必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): V6Yun (Beijing) Network Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Oct 12 12:11:52 vps691689 sshd[8879]: Failed password for root from 139.199.108.70 port 47544 ssh2
Oct 12 12:16:42 vps691689 sshd[8955]: Failed password for root from 139.199.108.70 port 56652 ssh2
...
2019-10-12 18:21:24
attackbots
Sep 26 23:51:29 friendsofhawaii sshd\[11063\]: Invalid user wv from 139.199.108.70
Sep 26 23:51:30 friendsofhawaii sshd\[11063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.70
Sep 26 23:51:32 friendsofhawaii sshd\[11063\]: Failed password for invalid user wv from 139.199.108.70 port 36502 ssh2
Sep 26 23:55:40 friendsofhawaii sshd\[11392\]: Invalid user tpuser from 139.199.108.70
Sep 26 23:55:40 friendsofhawaii sshd\[11392\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.70
2019-09-27 20:06:01
attackspambots
Sep  9 01:59:09 php1 sshd\[3901\]: Invalid user ubuntu from 139.199.108.70
Sep  9 01:59:09 php1 sshd\[3901\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.70
Sep  9 01:59:11 php1 sshd\[3901\]: Failed password for invalid user ubuntu from 139.199.108.70 port 56700 ssh2
Sep  9 02:04:49 php1 sshd\[4630\]: Invalid user demo from 139.199.108.70
Sep  9 02:04:49 php1 sshd\[4630\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.70
2019-09-09 21:52:22
attackspambots
Aug 22 02:39:49 lcdev sshd\[13633\]: Invalid user mathilde from 139.199.108.70
Aug 22 02:39:49 lcdev sshd\[13633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.70
Aug 22 02:39:51 lcdev sshd\[13633\]: Failed password for invalid user mathilde from 139.199.108.70 port 43114 ssh2
Aug 22 02:44:44 lcdev sshd\[14084\]: Invalid user kumari from 139.199.108.70
Aug 22 02:44:44 lcdev sshd\[14084\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.70
2019-08-22 23:23:30
attackspam
Aug 12 22:44:51 localhost sshd\[6039\]: Invalid user alessandra from 139.199.108.70 port 49844
Aug 12 22:44:51 localhost sshd\[6039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.70
Aug 12 22:44:53 localhost sshd\[6039\]: Failed password for invalid user alessandra from 139.199.108.70 port 49844 ssh2
Aug 12 22:47:15 localhost sshd\[6172\]: Invalid user noel from 139.199.108.70 port 41296
Aug 12 22:47:15 localhost sshd\[6172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.70
...
2019-08-13 09:20:13
attack
Jul 21 05:05:25 TORMINT sshd\[10542\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.70  user=root
Jul 21 05:05:27 TORMINT sshd\[10542\]: Failed password for root from 139.199.108.70 port 58394 ssh2
Jul 21 05:11:18 TORMINT sshd\[10886\]: Invalid user mb from 139.199.108.70
Jul 21 05:11:18 TORMINT sshd\[10886\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.70
...
2019-07-21 17:15:30
attackbots
Jul 17 17:40:17 MK-Soft-VM3 sshd\[19624\]: Invalid user t from 139.199.108.70 port 36898
Jul 17 17:40:17 MK-Soft-VM3 sshd\[19624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.70
Jul 17 17:40:19 MK-Soft-VM3 sshd\[19624\]: Failed password for invalid user t from 139.199.108.70 port 36898 ssh2
...
2019-07-18 01:50:09
attack
Jul 15 13:16:51 v22018076622670303 sshd\[29558\]: Invalid user friends from 139.199.108.70 port 51014
Jul 15 13:16:51 v22018076622670303 sshd\[29558\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.70
Jul 15 13:16:53 v22018076622670303 sshd\[29558\]: Failed password for invalid user friends from 139.199.108.70 port 51014 ssh2
...
2019-07-15 20:04:29
attackspam
Jul 15 06:15:34 mail sshd\[31837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.70  user=root
Jul 15 06:15:36 mail sshd\[31837\]: Failed password for root from 139.199.108.70 port 36874 ssh2
Jul 15 06:19:31 mail sshd\[32461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.70  user=root
Jul 15 06:19:33 mail sshd\[32461\]: Failed password for root from 139.199.108.70 port 45432 ssh2
Jul 15 06:23:23 mail sshd\[591\]: Invalid user ts from 139.199.108.70 port 53982
2019-07-15 12:36:56
相同子网IP讨论:
IP 类型 评论内容 时间
139.199.108.83 attackspam
Aug 29 22:09:42 ns382633 sshd\[8755\]: Invalid user hadoop from 139.199.108.83 port 36236
Aug 29 22:09:42 ns382633 sshd\[8755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.83
Aug 29 22:09:44 ns382633 sshd\[8755\]: Failed password for invalid user hadoop from 139.199.108.83 port 36236 ssh2
Aug 29 22:21:27 ns382633 sshd\[10909\]: Invalid user eddie from 139.199.108.83 port 33008
Aug 29 22:21:27 ns382633 sshd\[10909\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.83
2020-08-30 08:07:22
139.199.108.83 attackbots
Jul 14 03:53:33 ip-172-31-61-156 sshd[18256]: Failed password for invalid user timo from 139.199.108.83 port 44162 ssh2
Jul 14 03:53:30 ip-172-31-61-156 sshd[18256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.83
Jul 14 03:53:30 ip-172-31-61-156 sshd[18256]: Invalid user timo from 139.199.108.83
Jul 14 03:53:33 ip-172-31-61-156 sshd[18256]: Failed password for invalid user timo from 139.199.108.83 port 44162 ssh2
Jul 14 03:56:09 ip-172-31-61-156 sshd[18444]: Invalid user yg from 139.199.108.83
...
2020-07-14 12:22:34
139.199.108.83 attackbotsspam
Jun 24 08:50:47 vps sshd[3851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.83 
Jun 24 08:50:49 vps sshd[3851]: Failed password for invalid user yar from 139.199.108.83 port 37722 ssh2
Jun 24 08:56:16 vps sshd[4118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.83 
...
2020-06-24 16:25:03
139.199.108.83 attack
Invalid user mariadb from 139.199.108.83 port 34400
2020-06-18 01:58:04
139.199.108.83 attack
Jun 14 22:01:04 ns382633 sshd\[8007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.83  user=root
Jun 14 22:01:07 ns382633 sshd\[8007\]: Failed password for root from 139.199.108.83 port 37604 ssh2
Jun 14 22:07:53 ns382633 sshd\[9029\]: Invalid user nodeproxy from 139.199.108.83 port 49828
Jun 14 22:07:53 ns382633 sshd\[9029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.83
Jun 14 22:07:55 ns382633 sshd\[9029\]: Failed password for invalid user nodeproxy from 139.199.108.83 port 49828 ssh2
2020-06-15 05:25:13
139.199.108.83 attackspambots
Jun 10 06:34:39 vps687878 sshd\[31312\]: Failed password for invalid user danar from 139.199.108.83 port 42298 ssh2
Jun 10 06:39:06 vps687878 sshd\[31761\]: Invalid user xjd from 139.199.108.83 port 36970
Jun 10 06:39:06 vps687878 sshd\[31761\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.83
Jun 10 06:39:08 vps687878 sshd\[31761\]: Failed password for invalid user xjd from 139.199.108.83 port 36970 ssh2
Jun 10 06:43:43 vps687878 sshd\[32304\]: Invalid user ftpuser from 139.199.108.83 port 59876
Jun 10 06:43:43 vps687878 sshd\[32304\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.83
...
2020-06-10 16:46:32
139.199.108.83 attack
" "
2020-06-04 22:19:48
139.199.108.83 attackspam
May 26 01:23:29 nas sshd[24155]: Failed password for root from 139.199.108.83 port 46390 ssh2
May 26 01:33:13 nas sshd[24485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.83 
May 26 01:33:15 nas sshd[24485]: Failed password for invalid user hargreaves from 139.199.108.83 port 59174 ssh2
...
2020-05-26 09:48:13
139.199.108.83 attackspambots
May 24 15:15:24 inter-technics sshd[16003]: Invalid user jtrejo from 139.199.108.83 port 36546
May 24 15:15:24 inter-technics sshd[16003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.83
May 24 15:15:24 inter-technics sshd[16003]: Invalid user jtrejo from 139.199.108.83 port 36546
May 24 15:15:25 inter-technics sshd[16003]: Failed password for invalid user jtrejo from 139.199.108.83 port 36546 ssh2
May 24 15:20:23 inter-technics sshd[16257]: Invalid user admin from 139.199.108.83 port 59552
...
2020-05-24 22:16:06
139.199.108.83 attack
W 5701,/var/log/auth.log,-,-
2020-05-23 07:26:36
139.199.108.83 attack
21 attempts against mh-ssh on cloud
2020-05-03 14:50:05
139.199.108.74 attack
Sep  5 06:02:53 markkoudstaal sshd[12209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.74
Sep  5 06:02:55 markkoudstaal sshd[12209]: Failed password for invalid user deploy from 139.199.108.74 port 56202 ssh2
Sep  5 06:07:17 markkoudstaal sshd[12570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.108.74
2019-09-05 12:14:09
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.108.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46461
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.108.70.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042502 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri Apr 26 09:19:10 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:
Host 70.108.199.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 70.108.199.139.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
104.198.176.196 attackbotsspam
May  6 13:58:06 haigwepa sshd[8005]: Failed password for root from 104.198.176.196 port 42206 ssh2
May  6 14:02:57 haigwepa sshd[8310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.198.176.196 
...
2020-05-07 00:11:15
180.96.63.162 attack
May  6 16:27:02 pve1 sshd[27472]: Failed password for root from 180.96.63.162 port 55325 ssh2
...
2020-05-06 23:52:50
14.18.78.175 attackbotsspam
May  6 13:17:22 ns382633 sshd\[8775\]: Invalid user archive from 14.18.78.175 port 45600
May  6 13:17:22 ns382633 sshd\[8775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.18.78.175
May  6 13:17:24 ns382633 sshd\[8775\]: Failed password for invalid user archive from 14.18.78.175 port 45600 ssh2
May  6 14:00:03 ns382633 sshd\[16686\]: Invalid user admin from 14.18.78.175 port 42694
May  6 14:00:04 ns382633 sshd\[16686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.18.78.175
2020-05-06 23:57:22
46.101.174.188 attackbots
...
2020-05-06 23:55:03
181.129.161.28 attack
May  6 14:54:35 XXX sshd[10259]: Invalid user lt from 181.129.161.28 port 60584
2020-05-06 23:41:33
34.89.215.144 attackspam
" "
2020-05-06 23:52:31
23.247.33.61 attack
(sshd) Failed SSH login from 23.247.33.61 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May  6 13:52:46 amsweb01 sshd[16016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.247.33.61  user=root
May  6 13:52:48 amsweb01 sshd[16016]: Failed password for root from 23.247.33.61 port 43514 ssh2
May  6 13:57:38 amsweb01 sshd[16646]: Invalid user xv from 23.247.33.61 port 39374
May  6 13:57:40 amsweb01 sshd[16646]: Failed password for invalid user xv from 23.247.33.61 port 39374 ssh2
May  6 14:00:10 amsweb01 sshd[16965]: User admin from 23.247.33.61 not allowed because not listed in AllowUsers
2020-05-06 23:41:01
57.100.98.105 attackspam
$f2bV_matches
2020-05-06 23:52:00
201.49.127.212 attackbots
SSH Brute-Force. Ports scanning.
2020-05-06 23:56:04
88.12.116.189 attackbotsspam
May  6 11:04:46 XXX sshd[560]: Invalid user user from 88.12.116.189 port 34458
2020-05-07 00:16:52
87.125.250.45 attackbots
php WP PHPmyadamin ABUSE blocked for 12h
2020-05-07 00:12:17
130.61.127.253 attackbots
General_bad_requests
2020-05-06 23:58:07
51.38.130.63 attack
May  6 13:48:20 xeon sshd[44345]: Failed password for invalid user db2inst1 from 51.38.130.63 port 57052 ssh2
2020-05-07 00:07:39
64.225.47.91 attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 53 - port: 3766 proto: TCP cat: Misc Attack
2020-05-07 00:04:01
94.102.50.155 attackspambots
ET DROP Dshield Block Listed Source group 1 - port: 50222 proto: TCP cat: Misc Attack
2020-05-06 23:51:39

最近上报的IP列表

140.143.223.242 159.192.140.147 192.144.132.172 40.129.225.176
191.243.72.34 31.220.0.225 181.48.55.42 212.45.0.218
185.220.101.29 96.64.194.75 199.249.230.119 167.250.30.198
187.152.127.244 193.169.255.102 137.253.95.98 192.241.247.201
77.247.109.59 108.224.199.29 45.119.81.170 163.134.135.203