必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.194.31.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3814
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.194.31.199.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 03:58:02 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
199.31.194.139.in-addr.arpa domain name pointer fm-dyn-139-194-31-199.fast.net.id.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
199.31.194.139.in-addr.arpa	name = fm-dyn-139-194-31-199.fast.net.id.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
164.132.192.5 attackspam
Jul  1 06:28:41 SilenceServices sshd[19755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.192.5
Jul  1 06:28:43 SilenceServices sshd[19755]: Failed password for invalid user rizky from 164.132.192.5 port 40668 ssh2
Jul  1 06:30:27 SilenceServices sshd[20810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.192.5
2019-07-01 15:24:11
108.162.219.43 attackspambots
108.162.219.43 - - [01/Jul/2019:04:55:18 +0100] "POST /xmlrpc.php HTTP/1.1" 200 225 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-07-01 14:50:38
103.8.119.166 attack
Triggered by Fail2Ban
2019-07-01 15:17:16
35.232.147.191 attackbots
Message: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/modsecurity.d/activated_rules/modsecurity_crs_35_bad_robots.conf"] [line "20"] [id "990002"] [rev "2"] [msg "Request Indicates a Security Scanner Scanned the Site"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.6"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"]
2019-07-01 14:38:40
103.213.245.50 attackspam
Jul  1 06:03:28 meumeu sshd[7903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.213.245.50 
Jul  1 06:03:31 meumeu sshd[7903]: Failed password for invalid user sinus1 from 103.213.245.50 port 51739 ssh2
Jul  1 06:09:02 meumeu sshd[8617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.213.245.50 
...
2019-07-01 15:31:58
5.160.83.115 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-01 03:25:14,936 INFO [amun_request_handler] PortScan Detected on Port: 445 (5.160.83.115)
2019-07-01 14:44:44
157.230.110.62 attack
CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2019-07-01 14:54:45
1.101.145.8 attackspambots
01.07.2019 06:40:58 SSH access blocked by firewall
2019-07-01 15:25:29
146.88.240.4 attack
Scanning (more than 2 packets) random ports - tries to find possible vulnerable services
2019-07-01 14:58:54
139.199.248.153 attack
Jul  1 05:55:19 [host] sshd[24049]: Invalid user ubuntu from 139.199.248.153
Jul  1 05:55:19 [host] sshd[24049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.248.153
Jul  1 05:55:21 [host] sshd[24049]: Failed password for invalid user ubuntu from 139.199.248.153 port 44762 ssh2
2019-07-01 14:49:30
79.103.67.167 attack
Jul  1 06:22:33 hermes dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 3 secs\): user=\, method=PLAIN, rip=79.103.67.167, lip=172.104.235.62, session=\
Jul  1 06:39:42 hermes dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=79.103.67.167, lip=172.104.235.62, session=\
Jul  1 06:55:07 hermes dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=79.103.67.167, lip=172.104.235.62, session=\<22XTl5aMrsFPZ0On\>
...
2019-07-01 14:57:21
37.59.104.76 attackspambots
Jul  1 06:40:59 marvibiene sshd[63024]: Invalid user cron from 37.59.104.76 port 41944
Jul  1 06:40:59 marvibiene sshd[63024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.104.76
Jul  1 06:40:59 marvibiene sshd[63024]: Invalid user cron from 37.59.104.76 port 41944
Jul  1 06:41:01 marvibiene sshd[63024]: Failed password for invalid user cron from 37.59.104.76 port 41944 ssh2
...
2019-07-01 14:46:41
27.72.88.40 attackspam
Jul  1 08:14:16 mail sshd\[2578\]: Invalid user pang from 27.72.88.40 port 60104
Jul  1 08:14:16 mail sshd\[2578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.72.88.40
Jul  1 08:14:19 mail sshd\[2578\]: Failed password for invalid user pang from 27.72.88.40 port 60104 ssh2
Jul  1 08:17:52 mail sshd\[20381\]: Invalid user spamers from 27.72.88.40 port 38490
Jul  1 08:17:52 mail sshd\[20381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.72.88.40
...
2019-07-01 15:33:14
201.28.212.146 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-01 02:54:01,767 INFO [amun_request_handler] PortSc] PortScan Detected on Port: 445 (201.28.212.146)
2019-07-01 14:58:20
27.64.93.92 attackspambots
TCP port 23 (Telnet) attempt blocked by firewall. [2019-07-01 05:52:36]
2019-07-01 15:06:39

最近上报的IP列表

226.50.19.208 209.174.44.197 65.73.4.124 24.235.253.181
61.145.87.93 45.234.177.61 231.176.4.66 163.164.63.209
242.155.155.99 110.65.11.142 160.201.10.55 139.255.28.9
129.123.104.226 178.92.94.163 167.158.97.197 213.48.49.28
213.97.92.52 190.10.13.30 58.170.135.56 249.130.87.69