必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspambots
SSH/22 MH Probe, BF, Hack -
2019-08-30 11:59:56
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.155.104.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32067
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.155.104.121.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082901 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 30 11:59:50 CST 2019
;; MSG SIZE  rcvd: 119
HOST信息:
Host 121.104.155.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 121.104.155.139.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
177.155.36.188 attack
Automatic report - Port Scan Attack
2020-05-04 03:30:42
183.47.14.74 attackspambots
Brute-force attempt banned
2020-05-04 03:30:25
106.13.216.231 attackbotsspam
May  3 21:22:09 vmd48417 sshd[13085]: Failed password for root from 106.13.216.231 port 50984 ssh2
2020-05-04 03:40:57
157.245.83.8 attackbots
May  3 20:39:12 vmd17057 sshd[16310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.83.8 
May  3 20:39:14 vmd17057 sshd[16310]: Failed password for invalid user ting from 157.245.83.8 port 38876 ssh2
...
2020-05-04 03:57:17
104.223.170.36 attack
104.223.170.36 - - [03/May/2020:14:05:54 +0200] "POST /wp-login.php HTTP/1.0" 200 9253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0"
104.223.170.36 - - [03/May/2020:14:05:56 +0200] "POST /wp-login.php HTTP/1.0" 200 7065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0"
...
2020-05-04 03:35:05
134.122.120.74 attackspam
www noscript
...
2020-05-04 03:22:55
101.51.101.72 attackbotsspam
Port probing on unauthorized port 81
2020-05-04 03:57:42
187.216.251.179 attackspambots
May  3 13:49:45 mail.srvfarm.net postfix/smtpd[2550972]: warning: unknown[187.216.251.179]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  3 13:49:45 mail.srvfarm.net postfix/smtpd[2550972]: lost connection after AUTH from unknown[187.216.251.179]
May  3 13:54:01 mail.srvfarm.net postfix/smtpd[2551223]: warning: unknown[187.216.251.179]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  3 13:54:01 mail.srvfarm.net postfix/smtpd[2551223]: lost connection after AUTH from unknown[187.216.251.179]
May  3 13:58:54 mail.srvfarm.net postfix/smtpd[2548581]: warning: unknown[187.216.251.179]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-05-04 03:43:59
106.75.10.4 attack
SSH Bruteforce attack
2020-05-04 03:47:36
179.126.141.0 attack
2020-05-03T17:53:52.256161upcloud.m0sh1x2.com sshd[10186]: Invalid user aac from 179.126.141.0 port 22738
2020-05-04 03:50:19
106.13.99.51 attackbots
Unauthorized SSH login attempts
2020-05-04 03:39:43
113.21.121.229 attackbots
(imapd) Failed IMAP login from 113.21.121.229 (NC/New Caledonia/host-113-21-121-229.canl.nc): 1 in the last 3600 secs
2020-05-04 03:51:56
120.31.138.82 attackbotsspam
May  2 18:16:36 host sshd[2907]: Address 120.31.138.82 maps to nxxxxxxx.eflydns.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
May  2 18:16:36 host sshd[2907]: Invalid user speedtest from 120.31.138.82
May  2 18:16:36 host sshd[2907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.31.138.82 
May  2 18:16:38 host sshd[2907]: Failed password for invalid user speedtest from 120.31.138.82 port 56699 ssh2
May  2 18:16:38 host sshd[2907]: Received disconnect from 120.31.138.82: 11: Bye Bye [preauth]
May  2 18:25:52 host sshd[28803]: Address 120.31.138.82 maps to nxxxxxxx.eflydns.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
May  2 18:25:52 host sshd[28803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.31.138.82  user=r.r
May  2 18:25:54 host sshd[28803]: Failed password for r.r from 120.31.138.82 port 44342 ssh2
May  2 18:25:54........
-------------------------------
2020-05-04 03:51:32
217.112.142.69 attackbots
May  3 15:05:31 web01.agentur-b-2.de postfix/smtpd[200561]: NOQUEUE: reject: RCPT from unknown[217.112.142.69]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May  3 15:05:31 web01.agentur-b-2.de postfix/smtpd[207249]: NOQUEUE: reject: RCPT from unknown[217.112.142.69]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May  3 15:06:22 web01.agentur-b-2.de postfix/smtpd[208481]: NOQUEUE: reject: RCPT from unknown[217.112.142.69]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May  3 15:06:41 web01.agentur-b-2.de postfix/smtpd[200561]: NOQUEUE: reject: RCPT from unknown[217.112.142.69]: 450 4.7.1 : He
2020-05-04 03:43:14
122.176.52.13 attackspambots
May  3 20:55:23 vpn01 sshd[3877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.176.52.13
May  3 20:55:25 vpn01 sshd[3877]: Failed password for invalid user zjz from 122.176.52.13 port 13652 ssh2
...
2020-05-04 03:21:07

最近上报的IP列表

27.229.37.205 85.105.234.45 93.170.141.84 3.242.212.33
203.196.248.234 220.137.223.48 138.219.220.235 247.177.79.226
142.54.176.138 1.183.71.3 209.160.120.221 138.68.218.43
253.52.183.171 138.68.216.47 42.176.49.166 84.201.154.126
175.173.62.186 173.225.102.166 167.71.221.236 89.187.216.205