必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): UGMK-Telecom LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspam
port scan and connect, tcp 1433 (ms-sql-s)
2019-11-04 02:10:31
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.200.107.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56350
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;109.200.107.139.		IN	A

;; AUTHORITY SECTION:
.			476	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110301 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 04 02:10:26 CST 2019
;; MSG SIZE  rcvd: 119
HOST信息:
139.107.200.109.in-addr.arpa domain name pointer host-109-200-107-139.ugmk-telecom.ru.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
139.107.200.109.in-addr.arpa	name = host-109-200-107-139.ugmk-telecom.ru.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
180.167.225.118 attack
Apr 10 01:13:44 sso sshd[6434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.167.225.118
Apr 10 01:13:47 sso sshd[6434]: Failed password for invalid user test from 180.167.225.118 port 51332 ssh2
...
2020-04-10 08:04:47
49.235.244.115 attackspam
Apr  9 23:39:44 IngegnereFirenze sshd[21304]: Failed password for invalid user admin from 49.235.244.115 port 40240 ssh2
...
2020-04-10 08:23:51
89.161.65.231 attackbotsspam
k+ssh-bruteforce
2020-04-10 08:16:29
185.251.8.66 attackspam
(smtpauth) Failed SMTP AUTH login from 185.251.8.66 (FR/France/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-04-10 02:24:59 plain authenticator failed for (54bf329a06.wellweb.host) [185.251.8.66]: 535 Incorrect authentication data (set_id=info@fardineh.com@fardineh.com@fardineh.com@fardineh.com@fardineh.com@fardineh.com@fardineh.com@fardineh.com@fardineh.com@fardineh.com@fardineh.com@fardineh.com@fardineh.com@fardineh.com@fardineh.com@fardineh.com@fardineh.com@fardineh.com@fardineh.com@fardineh.com)
2020-04-10 08:18:43
124.158.183.18 attackspam
Apr 10 00:24:50 legacy sshd[7564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.158.183.18
Apr 10 00:24:52 legacy sshd[7564]: Failed password for invalid user ubuntu from 124.158.183.18 port 40672 ssh2
Apr 10 00:29:09 legacy sshd[7650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.158.183.18
...
2020-04-10 08:12:32
39.129.9.180 attack
$f2bV_matches
2020-04-10 07:59:58
13.233.142.157 attackbots
Apr 10 02:46:36 tuotantolaitos sshd[18489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.233.142.157
Apr 10 02:46:38 tuotantolaitos sshd[18489]: Failed password for invalid user duanxd from 13.233.142.157 port 37776 ssh2
...
2020-04-10 08:01:58
120.27.199.232 attackbotsspam
(mod_security) mod_security (id:210492) triggered by 120.27.199.232 (CN/China/-): 5 in the last 3600 secs
2020-04-10 08:23:15
177.9.120.133 attackspambots
1586469310 - 04/09/2020 23:55:10 Host: 177.9.120.133/177.9.120.133 Port: 445 TCP Blocked
2020-04-10 08:15:15
103.82.32.7 attackspambots
Despicable spammer
2020-04-10 08:20:38
77.82.90.234 attackbotsspam
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-04-10 08:23:31
49.235.200.155 attackbotsspam
SSH brute-force: detected 7 distinct usernames within a 24-hour window.
2020-04-10 08:24:48
222.186.180.142 attack
Apr 10 01:49:22 dcd-gentoo sshd[21222]: User root from 222.186.180.142 not allowed because none of user's groups are listed in AllowGroups
Apr 10 01:49:25 dcd-gentoo sshd[21222]: error: PAM: Authentication failure for illegal user root from 222.186.180.142
Apr 10 01:49:22 dcd-gentoo sshd[21222]: User root from 222.186.180.142 not allowed because none of user's groups are listed in AllowGroups
Apr 10 01:49:25 dcd-gentoo sshd[21222]: error: PAM: Authentication failure for illegal user root from 222.186.180.142
Apr 10 01:49:22 dcd-gentoo sshd[21222]: User root from 222.186.180.142 not allowed because none of user's groups are listed in AllowGroups
Apr 10 01:49:25 dcd-gentoo sshd[21222]: error: PAM: Authentication failure for illegal user root from 222.186.180.142
Apr 10 01:49:25 dcd-gentoo sshd[21222]: Failed keyboard-interactive/pam for invalid user root from 222.186.180.142 port 15500 ssh2
...
2020-04-10 07:51:41
129.211.51.65 attackspam
SSH bruteforce (Triggered fail2ban)
2020-04-10 07:58:50
41.59.82.183 attackbots
Bruteforce detected by fail2ban
2020-04-10 07:53:07

最近上报的IP列表

97.22.196.83 192.139.2.0 169.144.100.235 100.182.160.219
47.231.101.38 12.211.77.139 41.2.235.59 175.86.18.253
15.85.56.203 121.134.46.25 205.133.46.232 172.217.156.208
135.159.31.41 97.9.190.238 124.86.60.190 50.210.71.180
165.95.108.83 189.31.15.139 161.49.73.247 173.173.212.99