必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Beijing

省份(region): Beijing

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): Shenzhen Tencent Computer Systems Company Limited

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspam
Unauthorized connection attempt detected from IP address 139.199.158.14 to port 2220 [J]
2020-01-07 16:02:40
attackspambots
--- report ---
Dec 18 04:57:27 sshd: Connection from 139.199.158.14 port 41100
Dec 18 04:57:29 sshd: Invalid user john from 139.199.158.14
Dec 18 04:57:31 sshd: Failed password for invalid user john from 139.199.158.14 port 41100 ssh2
Dec 18 04:57:32 sshd: Received disconnect from 139.199.158.14: 11: Bye Bye [preauth]
2019-12-18 16:05:47
attackspambots
Dec 18 00:32:00 meumeu sshd[31397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 
Dec 18 00:32:02 meumeu sshd[31397]: Failed password for invalid user byoung from 139.199.158.14 port 43960 ssh2
Dec 18 00:37:33 meumeu sshd[32367]: Failed password for nobody from 139.199.158.14 port 37622 ssh2
...
2019-12-18 07:48:59
attackspam
Brute-force attempt banned
2019-12-15 16:51:00
attackbots
Dec  9 15:20:00 game-panel sshd[8460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Dec  9 15:20:02 game-panel sshd[8460]: Failed password for invalid user calado from 139.199.158.14 port 47096 ssh2
Dec  9 15:27:56 game-panel sshd[8843]: Failed password for root from 139.199.158.14 port 47866 ssh2
2019-12-10 00:09:42
attack
Dec  5 06:45:43 ny01 sshd[10899]: Failed password for root from 139.199.158.14 port 40311 ssh2
Dec  5 06:52:20 ny01 sshd[11584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Dec  5 06:52:22 ny01 sshd[11584]: Failed password for invalid user pinsky from 139.199.158.14 port 42415 ssh2
2019-12-05 19:58:28
attack
SSH auth scanning - multiple failed logins
2019-12-03 21:36:13
attackspam
Nov 24 16:36:25 localhost sshd\[28545\]: Invalid user mysql from 139.199.158.14 port 40602
Nov 24 16:36:25 localhost sshd\[28545\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Nov 24 16:36:27 localhost sshd\[28545\]: Failed password for invalid user mysql from 139.199.158.14 port 40602 ssh2
Nov 24 17:09:14 localhost sshd\[28778\]: Invalid user wwwadmin from 139.199.158.14 port 56297
2019-11-25 01:14:30
attackbotsspam
Nov 16 09:31:23 localhost sshd\[2507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14  user=backup
Nov 16 09:31:24 localhost sshd\[2507\]: Failed password for backup from 139.199.158.14 port 53509 ssh2
Nov 16 09:36:34 localhost sshd\[2561\]: Invalid user egil from 139.199.158.14 port 43767
...
2019-11-16 17:43:36
attackspam
2019-11-13T10:32:31.763298abusebot-5.cloudsearch.cf sshd\[24105\]: Invalid user sanz from 139.199.158.14 port 37074
2019-11-13 18:39:15
attack
Nov  5 07:56:17 sd-53420 sshd\[25564\]: Invalid user abc123!@\#$\^ from 139.199.158.14
Nov  5 07:56:17 sd-53420 sshd\[25564\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Nov  5 07:56:19 sd-53420 sshd\[25564\]: Failed password for invalid user abc123!@\#$\^ from 139.199.158.14 port 58258 ssh2
Nov  5 08:01:33 sd-53420 sshd\[25986\]: Invalid user Jaqueline@123 from 139.199.158.14
Nov  5 08:01:33 sd-53420 sshd\[25986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
...
2019-11-05 15:02:52
attack
Nov  5 01:21:02 markkoudstaal sshd[10731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Nov  5 01:21:04 markkoudstaal sshd[10731]: Failed password for invalid user xmmmm from 139.199.158.14 port 49821 ssh2
Nov  5 01:25:48 markkoudstaal sshd[11110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
2019-11-05 08:33:07
attackbots
Nov  2 05:25:08 vps647732 sshd[32230]: Failed password for root from 139.199.158.14 port 39211 ssh2
Nov  2 05:29:32 vps647732 sshd[32301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
...
2019-11-02 13:29:23
attack
Oct 24 05:50:39 MainVPS sshd[19745]: Invalid user want from 139.199.158.14 port 52222
Oct 24 05:50:39 MainVPS sshd[19745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Oct 24 05:50:39 MainVPS sshd[19745]: Invalid user want from 139.199.158.14 port 52222
Oct 24 05:50:41 MainVPS sshd[19745]: Failed password for invalid user want from 139.199.158.14 port 52222 ssh2
Oct 24 05:56:04 MainVPS sshd[20156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14  user=root
Oct 24 05:56:06 MainVPS sshd[20156]: Failed password for root from 139.199.158.14 port 43251 ssh2
...
2019-10-24 12:01:44
attackspambots
Oct 23 12:58:18 itv-usvr-01 sshd[2628]: Invalid user mz from 139.199.158.14
Oct 23 12:58:18 itv-usvr-01 sshd[2628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Oct 23 12:58:18 itv-usvr-01 sshd[2628]: Invalid user mz from 139.199.158.14
Oct 23 12:58:21 itv-usvr-01 sshd[2628]: Failed password for invalid user mz from 139.199.158.14 port 42836 ssh2
2019-10-23 17:50:24
attackspam
Oct 19 23:03:19 server sshd\[16820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14  user=games
Oct 19 23:03:21 server sshd\[16820\]: Failed password for games from 139.199.158.14 port 53876 ssh2
Oct 19 23:11:13 server sshd\[19448\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14  user=root
Oct 19 23:11:15 server sshd\[19448\]: Failed password for root from 139.199.158.14 port 52737 ssh2
Oct 19 23:15:52 server sshd\[21165\]: Invalid user porno from 139.199.158.14
Oct 19 23:15:52 server sshd\[21165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 
...
2019-10-20 05:47:56
attackspam
Oct  1 14:17:57 MK-Soft-Root1 sshd[3704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 
Oct  1 14:17:59 MK-Soft-Root1 sshd[3704]: Failed password for invalid user leon from 139.199.158.14 port 46102 ssh2
...
2019-10-01 20:22:44
attackbotsspam
Sep 30 01:28:34 TORMINT sshd\[4192\]: Invalid user jester from 139.199.158.14
Sep 30 01:28:34 TORMINT sshd\[4192\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Sep 30 01:28:36 TORMINT sshd\[4192\]: Failed password for invalid user jester from 139.199.158.14 port 52504 ssh2
...
2019-09-30 17:10:52
attack
Sep 29 20:14:07 markkoudstaal sshd[32709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Sep 29 20:14:09 markkoudstaal sshd[32709]: Failed password for invalid user kiwi from 139.199.158.14 port 36847 ssh2
Sep 29 20:19:20 markkoudstaal sshd[750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
2019-09-30 02:58:54
attackspam
Sep 17 04:23:10 hpm sshd\[8323\]: Invalid user cdvonline from 139.199.158.14
Sep 17 04:23:10 hpm sshd\[8323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Sep 17 04:23:12 hpm sshd\[8323\]: Failed password for invalid user cdvonline from 139.199.158.14 port 36153 ssh2
Sep 17 04:27:39 hpm sshd\[8722\]: Invalid user yale from 139.199.158.14
Sep 17 04:27:39 hpm sshd\[8722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
2019-09-17 22:41:06
attackspambots
Aug 30 08:35:09 vps691689 sshd[16418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Aug 30 08:35:12 vps691689 sshd[16418]: Failed password for invalid user saned from 139.199.158.14 port 38238 ssh2
...
2019-08-30 19:13:47
attack
Aug  9 12:44:12 MK-Soft-Root2 sshd\[4992\]: Invalid user alex from 139.199.158.14 port 42486
Aug  9 12:44:12 MK-Soft-Root2 sshd\[4992\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Aug  9 12:44:14 MK-Soft-Root2 sshd\[4992\]: Failed password for invalid user alex from 139.199.158.14 port 42486 ssh2
...
2019-08-10 01:36:05
attackspambots
Invalid user mike from 139.199.158.14 port 54625
2019-07-24 16:23:25
attackbots
Invalid user meng from 139.199.158.14 port 41239
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Failed password for invalid user meng from 139.199.158.14 port 41239 ssh2
Invalid user postgres from 139.199.158.14 port 35564
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
2019-07-13 00:57:00
attackspam
Jul 10 14:34:20 *** sshd[5835]: Invalid user administrator from 139.199.158.14
2019-07-10 23:08:50
attack
Triggered by Fail2Ban at Vostok web server
2019-07-02 02:57:29
attackspambots
Jul  1 00:49:48 vmd17057 sshd\[17337\]: Invalid user ftpuser from 139.199.158.14 port 52726
Jul  1 00:49:48 vmd17057 sshd\[17337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Jul  1 00:49:50 vmd17057 sshd\[17337\]: Failed password for invalid user ftpuser from 139.199.158.14 port 52726 ssh2
...
2019-07-01 11:00:46
attack
web-1 [ssh] SSH Attack
2019-06-28 16:14:56
相同子网IP讨论:
IP 类型 评论内容 时间
139.199.158.254 attackbotsspam
Unauthorized connection attempt from IP address 139.199.158.254 on Port 445(SMB)
2019-08-25 09:45:18
139.199.158.226 attackbotsspam
Jun 12 14:12:43 server sshd\[14260\]: Invalid user amavis from 139.199.158.226
Jun 12 14:12:43 server sshd\[14260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.226
Jun 12 14:12:45 server sshd\[14260\]: Failed password for invalid user amavis from 139.199.158.226 port 48598 ssh2
...
2019-07-12 07:58:20
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.158.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3459
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.158.14.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041901 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri Apr 19 21:49:56 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:
Host 14.158.199.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 14.158.199.139.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
122.51.234.16 attack
Mar 31 05:55:36 ns381471 sshd[10119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.16
Mar 31 05:55:38 ns381471 sshd[10119]: Failed password for invalid user www from 122.51.234.16 port 53714 ssh2
2020-03-31 12:26:49
92.118.211.61 attackbots
Unauthorized access detected from black listed ip!
2020-03-31 12:24:06
45.95.168.248 attackspam
Mar 31 06:54:12 ArkNodeAT sshd\[7335\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.248  user=root
Mar 31 06:54:14 ArkNodeAT sshd\[7335\]: Failed password for root from 45.95.168.248 port 55818 ssh2
Mar 31 06:54:28 ArkNodeAT sshd\[7338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.248  user=root
2020-03-31 12:54:44
112.35.67.136 attack
Mar 31 06:02:51 vmd48417 sshd[23408]: Failed password for root from 112.35.67.136 port 49742 ssh2
2020-03-31 12:23:37
62.4.14.123 attackbotsspam
62.4.14.123 was recorded 5 times by 5 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 10, 71
2020-03-31 13:01:44
119.50.179.72 attack
21/tcp 1433/tcp...
[2020-03-31]15pkt,2pt.(tcp)
2020-03-31 13:06:38
222.186.42.155 attackbots
2020-03-30T22:00:09.375978homeassistant sshd[6637]: Failed password for root from 222.186.42.155 port 62406 ssh2
2020-03-31T04:26:31.354243homeassistant sshd[4686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.155  user=root
...
2020-03-31 12:27:49
132.232.68.138 attackbots
Mar 31 07:46:17 hosting sshd[21055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.68.138  user=root
Mar 31 07:46:19 hosting sshd[21055]: Failed password for root from 132.232.68.138 port 57316 ssh2
...
2020-03-31 12:58:51
179.185.104.250 attackspambots
2020-03-31T04:27:30.219630shield sshd\[5008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.185.104.250  user=root
2020-03-31T04:27:31.950183shield sshd\[5008\]: Failed password for root from 179.185.104.250 port 34443 ssh2
2020-03-31T04:31:41.991526shield sshd\[5964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.185.104.250  user=root
2020-03-31T04:31:44.178935shield sshd\[5964\]: Failed password for root from 179.185.104.250 port 32919 ssh2
2020-03-31T04:35:44.088499shield sshd\[6719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.185.104.250  user=root
2020-03-31 12:43:05
218.240.137.68 attack
Mar 30 22:06:44 server1 sshd\[1613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.240.137.68  user=root
Mar 30 22:06:46 server1 sshd\[1613\]: Failed password for root from 218.240.137.68 port 30461 ssh2
Mar 30 22:10:29 server1 sshd\[2784\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.240.137.68  user=root
Mar 30 22:10:32 server1 sshd\[2784\]: Failed password for root from 218.240.137.68 port 27090 ssh2
Mar 30 22:14:21 server1 sshd\[3944\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.240.137.68  user=root
...
2020-03-31 12:26:22
167.172.114.165 attack
Mar 31 05:48:32 ewelt sshd[330]: Failed password for invalid user vy from 167.172.114.165 port 46480 ssh2
Mar 31 05:51:59 ewelt sshd[500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.114.165  user=root
Mar 31 05:52:01 ewelt sshd[500]: Failed password for root from 167.172.114.165 port 59306 ssh2
Mar 31 05:55:22 ewelt sshd[687]: Invalid user longwj from 167.172.114.165 port 43926
...
2020-03-31 12:35:29
92.118.38.34 attack
(smtpauth) Failed SMTP AUTH login from 92.118.38.34 (RO/Romania/ip-38-34.ZervDNS): 5 in the last 3600 secs
2020-03-31 12:52:56
222.186.180.142 attack
2020-03-30T21:25:06.428478homeassistant sshd[30162]: Failed password for root from 222.186.180.142 port 22431 ssh2
2020-03-31T04:29:33.668149homeassistant sshd[5441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.142  user=root
...
2020-03-31 12:36:45
5.157.15.136 attackbotsspam
Unauthorized access detected from black listed ip!
2020-03-31 12:27:07
75.149.219.169 attackbots
Automatic report - XMLRPC Attack
2020-03-31 12:40:14

最近上报的IP列表

116.7.22.4 107.129.174.198 210.4.125.252 202.172.66.23
95.89.99.15 113.53.239.101 181.215.49.121 157.230.255.64
41.47.101.14 176.212.24.180 94.187.52.246 170.233.71.144
222.138.185.64 201.42.5.229 170.233.70.76 213.233.178.6
209.97.162.57 168.195.47.184 64.70.70.85 200.10.255.182