必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Beijing

省份(region): Beijing

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): Shenzhen Tencent Computer Systems Company Limited

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspam
Unauthorized connection attempt detected from IP address 139.199.158.14 to port 2220 [J]
2020-01-07 16:02:40
attackspambots
--- report ---
Dec 18 04:57:27 sshd: Connection from 139.199.158.14 port 41100
Dec 18 04:57:29 sshd: Invalid user john from 139.199.158.14
Dec 18 04:57:31 sshd: Failed password for invalid user john from 139.199.158.14 port 41100 ssh2
Dec 18 04:57:32 sshd: Received disconnect from 139.199.158.14: 11: Bye Bye [preauth]
2019-12-18 16:05:47
attackspambots
Dec 18 00:32:00 meumeu sshd[31397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 
Dec 18 00:32:02 meumeu sshd[31397]: Failed password for invalid user byoung from 139.199.158.14 port 43960 ssh2
Dec 18 00:37:33 meumeu sshd[32367]: Failed password for nobody from 139.199.158.14 port 37622 ssh2
...
2019-12-18 07:48:59
attackspam
Brute-force attempt banned
2019-12-15 16:51:00
attackbots
Dec  9 15:20:00 game-panel sshd[8460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Dec  9 15:20:02 game-panel sshd[8460]: Failed password for invalid user calado from 139.199.158.14 port 47096 ssh2
Dec  9 15:27:56 game-panel sshd[8843]: Failed password for root from 139.199.158.14 port 47866 ssh2
2019-12-10 00:09:42
attack
Dec  5 06:45:43 ny01 sshd[10899]: Failed password for root from 139.199.158.14 port 40311 ssh2
Dec  5 06:52:20 ny01 sshd[11584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Dec  5 06:52:22 ny01 sshd[11584]: Failed password for invalid user pinsky from 139.199.158.14 port 42415 ssh2
2019-12-05 19:58:28
attack
SSH auth scanning - multiple failed logins
2019-12-03 21:36:13
attackspam
Nov 24 16:36:25 localhost sshd\[28545\]: Invalid user mysql from 139.199.158.14 port 40602
Nov 24 16:36:25 localhost sshd\[28545\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Nov 24 16:36:27 localhost sshd\[28545\]: Failed password for invalid user mysql from 139.199.158.14 port 40602 ssh2
Nov 24 17:09:14 localhost sshd\[28778\]: Invalid user wwwadmin from 139.199.158.14 port 56297
2019-11-25 01:14:30
attackbotsspam
Nov 16 09:31:23 localhost sshd\[2507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14  user=backup
Nov 16 09:31:24 localhost sshd\[2507\]: Failed password for backup from 139.199.158.14 port 53509 ssh2
Nov 16 09:36:34 localhost sshd\[2561\]: Invalid user egil from 139.199.158.14 port 43767
...
2019-11-16 17:43:36
attackspam
2019-11-13T10:32:31.763298abusebot-5.cloudsearch.cf sshd\[24105\]: Invalid user sanz from 139.199.158.14 port 37074
2019-11-13 18:39:15
attack
Nov  5 07:56:17 sd-53420 sshd\[25564\]: Invalid user abc123!@\#$\^ from 139.199.158.14
Nov  5 07:56:17 sd-53420 sshd\[25564\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Nov  5 07:56:19 sd-53420 sshd\[25564\]: Failed password for invalid user abc123!@\#$\^ from 139.199.158.14 port 58258 ssh2
Nov  5 08:01:33 sd-53420 sshd\[25986\]: Invalid user Jaqueline@123 from 139.199.158.14
Nov  5 08:01:33 sd-53420 sshd\[25986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
...
2019-11-05 15:02:52
attack
Nov  5 01:21:02 markkoudstaal sshd[10731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Nov  5 01:21:04 markkoudstaal sshd[10731]: Failed password for invalid user xmmmm from 139.199.158.14 port 49821 ssh2
Nov  5 01:25:48 markkoudstaal sshd[11110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
2019-11-05 08:33:07
attackbots
Nov  2 05:25:08 vps647732 sshd[32230]: Failed password for root from 139.199.158.14 port 39211 ssh2
Nov  2 05:29:32 vps647732 sshd[32301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
...
2019-11-02 13:29:23
attack
Oct 24 05:50:39 MainVPS sshd[19745]: Invalid user want from 139.199.158.14 port 52222
Oct 24 05:50:39 MainVPS sshd[19745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Oct 24 05:50:39 MainVPS sshd[19745]: Invalid user want from 139.199.158.14 port 52222
Oct 24 05:50:41 MainVPS sshd[19745]: Failed password for invalid user want from 139.199.158.14 port 52222 ssh2
Oct 24 05:56:04 MainVPS sshd[20156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14  user=root
Oct 24 05:56:06 MainVPS sshd[20156]: Failed password for root from 139.199.158.14 port 43251 ssh2
...
2019-10-24 12:01:44
attackspambots
Oct 23 12:58:18 itv-usvr-01 sshd[2628]: Invalid user mz from 139.199.158.14
Oct 23 12:58:18 itv-usvr-01 sshd[2628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Oct 23 12:58:18 itv-usvr-01 sshd[2628]: Invalid user mz from 139.199.158.14
Oct 23 12:58:21 itv-usvr-01 sshd[2628]: Failed password for invalid user mz from 139.199.158.14 port 42836 ssh2
2019-10-23 17:50:24
attackspam
Oct 19 23:03:19 server sshd\[16820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14  user=games
Oct 19 23:03:21 server sshd\[16820\]: Failed password for games from 139.199.158.14 port 53876 ssh2
Oct 19 23:11:13 server sshd\[19448\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14  user=root
Oct 19 23:11:15 server sshd\[19448\]: Failed password for root from 139.199.158.14 port 52737 ssh2
Oct 19 23:15:52 server sshd\[21165\]: Invalid user porno from 139.199.158.14
Oct 19 23:15:52 server sshd\[21165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 
...
2019-10-20 05:47:56
attackspam
Oct  1 14:17:57 MK-Soft-Root1 sshd[3704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 
Oct  1 14:17:59 MK-Soft-Root1 sshd[3704]: Failed password for invalid user leon from 139.199.158.14 port 46102 ssh2
...
2019-10-01 20:22:44
attackbotsspam
Sep 30 01:28:34 TORMINT sshd\[4192\]: Invalid user jester from 139.199.158.14
Sep 30 01:28:34 TORMINT sshd\[4192\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Sep 30 01:28:36 TORMINT sshd\[4192\]: Failed password for invalid user jester from 139.199.158.14 port 52504 ssh2
...
2019-09-30 17:10:52
attack
Sep 29 20:14:07 markkoudstaal sshd[32709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Sep 29 20:14:09 markkoudstaal sshd[32709]: Failed password for invalid user kiwi from 139.199.158.14 port 36847 ssh2
Sep 29 20:19:20 markkoudstaal sshd[750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
2019-09-30 02:58:54
attackspam
Sep 17 04:23:10 hpm sshd\[8323\]: Invalid user cdvonline from 139.199.158.14
Sep 17 04:23:10 hpm sshd\[8323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Sep 17 04:23:12 hpm sshd\[8323\]: Failed password for invalid user cdvonline from 139.199.158.14 port 36153 ssh2
Sep 17 04:27:39 hpm sshd\[8722\]: Invalid user yale from 139.199.158.14
Sep 17 04:27:39 hpm sshd\[8722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
2019-09-17 22:41:06
attackspambots
Aug 30 08:35:09 vps691689 sshd[16418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Aug 30 08:35:12 vps691689 sshd[16418]: Failed password for invalid user saned from 139.199.158.14 port 38238 ssh2
...
2019-08-30 19:13:47
attack
Aug  9 12:44:12 MK-Soft-Root2 sshd\[4992\]: Invalid user alex from 139.199.158.14 port 42486
Aug  9 12:44:12 MK-Soft-Root2 sshd\[4992\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Aug  9 12:44:14 MK-Soft-Root2 sshd\[4992\]: Failed password for invalid user alex from 139.199.158.14 port 42486 ssh2
...
2019-08-10 01:36:05
attackspambots
Invalid user mike from 139.199.158.14 port 54625
2019-07-24 16:23:25
attackbots
Invalid user meng from 139.199.158.14 port 41239
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Failed password for invalid user meng from 139.199.158.14 port 41239 ssh2
Invalid user postgres from 139.199.158.14 port 35564
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
2019-07-13 00:57:00
attackspam
Jul 10 14:34:20 *** sshd[5835]: Invalid user administrator from 139.199.158.14
2019-07-10 23:08:50
attack
Triggered by Fail2Ban at Vostok web server
2019-07-02 02:57:29
attackspambots
Jul  1 00:49:48 vmd17057 sshd\[17337\]: Invalid user ftpuser from 139.199.158.14 port 52726
Jul  1 00:49:48 vmd17057 sshd\[17337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Jul  1 00:49:50 vmd17057 sshd\[17337\]: Failed password for invalid user ftpuser from 139.199.158.14 port 52726 ssh2
...
2019-07-01 11:00:46
attack
web-1 [ssh] SSH Attack
2019-06-28 16:14:56
相同子网IP讨论:
IP 类型 评论内容 时间
139.199.158.254 attackbotsspam
Unauthorized connection attempt from IP address 139.199.158.254 on Port 445(SMB)
2019-08-25 09:45:18
139.199.158.226 attackbotsspam
Jun 12 14:12:43 server sshd\[14260\]: Invalid user amavis from 139.199.158.226
Jun 12 14:12:43 server sshd\[14260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.226
Jun 12 14:12:45 server sshd\[14260\]: Failed password for invalid user amavis from 139.199.158.226 port 48598 ssh2
...
2019-07-12 07:58:20
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.158.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3459
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.158.14.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041901 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri Apr 19 21:49:56 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:
Host 14.158.199.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 14.158.199.139.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
54.37.14.3 attack
Mar 27 16:17:24 vps sshd[12621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.14.3 
Mar 27 16:17:26 vps sshd[12621]: Failed password for invalid user lvu from 54.37.14.3 port 45730 ssh2
Mar 27 16:26:56 vps sshd[13124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.14.3 
...
2020-03-28 01:39:26
92.63.194.7 attack
2020-03-27T18:34:40.839535  sshd[9542]: Invalid user 1234 from 92.63.194.7 port 50160
2020-03-27T18:34:40.847934  sshd[9542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.7
2020-03-27T18:34:40.839535  sshd[9542]: Invalid user 1234 from 92.63.194.7 port 50160
2020-03-27T18:34:43.238002  sshd[9542]: Failed password for invalid user 1234 from 92.63.194.7 port 50160 ssh2
...
2020-03-28 01:56:49
106.52.114.166 attack
2020-03-27T10:36:05.071390linuxbox-skyline sshd[22245]: Invalid user dorie from 106.52.114.166 port 34672
...
2020-03-28 01:32:08
49.234.15.91 attack
Invalid user zabbix from 49.234.15.91 port 47246
2020-03-28 01:34:59
156.204.179.119 attackbotsspam
SSH login attempts.
2020-03-28 01:50:03
128.199.95.60 attack
2020-03-27T17:36:51.666492abusebot-6.cloudsearch.cf sshd[15171]: Invalid user jdc from 128.199.95.60 port 52544
2020-03-27T17:36:51.673698abusebot-6.cloudsearch.cf sshd[15171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.95.60
2020-03-27T17:36:51.666492abusebot-6.cloudsearch.cf sshd[15171]: Invalid user jdc from 128.199.95.60 port 52544
2020-03-27T17:36:53.380989abusebot-6.cloudsearch.cf sshd[15171]: Failed password for invalid user jdc from 128.199.95.60 port 52544 ssh2
2020-03-27T17:43:22.961298abusebot-6.cloudsearch.cf sshd[15594]: Invalid user rails from 128.199.95.60 port 40614
2020-03-27T17:43:22.969836abusebot-6.cloudsearch.cf sshd[15594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.95.60
2020-03-27T17:43:22.961298abusebot-6.cloudsearch.cf sshd[15594]: Invalid user rails from 128.199.95.60 port 40614
2020-03-27T17:43:25.358963abusebot-6.cloudsearch.cf sshd[15594]: Failed passw
...
2020-03-28 02:07:27
93.100.64.141 attackspambots
SSH invalid-user multiple login try
2020-03-28 01:43:13
114.40.127.94 attackspambots
Unauthorized connection attempt from IP address 114.40.127.94 on Port 445(SMB)
2020-03-28 01:55:10
221.2.35.78 attackbotsspam
Invalid user armando from 221.2.35.78 port 7683
2020-03-28 01:52:25
83.149.46.198 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 27-03-2020 12:30:13.
2020-03-28 01:59:13
156.206.231.143 attackbots
SSH login attempts.
2020-03-28 01:25:45
122.227.230.11 attackbotsspam
Unauthorized connection attempt detected from IP address 122.227.230.11 to port 22 [T]
2020-03-28 01:26:29
80.248.10.251 attack
firewall-block, port(s): 5060/udp
2020-03-28 01:51:15
106.13.13.149 attackbots
Mar 21 05:27:59 itv-usvr-01 sshd[24213]: Invalid user brooklyn from 106.13.13.149
Mar 21 05:27:59 itv-usvr-01 sshd[24213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.13.149
Mar 21 05:27:59 itv-usvr-01 sshd[24213]: Invalid user brooklyn from 106.13.13.149
Mar 21 05:28:00 itv-usvr-01 sshd[24213]: Failed password for invalid user brooklyn from 106.13.13.149 port 36672 ssh2
Mar 21 05:36:56 itv-usvr-01 sshd[24567]: Invalid user de from 106.13.13.149
2020-03-28 01:32:35
106.124.137.108 attackbots
Invalid user bed from 106.124.137.108 port 34314
2020-03-28 01:55:40

最近上报的IP列表

116.7.22.4 107.129.174.198 210.4.125.252 202.172.66.23
95.89.99.15 113.53.239.101 181.215.49.121 157.230.255.64
41.47.101.14 176.212.24.180 94.187.52.246 170.233.71.144
222.138.185.64 201.42.5.229 170.233.70.76 213.233.178.6
209.97.162.57 168.195.47.184 64.70.70.85 200.10.255.182