122.51.139.57 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Guangzhou Haizhiguang Communication Technology Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Invalid user echo from 122.51.139.57 port 17181	2020-07-14 17:56:37
attackspambots	Jun 23 14:49:22 lnxmysql61 sshd[1737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.139.57	2020-06-23 21:00:09

相同子网IP讨论:

IP	类型	评论内容	时间
122.51.139.218	attackspam	20 attempts against mh-misbehave-ban on light	2020-10-01 04:14:24
122.51.139.218	attack	20 attempts against mh-misbehave-ban on light	2020-09-30 20:24:43
122.51.139.218	attackbotsspam	122.51.139.218 - - [29/Sep/2020:22:40:53 +0200] "GET /robots.txt HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36" 122.51.139.218 - - [29/Sep/2020:22:40:54 +0200] "POST /Admin2b3faca7/Login.php HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36" 122.51.139.218 - - [29/Sep/2020:22:40:54 +0200] "GET /l.php HTTP/1.1" 404 194 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)" 122.51.139.218 - - [29/Sep/2020:22:40:54 +0200] "GET /phpinfo.php HTTP/1.1" 404 194 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)" 122.51.139.218 - - [29/Sep/2020:22:40:56 +0200] "GET /test.php HTTP/1.1" 404 194 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)" 122.51.139.218 - - [29/Sep/2020:22:40:57 +0200] "POST /index.php HTTP/1.1" 404 162 "-" "Mozilla/5.0 (X11; Lin ...	2020-09-30 12:52:15
122.51.139.43	attackbotsspam	Port scan detected on ports: 1433[TCP], 1433[TCP], 1433[TCP]	2020-04-14 05:24:12

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 122.51.139.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 793
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;122.51.139.57.			IN	A

;; AUTHORITY SECTION:
.			428	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062300 1800 900 604800 86400

;; Query time: 81 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 23 21:00:04 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 57.139.51.122.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 57.139.51.122.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
198.98.59.29	attack	Mar 25 19:39:13 * sshd[15778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.98.59.29 Mar 25 19:39:16 * sshd[15778]: Failed password for invalid user support from 198.98.59.29 port 51886 ssh2	2020-03-26 05:45:02
129.211.75.184	attackspam	Invalid user marvin from 129.211.75.184 port 45938	2020-03-26 05:30:27
68.183.178.162	attackspambots	Mar 26 04:44:44 webhost01 sshd[10831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.178.162 Mar 26 04:44:46 webhost01 sshd[10831]: Failed password for invalid user madra from 68.183.178.162 port 35608 ssh2 ...	2020-03-26 05:53:25
197.45.89.114	attack	Honeypot attack, port: 445, PTR: host-197.45.89.114.tedata.net.	2020-03-26 05:22:16
220.180.193.166	attackspambots	Unauthorised access (Mar 25) SRC=220.180.193.166 LEN=44 TTL=243 ID=42988 TCP DPT=1433 WINDOW=1024 SYN	2020-03-26 05:42:46
80.82.65.90	attackspambots	Mar 25 20:03:02 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=80.82.65.90, lip=192.168.100.101, session=\<9yZchLKhygBQUkFa\>\ Mar 25 20:04:34 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=80.82.65.90, lip=192.168.100.101, session=\\ Mar 25 20:21:17 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=80.82.65.90, lip=192.168.100.101, session=\<9M6cxbKhyABQUkFa\>\ Mar 25 20:56:41 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=80.82.65.90, lip=192.168.100.101, session=\\ Mar 25 20:57:53 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=80.82.65.90, lip=192.168.100.101, session=\\ Mar 25 20:59:39 pop3-login: Inf	2020-03-26 05:24:36
153.184.107.44	attack	Port probing on unauthorized port 23	2020-03-26 05:29:45
176.31.102.37	attackbotsspam	2020-03-25 04:40:34,354 fail2ban.actions [22360]: NOTICE [sshd] Ban 176.31.102.37 2020-03-25 05:14:58,682 fail2ban.actions [22360]: NOTICE [sshd] Ban 176.31.102.37 2020-03-25 05:49:31,093 fail2ban.actions [22360]: NOTICE [sshd] Ban 176.31.102.37 2020-03-25 19:46:07,279 fail2ban.actions [22360]: NOTICE [sshd] Ban 176.31.102.37 2020-03-25 20:22:19,428 fail2ban.actions [22360]: NOTICE [sshd] Ban 176.31.102.37 ...	2020-03-26 05:41:11
75.130.124.90	attackspam	Mar 25 22:44:34 ns381471 sshd[2515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.130.124.90 Mar 25 22:44:36 ns381471 sshd[2515]: Failed password for invalid user cpanellogin from 75.130.124.90 port 21806 ssh2	2020-03-26 05:58:58
167.114.251.107	attackbots	Invalid user silke from 167.114.251.107 port 55902	2020-03-26 05:28:09
37.187.0.20	attack	Mar 25 22:12:36 vmd48417 sshd[24869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.0.20	2020-03-26 05:33:47
185.220.101.129	attack	Mar 25 21:30:31 vpn01 sshd[19691]: Failed password for root from 185.220.101.129 port 40889 ssh2 Mar 25 21:30:33 vpn01 sshd[19691]: Failed password for root from 185.220.101.129 port 40889 ssh2 ...	2020-03-26 05:26:49
125.91.109.126	attack	$f2bV_matches	2020-03-26 05:47:42
177.191.154.98	attackbotsspam	1585140220 - 03/25/2020 13:43:40 Host: 177.191.154.98/177.191.154.98 Port: 445 TCP Blocked	2020-03-26 05:18:00
50.4.32.91	attack	Invalid user rajesh from 50.4.32.91 port 40670	2020-03-26 05:25:01

最近上报的IP列表

185.202.1.196	60.169.44.85	61.225.98.83	52.140.22.246
223.32.225.33	254.193.35.190	153.229.76.83	220.219.236.89
1.19.34.120	10.95.245.59	193.228.109.227	123.24.179.171
15.161.47.193	193.31.207.77	36.76.119.73	52.250.113.250
192.241.210.68	192.35.169.24	187.38.202.55	176.236.121.146