必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Oslo

省份(region): Oslo

国家(country): Norway

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.114.187.230
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28448
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.114.187.230.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024122001 1800 900 604800 86400

;; Query time: 31 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 21 04:23:46 CST 2024
;; MSG SIZE  rcvd: 108
HOST信息:
230.187.114.139.in-addr.arpa domain name pointer tietoevry-owned-address-139-114-187-x.hidden-host.tietoevry.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
230.187.114.139.in-addr.arpa	name = tietoevry-owned-address-139-114-187-x.hidden-host.tietoevry.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
49.235.49.39 attackspam
2020-05-02 20:42:01 server sshd[72867]: Failed password for invalid user sergio from 49.235.49.39 port 51658 ssh2
2020-05-04 02:34:01
201.105.186.113 attackspambots
May  2 00:24:32 localhost sshd[1965240]: Invalid user yamada from 201.105.186.113 port 48916
May  2 00:24:32 localhost sshd[1965240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.105.186.113 
May  2 00:24:32 localhost sshd[1965240]: Invalid user yamada from 201.105.186.113 port 48916
May  2 00:24:34 localhost sshd[1965240]: Failed password for invalid user yamada from 201.105.186.113 port 48916 ssh2
May  2 00:28:18 localhost sshd[1966854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.105.186.113  user=r.r
May  2 00:28:19 localhost sshd[1966854]: Failed password for r.r from 201.105.186.113 port 57270 ssh2
May  2 00:31:19 localhost sshd[1968313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.105.186.113  user=r.r
May  2 00:31:21 localhost sshd[1968313]: Failed password for r.r from 201.105.186.113 port 32850 ssh2
May  2 00:34:25 local........
------------------------------
2020-05-04 02:05:38
109.95.42.42 attackspam
2020-05-03 17:52:54,657 fail2ban.actions        [1093]: NOTICE  [sshd] Ban 109.95.42.42
2020-05-03 18:27:43,613 fail2ban.actions        [1093]: NOTICE  [sshd] Ban 109.95.42.42
2020-05-03 19:02:25,602 fail2ban.actions        [1093]: NOTICE  [sshd] Ban 109.95.42.42
2020-05-03 19:39:32,327 fail2ban.actions        [1093]: NOTICE  [sshd] Ban 109.95.42.42
2020-05-03 20:13:42,179 fail2ban.actions        [1093]: NOTICE  [sshd] Ban 109.95.42.42
...
2020-05-04 02:29:12
183.136.225.45 attackspam
1588526389 - 05/04/2020 00:19:49 Host: 183.136.225.45/183.136.225.45 Port: 37 UDP Blocked
...
2020-05-04 02:07:02
51.105.26.111 attackbotsspam
SSH brute-force: detected 10 distinct usernames within a 24-hour window.
2020-05-04 02:09:04
104.24.99.241 attackspambots
*** Phishing website that camouflaged Amazon.com.
(redirect from)
https://subscriber.jglboots.com/
domain: subscriber.jglboots.com
IP v6 address: 2606:4700:3037::6812:3378 / 2606:4700:3033::6812:3278
IP v4 address: 104.18.50.120 / 104.18.51.120
location: USA
hosting: Cloudflare, Inc
web: https://www.cloudflare.com/abuse
abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com
(redirect to)
https://counts-pontis-name-flare-and-safty.telemagico.com/
domain: counts-pontis-name-flare-and-safty.telemagico.com
IP v6 address: 2606:4700:3030::6818:62f1 / 2606:4700:3033::6818:63f1
IP v4 address: 104.24.99.241 / 104.24.98.241
location: USA
hosting: Cloudflare, Inc
web: https://www.cloudflare.com/abuse
abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com
2020-05-04 02:12:42
222.186.173.142 attack
detected by Fail2Ban
2020-05-04 02:30:22
45.119.41.26 attackbots
1 attempts against mh-modsecurity-ban on float
2020-05-04 02:37:19
167.172.249.58 attackspam
May  3 08:20:50 NPSTNNYC01T sshd[1433]: Failed password for root from 167.172.249.58 port 48340 ssh2
May  3 08:23:27 NPSTNNYC01T sshd[1772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.249.58
May  3 08:23:29 NPSTNNYC01T sshd[1772]: Failed password for invalid user adil from 167.172.249.58 port 36176 ssh2
...
2020-05-04 02:23:25
51.15.87.74 attackspam
SSH/22 MH Probe, BF, Hack -
2020-05-04 02:07:56
218.24.106.222 attackbots
DATE:2020-05-03 20:00:46, IP:218.24.106.222, PORT:ssh SSH brute force auth (docker-dc)
2020-05-04 02:12:06
45.172.108.75 attack
May  3 14:03:38 inter-technics sshd[2592]: Invalid user ykim from 45.172.108.75 port 34738
May  3 14:03:38 inter-technics sshd[2592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.172.108.75
May  3 14:03:38 inter-technics sshd[2592]: Invalid user ykim from 45.172.108.75 port 34738
May  3 14:03:40 inter-technics sshd[2592]: Failed password for invalid user ykim from 45.172.108.75 port 34738 ssh2
May  3 14:08:49 inter-technics sshd[3868]: Invalid user chris from 45.172.108.75 port 49298
...
2020-05-04 01:58:48
139.59.190.69 attack
2020-05-03T18:00:01.286733abusebot-5.cloudsearch.cf sshd[29857]: Invalid user gwb from 139.59.190.69 port 32855
2020-05-03T18:00:01.294526abusebot-5.cloudsearch.cf sshd[29857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.190.69
2020-05-03T18:00:01.286733abusebot-5.cloudsearch.cf sshd[29857]: Invalid user gwb from 139.59.190.69 port 32855
2020-05-03T18:00:03.119892abusebot-5.cloudsearch.cf sshd[29857]: Failed password for invalid user gwb from 139.59.190.69 port 32855 ssh2
2020-05-03T18:06:38.030695abusebot-5.cloudsearch.cf sshd[30077]: Invalid user ec2-user from 139.59.190.69 port 56490
2020-05-03T18:06:38.047517abusebot-5.cloudsearch.cf sshd[30077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.190.69
2020-05-03T18:06:38.030695abusebot-5.cloudsearch.cf sshd[30077]: Invalid user ec2-user from 139.59.190.69 port 56490
2020-05-03T18:06:39.709143abusebot-5.cloudsearch.cf sshd[30077]: Failed
...
2020-05-04 02:27:25
109.107.240.6 attackspam
SSH Brute-Forcing (server1)
2020-05-04 02:31:50
78.128.113.100 attackspambots
(smtpauth) Failed SMTP AUTH login from 78.128.113.100 (BG/Bulgaria/ip-113-100.4vendeta.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-05-03 18:59:48 plain authenticator failed for ([78.128.113.100]) [78.128.113.100]: 535 Incorrect authentication data (set_id=jed.1777@underverse.us)
2020-05-03 19:00:00 plain authenticator failed for ([78.128.113.100]) [78.128.113.100]: 535 Incorrect authentication data (set_id=jed.1777)
2020-05-03 19:08:52 plain authenticator failed for ([78.128.113.100]) [78.128.113.100]: 535 Incorrect authentication data (set_id=monique@familiedeheer.nl)
2020-05-03 19:09:04 plain authenticator failed for ([78.128.113.100]) [78.128.113.100]: 535 Incorrect authentication data (set_id=monique)
2020-05-03 19:38:59 plain authenticator failed for ([78.128.113.100]) [78.128.113.100]: 535 Incorrect authentication data (set_id=akreikamp@elitehosting.nl)
2020-05-04 02:04:37

最近上报的IP列表

180.88.30.185 22.234.103.57 21.97.124.204 40.215.239.172
172.112.26.143 51.200.187.132 205.140.178.107 114.1.108.6
194.104.94.229 193.57.35.223 227.241.248.109 53.125.233.170
47.217.248.83 138.162.136.170 212.238.202.136 199.22.217.99
237.2.41.85 22.230.108.138 172.232.111.51 125.55.13.34