必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspam
Jun 11 20:28:31 firewall sshd[11145]: Failed password for invalid user lby from 139.155.121.90 port 42088 ssh2
Jun 11 20:31:29 firewall sshd[11237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.90  user=root
Jun 11 20:31:30 firewall sshd[11237]: Failed password for root from 139.155.121.90 port 51004 ssh2
...
2020-06-12 08:26:05
相同子网IP讨论:
IP 类型 评论内容 时间
139.155.121.230 spamattack
Determined IP using DNS Lookup: unknown = ['37.202.5.156']
Dec 20 06:21:39 xxxxxxx postfix/smtpd[1357]: connect from unknown[unknown]
Dec 20 06:21:39 xxxxxxx psa-pc-remote[26837]: Unable to interpret remote host address
Dec 20 06:21:39 xxxxxxx postfix/smtpd[1357]: NOQUEUE: milter-reject: CONNECT from unknown[unknown]: 451 4.7.1 Service unavailable; proto=SMTP
Dec 20 06:21:39 xxxxxxx postfix/smtpd[1357]: lost connection after CONNECT from unknown[unknown]
Dec 20 06:21:39 xxxxxxx postfix/smtpd[1357]: disconnect from unknown[unknown] commands=0/0
Dec 20 06:21:41 xxxxxxx postfix/smtpd[1365]: connect from unknown[unknown]
Dec 20 06:21:41 xxxxxxx postfix/smtpd[1365]: SSL_accept error from unknown[unknown]: Connection reset by peer
Dec 20 06:21:41 xxxxxxx postfix/smtpd[1365]: lost connection after CONNECT from unknown[unknown]
Dec 20 06:21:41 xxxxxxx postfix/smtpd[1365]: disconnect from unknown[unknown] commands=0/0
2019-12-20 16:48:02
139.155.121.230 attack
Nov  3 17:42:42 server sshd\[8618\]: User root from 139.155.121.230 not allowed because listed in DenyUsers
Nov  3 17:42:42 server sshd\[8618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230  user=root
Nov  3 17:42:44 server sshd\[8618\]: Failed password for invalid user root from 139.155.121.230 port 52030 ssh2
Nov  3 17:47:22 server sshd\[20451\]: User root from 139.155.121.230 not allowed because listed in DenyUsers
Nov  3 17:47:22 server sshd\[20451\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230  user=root
2019-11-03 23:54:50
139.155.121.230 attack
Oct 29 05:33:46 ws19vmsma01 sshd[41997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
Oct 29 05:33:47 ws19vmsma01 sshd[41997]: Failed password for invalid user ciserve from 139.155.121.230 port 47042 ssh2
...
2019-10-29 17:53:24
139.155.121.230 attackspambots
Oct 19 22:47:12 legacy sshd[23034]: Failed password for root from 139.155.121.230 port 52536 ssh2
Oct 19 22:51:35 legacy sshd[23204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
Oct 19 22:51:37 legacy sshd[23204]: Failed password for invalid user emech from 139.155.121.230 port 34420 ssh2
...
2019-10-20 04:58:59
139.155.121.230 attackspambots
Oct  8 12:33:15 legacy sshd[6704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
Oct  8 12:33:17 legacy sshd[6704]: Failed password for invalid user Human123 from 139.155.121.230 port 35070 ssh2
Oct  8 12:37:46 legacy sshd[6842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
...
2019-10-08 19:24:35
139.155.121.230 attackspambots
Oct  8 00:18:55 lnxded64 sshd[20552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
2019-10-08 07:46:52
139.155.121.230 attackbotsspam
Oct  1 22:13:54 xxxxxxx0 sshd[28793]: Invalid user test from 139.155.121.230 port 44416
Oct  1 22:13:54 xxxxxxx0 sshd[28793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
Oct  1 22:13:56 xxxxxxx0 sshd[28793]: Failed password for invalid user test from 139.155.121.230 port 44416 ssh2
Oct  1 22:28:32 xxxxxxx0 sshd[31205]: Invalid user network from 139.155.121.230 port 36588
Oct  1 22:28:32 xxxxxxx0 sshd[31205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=139.155.121.230
2019-10-03 19:14:09
139.155.121.230 attack
Oct  3 00:10:56 vps01 sshd[25163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
Oct  3 00:10:58 vps01 sshd[25163]: Failed password for invalid user test from 139.155.121.230 port 38484 ssh2
2019-10-03 06:21:49
139.155.121.230 attackspam
Sep 27 03:55:21 php1 sshd\[22237\]: Invalid user debian-tor from 139.155.121.230
Sep 27 03:55:21 php1 sshd\[22237\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
Sep 27 03:55:23 php1 sshd\[22237\]: Failed password for invalid user debian-tor from 139.155.121.230 port 58002 ssh2
Sep 27 04:00:38 php1 sshd\[22891\]: Invalid user tod from 139.155.121.230
Sep 27 04:00:38 php1 sshd\[22891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
2019-09-27 22:13:46
139.155.121.230 attackbotsspam
Sep 24 23:14:03 vps691689 sshd[10526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
Sep 24 23:14:06 vps691689 sshd[10526]: Failed password for invalid user bbb from 139.155.121.230 port 43346 ssh2
Sep 24 23:17:37 vps691689 sshd[10557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
...
2019-09-25 05:42:12
139.155.121.230 attackspam
Sep 24 22:46:09 vps691689 sshd[10180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
Sep 24 22:46:11 vps691689 sshd[10180]: Failed password for invalid user ti from 139.155.121.230 port 35790 ssh2
...
2019-09-25 04:56:16
139.155.121.230 attackspam
Sep 10 12:37:34 hiderm sshd\[11514\]: Invalid user oracle from 139.155.121.230
Sep 10 12:37:34 hiderm sshd\[11514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
Sep 10 12:37:36 hiderm sshd\[11514\]: Failed password for invalid user oracle from 139.155.121.230 port 50584 ssh2
Sep 10 12:42:49 hiderm sshd\[12085\]: Invalid user www-upload from 139.155.121.230
Sep 10 12:42:49 hiderm sshd\[12085\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
2019-09-11 09:52:20
139.155.121.230 attackbots
Sep  4 06:47:25 microserver sshd[24104]: Invalid user git from 139.155.121.230 port 49966
Sep  4 06:47:25 microserver sshd[24104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
Sep  4 06:47:27 microserver sshd[24104]: Failed password for invalid user git from 139.155.121.230 port 49966 ssh2
Sep  4 06:51:19 microserver sshd[24700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230  user=root
Sep  4 06:51:21 microserver sshd[24700]: Failed password for root from 139.155.121.230 port 54974 ssh2
Sep  4 07:03:37 microserver sshd[26120]: Invalid user jena from 139.155.121.230 port 41762
Sep  4 07:03:37 microserver sshd[26120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
Sep  4 07:03:39 microserver sshd[26120]: Failed password for invalid user jena from 139.155.121.230 port 41762 ssh2
Sep  4 07:08:47 microserver sshd[26787]: Invalid user magda fro
2019-09-04 13:51:14
139.155.121.230 attackspambots
Aug 22 06:37:44 server sshd\[4729\]: Invalid user mortimer from 139.155.121.230 port 57192
Aug 22 06:37:44 server sshd\[4729\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
Aug 22 06:37:46 server sshd\[4729\]: Failed password for invalid user mortimer from 139.155.121.230 port 57192 ssh2
Aug 22 06:41:30 server sshd\[5303\]: Invalid user julien from 139.155.121.230 port 55652
Aug 22 06:41:30 server sshd\[5303\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.121.230
2019-08-22 13:52:30
139.155.121.230 attackbots
$f2bV_matches
2019-08-16 17:15:54
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.155.121.90
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31050
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.155.121.90.			IN	A

;; AUTHORITY SECTION:
.			364	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020061102 1800 900 604800 86400

;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 12 08:26:01 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 90.121.155.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 90.121.155.139.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
69.245.220.97 attackbotsspam
Lines containing failures of 69.245.220.97 (max 1000)
Sep 15 08:52:20 Server sshd[829]: Invalid user ibm from 69.245.220.97 port 53954
Sep 15 08:52:20 Server sshd[829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.245.220.97
Sep 15 08:52:23 Server sshd[829]: Failed password for invalid user ibm from 69.245.220.97 port 53954 ssh2
Sep 15 08:52:23 Server sshd[829]: Received disconnect from 69.245.220.97 port 53954:11: Bye Bye [preauth]
Sep 15 08:52:23 Server sshd[829]: Disconnected from invalid user ibm 69.245.220.97 port 53954 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=69.245.220.97
2019-09-15 20:45:35
115.236.72.27 attackbotsspam
Sep 15 12:22:55 core sshd[18787]: Invalid user user1 from 115.236.72.27 port 53488
Sep 15 12:22:57 core sshd[18787]: Failed password for invalid user user1 from 115.236.72.27 port 53488 ssh2
...
2019-09-15 20:43:42
101.68.137.55 attackbotsspam
Sep 15 06:05:29 ny01 sshd[11210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.68.137.55
Sep 15 06:05:31 ny01 sshd[11210]: Failed password for invalid user usuario from 101.68.137.55 port 34289 ssh2
Sep 15 06:05:34 ny01 sshd[11210]: Failed password for invalid user usuario from 101.68.137.55 port 34289 ssh2
Sep 15 06:05:36 ny01 sshd[11210]: Failed password for invalid user usuario from 101.68.137.55 port 34289 ssh2
2019-09-15 20:44:41
187.74.62.25 attack
namecheap spam
2019-09-15 20:33:29
220.180.239.104 attackspam
Triggered by Fail2Ban at Vostok web server
2019-09-15 20:15:28
46.33.225.84 attack
2019-09-15T04:59:41.410748abusebot-5.cloudsearch.cf sshd\[21142\]: Invalid user siphiwo from 46.33.225.84 port 46838
2019-09-15 20:25:39
58.222.107.253 attackspam
Sep 15 13:35:02 nextcloud sshd\[9279\]: Invalid user weblogic from 58.222.107.253
Sep 15 13:35:02 nextcloud sshd\[9279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.222.107.253
Sep 15 13:35:04 nextcloud sshd\[9279\]: Failed password for invalid user weblogic from 58.222.107.253 port 6460 ssh2
...
2019-09-15 20:25:01
178.128.217.40 attackspam
$f2bV_matches
2019-09-15 20:11:10
210.242.157.12 attack
SSH Bruteforce attempt
2019-09-15 20:30:16
35.175.223.227 attackbotsspam
by Amazon Technologies Inc.
2019-09-15 19:53:44
167.99.77.94 attackbotsspam
Sep 14 21:47:01 kapalua sshd\[6810\]: Invalid user ubuntu from 167.99.77.94
Sep 14 21:47:01 kapalua sshd\[6810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.77.94
Sep 14 21:47:03 kapalua sshd\[6810\]: Failed password for invalid user ubuntu from 167.99.77.94 port 36466 ssh2
Sep 14 21:51:56 kapalua sshd\[7211\]: Invalid user radiusd from 167.99.77.94
Sep 14 21:51:56 kapalua sshd\[7211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.77.94
2019-09-15 20:20:38
124.243.198.190 attackbotsspam
Sep 15 13:20:22 eventyay sshd[26543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.243.198.190
Sep 15 13:20:24 eventyay sshd[26543]: Failed password for invalid user ekalavya@123 from 124.243.198.190 port 33738 ssh2
Sep 15 13:26:41 eventyay sshd[26747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.243.198.190
...
2019-09-15 20:18:39
177.91.75.88 attackbots
postfix
2019-09-15 20:04:07
51.15.57.248 attack
Sep 15 16:08:48 localhost sshd[18919]: Invalid user gogs from 51.15.57.248 port 52734
Sep 15 16:08:48 localhost sshd[18919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.57.248
Sep 15 16:08:48 localhost sshd[18919]: Invalid user gogs from 51.15.57.248 port 52734
Sep 15 16:08:50 localhost sshd[18919]: Failed password for invalid user gogs from 51.15.57.248 port 52734 ssh2
...
2019-09-15 20:39:43
128.199.82.144 attackbotsspam
Sep 15 13:36:07 DAAP sshd[6170]: Invalid user administrator from 128.199.82.144 port 51374
Sep 15 13:36:07 DAAP sshd[6170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.82.144
Sep 15 13:36:07 DAAP sshd[6170]: Invalid user administrator from 128.199.82.144 port 51374
Sep 15 13:36:09 DAAP sshd[6170]: Failed password for invalid user administrator from 128.199.82.144 port 51374 ssh2
...
2019-09-15 20:02:16

最近上报的IP列表

125.136.72.142 121.146.123.233 217.21.54.221 18.19.42.204
62.3.104.162 168.115.189.130 110.52.130.60 14.200.90.6
58.20.186.158 135.216.83.220 128.199.126.249 45.45.96.13
77.101.232.253 24.21.2.243 252.33.13.190 216.237.55.88
191.31.167.186 42.189.189.246 193.159.176.228 181.146.167.171