必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Beijing

省份(region): Beijing

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): Shanghai Blue Cloud Technology Co.,Ltd

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
139.219.140.60 attack
Mar 31 01:48:56 vps sshd[269848]: Failed password for root from 139.219.140.60 port 37932 ssh2
Mar 31 01:52:27 vps sshd[290396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.140.60  user=root
Mar 31 01:52:29 vps sshd[290396]: Failed password for root from 139.219.140.60 port 33290 ssh2
Mar 31 01:56:08 vps sshd[311274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.140.60  user=root
Mar 31 01:56:10 vps sshd[311274]: Failed password for root from 139.219.140.60 port 54292 ssh2
...
2020-03-31 08:59:40
139.219.140.60 attackspambots
2020-03-28T12:29:23.601490ldap.arvenenaske.de sshd[106299]: Connection from 139.219.140.60 port 36424 on 5.199.128.55 port 22 rdomain ""
2020-03-28T12:29:25.243782ldap.arvenenaske.de sshd[106299]: Invalid user ed from 139.219.140.60 port 36424
2020-03-28T12:29:25.249738ldap.arvenenaske.de sshd[106299]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.140.60 user=ed
2020-03-28T12:29:25.250555ldap.arvenenaske.de sshd[106299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.140.60
2020-03-28T12:29:23.601490ldap.arvenenaske.de sshd[106299]: Connection from 139.219.140.60 port 36424 on 5.199.128.55 port 22 rdomain ""
2020-03-28T12:29:25.243782ldap.arvenenaske.de sshd[106299]: Invalid user ed from 139.219.140.60 port 36424
2020-03-28T12:29:27.642535ldap.arvenenaske.de sshd[106299]: Failed password for invalid user ed from 139.219.140.60 port 36424 ssh2
2020-03-28T12:36:33.735048ldap.a........
------------------------------
2020-03-28 22:25:15
139.219.143.176 attack
Feb 12 15:51:36 firewall sshd[28842]: Invalid user disney from 139.219.143.176
Feb 12 15:51:39 firewall sshd[28842]: Failed password for invalid user disney from 139.219.143.176 port 19928 ssh2
Feb 12 15:55:03 firewall sshd[29019]: Invalid user sabiya from 139.219.143.176
...
2020-02-13 05:03:14
139.219.143.176 attackbots
Jan 11 15:01:00 mout sshd[22360]: Invalid user 2wsx3edc from 139.219.143.176 port 36501
2020-01-11 22:35:27
139.219.143.176 attackspambots
Dec 27 14:39:20 raspberrypi sshd\[28372\]: Invalid user stokoe from 139.219.143.176Dec 27 14:39:23 raspberrypi sshd\[28372\]: Failed password for invalid user stokoe from 139.219.143.176 port 22672 ssh2Dec 27 14:52:19 raspberrypi sshd\[29526\]: Failed password for mysql from 139.219.143.176 port 57537 ssh2
...
2019-12-27 23:35:37
139.219.14.12 attackspam
Invalid user kissee from 139.219.14.12 port 57930
2019-12-19 04:48:33
139.219.14.12 attack
Dec 14 20:40:39 hosting sshd[3956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.14.12  user=root
Dec 14 20:40:41 hosting sshd[3956]: Failed password for root from 139.219.14.12 port 45446 ssh2
...
2019-12-15 04:06:46
139.219.143.176 attackbotsspam
sshd jail - ssh hack attempt
2019-12-11 04:53:47
139.219.14.12 attack
Dec 10 12:51:05 server sshd\[27600\]: Invalid user schnur from 139.219.14.12
Dec 10 12:51:05 server sshd\[27600\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.14.12 
Dec 10 12:51:07 server sshd\[27600\]: Failed password for invalid user schnur from 139.219.14.12 port 41286 ssh2
Dec 10 13:22:45 server sshd\[4359\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.14.12  user=mysql
Dec 10 13:22:47 server sshd\[4359\]: Failed password for mysql from 139.219.14.12 port 38148 ssh2
...
2019-12-10 22:12:20
139.219.143.176 attack
$f2bV_matches
2019-12-05 04:07:10
139.219.143.176 attack
ssh failed login
2019-12-02 21:33:36
139.219.143.176 attackspambots
[Aegis] @ 2019-11-30 14:36:47  0000 -> Multiple authentication failures.
2019-12-01 00:07:13
139.219.143.176 attackspam
Nov 28 11:50:11 server sshd\[18425\]: Invalid user test from 139.219.143.176
Nov 28 11:50:11 server sshd\[18425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.143.176 
Nov 28 11:50:13 server sshd\[18425\]: Failed password for invalid user test from 139.219.143.176 port 49903 ssh2
Nov 28 12:02:05 server sshd\[21409\]: Invalid user backup from 139.219.143.176
Nov 28 12:02:05 server sshd\[21409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.143.176 
...
2019-11-28 18:07:22
139.219.14.12 attack
SSH login attempt with user guest
2019-11-24 18:15:35
139.219.14.12 attackspam
Nov 23 18:07:24 microserver sshd[57127]: Invalid user asterisk from 139.219.14.12 port 42578
Nov 23 18:07:24 microserver sshd[57127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.14.12
Nov 23 18:07:26 microserver sshd[57127]: Failed password for invalid user asterisk from 139.219.14.12 port 42578 ssh2
Nov 23 18:11:44 microserver sshd[57755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.14.12  user=root
Nov 23 18:11:46 microserver sshd[57755]: Failed password for root from 139.219.14.12 port 45332 ssh2
Nov 23 18:23:44 microserver sshd[59184]: Invalid user melle from 139.219.14.12 port 53580
Nov 23 18:23:44 microserver sshd[59184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.14.12
Nov 23 18:23:47 microserver sshd[59184]: Failed password for invalid user melle from 139.219.14.12 port 53580 ssh2
Nov 23 18:27:47 microserver sshd[59789]: pam_unix(sshd:auth): authe
2019-11-23 23:08:07
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.219.14.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22387
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.219.14.130.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042701 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Apr 28 02:23:34 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:
Host 130.14.219.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 130.14.219.139.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
104.219.250.214 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-10-29 21:37:32
80.79.179.2 attackspambots
Oct 29 13:54:44 localhost sshd\[29303\]: Invalid user wuhuan from 80.79.179.2 port 32842
Oct 29 13:54:44 localhost sshd\[29303\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.79.179.2
Oct 29 13:54:46 localhost sshd\[29303\]: Failed password for invalid user wuhuan from 80.79.179.2 port 32842 ssh2
2019-10-29 21:16:16
218.17.185.45 attackbotsspam
2019-10-29T14:31:46.152438scmdmz1 sshd\[8907\]: Invalid user Pierre_123 from 218.17.185.45 port 33486
2019-10-29T14:31:46.155062scmdmz1 sshd\[8907\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.17.185.45
2019-10-29T14:31:48.177472scmdmz1 sshd\[8907\]: Failed password for invalid user Pierre_123 from 218.17.185.45 port 33486 ssh2
...
2019-10-29 21:40:47
220.246.160.140 attackspam
firewall-block, port(s): 5555/tcp
2019-10-29 21:12:24
201.241.158.75 attackspam
Port Scan
2019-10-29 21:38:02
104.199.52.136 attackspambots
firewall-block, port(s): 5900/tcp
2019-10-29 21:22:31
104.245.145.13 attackbots
rfi injection: ftp://sergievs:sergievs@sergievs.50webs.org/envi.php?
2019-10-29 21:38:39
179.222.2.64 attackbots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/179.222.2.64/ 
 
 BR - 1H : (404)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : BR 
 NAME ASN : ASN28573 
 
 IP : 179.222.2.64 
 
 CIDR : 179.222.0.0/17 
 
 PREFIX COUNT : 1254 
 
 UNIQUE IP COUNT : 9653760 
 
 
 ATTACKS DETECTED ASN28573 :  
  1H - 3 
  3H - 4 
  6H - 8 
 12H - 12 
 24H - 26 
 
 DateTime : 2019-10-29 12:40:22 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-29 21:12:45
92.63.194.17 attackbotsspam
Oct 29 14:05:43 mc1 kernel: \[3640669.309630\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.63.194.17 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=60530 PROTO=TCP SPT=44083 DPT=3387 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 29 14:09:21 mc1 kernel: \[3640887.430555\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.63.194.17 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=6490 PROTO=TCP SPT=44075 DPT=3393 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 29 14:11:09 mc1 kernel: \[3640995.886017\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.63.194.17 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=65306 PROTO=TCP SPT=44079 DPT=8389 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-10-29 21:33:15
115.68.220.10 attack
2019-10-29T14:23:43.276538scmdmz1 sshd\[7977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.68.220.10  user=root
2019-10-29T14:23:44.992707scmdmz1 sshd\[7977\]: Failed password for root from 115.68.220.10 port 47612 ssh2
2019-10-29T14:27:40.708050scmdmz1 sshd\[8288\]: Invalid user homework from 115.68.220.10 port 50818
...
2019-10-29 21:39:58
203.177.60.238 attackspam
DATE:2019-10-29 12:40:02, IP:203.177.60.238, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2019-10-29 21:36:11
115.225.167.108 attack
port scan and connect, tcp 23 (telnet)
2019-10-29 21:42:29
94.23.253.88 attackbotsspam
\[2019-10-29 08:58:34\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '94.23.253.88:50783' - Wrong password
\[2019-10-29 08:58:34\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-29T08:58:34.362-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4641",SessionID="0x7fdf2cbe2b48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/94.23.253.88/50783",Challenge="306c362e",ReceivedChallenge="306c362e",ReceivedHash="8b3c1b06187a152f09349b6eb2edce46"
\[2019-10-29 09:06:07\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '94.23.253.88:50466' - Wrong password
\[2019-10-29 09:06:07\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-29T09:06:07.161-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4642",SessionID="0x7fdf2cc7a718",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/94.23.253.88
2019-10-29 21:17:53
54.37.129.235 attack
Oct 29 14:11:41 vps666546 sshd\[27997\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.129.235  user=root
Oct 29 14:11:42 vps666546 sshd\[27997\]: Failed password for root from 54.37.129.235 port 48024 ssh2
Oct 29 14:15:41 vps666546 sshd\[28087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.129.235  user=root
Oct 29 14:15:43 vps666546 sshd\[28087\]: Failed password for root from 54.37.129.235 port 59920 ssh2
Oct 29 14:19:33 vps666546 sshd\[28188\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.129.235  user=root
...
2019-10-29 21:21:49
42.114.12.124 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 29-10-2019 11:40:31.
2019-10-29 21:03:59

最近上报的IP列表

106.13.41.228 94.70.111.157 98.92.236.111 46.193.4.27
111.41.253.90 146.185.157.195 199.249.230.74 203.245.122.254
108.60.32.168 223.255.127.77 115.59.185.225 77.137.153.30
80.124.250.199 45.104.58.187 202.225.103.107 200.54.218.188
45.125.108.231 93.75.145.234 42.235.62.120 82.192.38.81