必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Beijing

省份(region): Beijing

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): Shenzhen Tencent Computer Systems Company Limited

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Oct 10 14:59:17 con01 sshd[2993577]: Failed password for invalid user frank from 139.199.14.128 port 40462 ssh2
Oct 10 15:03:19 con01 sshd[3000067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct 10 15:03:21 con01 sshd[3000067]: Failed password for root from 139.199.14.128 port 58116 ssh2
Oct 10 15:07:29 con01 sshd[3005598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct 10 15:07:32 con01 sshd[3005598]: Failed password for root from 139.199.14.128 port 47538 ssh2
...
2020-10-11 03:39:28
attack
Oct 10 13:23:30 con01 sshd[2837241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct 10 13:23:33 con01 sshd[2837241]: Failed password for root from 139.199.14.128 port 57812 ssh2
Oct 10 13:27:38 con01 sshd[2843894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct 10 13:27:40 con01 sshd[2843894]: Failed password for root from 139.199.14.128 port 47240 ssh2
Oct 10 13:31:50 con01 sshd[2850480]: Invalid user louise from 139.199.14.128 port 36664
...
2020-10-10 19:32:09
attackspambots
Oct  4 08:46:04 pixelmemory sshd[114755]: Failed password for root from 139.199.14.128 port 55956 ssh2
Oct  4 08:49:35 pixelmemory sshd[135052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct  4 08:49:37 pixelmemory sshd[135052]: Failed password for root from 139.199.14.128 port 36716 ssh2
Oct  4 08:53:15 pixelmemory sshd[139265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Oct  4 08:53:17 pixelmemory sshd[139265]: Failed password for root from 139.199.14.128 port 45722 ssh2
...
2020-10-05 06:46:13
attackspambots
2020-10-04T03:11:55.088931Z 7474e83e79ed New connection: 139.199.14.128:39700 (172.17.0.5:2222) [session: 7474e83e79ed]
2020-10-04T03:19:53.709557Z 630dc3796768 New connection: 139.199.14.128:56288 (172.17.0.5:2222) [session: 630dc3796768]
2020-10-04 22:48:44
attackbots
2020-10-04T03:11:55.088931Z 7474e83e79ed New connection: 139.199.14.128:39700 (172.17.0.5:2222) [session: 7474e83e79ed]
2020-10-04T03:19:53.709557Z 630dc3796768 New connection: 139.199.14.128:56288 (172.17.0.5:2222) [session: 630dc3796768]
2020-10-04 14:36:18
attackspambots
Automatic Fail2ban report - Trying login SSH
2020-09-30 03:33:43
attack
Automatic Fail2ban report - Trying login SSH
2020-09-29 19:39:16
attackspam
Sep 10 14:09:55 ns41 sshd[23049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
2020-09-10 23:35:28
attack
Sep 10 03:31:39 firewall sshd[19772]: Failed password for root from 139.199.14.128 port 51398 ssh2
Sep 10 03:32:59 firewall sshd[19797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128  user=root
Sep 10 03:33:01 firewall sshd[19797]: Failed password for root from 139.199.14.128 port 37322 ssh2
...
2020-09-10 15:03:26
attackspambots
Sep  9 20:55:47 MainVPS sshd[30261]: Invalid user vnc from 139.199.14.128 port 56124
Sep  9 20:55:47 MainVPS sshd[30261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
Sep  9 20:55:47 MainVPS sshd[30261]: Invalid user vnc from 139.199.14.128 port 56124
Sep  9 20:55:49 MainVPS sshd[30261]: Failed password for invalid user vnc from 139.199.14.128 port 56124 ssh2
Sep  9 20:58:11 MainVPS sshd[14177]: Invalid user ghost from 139.199.14.128 port 56134
...
2020-09-10 05:41:28
attackspambots
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-09-09 22:40:39
attackspambots
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-09-09 16:24:44
attackspam
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-09-09 08:33:48
attack
Aug 31 22:06:14 instance-2 sshd[11472]: Failed password for root from 139.199.14.128 port 35256 ssh2
Aug 31 22:09:03 instance-2 sshd[11474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128 
Aug 31 22:09:05 instance-2 sshd[11474]: Failed password for invalid user zihang from 139.199.14.128 port 41212 ssh2
2020-09-01 06:36:13
attack
Aug 22 23:38:37 mout sshd[25036]: Invalid user aline from 139.199.14.128 port 38290
2020-08-23 05:39:13
attack
Aug 21 14:01:37 marvibiene sshd[4846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128 
Aug 21 14:01:39 marvibiene sshd[4846]: Failed password for invalid user date from 139.199.14.128 port 44970 ssh2
Aug 21 14:04:26 marvibiene sshd[5005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
2020-08-21 23:55:52
attackbots
Aug 20 04:01:48 dhoomketu sshd[2497527]: Failed password for invalid user hannah from 139.199.14.128 port 38820 ssh2
Aug 20 04:05:35 dhoomketu sshd[2497577]: Invalid user guest3 from 139.199.14.128 port 56128
Aug 20 04:05:35 dhoomketu sshd[2497577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128 
Aug 20 04:05:35 dhoomketu sshd[2497577]: Invalid user guest3 from 139.199.14.128 port 56128
Aug 20 04:05:37 dhoomketu sshd[2497577]: Failed password for invalid user guest3 from 139.199.14.128 port 56128 ssh2
...
2020-08-20 06:49:33
attackspambots
fail2ban -- 139.199.14.128
...
2020-08-04 21:55:11
attackbotsspam
Aug  4 03:11:23 NPSTNNYC01T sshd[23073]: Failed password for root from 139.199.14.128 port 52178 ssh2
Aug  4 03:14:26 NPSTNNYC01T sshd[23424]: Failed password for root from 139.199.14.128 port 54802 ssh2
...
2020-08-04 15:20:31
attack
Jul 24 18:15:30 ns381471 sshd[8782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
Jul 24 18:15:32 ns381471 sshd[8782]: Failed password for invalid user dcadmin from 139.199.14.128 port 51676 ssh2
2020-07-25 03:29:41
attack
Jul 13 16:40:50 eventyay sshd[27580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
Jul 13 16:40:52 eventyay sshd[27580]: Failed password for invalid user sanchez from 139.199.14.128 port 58758 ssh2
Jul 13 16:44:11 eventyay sshd[27635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
...
2020-07-14 00:25:14
attackbots
Invalid user harsha from 139.199.14.128 port 40292
2020-07-12 05:21:59
attackbotsspam
2020-07-09T15:35:50.265136mail.standpoint.com.ua sshd[12048]: Invalid user admin from 139.199.14.128 port 37030
2020-07-09T15:35:50.267800mail.standpoint.com.ua sshd[12048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
2020-07-09T15:35:50.265136mail.standpoint.com.ua sshd[12048]: Invalid user admin from 139.199.14.128 port 37030
2020-07-09T15:35:52.898065mail.standpoint.com.ua sshd[12048]: Failed password for invalid user admin from 139.199.14.128 port 37030 ssh2
2020-07-09T15:37:25.418579mail.standpoint.com.ua sshd[12296]: Invalid user wyx from 139.199.14.128 port 54310
...
2020-07-09 21:09:52
attackbots
Jun 17 19:22:53 wbs sshd\[13002\]: Invalid user ec2-user from 139.199.14.128
Jun 17 19:22:53 wbs sshd\[13002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
Jun 17 19:22:56 wbs sshd\[13002\]: Failed password for invalid user ec2-user from 139.199.14.128 port 36060 ssh2
Jun 17 19:26:01 wbs sshd\[13253\]: Invalid user lx from 139.199.14.128
Jun 17 19:26:01 wbs sshd\[13253\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
2020-06-18 17:19:02
attackbotsspam
...
2020-05-05 13:05:23
attackspambots
2020-04-27T16:22:08.276073abusebot-3.cloudsearch.cf sshd[10053]: Invalid user ubuntu from 139.199.14.128 port 50904
2020-04-27T16:22:08.284928abusebot-3.cloudsearch.cf sshd[10053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
2020-04-27T16:22:08.276073abusebot-3.cloudsearch.cf sshd[10053]: Invalid user ubuntu from 139.199.14.128 port 50904
2020-04-27T16:22:10.562225abusebot-3.cloudsearch.cf sshd[10053]: Failed password for invalid user ubuntu from 139.199.14.128 port 50904 ssh2
2020-04-27T16:29:35.934711abusebot-3.cloudsearch.cf sshd[10422]: Invalid user biotech from 139.199.14.128 port 58236
2020-04-27T16:29:35.941614abusebot-3.cloudsearch.cf sshd[10422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
2020-04-27T16:29:35.934711abusebot-3.cloudsearch.cf sshd[10422]: Invalid user biotech from 139.199.14.128 port 58236
2020-04-27T16:29:38.249233abusebot-3.cloudsearch.cf sshd[
...
2020-04-28 00:43:35
attackspam
Invalid user ty from 139.199.14.128 port 51496
2020-04-23 16:02:43
attackbotsspam
Apr  5 16:33:28 silence02 sshd[15209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
Apr  5 16:33:30 silence02 sshd[15209]: Failed password for invalid user Pass@word666 from 139.199.14.128 port 54926 ssh2
Apr  5 16:40:18 silence02 sshd[15872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
2020-04-06 00:05:26
attack
Mar 22 04:47:13 silence02 sshd[16706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
Mar 22 04:47:15 silence02 sshd[16706]: Failed password for invalid user ming from 139.199.14.128 port 43732 ssh2
Mar 22 04:51:56 silence02 sshd[16930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
2020-03-22 17:25:53
attackspambots
Jun 17 15:02:57 ms-srv sshd[19485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128
Jun 17 15:02:58 ms-srv sshd[19485]: Failed password for invalid user chook from 139.199.14.128 port 59664 ssh2
2020-03-08 20:47:24
相同子网IP讨论:
IP 类型 评论内容 时间
139.199.14.105 attackspam
Invalid user test1 from 139.199.14.105 port 59484
2020-04-23 14:20:10
139.199.14.105 attackspambots
Brute-force attempt banned
2020-03-19 14:37:23
139.199.14.105 attack
Mar  1 01:51:24 host sshd[20771]: Invalid user nivinform from 139.199.14.105 port 55706
...
2020-03-01 10:08:36
139.199.149.221 attackspambots
Jan 14 16:42:23 lnxded63 sshd[20280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.149.221
2020-01-15 02:41:38
139.199.14.8 attackbots
Aug 18 07:15:45 eventyay sshd[23722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.8
Aug 18 07:15:47 eventyay sshd[23722]: Failed password for invalid user tecnici from 139.199.14.8 port 44112 ssh2
Aug 18 07:19:01 eventyay sshd[23976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.8
...
2019-08-18 20:18:37
139.199.14.8 attack
Jul  6 16:03:16 localhost sshd[26243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.8
Jul  6 16:03:18 localhost sshd[26243]: Failed password for invalid user nextcloud from 139.199.14.8 port 40738 ssh2
Jul  6 16:18:45 localhost sshd[26496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.8
Jul  6 16:18:47 localhost sshd[26496]: Failed password for invalid user ram from 139.199.14.8 port 35138 ssh2
...
2019-07-07 04:26:17
139.199.14.186 attackbots
SSH Bruteforce @ SigaVPN honeypot
2019-06-23 16:20:12
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.14.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52927
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.14.128.			IN	A

;; AUTHORITY SECTION:
.			1355	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019033000 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat Mar 30 21:11:48 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:
Host 128.14.199.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 128.14.199.139.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
115.159.86.75 attackspambots
Aug  1 15:07:18 MK-Soft-Root2 sshd\[18586\]: Invalid user kobayashi from 115.159.86.75 port 58938
Aug  1 15:07:18 MK-Soft-Root2 sshd\[18586\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.86.75
Aug  1 15:07:20 MK-Soft-Root2 sshd\[18586\]: Failed password for invalid user kobayashi from 115.159.86.75 port 58938 ssh2
...
2019-08-01 21:24:18
164.77.188.109 attack
Aug  1 09:27:17 TORMINT sshd\[15330\]: Invalid user orion from 164.77.188.109
Aug  1 09:27:17 TORMINT sshd\[15330\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.77.188.109
Aug  1 09:27:19 TORMINT sshd\[15330\]: Failed password for invalid user orion from 164.77.188.109 port 51406 ssh2
...
2019-08-01 21:44:08
178.62.243.75 attackbots
firewall-block, port(s): 1434/udp
2019-08-01 21:26:31
80.254.98.176 attackspambots
SSH Brute Force, server-1 sshd[16693]: Failed password for invalid user dm from 80.254.98.176 port 60570 ssh2
2019-08-01 21:08:52
188.246.226.68 attackspambots
Portscan or hack attempt detected by psad/fwsnort
2019-08-01 21:55:12
46.3.96.70 attackbots
01.08.2019 14:12:55 Connection to port 8899 blocked by firewall
2019-08-01 22:14:23
222.186.52.124 attackspam
Aug  1 15:58:04 minden010 sshd[11704]: Failed password for root from 222.186.52.124 port 50335 ssh2
Aug  1 15:58:12 minden010 sshd[11747]: Failed password for root from 222.186.52.124 port 13444 ssh2
...
2019-08-01 22:07:01
121.100.28.199 attack
Aug  1 09:23:19 lnxweb61 sshd[28302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.100.28.199
2019-08-01 21:20:51
118.185.32.18 attackbots
Aug  1 15:20:24 s64-1 sshd[834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.185.32.18
Aug  1 15:20:26 s64-1 sshd[834]: Failed password for invalid user tylor from 118.185.32.18 port 4589 ssh2
Aug  1 15:27:45 s64-1 sshd[955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.185.32.18
...
2019-08-01 21:33:23
182.50.151.89 attackbots
Sql/code injection probe
2019-08-01 22:11:47
112.186.77.118 attackspambots
Aug  1 10:20:36 MK-Soft-VM6 sshd\[6685\]: Invalid user adishopfr from 112.186.77.118 port 39604
Aug  1 10:20:36 MK-Soft-VM6 sshd\[6685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.186.77.118
Aug  1 10:20:38 MK-Soft-VM6 sshd\[6685\]: Failed password for invalid user adishopfr from 112.186.77.118 port 39604 ssh2
...
2019-08-01 21:15:02
160.153.234.236 attack
[Aegis] @ 2019-05-23 08:30:39  0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack
2019-08-01 21:16:41
162.243.158.185 attackspam
2019-08-01T13:59:51.558197abusebot-8.cloudsearch.cf sshd\[18188\]: Invalid user support from 162.243.158.185 port 35914
2019-08-01 22:10:14
75.118.169.205 attackbotsspam
ssh failed login
2019-08-01 21:37:16
54.36.222.37 attackbotsspam
Automatic report - Banned IP Access
2019-08-01 21:52:55

最近上报的IP列表

187.16.38.20 158.69.121.144 223.111.139.247 186.225.111.118
185.88.196.30 177.190.170.2 117.121.2.35 128.199.34.186
197.221.89.222 177.135.93.227 24.104.75.110 181.211.13.51
188.152.180.97 183.61.128.188 188.166.34.222 137.74.176.208
52.13.165.137 118.24.16.19 91.134.252.163 103.25.21.34