必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Singapore

省份(region): unknown

国家(country): Singapore

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
点此参与IP信息讨论
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
139.162.214.192 spambotsattack 
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
 2023-02-18 16:15:46
139.162.247.102 attack 
OSSEC HIDS Notification.
2020 Oct 15 19:14:19

Received From: shared->/var/log/secure
Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system."
Portion of the log(s):

Oct 15 19:14:18 shared sshd[2970433]: ssh_dispatch_run_fatal: Connection from 139.162.247.102 port 41166: bignum is negative [preauth]

 --END OF NOTIFICATION
 2020-10-20 08:52:36
139.162.217.250 attack 
WebSpam Attack
 2020-10-07 05:56:21
139.162.217.250 attackbots 
WebSpam Attack
 2020-10-06 22:09:25
139.162.217.250 attack 
WebSpam Attack
 2020-10-06 13:52:46
139.162.247.102 attack 
firewall-block, port(s): 22/tcp
 2020-10-01 03:25:46
139.162.247.102 attackspambots 
honeypot 22 port
 2020-09-30 01:51:04
139.162.247.102 attackspam 
Sep 29 12:19:00 baraca inetd[76034]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
Sep 29 12:19:01 baraca inetd[76035]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
Sep 29 12:19:02 baraca inetd[76038]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
...
 2020-09-29 17:51:13
139.162.247.102 attackbotsspam 
IP 139.162.247.102 attacked honeypot on port: 22 at 9/26/2020 5:56:09 AM
 2020-09-26 21:09:12
139.162.247.102 attackbotsspam 
Sep2601:57:57server6sshd[14291]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:02server6sshd[14327]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:07server6sshd[14343]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:12server6sshd[14360]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:17server6sshd[14374]:refusedconnectfrom139.162.247.102\(139.162.247.102\)
 2020-09-26 12:51:05
139.162.245.68 attackspam 
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
 2020-09-22 23:57:27
139.162.245.68 attackspam 
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
 2020-09-22 16:01:33
139.162.245.68 attackbotsspam 
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
 2020-09-22 08:05:11
139.162.252.121 attackspambots 
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: li1537-121.members.linode.com.
 2020-09-06 02:31:22
139.162.252.121 attack 
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: li1537-121.members.linode.com.
 2020-09-05 18:06:32
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.162.2.110
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14875
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.162.2.110.			IN	A

;; AUTHORITY SECTION:
.			538	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:08:29 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
110.2.162.139.in-addr.arpa domain name pointer 139-162-2-110.ip.linodeusercontent.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
110.2.162.139.in-addr.arpa	name = 139-162-2-110.ip.linodeusercontent.com.

Authoritative answers can be found from:
相关IP信息:
139.162.2.150
139.162.2.192
139.162.2.238
139.162.2.247
139.162.2.106
139.162.2.55
139.162.2.89
139.162.2.173
139.162.2.31
139.162.2.97
139.162.2.51
139.162.2.162
139.162.2.44
139.162.2.114
139.162.2.27
139.162.2.65
139.162.2.139
139.162.2.66
139.162.2.15
139.162.2.9
139.162.2.134
139.162.2.152
139.162.2.141
139.162.2.233
139.162.2.126
139.162.2.151
139.162.2.94
139.162.2.14
139.162.2.244
139.162.2.240
139.162.2.99
139.162.2.198
139.162.2.142
139.162.2.197
139.162.2.250
139.162.2.5
139.162.2.71
139.162.2.96
139.162.2.145
139.162.2.199
139.162.2.161
139.162.2.245
139.162.2.80
139.162.2.171
139.162.2.20
139.162.2.63
139.162.2.202
139.162.2.222
139.162.2.187
139.162.2.111
139.162.2.241
139.162.2.39
139.162.2.8
139.162.2.249
139.162.2.50
139.162.2.223
139.162.2.208
139.162.2.153
139.162.2.125
139.162.2.127
139.162.2.221
139.162.2.102
139.162.2.74
139.162.2.131
139.162.2.119
139.162.2.220
139.162.2.88
139.162.2.82
139.162.2.112
139.162.2.103
139.162.2.229
139.162.2.28
139.162.2.86
139.162.2.101
139.162.2.218
139.162.2.77
139.162.2.123
139.162.2.206
139.162.2.41
139.162.2.188
139.162.2.219
139.162.2.6
139.162.2.163
139.162.2.64
139.162.2.104
139.162.2.184
139.162.2.144
139.162.2.232
139.162.2.3
139.162.2.47
139.162.2.108
139.162.2.216
139.162.2.243
139.162.2.235
139.162.2.175
139.162.2.209
139.162.2.48
139.162.2.183
139.162.2.91
139.162.2.193
139.162.2.189
139.162.2.36
139.162.2.224
139.162.2.118
139.162.2.211
139.162.2.1
139.162.2.254
139.162.2.21
139.162.2.53
139.162.2.62
139.162.2.113
139.162.2.154
139.162.2.116
139.162.2.195
139.162.2.137
139.162.2.54
139.162.2.205
139.162.2.68
139.162.2.210
139.162.2.212
139.162.2.146
139.162.2.168
139.162.2.253
139.162.2.35
139.162.2.59
139.162.2.214
139.162.2.148
139.162.2.92
139.162.2.40
139.162.2.32
139.162.2.57
139.162.2.129
139.162.2.72
139.162.2.225
139.162.2.83
139.162.2.248
139.162.2.203
139.162.2.90
139.162.2.237
139.162.2.157
139.162.2.130
139.162.2.246
139.162.2.252
139.162.2.170
139.162.2.38
139.162.2.73
139.162.2.79
139.162.2.207
139.162.2.23
139.162.2.167
139.162.2.120
139.162.2.228
139.162.2.226
139.162.2.143
139.162.2.128
139.162.2.16
139.162.2.122
139.162.2.156
139.162.2.2
139.162.2.85
139.162.2.136
139.162.2.49
139.162.2.107
139.162.2.177
139.162.2.201
139.162.2.60
139.162.2.117
139.162.2.26
139.162.2.19
139.162.2.132
139.162.2.37
139.162.2.234
139.162.2.22
139.162.2.159
139.162.2.33
139.162.2.133
139.162.2.242
139.162.2.165
139.162.2.100
139.162.2.186
139.162.2.105
139.162.2.200
139.162.2.160
139.162.2.18
139.162.2.236
139.162.2.98
139.162.2.140
139.162.2.191
139.162.2.46
139.162.2.178
139.162.2.231
139.162.2.164
139.162.2.185
139.162.2.166
139.162.2.42
139.162.2.155
139.162.2.215
139.162.2.138
139.162.2.10
139.162.2.230
139.162.2.115
139.162.2.56
139.162.2.29
139.162.2.81
139.162.2.13
139.162.2.196
139.162.2.34
139.162.2.25
139.162.2.149
139.162.2.251
139.162.2.110
139.162.2.172
139.162.2.158
139.162.2.95
139.162.2.194
139.162.2.239
139.162.2.204
139.162.2.181
139.162.2.93
139.162.2.4
139.162.2.179
139.162.2.52
139.162.2.180
139.162.2.61
139.162.2.76
139.162.2.24
139.162.2.227
139.162.2.58
139.162.2.17
139.162.2.12
139.162.2.87
139.162.2.176
139.162.2.147
139.162.2.75
139.162.2.124
139.162.2.30
139.162.2.121
139.162.2.84
139.162.2.67
139.162.2.45
139.162.2.78
139.162.2.169
139.162.2.135
139.162.2.43
139.162.2.217
139.162.2.190
139.162.2.109
139.162.2.70
139.162.2.7
139.162.2.11
139.162.2.182
139.162.2.174
139.162.2.69
139.162.2.213
最新评论:
IP 类型 评论内容 时间
62.234.73.104 attackbots 
Dec 13 18:19:42 ns41 sshd[5244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.73.104
 2019-12-14 02:33:12
218.107.133.49 attack 
2019-12-13T16:57:31.393737MailD postfix/smtpd[18551]: warning: unknown[218.107.133.49]: SASL LOGIN authentication failed: authentication failure
2019-12-13T16:57:36.031006MailD postfix/smtpd[18551]: warning: unknown[218.107.133.49]: SASL LOGIN authentication failed: authentication failure
2019-12-13T16:57:38.953694MailD postfix/smtpd[18551]: warning: unknown[218.107.133.49]: SASL LOGIN authentication failed: authentication failure
 2019-12-14 02:48:50
99.242.114.107 attackbotsspam 
Dec 13 19:14:52 vps691689 sshd[26113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=99.242.114.107
Dec 13 19:14:55 vps691689 sshd[26113]: Failed password for invalid user eldon from 99.242.114.107 port 44818 ssh2
...
 2019-12-14 02:22:24
79.124.62.34 attackbots 
3389BruteforceFW23
 2019-12-14 02:42:07
207.246.249.46 attackspam 
Says bank of america  I don't even bank there

Received: from p-mtain019.msg.pkvw.co.charter.net ([107.14.174.244])
          by cdptpa-fep16.email.rr.com
          (InterMail vM.8.04.03.24 201-2389-100-172-20151028) with ESMTP
          id <20191213055620.HGET16311.cdptpa-fep16.email.rr.com@p-mtain019.msg.pkvw.co.charter.net>
          for ; Fri, 13 Dec 2019 05:56:20 +0000
Received: from p-impin017.msg.pkvw.co.charter.net ([47.43.26.158])
          by p-mtain019.msg.pkvw.co.charter.net
          (InterMail vM.9.01.00.037.1 201-2473-137-122-172) with ESMTP
          id <20191213055620.IDYP27565.p-mtain019.msg.pkvw.co.charter.net@p-impin017.msg.pkvw.co.charter.net>
          for ; Fri, 13 Dec 2019 05:56:20 +0000
Received: from mx-n06.wc1.lan3.stabletransit.com ([207.246.249.46])
	by cmsmtp with ESMTP
	id fdw3i9SPh7XNKfdw3i7JNm; Fri, 13 Dec 2019 05:56:20 +0000
 2019-12-14 02:40:43
200.85.48.30 attackbotsspam 
Dec 13 23:51:41 vibhu-HP-Z238-Microtower-Workstation sshd\[17406\]: Invalid user george87 from 200.85.48.30
Dec 13 23:51:41 vibhu-HP-Z238-Microtower-Workstation sshd\[17406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.85.48.30
Dec 13 23:51:43 vibhu-HP-Z238-Microtower-Workstation sshd\[17406\]: Failed password for invalid user george87 from 200.85.48.30 port 56910 ssh2
Dec 14 00:00:02 vibhu-HP-Z238-Microtower-Workstation sshd\[19202\]: Invalid user ytrewqhgfdsa from 200.85.48.30
Dec 14 00:00:02 vibhu-HP-Z238-Microtower-Workstation sshd\[19202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.85.48.30
...
 2019-12-14 02:41:06
89.215.143.183 attackspambots 
2019-12-13 H=\(unknown.interbgc.com\) \[89.215.143.183\] F=\ rejected RCPT \: Unrouteable address
2019-12-13 H=\(unknown.interbgc.com\) \[89.215.143.183\] F=\ rejected RCPT \: Unrouteable address
2019-12-13 H=\(unknown.interbgc.com\) \[89.215.143.183\] F=\ rejected RCPT \: Unrouteable address
 2019-12-14 02:50:41
89.248.168.217 attackbots 
89.248.168.217 was recorded 52 times by 29 hosts attempting to connect to the following ports: 1284,1101,1083. Incident counter (4h, 24h, all-time): 52, 369, 11408
 2019-12-14 02:46:29
45.143.220.76 attackspambots 
Dec 13 17:22:09 debian-2gb-nbg1-2 kernel: \[24535661.218190\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.143.220.76 DST=195.201.40.59 LEN=440 TOS=0x00 PREC=0x00 TTL=54 ID=54193 DF PROTO=UDP SPT=5070 DPT=5060 LEN=420
 2019-12-14 02:58:26
51.38.98.23 attackspambots 
$f2bV_matches
 2019-12-14 02:58:05
222.186.175.167 attackspambots 
Dec 13 08:22:31 php1 sshd\[2104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167  user=root
Dec 13 08:22:33 php1 sshd\[2104\]: Failed password for root from 222.186.175.167 port 38226 ssh2
Dec 13 08:22:46 php1 sshd\[2104\]: Failed password for root from 222.186.175.167 port 38226 ssh2
Dec 13 08:22:49 php1 sshd\[2131\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167  user=root
Dec 13 08:22:52 php1 sshd\[2131\]: Failed password for root from 222.186.175.167 port 9846 ssh2
 2019-12-14 02:31:25
46.119.30.157 attack 
Unauthorized connection attempt detected from IP address 46.119.30.157 to port 445
 2019-12-14 02:22:58
213.32.16.127 attackbots 
2019-12-13T12:05:28.515012ns547587 sshd\[15971\]: Invalid user sandhu from 213.32.16.127 port 59124
2019-12-13T12:05:28.520778ns547587 sshd\[15971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=127.ip-213-32-16.eu
2019-12-13T12:05:30.798575ns547587 sshd\[15971\]: Failed password for invalid user sandhu from 213.32.16.127 port 59124 ssh2
2019-12-13T12:14:15.282679ns547587 sshd\[29585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=127.ip-213-32-16.eu  user=root
...
 2019-12-14 02:34:35
49.235.192.71 attackbotsspam 
IP blocked
 2019-12-14 02:27:00
133.242.155.85 attackspambots 
Dec 13 17:29:07 vps691689 sshd[23219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.242.155.85
Dec 13 17:29:09 vps691689 sshd[23219]: Failed password for invalid user ftp from 133.242.155.85 port 35484 ssh2
Dec 13 17:35:20 vps691689 sshd[23406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.242.155.85
...
 2019-12-14 02:44:13

最近上报的IP列表

139.162.2.76 139.162.2.234 139.162.20.119 139.162.20.109
118.212.107.185 139.162.20.240 139.162.20.144 139.162.20.229
139.162.20.189 118.212.107.187 118.212.107.191 118.212.107.192
118.212.107.194 126.168.249.146 118.212.107.196 118.212.107.198
118.212.107.20 139.162.218.203 139.162.217.98 139.162.218.252