139.199.59.3 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): V6Yun (Beijing) Network Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	SSH login attempts with user root at 2020-01-02.	2020-01-03 02:43:29

相同子网IP讨论:

IP	类型	评论内容	时间
139.199.59.31	attack	Invalid user tuna from 139.199.59.31 port 16175	2020-07-12 01:16:58
139.199.59.31	attack	(sshd) Failed SSH login from 139.199.59.31 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 9 23:36:21 s1 sshd[25270]: Invalid user tony from 139.199.59.31 port 42347 Jul 9 23:36:23 s1 sshd[25270]: Failed password for invalid user tony from 139.199.59.31 port 42347 ssh2 Jul 9 23:47:34 s1 sshd[26469]: Invalid user limengting from 139.199.59.31 port 59378 Jul 9 23:47:36 s1 sshd[26469]: Failed password for invalid user limengting from 139.199.59.31 port 59378 ssh2 Jul 9 23:52:02 s1 sshd[26966]: Invalid user krissy from 139.199.59.31 port 49259	2020-07-10 05:30:42
139.199.59.31	attackbots	SSH Brute-Force attacks	2020-07-09 04:00:33
139.199.59.31	attack	Jun 26 22:06:03 meumeu sshd[68339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 user=root Jun 26 22:06:05 meumeu sshd[68339]: Failed password for root from 139.199.59.31 port 46616 ssh2 Jun 26 22:07:34 meumeu sshd[68394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 user=root Jun 26 22:07:36 meumeu sshd[68394]: Failed password for root from 139.199.59.31 port 64226 ssh2 Jun 26 22:09:11 meumeu sshd[68593]: Invalid user odoo from 139.199.59.31 port 25331 Jun 26 22:09:11 meumeu sshd[68593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 Jun 26 22:09:11 meumeu sshd[68593]: Invalid user odoo from 139.199.59.31 port 25331 Jun 26 22:09:12 meumeu sshd[68593]: Failed password for invalid user odoo from 139.199.59.31 port 25331 ssh2 Jun 26 22:12:14 meumeu sshd[68682]: Invalid user postgres from 139.199.59.31 port 60545 ...	2020-06-27 05:18:32
139.199.59.31	attackspam	2020-06-21T14:13:16.502889 sshd[20184]: Invalid user cu from 139.199.59.31 port 31390 2020-06-21T14:13:16.518055 sshd[20184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 2020-06-21T14:13:16.502889 sshd[20184]: Invalid user cu from 139.199.59.31 port 31390 2020-06-21T14:13:18.059786 sshd[20184]: Failed password for invalid user cu from 139.199.59.31 port 31390 ssh2 ...	2020-06-22 00:42:55
139.199.59.31	attackspam	2020-06-13T12:17:39.164667abusebot.cloudsearch.cf sshd[9128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 user=root 2020-06-13T12:17:41.091632abusebot.cloudsearch.cf sshd[9128]: Failed password for root from 139.199.59.31 port 25567 ssh2 2020-06-13T12:20:11.589356abusebot.cloudsearch.cf sshd[9317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 user=root 2020-06-13T12:20:13.716941abusebot.cloudsearch.cf sshd[9317]: Failed password for root from 139.199.59.31 port 52073 ssh2 2020-06-13T12:22:46.899166abusebot.cloudsearch.cf sshd[9466]: Invalid user teampspeak3 from 139.199.59.31 port 22078 2020-06-13T12:22:46.905643abusebot.cloudsearch.cf sshd[9466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 2020-06-13T12:22:46.899166abusebot.cloudsearch.cf sshd[9466]: Invalid user teampspeak3 from 139.199.59.31 port 22078 2020-06- ...	2020-06-14 02:11:39
139.199.59.31	attackspam	Jun 13 07:24:02 h2779839 sshd[25396]: Invalid user ismael from 139.199.59.31 port 20800 Jun 13 07:24:02 h2779839 sshd[25396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 Jun 13 07:24:02 h2779839 sshd[25396]: Invalid user ismael from 139.199.59.31 port 20800 Jun 13 07:24:03 h2779839 sshd[25396]: Failed password for invalid user ismael from 139.199.59.31 port 20800 ssh2 Jun 13 07:28:36 h2779839 sshd[25474]: Invalid user pete from 139.199.59.31 port 12333 Jun 13 07:28:36 h2779839 sshd[25474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 Jun 13 07:28:36 h2779839 sshd[25474]: Invalid user pete from 139.199.59.31 port 12333 Jun 13 07:28:39 h2779839 sshd[25474]: Failed password for invalid user pete from 139.199.59.31 port 12333 ssh2 Jun 13 07:33:05 h2779839 sshd[25551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 user=ro ...	2020-06-13 13:49:36
139.199.59.31	attack	Jun 11 16:39:26 dignus sshd[22263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 user=root Jun 11 16:39:28 dignus sshd[22263]: Failed password for root from 139.199.59.31 port 35859 ssh2 Jun 11 16:43:33 dignus sshd[22663]: Invalid user ea from 139.199.59.31 port 26470 Jun 11 16:43:33 dignus sshd[22663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 Jun 11 16:43:35 dignus sshd[22663]: Failed password for invalid user ea from 139.199.59.31 port 26470 ssh2 ...	2020-06-12 08:25:44
139.199.59.31	attackspambots	$f2bV_matches	2020-05-29 13:38:50
139.199.59.31	attackspambots	2020-05-13T12:06:35.172207afi-git.jinr.ru sshd[14822]: Invalid user info from 139.199.59.31 port 56895 2020-05-13T12:06:35.175301afi-git.jinr.ru sshd[14822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 2020-05-13T12:06:35.172207afi-git.jinr.ru sshd[14822]: Invalid user info from 139.199.59.31 port 56895 2020-05-13T12:06:37.286859afi-git.jinr.ru sshd[14822]: Failed password for invalid user info from 139.199.59.31 port 56895 ssh2 2020-05-13T12:09:11.333864afi-git.jinr.ru sshd[15625]: Invalid user postgres from 139.199.59.31 port 29928 ...	2020-05-13 19:21:45
139.199.59.31	attack	$f2bV_matches	2020-05-10 08:12:51
139.199.59.31	attackspam	detected by Fail2Ban	2020-04-24 13:56:55
139.199.59.31	attack	Apr 21 06:28:47 [host] sshd[7708]: pam_unix(sshd:a Apr 21 06:28:48 [host] sshd[7708]: Failed password Apr 21 06:32:58 [host] sshd[7832]: pam_unix(sshd:a	2020-04-21 13:35:16
139.199.59.31	attackbots	Mar 22 05:12:30 webhost01 sshd[3418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 Mar 22 05:12:32 webhost01 sshd[3418]: Failed password for invalid user stewart from 139.199.59.31 port 33534 ssh2 ...	2020-03-22 06:37:03
139.199.59.31	attackbots	Mar 16 12:56:02 vps46666688 sshd[16956]: Failed password for root from 139.199.59.31 port 65252 ssh2 ...	2020-03-17 05:01:23

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.59.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61215
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.59.3.			IN	A

;; AUTHORITY SECTION:
.			561	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010200 1800 900 604800 86400

;; Query time: 413 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 03 02:43:26 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 3.59.199.139.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 3.59.199.139.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
195.154.29.107	attackspam	195.154.29.107 - - [02/Jun/2020:05:51:46 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 195.154.29.107 - - [02/Jun/2020:06:00:04 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-06-02 14:36:19
193.70.13.31	attack	Jun 2 05:53:22 nextcloud sshd\[7812\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.13.31 user=sshd Jun 2 05:53:24 nextcloud sshd\[7812\]: Failed password for sshd from 193.70.13.31 port 38644 ssh2 Jun 2 05:53:26 nextcloud sshd\[7812\]: Failed password for sshd from 193.70.13.31 port 38644 ssh2	2020-06-02 14:09:28
64.202.184.71	attackbotsspam	::ffff:64.202.184.71 - - [02/Jun/2020:03:48:51 +0200] "www.ruhnke.cloud" "POST /wp-login.php HTTP/1.1" 200 4986 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" ::ffff:64.202.184.71 - - [02/Jun/2020:03:48:54 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php HTTP/1.1" 200 291 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" ::ffff:64.202.184.71 - - [02/Jun/2020:03:48:54 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php HTTP/1.1" 200 291 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" ::ffff:64.202.184.71 - - [02/Jun/2020:07:28:19 +0200] "www.ruhnke.cloud" "POST /wp-login.php HTTP/1.1" 200 4986 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" ...	2020-06-02 14:19:11
222.186.173.201	attackspam	2020-06-02T09:15:43.909739afi-git.jinr.ru sshd[24863]: Failed password for root from 222.186.173.201 port 40126 ssh2 2020-06-02T09:15:47.079432afi-git.jinr.ru sshd[24863]: Failed password for root from 222.186.173.201 port 40126 ssh2 2020-06-02T09:15:49.666122afi-git.jinr.ru sshd[24863]: Failed password for root from 222.186.173.201 port 40126 ssh2 2020-06-02T09:15:49.666260afi-git.jinr.ru sshd[24863]: error: maximum authentication attempts exceeded for root from 222.186.173.201 port 40126 ssh2 [preauth] 2020-06-02T09:15:49.666274afi-git.jinr.ru sshd[24863]: Disconnecting: Too many authentication failures [preauth] ...	2020-06-02 14:27:15
87.246.7.70	attackbots	Jun 2 08:31:38 relay postfix/smtpd\[8623\]: warning: unknown\[87.246.7.70\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 2 08:32:04 relay postfix/smtpd\[480\]: warning: unknown\[87.246.7.70\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 2 08:32:24 relay postfix/smtpd\[8623\]: warning: unknown\[87.246.7.70\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 2 08:32:51 relay postfix/smtpd\[18155\]: warning: unknown\[87.246.7.70\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 2 08:33:10 relay postfix/smtpd\[5000\]: warning: unknown\[87.246.7.70\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-06-02 14:39:08
91.185.186.213	attackbots	Jun 2 05:46:13 server sshd[11433]: Failed password for root from 91.185.186.213 port 35286 ssh2 Jun 2 05:49:47 server sshd[14057]: Failed password for root from 91.185.186.213 port 40004 ssh2 Jun 2 05:53:15 server sshd[16730]: Failed password for root from 91.185.186.213 port 44726 ssh2	2020-06-02 14:17:17
103.149.24.208	attack	SSH/22 MH Probe, BF, Hack -	2020-06-02 14:36:46
118.25.144.49	attackspambots	Jun 2 07:56:55 eventyay sshd[30858]: Failed password for root from 118.25.144.49 port 42240 ssh2 Jun 2 08:01:02 eventyay sshd[30977]: Failed password for root from 118.25.144.49 port 39108 ssh2 ...	2020-06-02 14:37:32
218.92.0.173	attackspambots	Jun 2 06:59:05 combo sshd[17861]: Failed password for root from 218.92.0.173 port 20320 ssh2 Jun 2 06:59:08 combo sshd[17861]: Failed password for root from 218.92.0.173 port 20320 ssh2 Jun 2 06:59:12 combo sshd[17861]: Failed password for root from 218.92.0.173 port 20320 ssh2 ...	2020-06-02 14:09:04
70.65.174.69	attackbotsspam	SSH invalid-user multiple login try	2020-06-02 14:10:13
40.83.92.142	attackspambots	2020-06-02T05:52:18.981724centos sshd[22265]: Failed password for root from 40.83.92.142 port 53908 ssh2 2020-06-02T05:53:08.242352centos sshd[22322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.83.92.142 user=root 2020-06-02T05:53:10.786045centos sshd[22322]: Failed password for root from 40.83.92.142 port 36822 ssh2 ...	2020-06-02 14:20:11
72.80.30.200	attack	Unauthorized access or intrusion attempt detected from Thor banned IP	2020-06-02 14:06:23
106.52.109.185	attackspambots	Jun 2 06:51:28 jane sshd[18573]: Failed password for root from 106.52.109.185 port 37386 ssh2 ...	2020-06-02 14:23:30
101.26.254.162	attack	Unauthorized SSH login attempts	2020-06-02 14:40:50
112.85.42.173	attackbots	Jun 2 07:35:36 combo sshd[20499]: Failed password for root from 112.85.42.173 port 57802 ssh2 Jun 2 07:35:40 combo sshd[20499]: Failed password for root from 112.85.42.173 port 57802 ssh2 Jun 2 07:35:43 combo sshd[20499]: Failed password for root from 112.85.42.173 port 57802 ssh2 ...	2020-06-02 14:40:32

最近上报的IP列表

5.38.111.48	132.232.59.2	93.177.171.90	87.92.118.69
96.3.5.193	153.91.207.145	13.82.186.2	168.223.131.202
13.76.98.1	125.212.233.5	124.41.193.2	13.52.76.9
124.239.191.1	124.127.133.1	68.237.177.16	52.244.96.95
123.207.14.7	187.144.28.192	96.253.163.3	119.174.214.12