必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): V6Yun (Beijing) Network Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbotsspam
Unauthorized connection attempt detected from IP address 139.199.1.199 to port 80 [T]
2020-01-30 06:52:57
相同子网IP讨论:
IP 类型 评论内容 时间
139.199.18.194 attackspam
Oct 12 10:00:06 ajax sshd[20406]: Failed password for root from 139.199.18.194 port 40928 ssh2
2020-10-12 21:33:16
139.199.170.101 attackspambots
SSH Brute-Force Attack
2020-10-12 20:57:40
139.199.18.194 attackspambots
$f2bV_matches
2020-10-12 13:04:40
139.199.170.101 attack
Oct 12 04:21:26 game-panel sshd[25338]: Failed password for root from 139.199.170.101 port 42150 ssh2
Oct 12 04:26:15 game-panel sshd[25555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.170.101
Oct 12 04:26:17 game-panel sshd[25555]: Failed password for invalid user wo from 139.199.170.101 port 38612 ssh2
2020-10-12 12:26:40
139.199.14.128 attack
Oct 10 14:59:17 con01 sshd[2993577]: Failed password for invalid user frank from 139.199.14.128 port 40462 ssh2
Oct 10 15:03:19 con01 sshd[3000067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct 10 15:03:21 con01 sshd[3000067]: Failed password for root from 139.199.14.128 port 58116 ssh2
Oct 10 15:07:29 con01 sshd[3005598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct 10 15:07:32 con01 sshd[3005598]: Failed password for root from 139.199.14.128 port 47538 ssh2
...
2020-10-11 03:39:28
139.199.14.128 attack
Oct 10 13:23:30 con01 sshd[2837241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct 10 13:23:33 con01 sshd[2837241]: Failed password for root from 139.199.14.128 port 57812 ssh2
Oct 10 13:27:38 con01 sshd[2843894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct 10 13:27:40 con01 sshd[2843894]: Failed password for root from 139.199.14.128 port 47240 ssh2
Oct 10 13:31:50 con01 sshd[2850480]: Invalid user louise from 139.199.14.128 port 36664
...
2020-10-10 19:32:09
139.199.170.101 attack
SSH brutforce
2020-10-05 07:45:26
139.199.14.128 attackspambots
Oct  4 08:46:04 pixelmemory sshd[114755]: Failed password for root from 139.199.14.128 port 55956 ssh2
Oct  4 08:49:35 pixelmemory sshd[135052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct  4 08:49:37 pixelmemory sshd[135052]: Failed password for root from 139.199.14.128 port 36716 ssh2
Oct  4 08:53:15 pixelmemory sshd[139265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct  4 08:53:17 pixelmemory sshd[139265]: Failed password for root from 139.199.14.128 port 45722 ssh2
...
2020-10-05 06:46:13
139.199.170.101 attack
Oct  4 13:56:05 abendstille sshd\[3409\]: Invalid user ps from 139.199.170.101
Oct  4 13:56:05 abendstille sshd\[3409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.170.101
Oct  4 13:56:06 abendstille sshd\[3409\]: Failed password for invalid user ps from 139.199.170.101 port 57362 ssh2
Oct  4 14:01:07 abendstille sshd\[7928\]: Invalid user openhab from 139.199.170.101
Oct  4 14:01:07 abendstille sshd\[7928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.170.101
...
2020-10-05 00:04:09
139.199.14.128 attackspambots
2020-10-04T03:11:55.088931Z 7474e83e79ed New connection: 139.199.14.128:39700 (172.17.0.5:2222) [session: 7474e83e79ed]
2020-10-04T03:19:53.709557Z 630dc3796768 New connection: 139.199.14.128:56288 (172.17.0.5:2222) [session: 630dc3796768]
2020-10-04 22:48:44
139.199.14.128 attackbots
2020-10-04T03:11:55.088931Z 7474e83e79ed New connection: 139.199.14.128:39700 (172.17.0.5:2222) [session: 7474e83e79ed]
2020-10-04T03:19:53.709557Z 630dc3796768 New connection: 139.199.14.128:56288 (172.17.0.5:2222) [session: 630dc3796768]
2020-10-04 14:36:18
139.199.179.248 attack
Found on   CINS badguys     / proto=6  .  srcport=51245  .  dstport=23 Telnet  .     (1015)
2020-10-04 03:27:11
139.199.179.248 attack
Found on   CINS badguys     / proto=6  .  srcport=51245  .  dstport=23 Telnet  .     (1015)
2020-10-03 19:22:51
139.199.123.152 attackbotsspam
Invalid user system from 139.199.123.152 port 48914
2020-10-02 06:47:50
139.199.119.76 attackbotsspam
Oct  1 06:48:37 Tower sshd[30637]: Connection from 139.199.119.76 port 38238 on 192.168.10.220 port 22 rdomain ""
Oct  1 06:48:38 Tower sshd[30637]: Failed password for root from 139.199.119.76 port 38238 ssh2
Oct  1 06:48:39 Tower sshd[30637]: Received disconnect from 139.199.119.76 port 38238:11: Bye Bye [preauth]
Oct  1 06:48:39 Tower sshd[30637]: Disconnected from authenticating user root 139.199.119.76 port 38238 [preauth]
2020-10-02 01:17:25
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.1.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48952
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.1.199.			IN	A

;; AUTHORITY SECTION:
.			387	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012901 1800 900 604800 86400

;; Query time: 93 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 06:52:53 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 199.1.199.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 199.1.199.139.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
159.203.182.127 attack
Invalid user gituser from 159.203.182.127 port 54169
2019-09-25 05:05:17
62.234.156.120 attackbots
2019-09-24T17:05:20.1479521495-001 sshd\[52099\]: Invalid user tomcat from 62.234.156.120 port 41056
2019-09-24T17:05:20.1585121495-001 sshd\[52099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.156.120
2019-09-24T17:05:22.6589561495-001 sshd\[52099\]: Failed password for invalid user tomcat from 62.234.156.120 port 41056 ssh2
2019-09-24T17:09:09.8044181495-001 sshd\[52411\]: Invalid user TeamSpeak from 62.234.156.120 port 57126
2019-09-24T17:09:09.8118601495-001 sshd\[52411\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.156.120
2019-09-24T17:09:11.7500991495-001 sshd\[52411\]: Failed password for invalid user TeamSpeak from 62.234.156.120 port 57126 ssh2
...
2019-09-25 05:21:11
190.202.54.12 attack
Sep 24 15:59:48 lnxded64 sshd[15009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.202.54.12
2019-09-25 05:02:36
112.85.42.185 attack
Sep 24 15:41:28 aat-srv002 sshd[23472]: Failed password for root from 112.85.42.185 port 16105 ssh2
Sep 24 15:56:54 aat-srv002 sshd[23869]: Failed password for root from 112.85.42.185 port 40792 ssh2
Sep 24 15:56:56 aat-srv002 sshd[23869]: Failed password for root from 112.85.42.185 port 40792 ssh2
Sep 24 15:56:58 aat-srv002 sshd[23869]: Failed password for root from 112.85.42.185 port 40792 ssh2
...
2019-09-25 04:59:21
211.24.103.163 attack
Sep 24 11:13:24 tdfoods sshd\[20834\]: Invalid user webmail from 211.24.103.163
Sep 24 11:13:24 tdfoods sshd\[20834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.24.103.163
Sep 24 11:13:26 tdfoods sshd\[20834\]: Failed password for invalid user webmail from 211.24.103.163 port 60954 ssh2
Sep 24 11:17:58 tdfoods sshd\[21242\]: Invalid user akhilesh from 211.24.103.163
Sep 24 11:17:58 tdfoods sshd\[21242\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.24.103.163
2019-09-25 05:26:25
192.161.160.72 attackspam
Unauthorized access detected from banned ip
2019-09-25 05:00:02
222.186.42.163 attackspambots
Sep 24 23:19:35 jane sshd[5068]: Failed password for root from 222.186.42.163 port 11976 ssh2
Sep 24 23:19:39 jane sshd[5068]: Failed password for root from 222.186.42.163 port 11976 ssh2
...
2019-09-25 05:20:29
91.241.59.25 attackbotsspam
SSH Brute-Force attacks
2019-09-25 05:29:15
104.250.108.94 attackspam
Sep 24 23:54:05 diego postfix/smtpd\[31603\]: warning: unknown\[104.250.108.94\]: SASL LOGIN authentication failed: authentication failure
...
2019-09-25 05:05:33
2.94.155.200 attackspam
Unauthorized connection attempt from IP address 2.94.155.200 on Port 445(SMB)
2019-09-25 05:10:37
201.187.102.178 attackbots
Unauthorized connection attempt from IP address 201.187.102.178 on Port 445(SMB)
2019-09-25 05:13:54
167.86.109.29 attack
Sep 24 14:45:30 ip-172-31-62-245 sshd\[8341\]: Invalid user packer from 167.86.109.29\
Sep 24 14:45:32 ip-172-31-62-245 sshd\[8341\]: Failed password for invalid user packer from 167.86.109.29 port 36366 ssh2\
Sep 24 14:45:39 ip-172-31-62-245 sshd\[8343\]: Invalid user packer from 167.86.109.29\
Sep 24 14:45:41 ip-172-31-62-245 sshd\[8343\]: Failed password for invalid user packer from 167.86.109.29 port 41244 ssh2\
Sep 24 14:45:50 ip-172-31-62-245 sshd\[8345\]: Failed password for root from 167.86.109.29 port 46150 ssh2\
2019-09-25 05:09:02
148.66.135.178 attackspambots
2019-09-24T16:08:40.2248741495-001 sshd\[47202\]: Failed password for invalid user ranger from 148.66.135.178 port 57338 ssh2
2019-09-24T16:22:48.4642471495-001 sshd\[48416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.135.178  user=dbus
2019-09-24T16:22:50.6184291495-001 sshd\[48416\]: Failed password for dbus from 148.66.135.178 port 41214 ssh2
2019-09-24T16:27:40.6190271495-001 sshd\[48909\]: Invalid user user from 148.66.135.178 port 54668
2019-09-24T16:27:40.6260761495-001 sshd\[48909\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.135.178
2019-09-24T16:27:42.5345231495-001 sshd\[48909\]: Failed password for invalid user user from 148.66.135.178 port 54668 ssh2
...
2019-09-25 04:49:10
118.98.96.184 attackbotsspam
Sep 24 22:47:59 localhost sshd\[31588\]: Invalid user freddy from 118.98.96.184 port 40997
Sep 24 22:47:59 localhost sshd\[31588\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.98.96.184
Sep 24 22:48:01 localhost sshd\[31588\]: Failed password for invalid user freddy from 118.98.96.184 port 40997 ssh2
2019-09-25 05:11:57
129.213.135.233 attack
(sshd) Failed SSH login from 129.213.135.233 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 24 17:05:45 host sshd[95121]: Invalid user zz from 129.213.135.233 port 58328
2019-09-25 05:17:28

最近上报的IP列表

111.224.234.60 111.172.38.251 77.49.150.28 77.226.138.39
106.122.168.229 1.103.7.187 106.35.34.123 188.134.24.102
61.162.136.74 25.202.4.189 60.172.85.221 46.13.38.64
60.172.85.174 143.119.213.15 59.58.62.80 58.57.23.44
49.71.159.40 42.180.49.4 42.118.197.204 42.116.142.21