139.199.158.254

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Unauthorized connection attempt from IP address 139.199.158.254 on Port 445(SMB)	2019-08-25 09:45:18

相同子网IP讨论:

IP	类型	评论内容	时间
139.199.158.14	attackspam	Unauthorized connection attempt detected from IP address 139.199.158.14 to port 2220 [J]	2020-01-07 16:02:40
139.199.158.14	attackspambots	--- report --- Dec 18 04:57:27 sshd: Connection from 139.199.158.14 port 41100 Dec 18 04:57:29 sshd: Invalid user john from 139.199.158.14 Dec 18 04:57:31 sshd: Failed password for invalid user john from 139.199.158.14 port 41100 ssh2 Dec 18 04:57:32 sshd: Received disconnect from 139.199.158.14: 11: Bye Bye [preauth]	2019-12-18 16:05:47
139.199.158.14	attackspambots	Dec 18 00:32:00 meumeu sshd[31397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 Dec 18 00:32:02 meumeu sshd[31397]: Failed password for invalid user byoung from 139.199.158.14 port 43960 ssh2 Dec 18 00:37:33 meumeu sshd[32367]: Failed password for nobody from 139.199.158.14 port 37622 ssh2 ...	2019-12-18 07:48:59
139.199.158.14	attackspam	Brute-force attempt banned	2019-12-15 16:51:00
139.199.158.14	attackbots	Dec 9 15:20:00 game-panel sshd[8460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 Dec 9 15:20:02 game-panel sshd[8460]: Failed password for invalid user calado from 139.199.158.14 port 47096 ssh2 Dec 9 15:27:56 game-panel sshd[8843]: Failed password for root from 139.199.158.14 port 47866 ssh2	2019-12-10 00:09:42
139.199.158.14	attack	Dec 5 06:45:43 ny01 sshd[10899]: Failed password for root from 139.199.158.14 port 40311 ssh2 Dec 5 06:52:20 ny01 sshd[11584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 Dec 5 06:52:22 ny01 sshd[11584]: Failed password for invalid user pinsky from 139.199.158.14 port 42415 ssh2	2019-12-05 19:58:28
139.199.158.14	attack	SSH auth scanning - multiple failed logins	2019-12-03 21:36:13
139.199.158.14	attackspam	Nov 24 16:36:25 localhost sshd\[28545\]: Invalid user mysql from 139.199.158.14 port 40602 Nov 24 16:36:25 localhost sshd\[28545\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 Nov 24 16:36:27 localhost sshd\[28545\]: Failed password for invalid user mysql from 139.199.158.14 port 40602 ssh2 Nov 24 17:09:14 localhost sshd\[28778\]: Invalid user wwwadmin from 139.199.158.14 port 56297	2019-11-25 01:14:30
139.199.158.14	attackbotsspam	Nov 16 09:31:23 localhost sshd\[2507\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 user=backup Nov 16 09:31:24 localhost sshd\[2507\]: Failed password for backup from 139.199.158.14 port 53509 ssh2 Nov 16 09:36:34 localhost sshd\[2561\]: Invalid user egil from 139.199.158.14 port 43767 ...	2019-11-16 17:43:36
139.199.158.14	attackspam	2019-11-13T10:32:31.763298abusebot-5.cloudsearch.cf sshd\[24105\]: Invalid user sanz from 139.199.158.14 port 37074	2019-11-13 18:39:15
139.199.158.14	attack	Nov 5 07:56:17 sd-53420 sshd\[25564\]: Invalid user abc123!@\#$\^ from 139.199.158.14 Nov 5 07:56:17 sd-53420 sshd\[25564\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 Nov 5 07:56:19 sd-53420 sshd\[25564\]: Failed password for invalid user abc123!@\#$\^ from 139.199.158.14 port 58258 ssh2 Nov 5 08:01:33 sd-53420 sshd\[25986\]: Invalid user Jaqueline@123 from 139.199.158.14 Nov 5 08:01:33 sd-53420 sshd\[25986\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 ...	2019-11-05 15:02:52
139.199.158.14	attack	Nov 5 01:21:02 markkoudstaal sshd[10731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 Nov 5 01:21:04 markkoudstaal sshd[10731]: Failed password for invalid user xmmmm from 139.199.158.14 port 49821 ssh2 Nov 5 01:25:48 markkoudstaal sshd[11110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14	2019-11-05 08:33:07
139.199.158.14	attackbots	Nov 2 05:25:08 vps647732 sshd[32230]: Failed password for root from 139.199.158.14 port 39211 ssh2 Nov 2 05:29:32 vps647732 sshd[32301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 ...	2019-11-02 13:29:23
139.199.158.14	attack	Oct 24 05:50:39 MainVPS sshd[19745]: Invalid user want from 139.199.158.14 port 52222 Oct 24 05:50:39 MainVPS sshd[19745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 Oct 24 05:50:39 MainVPS sshd[19745]: Invalid user want from 139.199.158.14 port 52222 Oct 24 05:50:41 MainVPS sshd[19745]: Failed password for invalid user want from 139.199.158.14 port 52222 ssh2 Oct 24 05:56:04 MainVPS sshd[20156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 user=root Oct 24 05:56:06 MainVPS sshd[20156]: Failed password for root from 139.199.158.14 port 43251 ssh2 ...	2019-10-24 12:01:44
139.199.158.14	attackspambots	Oct 23 12:58:18 itv-usvr-01 sshd[2628]: Invalid user mz from 139.199.158.14 Oct 23 12:58:18 itv-usvr-01 sshd[2628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 Oct 23 12:58:18 itv-usvr-01 sshd[2628]: Invalid user mz from 139.199.158.14 Oct 23 12:58:21 itv-usvr-01 sshd[2628]: Failed password for invalid user mz from 139.199.158.14 port 42836 ssh2	2019-10-23 17:50:24

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.158.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40373
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.158.254.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082401 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 25 09:45:12 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

Host 254.158.199.139.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 254.158.199.139.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
132.232.66.227	attackspambots	Jun 12 20:17:30 cosmoit sshd[9146]: Failed password for root from 132.232.66.227 port 52168 ssh2	2020-06-13 02:38:43
222.186.15.158	attackbotsspam	pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.158 user=root Failed password for root from 222.186.15.158 port 42440 ssh2 Failed password for root from 222.186.15.158 port 42440 ssh2 Failed password for root from 222.186.15.158 port 42440 ssh2 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.158 user=root	2020-06-13 02:34:20
157.230.19.72	attackbots	$f2bV_matches	2020-06-13 02:37:01
109.155.59.119	attackbotsspam	Automatic report - Banned IP Access	2020-06-13 02:43:28
175.6.5.233	attack	Jun 12 17:30:49 rush sshd[9311]: Failed password for root from 175.6.5.233 port 41008 ssh2 Jun 12 17:32:29 rush sshd[9360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.5.233 Jun 12 17:32:32 rush sshd[9360]: Failed password for invalid user db1inst1 from 175.6.5.233 port 18492 ssh2 ...	2020-06-13 02:05:26
222.186.190.17	attackspambots	2020-06-12T19:53:11.249896vps773228.ovh.net sshd[25597]: Failed password for root from 222.186.190.17 port 19151 ssh2 2020-06-12T19:53:06.144172vps773228.ovh.net sshd[25597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.17 user=root 2020-06-12T19:53:08.275179vps773228.ovh.net sshd[25597]: Failed password for root from 222.186.190.17 port 19151 ssh2 2020-06-12T19:53:11.249896vps773228.ovh.net sshd[25597]: Failed password for root from 222.186.190.17 port 19151 ssh2 2020-06-12T19:53:13.300083vps773228.ovh.net sshd[25597]: Failed password for root from 222.186.190.17 port 19151 ssh2 ...	2020-06-13 02:03:28
4.16.61.171	attackbots	Failed password for invalid user sad from 4.16.61.171 port 38650 ssh2	2020-06-13 02:41:30
92.118.160.9	attackbotsspam	srv02 Mass scanning activity detected Target: 2222 ..	2020-06-13 02:40:47
49.88.112.69	attackbots	Jun 12 18:39:53 django-0 sshd\[18542\]: Failed password for root from 49.88.112.69 port 28444 ssh2Jun 12 18:44:10 django-0 sshd\[18658\]: Failed password for root from 49.88.112.69 port 63818 ssh2Jun 12 18:47:00 django-0 sshd\[18747\]: Failed password for root from 49.88.112.69 port 40298 ssh2 ...	2020-06-13 02:41:05
35.202.177.121	attackspambots	Jun 12 18:19:35 game-panel sshd[6188]: Failed password for root from 35.202.177.121 port 60890 ssh2 Jun 12 18:23:30 game-panel sshd[6326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.202.177.121 Jun 12 18:23:32 game-panel sshd[6326]: Failed password for invalid user newuser from 35.202.177.121 port 51106 ssh2	2020-06-13 02:25:54
188.226.192.115	attackbotsspam	Jun 12 19:42:27 santamaria sshd\[28011\]: Invalid user wayne from 188.226.192.115 Jun 12 19:42:27 santamaria sshd\[28011\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.192.115 Jun 12 19:42:29 santamaria sshd\[28011\]: Failed password for invalid user wayne from 188.226.192.115 port 52972 ssh2 ...	2020-06-13 02:27:21
142.44.160.40	attack	Jun 12 19:07:15 h1745522 sshd[3959]: Invalid user ubuntu from 142.44.160.40 port 53586 Jun 12 19:07:15 h1745522 sshd[3959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.160.40 Jun 12 19:07:15 h1745522 sshd[3959]: Invalid user ubuntu from 142.44.160.40 port 53586 Jun 12 19:07:17 h1745522 sshd[3959]: Failed password for invalid user ubuntu from 142.44.160.40 port 53586 ssh2 Jun 12 19:12:06 h1745522 sshd[4325]: Invalid user sqladmin from 142.44.160.40 port 58222 Jun 12 19:12:06 h1745522 sshd[4325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.160.40 Jun 12 19:12:06 h1745522 sshd[4325]: Invalid user sqladmin from 142.44.160.40 port 58222 Jun 12 19:12:08 h1745522 sshd[4325]: Failed password for invalid user sqladmin from 142.44.160.40 port 58222 ssh2 Jun 12 19:17:06 h1745522 sshd[4544]: Invalid user test from 142.44.160.40 port 35894 ...	2020-06-13 02:06:28
123.13.203.67	attackbots	Jun 12 19:08:14 gestao sshd[15526]: Failed password for root from 123.13.203.67 port 12020 ssh2 Jun 12 19:10:30 gestao sshd[15628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.13.203.67 Jun 12 19:10:32 gestao sshd[15628]: Failed password for invalid user git from 123.13.203.67 port 24432 ssh2 ...	2020-06-13 02:22:59
94.102.51.7	attack	Jun 12 19:20:22 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.51.7, lip=192.168.100.101, session=\<6kWqSuan8gBeZjMH\>\ Jun 12 19:34:53 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.51.7, lip=192.168.100.101, session=\\ Jun 12 19:35:00 pop3-login: Info: Aborted login $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=94.102.51.7, lip=192.168.100.101, session=\\ Jun 12 19:56:41 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.51.7, lip=192.168.100.101, session=\\ Jun 12 20:01:05 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.51.7, lip=192.168.100.101, session=\\ Jun 12 20:07:58 pop3-login: Info: A	2020-06-13 02:43:44
138.255.193.146	attack	Jun 12 20:34:31 home sshd[30624]: Failed password for root from 138.255.193.146 port 55664 ssh2 Jun 12 20:37:26 home sshd[30949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.255.193.146 Jun 12 20:37:28 home sshd[30949]: Failed password for invalid user webalizer from 138.255.193.146 port 43428 ssh2 ...	2020-06-13 02:38:17

最近上报的IP列表

60.20.219.11	188.147.15.48	171.34.200.15	152.146.77.66
107.228.4.185	146.20.224.136	162.248.119.239	163.179.155.95
165.31.19.171	111.199.228.182	63.223.75.10	116.29.70.27
177.161.9.131	42.174.234.106	217.151.9.220	60.179.187.26
125.239.130.212	12.169.174.177	90.162.95.29	90.201.153.100