必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.159.254.97
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28108
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.159.254.97.			IN	A

;; AUTHORITY SECTION:
.			492	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:05:49 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
97.254.159.139.in-addr.arpa domain name pointer ecs-139-159-254-97.compute.hwclouds-dns.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
97.254.159.139.in-addr.arpa	name = ecs-139-159-254-97.compute.hwclouds-dns.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
128.199.79.158 attack
Invalid user bdos from 128.199.79.158 port 32871
2020-09-23 05:17:19
122.51.246.97 attackbots
$f2bV_matches
2020-09-23 05:49:54
164.68.114.169 attackbots
20 attempts against mh-ssh on sand
2020-09-23 05:49:28
62.149.10.5 attackbots
Received: from mail.jooble.com (mail.jooble.com [62.149.10.5])
Date: Tue, 22 Sep 2020 19:55:45 +0300 (EEST)
From: Nikolay Logvin 
Message-ID: <1125137422.49979770.1600793745183.JavaMail.zimbra@jooble.com>
Subject: Re: Werbefläche für xxxxx
2020-09-23 05:18:26
177.156.138.75 attackbotsspam
Brute-force attempt banned
2020-09-23 05:36:41
163.172.24.40 attackspambots
Sep 22 22:51:41 ns3164893 sshd[1961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.24.40
Sep 22 22:51:44 ns3164893 sshd[1961]: Failed password for invalid user gen from 163.172.24.40 port 60940 ssh2
...
2020-09-23 05:33:27
122.152.220.161 attackspambots
Invalid user xia from 122.152.220.161 port 46268
2020-09-23 05:25:58
196.52.43.98 attackbots
2020-09-22T12:04:52.624134morrigan.ad5gb.com sshd[2313485]: Connection reset by 196.52.43.98 port 60319 [preauth]
2020-09-23 05:26:19
175.19.204.2 attackspambots
Found on   Binary Defense     / proto=6  .  srcport=40167  .  dstport=1433  .     (3087)
2020-09-23 05:22:41
85.89.177.44 attackbotsspam
Sep 22 16:11:29 mx sshd[22502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.89.177.44
2020-09-23 05:37:10
51.255.109.166 attack
Found on   CINS badguys     / proto=17  .  srcport=17041  .  dstport=177  .     (3085)
2020-09-23 05:42:46
187.189.51.117 attackspambots
Sep 23 06:46:57 web1 sshd[31564]: Invalid user miles from 187.189.51.117 port 42021
Sep 23 06:46:57 web1 sshd[31564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.51.117
Sep 23 06:46:57 web1 sshd[31564]: Invalid user miles from 187.189.51.117 port 42021
Sep 23 06:46:59 web1 sshd[31564]: Failed password for invalid user miles from 187.189.51.117 port 42021 ssh2
Sep 23 07:03:37 web1 sshd[4809]: Invalid user admin from 187.189.51.117 port 46214
Sep 23 07:03:37 web1 sshd[4809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.51.117
Sep 23 07:03:37 web1 sshd[4809]: Invalid user admin from 187.189.51.117 port 46214
Sep 23 07:03:39 web1 sshd[4809]: Failed password for invalid user admin from 187.189.51.117 port 46214 ssh2
Sep 23 07:08:17 web1 sshd[6658]: Invalid user git from 187.189.51.117 port 55975
...
2020-09-23 05:26:35
117.253.140.143 attackbotsspam
Lines containing failures of 117.253.140.143
Sep 22 18:29:29 shared10 sshd[5235]: Connection closed by 117.253.140.143 port 33608 [preauth]
Sep 22 18:34:02 shared10 sshd[7489]: Connection reset by 117.253.140.143 port 56452 [preauth]
Sep 22 18:38:16 shared10 sshd[9264]: Connection closed by 117.253.140.143 port 51078 [preauth]
Sep 22 18:42:30 shared10 sshd[11454]: Invalid user ahmed from 117.253.140.143 port 45662
Sep 22 18:42:30 shared10 sshd[11454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.253.140.143
Sep 22 18:42:32 shared10 sshd[11454]: Failed password for invalid user ahmed from 117.253.140.143 port 45662 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.253.140.143
2020-09-23 05:50:29
198.251.89.136 attack
srvr2: (mod_security) mod_security (id:920350) triggered by 198.251.89.136 (CA/-/tor-exit-05.nonanet.net): 1 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/09/22 19:04:52 [error] 205395#0: *244540 [client 198.251.89.136] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host'  [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/MjZL"] [unique_id "160079429271.164836"] [ref "o0,11v26,11"], client: 198.251.89.136, [redacted] request: "HEAD /MjZL HTTP/1.1" [redacted]
2020-09-23 05:25:07
198.251.217.220 attackspam
Blocked by Sophos UTM Network Protection . /    / proto=6  .  srcport=443  .  dstport=21284  .     (3083)
2020-09-23 05:48:10

最近上报的IP列表

139.159.254.106 139.159.3.1 118.212.105.88 139.162.1.108
139.162.1.209 139.159.99.34 139.162.1.237 139.162.1.4
139.162.1.73 139.162.10.121 139.162.1.43 139.162.10.125
139.162.10.128 139.162.10.153 118.212.105.9 139.162.10.170
139.162.10.174 139.162.10.182 139.162.10.199 139.162.10.231