必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): Max-Planck-Institut fuer Informatik

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): University/College/School

用户上报:
类型 评论内容 时间
attack
" "
2019-11-22 18:58:02
attackspambots
3389BruteforceFW23
2019-10-22 18:25:50
相同子网IP讨论:
IP 类型 评论内容 时间
139.19.117.195 attack
recursive dns scanner
2020-08-17 07:18:20
139.19.117.195 attackbotsspam
Port scanning [2 denied]
2020-06-24 15:20:58
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.19.117.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15724
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.19.117.8.			IN	A

;; AUTHORITY SECTION:
.			587	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102200 1800 900 604800 86400

;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 22 18:25:42 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
8.117.19.139.in-addr.arpa domain name pointer scan-out.mmci.uni-saarland.de.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
8.117.19.139.in-addr.arpa	name = scan-out.mmci.uni-saarland.de.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
159.89.10.56 attack
Lines containing failures of 159.89.10.56
/var/log/apache/pucorp.org.log:159.89.10.56 - - [14/Aug/2020:22:22:46 +0200] "GET / HTTP/1.1" 301 679 "hxxp://flunkmusic.com/" "php-requests/1.7"
/var/log/apache/pucorp.org.log:159.89.10.56 - - [14/Aug/2020:22:22:46 +0200] "GET / HTTP/1.1" 302 4825 "hxxps://flunkmusic.com/" "php-requests/1.7"
/var/log/apache/pucorp.org.log:159.89.10.56 - - [14/Aug/2020:22:22:46 +0200] "GET /flunkschool/ HTTP/1.1" 200 10700 "hxxps://flunkmusic.com/flunkschool/" "php-requests/1.7"
/var/log/apache/pucorp.org.log:159.89.10.56 - - [14/Aug/2020:22:22:46 +0200] "GET / HTTP/1.1" 301 660 "-" "AhrefsBot"
/var/log/apache/pucorp.org.log:159.89.10.56 - - [14/Aug/2020:22:22:46 +0200] "GET / HTTP/1.1" 301 660 "-" "MJ12bot"
/var/log/apache/pucorp.org.log:159.89.10.56 - - [14/Aug/2020:22:22:46 +0200] "GET /robots.txt HTTP/1.1" 301 680 "-" "Googlebot"


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=159.89.10.56
2020-08-15 06:14:40
188.226.192.115 attackspambots
Aug 14 22:17:05 IngegnereFirenze sshd[11005]: User root from 188.226.192.115 not allowed because not listed in AllowUsers
...
2020-08-15 06:28:42
35.175.201.187 attack
[N10.H1.VM1] Port Scanner Detected Blocked by UFW
2020-08-15 06:16:49
213.194.157.249 attackspam
[14/Aug/2020 x@x
[14/Aug/2020 x@x
[14/Aug/2020 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=213.194.157.249
2020-08-15 06:18:54
103.127.131.146 attack
Aug 14 22:33:22 server770 sshd[22140]: Did not receive identification string from 103.127.131.146 port 60155
Aug 14 22:33:28 server770 sshd[22142]: Invalid user user1 from 103.127.131.146 port 60525
Aug 14 22:33:28 server770 sshd[22142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.127.131.146
Aug 14 22:33:31 server770 sshd[22142]: Failed password for invalid user user1 from 103.127.131.146 port 60525 ssh2
Aug 14 22:33:31 server770 sshd[22142]: Connection closed by 103.127.131.146 port 60525 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.127.131.146
2020-08-15 06:49:48
85.209.0.102 attack
5x Failed Password
2020-08-15 06:29:54
18.133.158.89 attack
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: ec2-18-133-158-89.eu-west-2.compute.amazonaws.com.
2020-08-15 06:43:03
106.12.17.214 attack
Aug 14 22:42:39  sshd\[19034\]: User root from 106.12.17.214 not allowed because not listed in AllowUsersAug 14 22:42:40  sshd\[19034\]: Failed password for invalid user root from 106.12.17.214 port 35294 ssh2
...
2020-08-15 06:35:46
59.145.221.103 attackspam
Aug 14 23:38:24 vpn01 sshd[27052]: Failed password for root from 59.145.221.103 port 53196 ssh2
...
2020-08-15 06:28:09
93.174.93.133 attack
$f2bV_matches
2020-08-15 06:17:48
36.71.153.25 attackbots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-08-15 06:52:47
104.211.60.181 attack
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-08-15 06:50:01
178.236.60.4 attack
[14/Aug/2020 x@x
[14/Aug/2020 x@x
[14/Aug/2020 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=178.236.60.4
2020-08-15 06:25:12
182.42.47.133 attackspambots
Aug 14 21:44:44 jumpserver sshd[154583]: Failed password for root from 182.42.47.133 port 56578 ssh2
Aug 14 21:45:41 jumpserver sshd[154607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.42.47.133  user=root
Aug 14 21:45:42 jumpserver sshd[154607]: Failed password for root from 182.42.47.133 port 41656 ssh2
...
2020-08-15 06:34:52
103.20.188.18 attackspambots
Aug 15 00:19:51 [host] sshd[3813]: Invalid user 12
Aug 15 00:19:51 [host] sshd[3813]: pam_unix(sshd:a
Aug 15 00:19:54 [host] sshd[3813]: Failed password
2020-08-15 06:51:39

最近上报的IP列表

187.195.108.140 185.25.123.156 178.69.236.78 85.192.179.171
123.1.187.49 84.201.254.47 35.247.58.228 34.89.71.196
212.98.95.161 200.89.178.11 152.198.0.177 143.182.68.220
24.54.60.195 54.183.137.158 47.38.230.104 54.16.80.178
1.172.52.218 149.28.89.132 190.53.30.218 166.62.43.235