必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Singapore

省份(region): unknown

国家(country): Singapore

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
139.162.214.192 spambotsattack
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2023-02-18 16:15:46
139.162.247.102 attack
OSSEC HIDS Notification.
2020 Oct 15 19:14:19

Received From: shared->/var/log/secure
Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system."
Portion of the log(s):

Oct 15 19:14:18 shared sshd[2970433]: ssh_dispatch_run_fatal: Connection from 139.162.247.102 port 41166: bignum is negative [preauth]

 --END OF NOTIFICATION
2020-10-20 08:52:36
139.162.217.250 attack
WebSpam Attack
2020-10-07 05:56:21
139.162.217.250 attackbots
WebSpam Attack
2020-10-06 22:09:25
139.162.217.250 attack
WebSpam Attack
2020-10-06 13:52:46
139.162.247.102 attack
firewall-block, port(s): 22/tcp
2020-10-01 03:25:46
139.162.247.102 attackspambots
honeypot 22 port
2020-09-30 01:51:04
139.162.247.102 attackspam
Sep 29 12:19:00 baraca inetd[76034]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
Sep 29 12:19:01 baraca inetd[76035]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
Sep 29 12:19:02 baraca inetd[76038]: refused connection from scan003.ampereinnotech.com, service sshd (tcp)
...
2020-09-29 17:51:13
139.162.247.102 attackbotsspam
IP 139.162.247.102 attacked honeypot on port: 22 at 9/26/2020 5:56:09 AM
2020-09-26 21:09:12
139.162.247.102 attackbotsspam
Sep2601:57:57server6sshd[14291]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:02server6sshd[14327]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:07server6sshd[14343]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:12server6sshd[14360]:refusedconnectfrom139.162.247.102\(139.162.247.102\)Sep2601:58:17server6sshd[14374]:refusedconnectfrom139.162.247.102\(139.162.247.102\)
2020-09-26 12:51:05
139.162.245.68 attackspam
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
2020-09-22 23:57:27
139.162.245.68 attackspam
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
2020-09-22 16:01:33
139.162.245.68 attackbotsspam
Found on Block CINS-badguys  / proto=6  .  srcport=50055  .  dstport=9200  .     (3216)
2020-09-22 08:05:11
139.162.252.121 attackspambots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: li1537-121.members.linode.com.
2020-09-06 02:31:22
139.162.252.121 attack
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: li1537-121.members.linode.com.
2020-09-05 18:06:32
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.162.2.234
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3788
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.162.2.234.			IN	A

;; AUTHORITY SECTION:
.			357	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:08:29 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
234.2.162.139.in-addr.arpa domain name pointer li844-234.members.linode.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
234.2.162.139.in-addr.arpa	name = li844-234.members.linode.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
60.222.233.208 attack
" "
2019-10-11 14:26:48
92.187.228.47 attack
Sent mail to target address hacked/leaked from abandonia in 2016
2019-10-11 14:10:00
79.135.245.89 attackbots
Oct 10 19:50:32 wbs sshd\[1883\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.135.245.89  user=root
Oct 10 19:50:34 wbs sshd\[1883\]: Failed password for root from 79.135.245.89 port 50530 ssh2
Oct 10 19:54:39 wbs sshd\[2238\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.135.245.89  user=root
Oct 10 19:54:42 wbs sshd\[2238\]: Failed password for root from 79.135.245.89 port 33220 ssh2
Oct 10 19:58:56 wbs sshd\[2620\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.135.245.89  user=root
2019-10-11 14:15:22
45.136.109.185 attack
Automatic report - Port Scan
2019-10-11 14:32:10
203.129.199.163 attackspam
Oct 11 07:23:19 host sshd\[17656\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.129.199.163  user=root
Oct 11 07:23:21 host sshd\[17656\]: Failed password for root from 203.129.199.163 port 47938 ssh2
...
2019-10-11 14:11:06
54.39.147.2 attackbotsspam
SSH authentication failure x 6 reported by Fail2Ban
...
2019-10-11 14:06:59
14.215.45.163 attackspam
Oct 10 19:23:36 sachi sshd\[25789\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.215.45.163  user=root
Oct 10 19:23:38 sachi sshd\[25789\]: Failed password for root from 14.215.45.163 port 57182 ssh2
Oct 10 19:28:17 sachi sshd\[26163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.215.45.163  user=root
Oct 10 19:28:18 sachi sshd\[26163\]: Failed password for root from 14.215.45.163 port 59950 ssh2
Oct 10 19:32:55 sachi sshd\[26608\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.215.45.163  user=root
2019-10-11 14:39:16
116.212.50.168 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 11-10-2019 04:55:22.
2019-10-11 14:35:04
45.82.153.39 attack
Port scan: Attack repeated for 24 hours
2019-10-11 14:41:40
36.77.40.233 attackspambots
Attempt to attack host OS, exploiting network vulnerabilities, on 11-10-2019 04:55:26.
2019-10-11 14:28:21
117.2.125.19 attackspambots
Attempt to attack host OS, exploiting network vulnerabilities, on 11-10-2019 04:55:23.
2019-10-11 14:34:15
188.166.117.213 attack
Oct 11 05:35:31 ncomp sshd[12279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.117.213  user=root
Oct 11 05:35:33 ncomp sshd[12279]: Failed password for root from 188.166.117.213 port 37114 ssh2
Oct 11 05:55:31 ncomp sshd[12528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.117.213  user=root
Oct 11 05:55:33 ncomp sshd[12528]: Failed password for root from 188.166.117.213 port 52892 ssh2
2019-10-11 14:21:50
193.112.113.228 attack
Oct 11 08:01:01 vmanager6029 sshd\[2298\]: Invalid user P@rola123456 from 193.112.113.228 port 41364
Oct 11 08:01:01 vmanager6029 sshd\[2298\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.113.228
Oct 11 08:01:03 vmanager6029 sshd\[2298\]: Failed password for invalid user P@rola123456 from 193.112.113.228 port 41364 ssh2
2019-10-11 14:19:09
111.231.110.80 attack
Oct 11 05:32:11 localhost sshd\[33737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.110.80  user=root
Oct 11 05:32:13 localhost sshd\[33737\]: Failed password for root from 111.231.110.80 port 4858 ssh2
Oct 11 05:36:35 localhost sshd\[33996\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.110.80  user=root
Oct 11 05:36:37 localhost sshd\[33996\]: Failed password for root from 111.231.110.80 port 40378 ssh2
Oct 11 05:41:05 localhost sshd\[34256\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.110.80  user=root
...
2019-10-11 14:20:00
46.101.1.19 attack
Automatic report - XMLRPC Attack
2019-10-11 14:30:51

最近上报的IP列表

139.162.2.110 139.162.20.119 139.162.20.109 118.212.107.185
139.162.20.240 139.162.20.144 139.162.20.229 139.162.20.189
118.212.107.187 118.212.107.191 118.212.107.192 118.212.107.194
126.168.249.146 118.212.107.196 118.212.107.198 118.212.107.20
139.162.218.203 139.162.217.98 139.162.218.252 139.162.218.150