必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Singapore

省份(region): unknown

国家(country): Singapore

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
139.162.214.192 spambotsattack
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2023-02-18 16:15:46
139.162.247.102 attack
OSSEC HIDS Notification.
2020 Oct 15 19:14:19

Received From: shared->/var/log/secure
Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system."
Portion of the log(s):

Oct 15 19:14:18 shared sshd[2970433]: ssh_dispatch_run_fatal: Connection from 139.162.247.102 port 41166: bignum is negative [preauth]

 --END OF NOTIFICATION
2020-10-20 08:52:36
139.162.217.250 attack
WebSpam Attack
2020-10-07 05:56:21
139.162.217.250 attackbots
WebSpam Attack
2020-10-06 22:09:25
139.162.217.250 attack
WebSpam Attack
2020-10-06 13:52:46
139.162.247.102 attack
firewall-block, port(s): 22/tcp
2020-10-01 03:25:46
139.162.247.102 attackspambots
honeypot 22 port
2020-09-30 01:51:04
139.162.247.102 attackspam
Sep 29 12:19:00 baraca inetd[76034]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
Sep 29 12:19:01 baraca inetd[76035]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
Sep 29 12:19:02 baraca inetd[76038]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
...
2020-09-29 17:51:13
139.162.247.102 attackbotsspam
IP 139.162.247.102 attacked honeypot on port: 22 at 9/26/2020 5:56:09 AM
2020-09-26 21:09:12
139.162.247.102 attackbotsspam
Sep2601:57:57server6sshd[14291]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:02server6sshd[14327]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:07server6sshd[14343]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:12server6sshd[14360]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:17server6sshd[14374]:refusedconnectfrom139.162.247.102\(139.162.247.102\)
2020-09-26 12:51:05
139.162.245.68 attackspam
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
2020-09-22 23:57:27
139.162.245.68 attackspam
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
2020-09-22 16:01:33
139.162.245.68 attackbotsspam
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
2020-09-22 08:05:11
139.162.252.121 attackspambots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: li1537-121.members.linode.com.
2020-09-06 02:31:22
139.162.252.121 attack
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: li1537-121.members.linode.com.
2020-09-05 18:06:32
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.162.2.110
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14875
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.162.2.110.			IN	A

;; AUTHORITY SECTION:
.			538	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:08:29 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
110.2.162.139.in-addr.arpa domain name pointer 139-162-2-110.ip.linodeusercontent.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
110.2.162.139.in-addr.arpa	name = 139-162-2-110.ip.linodeusercontent.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
188.165.203.57 attackbots
Absender hat Spam-Falle ausgel?st
2019-07-04 20:19:45
46.3.96.66 attack
Multiport scan : 14 ports scanned 8121 8122 8124 8125 8126 8129 8130 8131 8132 8137 8138 8352 8354 8355
2019-07-04 20:03:35
125.161.105.160 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 09:04:36,839 INFO [shellcode_manager] (125.161.105.160) no match, writing hexdump (e17b1928c9f5fa6e183cf29ebfaa48b0 :2279925) - MS17010 (EternalBlue)
2019-07-04 19:40:19
116.193.217.138 attackbotsspam
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.193.217.138
Failed password for invalid user PRECISIONSPMGR from 116.193.217.138 port 61169 ssh2
Invalid user lang from 116.193.217.138 port 17039
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.193.217.138
Failed password for invalid user lang from 116.193.217.138 port 17039 ssh2
2019-07-04 19:24:45
197.210.124.186 attackspam
Absender hat Spam-Falle ausgel?st
2019-07-04 20:17:30
54.91.242.233 attackbotsspam
Jul  4 06:08:21   TCP Attack: SRC=54.91.242.233 DST=[Masked] LEN=250 TOS=0x00 PREC=0x00 TTL=236  DF PROTO=TCP SPT=53814 DPT=80 WINDOW=913 RES=0x00 ACK PSH URGP=0
2019-07-04 19:34:52
39.36.27.219 attackbots
2019-07-04 07:08:48 H=([39.36.27.219]) [39.36.27.219]:4575 I=[10.100.18.20]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=39.36.27.219)
2019-07-04 07:08:49 unexpected disconnection while reading SMTP command from ([39.36.27.219]) [39.36.27.219]:4575 I=[10.100.18.20]:25 (error: Connection reset by peer)
2019-07-04 07:46:59 H=([39.36.27.219]) [39.36.27.219]:33137 I=[10.100.18.20]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=39.36.27.219)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=39.36.27.219
2019-07-04 20:05:19
142.93.204.3 attackbots
Jul  4 11:30:21 dedicated sshd[1032]: Invalid user mustang from 142.93.204.3 port 46510
2019-07-04 19:42:21
213.85.31.143 attackbots
Unauthorised access (Jul  4) SRC=213.85.31.143 LEN=40 TTL=242 ID=13598 TCP DPT=445 WINDOW=1024 SYN
2019-07-04 20:11:46
138.197.72.48 attackbotsspam
Jul  4 12:50:13 62-210-73-4 sshd\[15369\]: Invalid user ameen from 138.197.72.48 port 59222
Jul  4 12:50:13 62-210-73-4 sshd\[15369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.72.48
...
2019-07-04 19:38:41
213.32.254.124 attackbotsspam
Absender hat Spam-Falle ausgel?st
2019-07-04 20:14:15
222.254.23.81 attackbotsspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 09:03:59,232 INFO [shellcode_manager] (222.254.23.81) no match, writing hexdump (cd0cdbdd75edde73f2ee56e5381e48ce :2207385) - MS17010 (EternalBlue)
2019-07-04 20:04:09
65.132.59.34 attack
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
2019-07-04 19:26:48
54.38.238.92 attackspam
fail2ban honeypot
2019-07-04 19:58:36
122.193.115.238 attackspambots
Jul  4 07:49:15 h1946882 sshd[1220]: pam_unix(sshd:auth): authenticatio=
n failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D122.1=
93.115.238=20
Jul  4 07:49:17 h1946882 sshd[1220]: Failed password for invalid user a=
dmin from 122.193.115.238 port 48815 ssh2
Jul  4 07:49:20 h1946882 sshd[1220]: Failed password for invalid user a=
dmin from 122.193.115.238 port 48815 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=122.193.115.238
2019-07-04 20:10:32

最近上报的IP列表

139.162.2.76 139.162.2.234 139.162.20.119 139.162.20.109
118.212.107.185 139.162.20.240 139.162.20.144 139.162.20.229
139.162.20.189 118.212.107.187 118.212.107.191 118.212.107.192
118.212.107.194 126.168.249.146 118.212.107.196 118.212.107.198
118.212.107.20 139.162.218.203 139.162.217.98 139.162.218.252