必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT. First Media TBK

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackbotsspam
2019-07-07 19:15:33 1hkAl8-00063y-7m SMTP connection from \(fm-dyn-139-194-20-239.fast.net.id\) \[139.194.20.239\]:43362 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-07-07 19:15:56 1hkAlX-00064X-7D SMTP connection from \(fm-dyn-139-194-20-239.fast.net.id\) \[139.194.20.239\]:43560 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-07-07 19:16:09 1hkAlk-00064r-RQ SMTP connection from \(fm-dyn-139-194-20-239.fast.net.id\) \[139.194.20.239\]:43667 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
2020-02-05 00:59:58
相同子网IP讨论:
IP 类型 评论内容 时间
139.194.20.198 attackspam
Unauthorized connection attempt detected from IP address 139.194.20.198 to port 4567 [J]
2020-01-29 02:35:18
139.194.209.123 attackbots
Honeypot attack, port: 445, PTR: fm-dyn-139-194-209-123.fast.net.id.
2020-01-13 15:00:10
139.194.207.158 attackbotsspam
Sun, 21 Jul 2019 18:28:30 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-22 04:50:29
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.194.20.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54276
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.194.20.239.			IN	A

;; AUTHORITY SECTION:
.			585	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020400 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 00:59:51 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
239.20.194.139.in-addr.arpa domain name pointer fm-dyn-139-194-20-239.fast.net.id.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
239.20.194.139.in-addr.arpa	name = fm-dyn-139-194-20-239.fast.net.id.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
103.48.192.203 attackspambots
C1,WP GET /suche/wp-login.php
2020-05-26 08:49:12
5.129.207.220 attackbotsspam
May 26 02:31:13 eventyay sshd[16559]: Failed password for root from 5.129.207.220 port 51496 ssh2
May 26 02:35:14 eventyay sshd[16721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.129.207.220
May 26 02:35:15 eventyay sshd[16721]: Failed password for invalid user gunnar from 5.129.207.220 port 54811 ssh2
...
2020-05-26 08:37:35
103.254.198.67 attack
May 26 07:00:51 webhost01 sshd[4069]: Failed password for root from 103.254.198.67 port 59656 ssh2
...
2020-05-26 08:31:02
125.64.94.220 attackspambots
May 26 01:58:48 debian-2gb-nbg1-2 kernel: \[12709929.815173\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=125.64.94.220 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=54321 PROTO=TCP SPT=43462 DPT=2376 WINDOW=65535 RES=0x00 SYN URGP=0
2020-05-26 08:22:16
62.57.192.50 attackbotsspam
SSH Brute-Forcing (server2)
2020-05-26 08:47:59
111.38.146.232 attackspam
Unauthorized connection attempt detected from IP address 111.38.146.232 to port 2323
2020-05-26 08:44:03
81.51.156.171 attack
May 26 01:21:46 roki-contabo sshd\[18243\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.51.156.171  user=root
May 26 01:21:48 roki-contabo sshd\[18243\]: Failed password for root from 81.51.156.171 port 36158 ssh2
May 26 01:27:52 roki-contabo sshd\[18322\]: Invalid user myuser1 from 81.51.156.171
May 26 01:27:52 roki-contabo sshd\[18322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.51.156.171
May 26 01:27:54 roki-contabo sshd\[18322\]: Failed password for invalid user myuser1 from 81.51.156.171 port 33544 ssh2
...
2020-05-26 08:44:34
196.52.43.121 attackbotsspam
Unauthorized connection attempt detected from IP address 196.52.43.121 to port 2085 [T]
2020-05-26 08:24:56
106.52.39.63 attackspam
frenzy
2020-05-26 08:32:46
221.11.48.155 attackspambots
CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-05-26 08:43:47
36.133.121.27 attackbotsspam
$f2bV_matches
2020-05-26 08:31:15
111.229.208.44 attackbots
Lines containing failures of 111.229.208.44
May 25 00:56:24 nextcloud sshd[27957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.208.44  user=r.r
May 25 00:56:25 nextcloud sshd[27957]: Failed password for r.r from 111.229.208.44 port 59846 ssh2
May 25 00:56:25 nextcloud sshd[27957]: Received disconnect from 111.229.208.44 port 59846:11: Bye Bye [preauth]
May 25 00:56:25 nextcloud sshd[27957]: Disconnected from authenticating user r.r 111.229.208.44 port 59846 [preauth]
May 25 01:01:48 nextcloud sshd[28413]: Invalid user snadendla from 111.229.208.44 port 60140
May 25 01:01:48 nextcloud sshd[28413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.208.44
May 25 01:01:51 nextcloud sshd[28413]: Failed password for invalid user snadendla from 111.229.208.44 port 60140 ssh2
May 25 01:01:51 nextcloud sshd[28413]: Received disconnect from 111.229.208.44 port 60140:11: Bye Bye [preau........
------------------------------
2020-05-26 08:58:40
117.65.84.235 attack
May 15 22:07:50 localhost postfix/smtpd[7601]: lost connection after EHLO from unknown[117.65.84.235]
May 15 22:07:56 localhost postfix/smtpd[7601]: lost connection after EHLO from unknown[117.65.84.235]
May 15 22:08:03 localhost postfix/smtpd[7601]: lost connection after EHLO from unknown[117.65.84.235]
May 15 22:08:12 localhost postfix/smtpd[7601]: lost connection after EHLO from unknown[117.65.84.235]
May 15 22:08:30 localhost postfix/smtpd[7601]: lost connection after EHLO from unknown[117.65.84.235]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.65.84.235
2020-05-26 08:25:47
139.162.212.214 attack
CloudCIX Reconnaissance Scan Detected, PTR: scan-57.security.ipip.net.
2020-05-26 08:29:52
91.121.77.104 attackspambots
Automatic report - XMLRPC Attack
2020-05-26 08:37:07

最近上报的IP列表

254.180.214.243 171.26.227.211 112.1.64.254 187.70.50.78
75.214.152.34 51.164.244.27 94.1.114.58 168.194.176.165
139.192.86.126 139.192.41.240 85.209.3.143 139.192.234.141
139.190.31.79 139.180.212.134 139.180.137.38 139.0.50.226
138.97.176.144 138.94.254.179 138.94.59.216 138.68.142.122