必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       139.189.0.0 - 139.189.255.255
CIDR:           139.189.0.0/16
NetName:        APNIC-ERX-139-189-0-0
NetHandle:      NET-139-189-0-0-1
Parent:         NET139 (NET-139-0-0-0-0)
NetType:        Early Registrations, Transferred to APNIC
OriginAS:       
Organization:   Asia Pacific Network Information Centre (APNIC)
RegDate:        2010-11-03
Updated:        2010-11-17
Comment:        This IP address range is not registered in the ARIN database.
Comment:        This range was transferred to the APNIC Whois Database as
Comment:        part of the ERX (Early Registration Transfer) project.
Comment:        For details, refer to the APNIC Whois Database via
Comment:        WHOIS.APNIC.NET or http://wq.apnic.net/apnic-bin/whois.pl
Comment:        
Comment:        ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment:        for the Asia Pacific region.  APNIC does not operate networks
Comment:        using this IP address range and is not able to investigate
Comment:        spam or abuse reports relating to these addresses.  For more
Comment:        help, refer to http://www.apnic.net/apnic-info/whois_search2/abuse-and-spamming
Ref:            https://rdap.arin.net/registry/ip/139.189.0.0

ResourceLink:  https://apps.db.ripe.net/db-web-ui/query
ResourceLink:  whois.apnic.net


OrgName:        Asia Pacific Network Information Centre
OrgId:          APNIC
Address:        PO Box 3646
City:           South Brisbane
StateProv:      QLD
PostalCode:     4101
Country:        AU
RegDate:        
Updated:        2012-01-24
Ref:            https://rdap.arin.net/registry/entity/APNIC

ReferralServer:  whois://whois.apnic.net
ResourceLink:  http://wq.apnic.net/whois-search/static/search.html

OrgTechHandle: AWC12-ARIN
OrgTechName:   APNIC Whois Contact
OrgTechPhone:  +61 7 3858 3188 
OrgTechEmail:  search-apnic-not-arin@apnic.net
OrgTechRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN

OrgAbuseHandle: AWC12-ARIN
OrgAbuseName:   APNIC Whois Contact
OrgAbusePhone:  +61 7 3858 3188 
OrgAbuseEmail:  search-apnic-not-arin@apnic.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.apnic.net.

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '139.189.0.0 - 139.189.127.255'

% Abuse contact for '139.189.0.0 - 139.189.127.255' is 'hnlinj@21cn.com'

inetnum:        139.189.0.0 - 139.189.127.255
netname:        CHINANET
descr:          China Telecom
descr:          Data Network Management Division
descr:          Network Operation & Maintenance Department
descr:          No 19 Chaoyangmen North Street
descr:          Dongcheng District
country:        CN
admin-c:        LZ8-AP
tech-c:         LZ8-AP
abuse-c:        AC2533-AP
status:         ALLOCATED NON-PORTABLE
mnt-by:         MAINT-CN-CHINANET-HI
mnt-lower:      MAINT-CN-CHINANET-HI
mnt-routes:     MAINT-CN-CHINANET-HI
mnt-irt:        IRT-CHINANET-HI
last-modified:  2022-01-12T13:25:46Z
source:         APNIC

irt:            IRT-CHINANET-HI
address:        20th Floor,TelecomCenter Building
address:        NanHai Avenue,HaiKou HaiNan province
e-mail:         hnlinj@21cn.com
abuse-mailbox:  hnlinj@21cn.com
admin-c:        LZ8-AP
tech-c:         LZ8-AP
auth:           # Filtered
remarks:        hnlinj@21cn.com was validated on 2026-07-20
mnt-by:         MAINT-CN-CHINANET-HI
last-modified:  2026-07-20T02:35:17Z
source:         APNIC

role:           ABUSE CHINANETHI
country:        ZZ
address:        20th Floor,TelecomCenter Building
address:        NanHai Avenue,HaiKou HaiNan province
phone:          +000000000
e-mail:         hnlinj@21cn.com
admin-c:        LZ8-AP
tech-c:         LZ8-AP
nic-hdl:        AC2533-AP
remarks:        Generated from irt object IRT-CHINANET-HI
remarks:        hnlinj@21cn.com was validated on 2026-07-20
abuse-mailbox:  hnlinj@21cn.com
mnt-by:         APNIC-ABUSE
last-modified:  2026-07-20T02:35:45Z
source:         APNIC

person:         liuqing zheng
address:        20th Floor,TelecomCenter Building
address:        NanHai Avenue,HaiKou HaiNan province
country:        CN
phone:          +86-898-66816971
fax-no:         +86-898-66785993
e-mail:         089866775500@189.cn
nic-hdl:        LZ8-AP
mnt-by:         MAINT-CN-CHINANET-HI
last-modified:  2014-01-24T09:05:01Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.189.115.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58401
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.189.115.109.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026092601 1800 900 604800 86400

;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 27 06:30:12 CST 2026
;; MSG SIZE  rcvd: 108
HOST信息:
Host 109.115.189.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 109.115.189.139.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
162.142.125.26 attackspam
firewall-block, port(s): 21/tcp
2020-09-12 02:22:00
199.71.235.199 attack
PORTSCAN
2020-09-12 02:38:21
61.181.80.109 attackbots
Port scan: Attack repeated for 24 hours
2020-09-12 02:23:27
119.202.218.23 attackbots
2020-09-10 05:28:23 Reject access to port(s):3389 1 times a day
2020-09-12 02:26:47
46.151.73.51 attackspam
Sep  7 11:57:37 mail.srvfarm.net postfix/smtpd[1032576]: warning: unknown[46.151.73.51]: SASL PLAIN authentication failed: 
Sep  7 11:57:37 mail.srvfarm.net postfix/smtpd[1032576]: lost connection after AUTH from unknown[46.151.73.51]
Sep  7 11:58:55 mail.srvfarm.net postfix/smtps/smtpd[1032281]: warning: unknown[46.151.73.51]: SASL PLAIN authentication failed: 
Sep  7 11:58:55 mail.srvfarm.net postfix/smtps/smtpd[1032281]: lost connection after AUTH from unknown[46.151.73.51]
Sep  7 12:06:10 mail.srvfarm.net postfix/smtps/smtpd[1038609]: warning: unknown[46.151.73.51]: SASL PLAIN authentication failed:
2020-09-12 02:45:29
103.1.12.55 attackspam
Sep  9 07:53:45 mail.srvfarm.net postfix/smtpd[2257918]: NOQUEUE: reject: RCPT from unknown[103.1.12.55]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Sep  9 07:58:43 mail.srvfarm.net postfix/smtpd[2257918]: NOQUEUE: reject: RCPT from unknown[103.1.12.55]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Sep  9 07:58:43 mail.srvfarm.net postfix/smtpd[2257920]: NOQUEUE: reject: RCPT from unknown[103.1.12.55]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Sep  9 07:58:50 mail.srvfarm.net postfix/smtpd[2257597]: NOQUEUE: reject: RCPT from unknown[103.1.12.55]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Sep
2020-09-12 02:12:09
118.126.97.243 attack
 TCP (SYN) 118.126.97.243:40182 -> port 7518, len 44
2020-09-12 02:44:36
111.75.149.221 attackbots
111.75.149.221 is unauthorized and has been banned by fail2ban
2020-09-12 02:10:55
113.160.148.180 attackbotsspam
Listed on    rbldns-ru also zen-spamhaus   / proto=6  .  srcport=62405  .  dstport=445  .     (754)
2020-09-12 02:34:33
124.65.141.110 attackspam
 TCP (SYN) 124.65.141.110:45839 -> port 1433, len 44
2020-09-12 02:34:10
177.154.238.53 attackbots
Sep  7 12:12:37 mail.srvfarm.net postfix/smtpd[1039280]: warning: unknown[177.154.238.53]: SASL PLAIN authentication failed: 
Sep  7 12:12:37 mail.srvfarm.net postfix/smtpd[1039280]: lost connection after AUTH from unknown[177.154.238.53]
Sep  7 12:15:23 mail.srvfarm.net postfix/smtpd[1038120]: warning: unknown[177.154.238.53]: SASL PLAIN authentication failed: 
Sep  7 12:15:24 mail.srvfarm.net postfix/smtpd[1038120]: lost connection after AUTH from unknown[177.154.238.53]
Sep  7 12:20:28 mail.srvfarm.net postfix/smtpd[1053366]: warning: unknown[177.154.238.53]: SASL PLAIN authentication failed:
2020-09-12 02:41:21
113.161.79.191 attack
Sep 11 15:31:43 sshgateway sshd\[522\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.79.191  user=root
Sep 11 15:31:45 sshgateway sshd\[522\]: Failed password for root from 113.161.79.191 port 54630 ssh2
Sep 11 15:35:19 sshgateway sshd\[653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.79.191  user=root
Sep 11 15:35:20 sshgateway sshd\[653\]: Failed password for root from 113.161.79.191 port 52778 ssh2
Sep 11 15:37:17 sshgateway sshd\[742\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.79.191  user=root
Sep 11 15:37:19 sshgateway sshd\[742\]: Failed password for root from 113.161.79.191 port 58566 ssh2
Sep 11 15:39:07 sshgateway sshd\[872\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.79.191  user=root
Sep 11 15:39:09 sshgateway sshd\[872\]: Failed password for root from 113.161.79.191 port 361
2020-09-12 02:37:02
91.245.30.79 attack
Sep  7 12:09:56 mail.srvfarm.net postfix/smtpd[1050887]: warning: unknown[91.245.30.79]: SASL PLAIN authentication failed: 
Sep  7 12:09:56 mail.srvfarm.net postfix/smtpd[1050887]: lost connection after AUTH from unknown[91.245.30.79]
Sep  7 12:14:31 mail.srvfarm.net postfix/smtpd[1050882]: warning: unknown[91.245.30.79]: SASL PLAIN authentication failed: 
Sep  7 12:14:31 mail.srvfarm.net postfix/smtpd[1050882]: lost connection after AUTH from unknown[91.245.30.79]
Sep  7 12:15:08 mail.srvfarm.net postfix/smtpd[1039277]: warning: unknown[91.245.30.79]: SASL PLAIN authentication failed:
2020-09-12 02:45:11
45.5.131.83 attackbotsspam
Sep  7 12:45:33 mail.srvfarm.net postfix/smtps/smtpd[1054165]: warning: unknown[45.5.131.83]: SASL PLAIN authentication failed: 
Sep  7 12:45:33 mail.srvfarm.net postfix/smtps/smtpd[1054165]: lost connection after AUTH from unknown[45.5.131.83]
Sep  7 12:48:42 mail.srvfarm.net postfix/smtpd[1058612]: warning: unknown[45.5.131.83]: SASL PLAIN authentication failed: 
Sep  7 12:48:43 mail.srvfarm.net postfix/smtpd[1058612]: lost connection after AUTH from unknown[45.5.131.83]
Sep  7 12:53:31 mail.srvfarm.net postfix/smtpd[1053369]: warning: unknown[45.5.131.83]: SASL PLAIN authentication failed:
2020-09-12 02:19:05
77.88.5.218 attack
port scan and connect, tcp 80 (http)
2020-09-12 02:24:56

最近上报的IP列表

254.60.51.57 40.124.178.103 24.242.66.11 225.31.74.112
230.10.225.149 224.77.172.3 40.80.203.186 224.206.149.210
45.74.28.65 112.251.144.236 112.8.135.220 104.155.207.153
40.76.224.207 217.11.249.149 216.180.135.149 214.238.211.7
40.143.26.106 2.193.66.85 2.193.66.226 213.241.50.222