必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbotsspam
Unauthorized connection attempt from IP address 139.199.158.254 on Port 445(SMB)
2019-08-25 09:45:18
相同子网IP讨论:
IP 类型 评论内容 时间
139.199.158.14 attackspam
Unauthorized connection attempt detected from IP address 139.199.158.14 to port 2220 [J]
2020-01-07 16:02:40
139.199.158.14 attackspambots
--- report ---
Dec 18 04:57:27 sshd: Connection from 139.199.158.14 port 41100
Dec 18 04:57:29 sshd: Invalid user john from 139.199.158.14
Dec 18 04:57:31 sshd: Failed password for invalid user john from 139.199.158.14 port 41100 ssh2
Dec 18 04:57:32 sshd: Received disconnect from 139.199.158.14: 11: Bye Bye [preauth]
2019-12-18 16:05:47
139.199.158.14 attackspambots
Dec 18 00:32:00 meumeu sshd[31397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14 
Dec 18 00:32:02 meumeu sshd[31397]: Failed password for invalid user byoung from 139.199.158.14 port 43960 ssh2
Dec 18 00:37:33 meumeu sshd[32367]: Failed password for nobody from 139.199.158.14 port 37622 ssh2
...
2019-12-18 07:48:59
139.199.158.14 attackspam
Brute-force attempt banned
2019-12-15 16:51:00
139.199.158.14 attackbots
Dec  9 15:20:00 game-panel sshd[8460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Dec  9 15:20:02 game-panel sshd[8460]: Failed password for invalid user calado from 139.199.158.14 port 47096 ssh2
Dec  9 15:27:56 game-panel sshd[8843]: Failed password for root from 139.199.158.14 port 47866 ssh2
2019-12-10 00:09:42
139.199.158.14 attack
Dec  5 06:45:43 ny01 sshd[10899]: Failed password for root from 139.199.158.14 port 40311 ssh2
Dec  5 06:52:20 ny01 sshd[11584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Dec  5 06:52:22 ny01 sshd[11584]: Failed password for invalid user pinsky from 139.199.158.14 port 42415 ssh2
2019-12-05 19:58:28
139.199.158.14 attack
SSH auth scanning - multiple failed logins
2019-12-03 21:36:13
139.199.158.14 attackspam
Nov 24 16:36:25 localhost sshd\[28545\]: Invalid user mysql from 139.199.158.14 port 40602
Nov 24 16:36:25 localhost sshd\[28545\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Nov 24 16:36:27 localhost sshd\[28545\]: Failed password for invalid user mysql from 139.199.158.14 port 40602 ssh2
Nov 24 17:09:14 localhost sshd\[28778\]: Invalid user wwwadmin from 139.199.158.14 port 56297
2019-11-25 01:14:30
139.199.158.14 attackbotsspam
Nov 16 09:31:23 localhost sshd\[2507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14  user=backup
Nov 16 09:31:24 localhost sshd\[2507\]: Failed password for backup from 139.199.158.14 port 53509 ssh2
Nov 16 09:36:34 localhost sshd\[2561\]: Invalid user egil from 139.199.158.14 port 43767
...
2019-11-16 17:43:36
139.199.158.14 attackspam
2019-11-13T10:32:31.763298abusebot-5.cloudsearch.cf sshd\[24105\]: Invalid user sanz from 139.199.158.14 port 37074
2019-11-13 18:39:15
139.199.158.14 attack
Nov  5 07:56:17 sd-53420 sshd\[25564\]: Invalid user abc123!@\#$\^ from 139.199.158.14
Nov  5 07:56:17 sd-53420 sshd\[25564\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Nov  5 07:56:19 sd-53420 sshd\[25564\]: Failed password for invalid user abc123!@\#$\^ from 139.199.158.14 port 58258 ssh2
Nov  5 08:01:33 sd-53420 sshd\[25986\]: Invalid user Jaqueline@123 from 139.199.158.14
Nov  5 08:01:33 sd-53420 sshd\[25986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
...
2019-11-05 15:02:52
139.199.158.14 attack
Nov  5 01:21:02 markkoudstaal sshd[10731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Nov  5 01:21:04 markkoudstaal sshd[10731]: Failed password for invalid user xmmmm from 139.199.158.14 port 49821 ssh2
Nov  5 01:25:48 markkoudstaal sshd[11110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
2019-11-05 08:33:07
139.199.158.14 attackbots
Nov  2 05:25:08 vps647732 sshd[32230]: Failed password for root from 139.199.158.14 port 39211 ssh2
Nov  2 05:29:32 vps647732 sshd[32301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
...
2019-11-02 13:29:23
139.199.158.14 attack
Oct 24 05:50:39 MainVPS sshd[19745]: Invalid user want from 139.199.158.14 port 52222
Oct 24 05:50:39 MainVPS sshd[19745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Oct 24 05:50:39 MainVPS sshd[19745]: Invalid user want from 139.199.158.14 port 52222
Oct 24 05:50:41 MainVPS sshd[19745]: Failed password for invalid user want from 139.199.158.14 port 52222 ssh2
Oct 24 05:56:04 MainVPS sshd[20156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14  user=root
Oct 24 05:56:06 MainVPS sshd[20156]: Failed password for root from 139.199.158.14 port 43251 ssh2
...
2019-10-24 12:01:44
139.199.158.14 attackspambots
Oct 23 12:58:18 itv-usvr-01 sshd[2628]: Invalid user mz from 139.199.158.14
Oct 23 12:58:18 itv-usvr-01 sshd[2628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Oct 23 12:58:18 itv-usvr-01 sshd[2628]: Invalid user mz from 139.199.158.14
Oct 23 12:58:21 itv-usvr-01 sshd[2628]: Failed password for invalid user mz from 139.199.158.14 port 42836 ssh2
2019-10-23 17:50:24
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.158.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40373
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.158.254.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082401 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 25 09:45:12 CST 2019
;; MSG SIZE  rcvd: 119
HOST信息:
Host 254.158.199.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 254.158.199.139.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
45.255.124.207 attackspam
ICMP MH Probe, Scan /Distributed -
2020-04-19 07:27:00
85.105.36.139 attack
Telnet/23 MH Probe, Scan, BF, Hack -
2020-04-19 07:27:38
104.248.46.22 attackbots
SSH brutforce
2020-04-19 07:33:47
222.186.180.6 attackspam
SSH authentication failure x 6 reported by Fail2Ban
...
2020-04-19 07:31:48
163.44.151.11 attackspambots
2020-04-18T15:50:51.140485linuxbox-skyline sshd[236204]: Invalid user ha from 163.44.151.11 port 42148
...
2020-04-19 07:23:21
209.169.199.242 attack
Brute forcing email accounts
2020-04-19 07:50:45
49.72.210.221 attackspam
Apr 19 01:14:25 meumeu sshd[26692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.72.210.221 
Apr 19 01:14:27 meumeu sshd[26692]: Failed password for invalid user bv from 49.72.210.221 port 53002 ssh2
Apr 19 01:22:54 meumeu sshd[27924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.72.210.221 
...
2020-04-19 07:28:34
222.186.30.112 attackspambots
Apr 18 23:24:37 scw-6657dc sshd[21314]: Failed password for root from 222.186.30.112 port 50701 ssh2
Apr 18 23:24:37 scw-6657dc sshd[21314]: Failed password for root from 222.186.30.112 port 50701 ssh2
Apr 18 23:24:39 scw-6657dc sshd[21314]: Failed password for root from 222.186.30.112 port 50701 ssh2
...
2020-04-19 07:25:02
162.243.132.203 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-04-19 07:42:41
61.160.245.87 attackspam
Apr 19 00:26:18 vpn01 sshd[7776]: Failed password for root from 61.160.245.87 port 37662 ssh2
...
2020-04-19 07:30:49
106.54.42.129 attackspam
Apr 18 21:11:10 game-panel sshd[4734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.42.129
Apr 18 21:11:12 game-panel sshd[4734]: Failed password for invalid user m from 106.54.42.129 port 37628 ssh2
Apr 18 21:14:38 game-panel sshd[4908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.42.129
2020-04-19 07:30:29
162.243.132.235 attackspambots
SIP Server BruteForce Attack
2020-04-19 07:37:47
111.167.187.70 attack
Port probing on unauthorized port 23
2020-04-19 07:55:49
186.84.172.25 attackspambots
Invalid user wa from 186.84.172.25 port 36706
2020-04-19 07:45:36
103.133.109.152 attackbotsspam
Apr 19 01:46:26 debian-2gb-nbg1-2 kernel: \[9512555.997465\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=103.133.109.152 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=28882 PROTO=TCP SPT=55673 DPT=5237 WINDOW=1024 RES=0x00 SYN URGP=0
2020-04-19 07:53:53

最近上报的IP列表

60.20.219.11 188.147.15.48 171.34.200.15 152.146.77.66
107.228.4.185 146.20.224.136 162.248.119.239 163.179.155.95
165.31.19.171 111.199.228.182 63.223.75.10 116.29.70.27
177.161.9.131 42.174.234.106 217.151.9.220 60.179.187.26
125.239.130.212 12.169.174.177 90.162.95.29 90.201.153.100