必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Microsoft (China) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbotsspam
2019-11-02T04:25:00.244485ns547587 sshd\[9839\]: Invalid user user6 from 139.217.103.62 port 44654
2019-11-02T04:25:00.250099ns547587 sshd\[9839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62
2019-11-02T04:25:01.976781ns547587 sshd\[9839\]: Failed password for invalid user user6 from 139.217.103.62 port 44654 ssh2
2019-11-02T04:30:12.087998ns547587 sshd\[19661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62  user=root
2019-11-02T04:40:29.925215ns547587 sshd\[6923\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62  user=root
2019-11-02T04:40:32.188370ns547587 sshd\[6923\]: Failed password for root from 139.217.103.62 port 52950 ssh2
2019-11-02T04:45:49.224267ns547587 sshd\[17122\]: Invalid user godfrey from 139.217.103.62 port 36918
2019-11-02T04:45:49.230066ns547587 sshd\[17122\]: pam_unix\(sshd:auth\): auth
...
2019-11-03 02:33:41
attackspam
Oct 21 16:26:15 MK-Soft-Root1 sshd[22940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62 
Oct 21 16:26:17 MK-Soft-Root1 sshd[22940]: Failed password for invalid user scb from 139.217.103.62 port 54476 ssh2
...
2019-10-21 22:39:17
attackbots
Oct 18 15:48:44 legacy sshd[11453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62
Oct 18 15:48:46 legacy sshd[11453]: Failed password for invalid user ts3 from 139.217.103.62 port 42392 ssh2
Oct 18 15:54:31 legacy sshd[11575]: Failed password for root from 139.217.103.62 port 36068 ssh2
...
2019-10-18 22:06:53
attackspambots
Oct 10 09:22:07 dedicated sshd[22877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62  user=root
Oct 10 09:22:09 dedicated sshd[22877]: Failed password for root from 139.217.103.62 port 40308 ssh2
2019-10-10 15:35:16
attackbots
Sep 28 14:26:46 friendsofhawaii sshd\[25162\]: Invalid user yg from 139.217.103.62
Sep 28 14:26:46 friendsofhawaii sshd\[25162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62
Sep 28 14:26:48 friendsofhawaii sshd\[25162\]: Failed password for invalid user yg from 139.217.103.62 port 42734 ssh2
Sep 28 14:31:05 friendsofhawaii sshd\[25559\]: Invalid user dwairiuko from 139.217.103.62
Sep 28 14:31:05 friendsofhawaii sshd\[25559\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62
2019-09-29 08:44:36
attack
Sep 24 04:38:06 amida sshd[198976]: Invalid user lw from 139.217.103.62
Sep 24 04:38:06 amida sshd[198976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62 
Sep 24 04:38:08 amida sshd[198976]: Failed password for invalid user lw from 139.217.103.62 port 43240 ssh2
Sep 24 04:38:09 amida sshd[198976]: Received disconnect from 139.217.103.62: 11: Bye Bye [preauth]
Sep 24 04:55:03 amida sshd[209612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62  user=ftp
Sep 24 04:55:05 amida sshd[209612]: Failed password for ftp from 139.217.103.62 port 55534 ssh2
Sep 24 04:55:05 amida sshd[209612]: Received disconnect from 139.217.103.62: 11: Bye Bye [preauth]
Sep 24 04:57:20 amida sshd[210572]: Invalid user both from 139.217.103.62
Sep 24 04:57:20 amida sshd[210572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62 
Sep 24 ........
-------------------------------
2019-09-24 20:01:31
attack
Sep 13 22:25:15 MK-Soft-VM5 sshd\[25734\]: Invalid user metra from 139.217.103.62 port 45802
Sep 13 22:25:15 MK-Soft-VM5 sshd\[25734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62
Sep 13 22:25:17 MK-Soft-VM5 sshd\[25734\]: Failed password for invalid user metra from 139.217.103.62 port 45802 ssh2
...
2019-09-14 06:41:51
相同子网IP讨论:
IP 类型 评论内容 时间
139.217.103.44 attack
Jul 22 08:57:28 gw1 sshd[28488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.44
Jul 22 08:57:29 gw1 sshd[28488]: Failed password for invalid user ron from 139.217.103.44 port 40088 ssh2
...
2020-07-22 13:55:43
139.217.103.44 attackbots
Jul 12 05:49:09 raspberrypi sshd[16967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.44 
Jul 12 05:49:11 raspberrypi sshd[16967]: Failed password for invalid user blinda from 139.217.103.44 port 43480 ssh2
...
2020-07-12 18:23:03
139.217.103.44 attackbots
2020-07-07T12:51:09.459130mail.csmailer.org sshd[6286]: Failed password for root from 139.217.103.44 port 36088 ssh2
2020-07-07T12:52:48.325671mail.csmailer.org sshd[6375]: Invalid user System from 139.217.103.44 port 44858
2020-07-07T12:52:48.328475mail.csmailer.org sshd[6375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.44
2020-07-07T12:52:48.325671mail.csmailer.org sshd[6375]: Invalid user System from 139.217.103.44 port 44858
2020-07-07T12:52:50.949413mail.csmailer.org sshd[6375]: Failed password for invalid user System from 139.217.103.44 port 44858 ssh2
...
2020-07-07 20:50:37
139.217.103.240 attackbotsspam
Oct 25 09:15:45 rotator sshd\[2644\]: Invalid user geography from 139.217.103.240Oct 25 09:15:47 rotator sshd\[2644\]: Failed password for invalid user geography from 139.217.103.240 port 51258 ssh2Oct 25 09:20:18 rotator sshd\[3405\]: Invalid user kk from 139.217.103.240Oct 25 09:20:20 rotator sshd\[3405\]: Failed password for invalid user kk from 139.217.103.240 port 57208 ssh2Oct 25 09:25:05 rotator sshd\[3490\]: Invalid user wpyan from 139.217.103.240Oct 25 09:25:07 rotator sshd\[3490\]: Failed password for invalid user wpyan from 139.217.103.240 port 34958 ssh2
...
2019-10-25 15:27:41
139.217.103.92 attackbotsspam
Caught in portsentry honeypot
2019-07-26 03:18:08
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.217.103.62
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47798
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.217.103.62.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091302 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Sep 14 06:41:45 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 62.103.217.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 62.103.217.139.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
51.91.250.68 attackbots
Scanning random ports - tries to find possible vulnerable services
2019-11-02 05:57:49
46.38.144.17 attackspam
Nov  1 22:57:25 webserver postfix/smtpd\[18372\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  1 22:58:36 webserver postfix/smtpd\[20163\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  1 22:59:47 webserver postfix/smtpd\[20163\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  1 23:00:57 webserver postfix/smtpd\[18372\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  1 23:02:08 webserver postfix/smtpd\[18372\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2019-11-02 06:02:56
106.13.65.210 attackspam
SSH bruteforce (Triggered fail2ban)
2019-11-02 05:47:48
45.141.84.28 attackbots
Excessive Port-Scanning
2019-11-02 05:50:50
185.80.54.153 attack
slow and persistent scanner
2019-11-02 05:41:20
51.75.254.196 attack
Nov  1 18:21:18 firewall sshd[7763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.254.196
Nov  1 18:21:18 firewall sshd[7763]: Invalid user uukks from 51.75.254.196
Nov  1 18:21:20 firewall sshd[7763]: Failed password for invalid user uukks from 51.75.254.196 port 60104 ssh2
...
2019-11-02 05:34:34
78.46.86.18 attackbots
Automatic report - XMLRPC Attack
2019-11-02 05:54:14
45.142.195.151 attackspam
2019-11-01T22:48:56.175193mail01 postfix/smtpd[26434]: warning: unknown[45.142.195.151]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-11-01T22:49:06.187619mail01 postfix/smtpd[26134]: warning: unknown[45.142.195.151]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-11-01T22:49:08.189116mail01 postfix/smtpd[306]: warning: unknown[45.142.195.151]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-11-02 05:55:05
61.219.149.166 attack
445/tcp 445/tcp 445/tcp
[2019-11-01]3pkt
2019-11-02 06:09:01
193.70.39.175 attackspambots
Nov  1 22:27:44 SilenceServices sshd[17894]: Failed password for root from 193.70.39.175 port 38452 ssh2
Nov  1 22:37:06 SilenceServices sshd[27559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.39.175
Nov  1 22:37:08 SilenceServices sshd[27559]: Failed password for invalid user ovhuser from 193.70.39.175 port 50908 ssh2
2019-11-02 05:48:10
42.115.11.81 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-02 06:04:19
190.200.96.141 attackbotsspam
445/tcp
[2019-11-01]1pkt
2019-11-02 06:07:18
14.162.24.45 attack
445/tcp
[2019-11-01]1pkt
2019-11-02 05:37:17
41.184.42.202 attackbots
port scan and connect, tcp 1433 (ms-sql-s)
2019-11-02 05:58:58
101.108.132.0 attackbots
23/tcp
[2019-11-01]1pkt
2019-11-02 05:40:51

最近上报的IP列表

5.228.13.197 113.12.195.50 135.164.51.253 187.156.200.61
43.248.8.156 142.44.139.90 92.98.203.79 151.80.26.211
201.158.60.62 113.141.70.198 49.49.244.52 133.173.224.88
32.190.49.80 202.114.184.229 175.78.154.35 70.183.195.146
178.184.160.13 160.187.78.59 2a00:d680:30:50::67 41.50.83.201