.139.147 attackbots
104.131.139.147 - - [23/May/2020:22:13:41 +0200] "GET /wp-login.php HTTP/1.1" 200 6614 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.139.147 - - [23/May/2020:22:13:43 +0200] "POST /wp-login.php HTTP/1.1" 200 6865 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.139.147 - - [23/May/2020:22:13:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-05-24 06:27:14
104.131.139.147 attackbotsspam
104.131.139.147 - - [04/May/2020:14:11:58 +0200] "GET /wp-login.php HTTP/1.1" 200 5863 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.139.147 - - [04/May/2020:14:12:04 +0200] "POST /wp-login.php HTTP/1.1" 200 6114 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.139.147 - - [04/May/2020:14:12:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-05-05 00:09:26
104.131.139.147 attackspambots
WordPress login Brute force / Web App Attack on client site.
2020-04-21 17:16:32
104.131.139.147 attack
Automatic report - XMLRPC Attack
2020-04-09 08:24:41
104.131.139.147 attackspam
104.131.139.147 - - \[05/Mar/2020:05:50:15 +0100\] "POST /wp-login.php HTTP/1.0" 200 7427 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
104.131.139.147 - - \[05/Mar/2020:05:50:17 +0100\] "POST /wp-login.php HTTP/1.0" 200 7242 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
104.131.139.147 - - \[05/Mar/2020:05:50:19 +0100\] "POST /wp-login.php HTTP/1.0" 200 7239 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-03-05 16:29:01
104.131.139.147 attack
WordPress wp-login brute force :: 104.131.139.147 0.168 BYPASS [07/Jan/2020:21:18:15  0000] [censored_4] "POST /wp-login.php HTTP/1.1" 200 2100 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-01-08 07:24:03
104.131.139.147 attack
Wordpress Admin Login attack
2019-12-30 21:09:31
104.131.139.147 attackspam
[munged]::443 104.131.139.147 - - [18/Dec/2019:23:39:24 +0100] "POST /[munged]: HTTP/1.1" 200 9083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 104.131.139.147 - - [18/Dec/2019:23:39:27 +0100] "POST /[munged]: HTTP/1.1" 200 9083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 104.131.139.147 - - [18/Dec/2019:23:39:30 +0100] "POST /[munged]: HTTP/1.1" 200 9083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 104.131.139.147 - - [18/Dec/2019:23:39:38 +0100] "POST /[munged]: HTTP/1.1" 200 9083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 104.131.139.147 - - [18/Dec/2019:23:39:51 +0100] "POST /[munged]: HTTP/1.1" 200 9083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 104.131.139.147 - - [18/Dec/2019:23:39:59 +0100] "POST /[munged]: HTTP/1.1" 200 9083 "-" "Mozilla/5.
2019-12-19 06:49:17
104.131.139.147 attack
Wordpress Admin Login attack
2019-11-14 18:11:38
104.131.139.147 attackspam
104.131.139.147 - - \[11/Nov/2019:23:43:35 +0100\] "POST /wp-login.php HTTP/1.0" 200 10602 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
104.131.139.147 - - \[11/Nov/2019:23:43:48 +0100\] "POST /wp-login.php HTTP/1.0" 200 10427 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
104.131.139.147 - - \[11/Nov/2019:23:43:51 +0100\] "POST /wp-login.php HTTP/1.0" 200 10422 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-11-12 07:08:37
104.131.139.147 attackspam
Automatic report - XMLRPC Attack
2019-11-09 06:56:50
104.131.139.147 attack
B: /wp-login.php attack
2019-11-06 18:45:14
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.139.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14066
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.131.139.80.			IN	A

;; AUTHORITY SECTION:
.			110	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031901 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 20 11:48:10 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
80.139.131.104.in-addr.arpa domain name pointer wp01.xpresshosting.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
80.139.131.104.in-addr.arpa	name = wp01.xpresshosting.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
40.126.229.102 attackbotsspam
Feb  6 22:58:41 MK-Soft-Root2 sshd[25966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.126.229.102 
Feb  6 22:58:43 MK-Soft-Root2 sshd[25966]: Failed password for invalid user ttd from 40.126.229.102 port 58158 ssh2
...
2020-02-07 05:59:43
80.82.70.211 attack
Scanning random ports - tries to find possible vulnerable services
2020-02-07 05:47:38
58.220.87.226 attack
Feb  6 10:43:47 web9 sshd\[21039\]: Invalid user gl from 58.220.87.226
Feb  6 10:43:47 web9 sshd\[21039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.220.87.226
Feb  6 10:43:49 web9 sshd\[21039\]: Failed password for invalid user gl from 58.220.87.226 port 41438 ssh2
Feb  6 10:45:22 web9 sshd\[21302\]: Invalid user xmq from 58.220.87.226
Feb  6 10:45:22 web9 sshd\[21302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.220.87.226
2020-02-07 06:01:35
112.85.42.174 attackspambots
Feb  6 22:47:19 eventyay sshd[9738]: Failed password for root from 112.85.42.174 port 47085 ssh2
Feb  6 22:47:32 eventyay sshd[9738]: error: maximum authentication attempts exceeded for root from 112.85.42.174 port 47085 ssh2 [preauth]
Feb  6 22:47:39 eventyay sshd[9741]: Failed password for root from 112.85.42.174 port 17073 ssh2
...
2020-02-07 05:54:46
50.192.28.157 attackbotsspam
lfd: (smtpauth) Failed SMTP AUTH login from 50.192.28.157 (US/United States/50-192-28-157-static.hfc.comcastbusiness.net): 5 in the last 3600 secs - Sun Jun 17 23:58:46 2018
2020-02-07 06:22:43
187.189.225.103 attackspambots
lfd: (smtpauth) Failed SMTP AUTH login from 187.189.225.103 (MX/Mexico/fixed-187-189-225-103.totalplay.net): 5 in the last 3600 secs - Sat Jul 14 16:11:14 2018
2020-02-07 05:46:39
183.89.212.76 attack
2020-02-0620:54:201iznEB-0004WB-Vl\<=info@whatsup2013.chH=hrw-35-132.ideay.net.ni\(localhost\)[186.1.35.132]:43642P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2124id=AAAF194A4195BB08D4D19820D4166C44@whatsup2013.chT="Iwantsomethingbeautiful"fordavidparziale65@gmail.com2020-02-0620:53:551iznDm-0004VU-Q5\<=info@whatsup2013.chH=\(localhost\)[123.24.5.233]:42064P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2081id=6F6ADC8F84507ECD11145DE511ED1113@whatsup2013.chT="lonelinessisnothappy"forsanchez.bryanlee2018@gmail.com2020-02-0620:55:231iznFC-0004YG-Nn\<=info@whatsup2013.chH=\(localhost\)[41.40.7.41]:48080P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2251id=E1E452010ADEF0439F9AD36B9FF7D545@whatsup2013.chT="Iwantsomethingbeautiful"forblackraven2786@gmail.com2020-02-0620:54:511iznEg-0004X3-VL\<=info@whatsup2013.chH=\(localhost\)[183.89.212.76]:33694P=esmtpsaX=TLSv1.2:ECDHE-RSA
2020-02-07 06:21:30
27.79.130.151 attackspam
lfd: (smtpauth) Failed SMTP AUTH login from 27.79.130.151 (VN/Vietnam/localhost): 5 in the last 3600 secs - Fri Jun 22 23:10:35 2018
2020-02-07 06:18:30
49.234.12.123 attack
Feb  6 21:35:05 game-panel sshd[21350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.12.123
Feb  6 21:35:07 game-panel sshd[21350]: Failed password for invalid user pig from 49.234.12.123 port 55104 ssh2
Feb  6 21:36:56 game-panel sshd[21417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.12.123
2020-02-07 06:24:11
1.172.151.238 attackspambots
lfd: (smtpauth) Failed SMTP AUTH login from 1.172.151.238 (TW/Taiwan/1-172-151-238.dynamic-ip.hinet.net): 5 in the last 3600 secs - Sat Jul 14 16:05:10 2018
2020-02-07 05:50:25
74.208.214.48 attackspam
lfd: (smtpauth) Failed SMTP AUTH login from 74.208.214.48 (US/United States/-): 5 in the last 3600 secs - Sat Jul  7 10:13:51 2018
2020-02-07 05:59:24
122.51.198.207 attackbots
2020-02-06T15:44:45.9807861495-001 sshd[64336]: Invalid user vja from 122.51.198.207 port 44056
2020-02-06T15:44:45.9919181495-001 sshd[64336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.198.207
2020-02-06T15:44:45.9807861495-001 sshd[64336]: Invalid user vja from 122.51.198.207 port 44056
2020-02-06T15:44:48.0014001495-001 sshd[64336]: Failed password for invalid user vja from 122.51.198.207 port 44056 ssh2
2020-02-06T15:47:30.8349291495-001 sshd[64483]: Invalid user srk from 122.51.198.207 port 34456
2020-02-06T15:47:30.8447361495-001 sshd[64483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.198.207
2020-02-06T15:47:30.8349291495-001 sshd[64483]: Invalid user srk from 122.51.198.207 port 34456
2020-02-06T15:47:32.8390391495-001 sshd[64483]: Failed password for invalid user srk from 122.51.198.207 port 34456 ssh2
2020-02-06T15:50:15.9080581495-001 sshd[64682]: Invalid user cfa from 12
...
2020-02-07 06:09:56
52.87.178.109 attackbots
lfd: (smtpauth) Failed SMTP AUTH login from 52.87.178.109 (US/United States/ec2-52-87-178-109.compute-1.amazonaws.com): 5 in the last 3600 secs - Mon Jul 16 19:49:48 2018
2020-02-07 05:46:23
61.190.160.223 attackbotsspam
lfd: (smtpauth) Failed SMTP AUTH login from 61.190.160.223 (CN/China/-): 5 in the last 3600 secs - Wed Jun 20 22:08:05 2018
2020-02-07 06:20:23
91.236.239.50 attackspam
1581018973 - 02/06/2020 20:56:13 Host: 91.236.239.50/91.236.239.50 Port: 161 UDP Blocked
...
2020-02-07 05:59:06

最近上报的IP列表

104.131.137.177 104.131.143.147 104.131.15.247 168.253.202.212
104.131.158.169 104.131.159.190 104.131.167.244 104.131.171.76
104.131.179.255 104.131.184.155 104.131.186.234 232.164.67.178
104.131.188.210 25.254.242.100 104.131.191.61 94.228.135.21
104.131.207.156 104.131.21.157 104.131.214.213 104.131.218.229