必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): V6Yun (Beijing) Network Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Invalid user username from 139.199.159.77 port 50464
2020-06-19 08:49:41
attackspam
$f2bV_matches
2020-06-12 04:13:29
attackbots
Jun  8 14:53:19  sshd\[5292\]: User root from 139.199.159.77 not allowed because not listed in AllowUsersJun  8 14:53:22  sshd\[5292\]: Failed password for invalid user root from 139.199.159.77 port 45576 ssh2
...
2020-06-09 00:14:19
attackspam
Jun  3 14:04:22 ws12vmsma01 sshd[50178]: Failed password for root from 139.199.159.77 port 60320 ssh2
Jun  3 14:09:53 ws12vmsma01 sshd[50934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77  user=root
Jun  3 14:09:55 ws12vmsma01 sshd[50934]: Failed password for root from 139.199.159.77 port 59246 ssh2
...
2020-06-04 02:48:49
attackspambots
$f2bV_matches
2020-05-28 01:24:56
attackbots
2020-05-16T03:46:04.9469471240 sshd\[13431\]: Invalid user tracy from 139.199.159.77 port 54692
2020-05-16T03:46:04.9515621240 sshd\[13431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77
2020-05-16T03:46:06.5281211240 sshd\[13431\]: Failed password for invalid user tracy from 139.199.159.77 port 54692 ssh2
...
2020-05-16 13:24:25
attack
k+ssh-bruteforce
2020-05-08 15:34:38
attackbots
Apr 26 21:33:10 OPSO sshd\[17638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77  user=root
Apr 26 21:33:12 OPSO sshd\[17638\]: Failed password for root from 139.199.159.77 port 41596 ssh2
Apr 26 21:36:57 OPSO sshd\[19041\]: Invalid user wwwtest from 139.199.159.77 port 56284
Apr 26 21:36:57 OPSO sshd\[19041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77
Apr 26 21:36:59 OPSO sshd\[19041\]: Failed password for invalid user wwwtest from 139.199.159.77 port 56284 ssh2
2020-04-27 03:41:40
attackspambots
Invalid user git from 139.199.159.77 port 42534
2020-04-15 12:25:04
attack
SSH brute-force: detected 6 distinct usernames within a 24-hour window.
2020-03-20 13:24:15
attackspam
Feb 22 10:22:14 askasleikir sshd[131201]: Failed password for invalid user couch from 139.199.159.77 port 41680 ssh2
2020-02-23 06:02:29
attackbots
Automatic report - Banned IP Access
2020-01-17 06:03:36
attackspambots
Unauthorized connection attempt detected from IP address 139.199.159.77 to port 2220 [J]
2020-01-06 08:22:10
attackbots
--- report ---
Dec 18 14:59:59 sshd: Connection from 139.199.159.77 port 38486
2019-12-19 02:36:37
attack
Dec 17 20:23:34 hanapaa sshd\[4888\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77  user=root
Dec 17 20:23:35 hanapaa sshd\[4888\]: Failed password for root from 139.199.159.77 port 51540 ssh2
Dec 17 20:30:15 hanapaa sshd\[5501\]: Invalid user jonatan from 139.199.159.77
Dec 17 20:30:15 hanapaa sshd\[5501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77
Dec 17 20:30:18 hanapaa sshd\[5501\]: Failed password for invalid user jonatan from 139.199.159.77 port 35714 ssh2
2019-12-18 14:57:10
attackspambots
$f2bV_matches
2019-12-09 15:14:38
attackspambots
Dec  6 05:34:25 ns382633 sshd\[432\]: Invalid user test from 139.199.159.77 port 60992
Dec  6 05:34:25 ns382633 sshd\[432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77
Dec  6 05:34:27 ns382633 sshd\[432\]: Failed password for invalid user test from 139.199.159.77 port 60992 ssh2
Dec  6 05:59:25 ns382633 sshd\[4963\]: Invalid user lipski from 139.199.159.77 port 46158
Dec  6 05:59:25 ns382633 sshd\[4963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77
2019-12-06 13:29:34
attackbots
Nov 28 07:06:49 h2812830 sshd[10346]: Invalid user jaccard from 139.199.159.77 port 37676
Nov 28 07:06:49 h2812830 sshd[10346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77
Nov 28 07:06:49 h2812830 sshd[10346]: Invalid user jaccard from 139.199.159.77 port 37676
Nov 28 07:06:52 h2812830 sshd[10346]: Failed password for invalid user jaccard from 139.199.159.77 port 37676 ssh2
Nov 28 07:21:22 h2812830 sshd[11094]: Invalid user hutsebaut from 139.199.159.77 port 58774
...
2019-11-28 20:22:10
attackspam
Fail2Ban Ban Triggered
2019-11-19 13:03:25
attackbotsspam
Nov 14 09:49:59 ovpn sshd\[8856\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77  user=root
Nov 14 09:50:01 ovpn sshd\[8856\]: Failed password for root from 139.199.159.77 port 40560 ssh2
Nov 14 10:10:48 ovpn sshd\[13468\]: Invalid user jeremy from 139.199.159.77
Nov 14 10:10:48 ovpn sshd\[13468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77
Nov 14 10:10:50 ovpn sshd\[13468\]: Failed password for invalid user jeremy from 139.199.159.77 port 39202 ssh2
2019-11-14 21:48:02
attackspambots
k+ssh-bruteforce
2019-11-12 20:49:10
attackspambots
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77  user=root
Failed password for root from 139.199.159.77 port 48142 ssh2
Invalid user dasilva from 139.199.159.77 port 32946
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77
Failed password for invalid user dasilva from 139.199.159.77 port 32946 ssh2
2019-11-11 18:57:12
attackspambots
2019-11-07T08:35:19.649229abusebot-4.cloudsearch.cf sshd\[4845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77  user=root
2019-11-07 18:55:24
attackspambots
" "
2019-11-02 04:51:19
attackspam
Automatic report - Banned IP Access
2019-10-22 02:57:07
attack
$f2bV_matches
2019-10-19 15:33:54
attack
Invalid user wf from 139.199.159.77 port 34092
2019-10-18 16:20:05
attackspambots
Invalid user user from 139.199.159.77 port 37812
2019-10-18 05:28:46
attackspam
Oct 15 22:03:39 hanapaa sshd\[27279\]: Invalid user Pedro2017 from 139.199.159.77
Oct 15 22:03:39 hanapaa sshd\[27279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77
Oct 15 22:03:41 hanapaa sshd\[27279\]: Failed password for invalid user Pedro2017 from 139.199.159.77 port 49358 ssh2
Oct 15 22:10:11 hanapaa sshd\[27933\]: Invalid user lihao from 139.199.159.77
Oct 15 22:10:11 hanapaa sshd\[27933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77
2019-10-16 16:25:33
attackbots
Jul 14 03:23:30 vtv3 sshd\[8649\]: Invalid user test from 139.199.159.77 port 37392
Jul 14 03:23:30 vtv3 sshd\[8649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77
Jul 14 03:23:32 vtv3 sshd\[8649\]: Failed password for invalid user test from 139.199.159.77 port 37392 ssh2
Jul 14 03:29:21 vtv3 sshd\[11673\]: Invalid user richard from 139.199.159.77 port 56880
Jul 14 03:29:21 vtv3 sshd\[11673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77
Jul 14 03:40:30 vtv3 sshd\[17706\]: Invalid user market from 139.199.159.77 port 34714
Jul 14 03:40:30 vtv3 sshd\[17706\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.159.77
Jul 14 03:40:32 vtv3 sshd\[17706\]: Failed password for invalid user market from 139.199.159.77 port 34714 ssh2
Jul 14 03:42:45 vtv3 sshd\[18732\]: Invalid user info from 139.199.159.77 port 58552
Jul 14 03:42:45 vtv3 sshd\[18732\]
2019-07-14 23:39:19
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.159.77
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20700
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.159.77.			IN	A

;; AUTHORITY SECTION:
.			1678	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019051402 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed May 15 07:24:02 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:
Host 77.159.199.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 77.159.199.139.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
213.151.6.114 attack
Chat Spam
2019-10-26 18:30:28
178.128.223.243 attack
Invalid user amit from 178.128.223.243 port 54370
2019-10-26 18:27:39
49.234.203.5 attack
[Aegis] @ 2019-10-26 11:12:10  0100 -> Multiple authentication failures.
2019-10-26 18:23:28
36.57.70.58 attackspambots
scan z
2019-10-26 18:57:22
158.69.108.227 attackbotsspam
" "
2019-10-26 18:48:08
104.209.45.242 attack
Oct 26 01:01:57 web1 sshd[21486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.209.45.242  user=r.r
Oct 26 01:01:59 web1 sshd[21486]: Failed password for r.r from 104.209.45.242 port 3776 ssh2
Oct 26 01:01:59 web1 sshd[21486]: Received disconnect from 104.209.45.242: 11: Bye Bye [preauth]
Oct 26 01:08:53 web1 sshd[22225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.209.45.242  user=r.r
Oct 26 01:08:55 web1 sshd[22225]: Failed password for r.r from 104.209.45.242 port 3776 ssh2
Oct 26 01:08:55 web1 sshd[22225]: Received disconnect from 104.209.45.242: 11: Bye Bye [preauth]
Oct x@x
Oct 26 01:12:44 web1 sshd[22786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.209.45.242 
Oct x@x
Oct 26 01:12:46 web1 sshd[22786]: Received disconnect from 104.209.45.242: 11: Bye Bye [preauth]
Oct 26 01:17:19 web1 sshd[23208]: Invalid user adipa123 fro........
-------------------------------
2019-10-26 18:56:32
193.32.160.149 attackspam
Oct 26 09:45:24 webserver postfix/smtpd\[21241\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.149\]: 454 4.7.1 \: Relay access denied\; from=\<2ills2fnk6c5qp@sks-prom.ru\> to=\ proto=ESMTP helo=\<\[193.32.160.150\]\>
Oct 26 09:45:24 webserver postfix/smtpd\[21241\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.149\]: 454 4.7.1 \: Relay access denied\; from=\<2ills2fnk6c5qp@sks-prom.ru\> to=\ proto=ESMTP helo=\<\[193.32.160.150\]\>
Oct 26 09:45:24 webserver postfix/smtpd\[21241\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.149\]: 454 4.7.1 \: Relay access denied\; from=\<2ills2fnk6c5qp@sks-prom.ru\> to=\ proto=ESMTP helo=\<\[193.32.160.150\]\>
Oct 26 09:45:24 webserver postfix/smtpd\[21241\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.149\]: 454 4.7.1 \: Relay access denied\; from=\<2ills2fnk6c5qp@sks-prom.ru\> to=\
2019-10-26 18:43:06
132.145.82.128 attack
Oct 25 11:03:43 pi01 sshd[29243]: Connection from 132.145.82.128 port 45582 on 192.168.1.10 port 22
Oct 25 11:03:43 pi01 sshd[29243]: Did not receive identification string from 132.145.82.128 port 45582
Oct 25 12:10:10 pi01 sshd[32533]: Connection from 132.145.82.128 port 34978 on 192.168.1.10 port 22
Oct 25 12:10:17 pi01 sshd[32533]: User r.r from 132.145.82.128 not allowed because not listed in AllowUsers
Oct 25 12:10:17 pi01 sshd[32533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.82.128  user=r.r
Oct 25 12:10:19 pi01 sshd[32533]: Failed password for invalid user r.r from 132.145.82.128 port 34978 ssh2
Oct 25 12:10:19 pi01 sshd[32533]: Received disconnect from 132.145.82.128 port 34978:11: Normal Shutdown, Thank you for playing [preauth]
Oct 25 12:10:19 pi01 sshd[32533]: Disconnected from 132.145.82.128 port 34978 [preauth]
Oct 25 12:10:19 pi01 sshd[32539]: Connection from 132.145.82.128 port 38812 on 192.168.1.10 p........
-------------------------------
2019-10-26 18:30:51
94.176.77.55 attackbots
(Oct 26)  LEN=40 TTL=244 ID=65004 DF TCP DPT=23 WINDOW=14600 SYN 
 (Oct 26)  LEN=40 TTL=244 ID=220 DF TCP DPT=23 WINDOW=14600 SYN 
 (Oct 26)  LEN=40 TTL=244 ID=25960 DF TCP DPT=23 WINDOW=14600 SYN 
 (Oct 26)  LEN=40 TTL=244 ID=63870 DF TCP DPT=23 WINDOW=14600 SYN 
 (Oct 26)  LEN=40 TTL=244 ID=6786 DF TCP DPT=23 WINDOW=14600 SYN 
 (Oct 26)  LEN=40 TTL=244 ID=49112 DF TCP DPT=23 WINDOW=14600 SYN 
 (Oct 26)  LEN=40 TTL=244 ID=61419 DF TCP DPT=23 WINDOW=14600 SYN 
 (Oct 25)  LEN=40 TTL=244 ID=27120 DF TCP DPT=23 WINDOW=14600 SYN 
 (Oct 25)  LEN=40 TTL=244 ID=35842 DF TCP DPT=23 WINDOW=14600 SYN 
 (Oct 25)  LEN=40 TTL=244 ID=8787 DF TCP DPT=23 WINDOW=14600 SYN 
 (Oct 25)  LEN=40 TTL=244 ID=59328 DF TCP DPT=23 WINDOW=14600 SYN 
 (Oct 25)  LEN=40 TTL=244 ID=11173 DF TCP DPT=23 WINDOW=14600 SYN 
 (Oct 25)  LEN=40 TTL=244 ID=5020 DF TCP DPT=23 WINDOW=14600 SYN 
 (Oct 25)  LEN=40 TTL=244 ID=21365 DF TCP DPT=23 WINDOW=14600 SYN 
 (Oct 25)  LEN=40 TTL=244 ID=29047 DF TCP DPT=23 WINDOW=14600 SYN 
...
2019-10-26 18:46:43
104.148.3.3 attackbotsspam
10/25/2019-23:45:01.508282 104.148.3.3 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2019-10-26 18:35:56
45.82.35.10 attackspam
Oct 26 06:00:41 mxgate1 postfix/postscreen[15519]: CONNECT from [45.82.35.10]:42357 to [176.31.12.44]:25
Oct 26 06:00:41 mxgate1 postfix/dnsblog[15876]: addr 45.82.35.10 listed by domain zen.spamhaus.org as 127.0.0.3
Oct 26 06:00:41 mxgate1 postfix/dnsblog[15879]: addr 45.82.35.10 listed by domain b.barracudacentral.org as 127.0.0.2
Oct 26 06:00:47 mxgate1 postfix/postscreen[15519]: DNSBL rank 3 for [45.82.35.10]:42357
Oct x@x
Oct 26 06:00:47 mxgate1 postfix/postscreen[15519]: DISCONNECT [45.82.35.10]:42357


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.82.35.10
2019-10-26 18:25:50
51.77.147.95 attackbotsspam
$f2bV_matches
2019-10-26 18:41:39
104.140.209.17 attack
(From franziska.kilpatrick@gmail.com) Hello,
 
YOU NEED QUALITY VISITORS THAT BUY FROM YOU ??
 
My name is Franziska Kilpatrick, and I'm a Web Traffic Specialist. I can get for your hughesfamilychiro.com:
  - visitors from search engines
  - visitors from social media
  - visitors from any country you want
  - very low bounce rate & long visit duration
 
CLAIM YOUR 24 HOURS FREE TEST ==>  http://bit.ly/Traffic_for_Your_Website
 
Do not forget to read Review to convince you, is already being tested by many people who have trusted it !!
 
Kind Regards,
Franziska Kilpatrick
 
 
UNSUBSCRIBE==> http://bit.ly/Unsubscribe_Traffic
2019-10-26 18:50:44
221.140.151.235 attackspambots
Oct 26 09:23:51 localhost sshd[31201]: Failed password for root from 221.140.151.235 port 58586 ssh2
Oct 26 09:27:59 localhost sshd[31241]: Invalid user awstats from 221.140.151.235 port 40870
Oct 26 09:27:59 localhost sshd[31241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.140.151.235 
Oct 26 09:27:59 localhost sshd[31241]: Invalid user awstats from 221.140.151.235 port 40870
Oct 26 09:28:01 localhost sshd[31241]: Failed password for invalid user awstats from 221.140.151.235 port 40870 ssh2
2019-10-26 18:43:55
106.54.226.23 attackspambots
Automatic report - Banned IP Access
2019-10-26 18:22:04

最近上报的IP列表

159.14.214.83 13.134.188.202 77.93.248.67 200.71.122.54
103.242.125.243 202.51.189.134 86.61.206.201 122.116.152.28
155.23.237.64 147.85.222.111 200.214.32.93 143.117.170.201
172.42.170.60 48.30.122.42 174.46.162.72 223.153.9.20
143.78.144.89 59.246.32.174 139.52.52.179 179.52.36.61