139.59.0.12 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): India

运营商(isp): Digital Ocean Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Brute forcing Wordpress login	2019-08-13 12:41:29

相同子网IP讨论:

IP	类型	评论内容	时间
139.59.0.96	attackspambots	TCP (SYN) 139.59.0.96:43611 -> port 16986, len 44	2020-07-07 16:12:27
139.59.0.96	attackspam	May 28 17:28:22 debian-2gb-nbg1-2 kernel: \[12938491.471257\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=139.59.0.96 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=24141 PROTO=TCP SPT=41434 DPT=7013 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-29 00:44:48
139.59.0.96	attackspam	" "	2020-05-24 22:26:16
139.59.0.96	attackspambots	May 22 05:57:14 debian-2gb-nbg1-2 kernel: \[12378653.377579\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=139.59.0.96 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=50713 PROTO=TCP SPT=55494 DPT=11544 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-22 13:40:58
139.59.0.90	attackbotsspam	Invalid user octavia from 139.59.0.90 port 48830	2020-03-26 14:04:53
139.59.0.90	attackbotsspam	SSH login attempts @ 2020-03-20 22:29:05	2020-03-22 01:48:35
139.59.0.243	attack	Automatic report - Port Scan	2020-03-17 05:39:38
139.59.0.90	attackspambots	SSH brute force	2020-03-14 08:23:00
139.59.0.90	attackspambots	2020-03-12T16:17:24.150677abusebot-5.cloudsearch.cf sshd[19654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=blr.btrnaidu.com user=root 2020-03-12T16:17:26.541707abusebot-5.cloudsearch.cf sshd[19654]: Failed password for root from 139.59.0.90 port 46854 ssh2 2020-03-12T16:19:48.682893abusebot-5.cloudsearch.cf sshd[19717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=blr.btrnaidu.com user=root 2020-03-12T16:19:50.842700abusebot-5.cloudsearch.cf sshd[19717]: Failed password for root from 139.59.0.90 port 54060 ssh2 2020-03-12T16:24:16.970154abusebot-5.cloudsearch.cf sshd[19906]: Invalid user fjseclib from 139.59.0.90 port 33050 2020-03-12T16:24:16.976868abusebot-5.cloudsearch.cf sshd[19906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=blr.btrnaidu.com 2020-03-12T16:24:16.970154abusebot-5.cloudsearch.cf sshd[19906]: Invalid user fjseclib from 139.59.0.90 por ...	2020-03-13 01:12:30
139.59.0.243	attackspam	Mar 11 16:05:50 gw1 sshd[31193]: Failed password for root from 139.59.0.243 port 37976 ssh2 ...	2020-03-11 22:32:54
139.59.0.243	attack	Automatic report - SSH Brute-Force Attack	2020-03-07 18:47:55
139.59.0.243	attackspam	Mar 6 11:24:13 gw1 sshd[25897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.0.243 Mar 6 11:24:16 gw1 sshd[25897]: Failed password for invalid user shiqian from 139.59.0.243 port 48950 ssh2 ...	2020-03-06 14:32:25
139.59.0.90	attackspambots	2020-03-04T00:08:01.066643vps751288.ovh.net sshd\[13006\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=blr.btrnaidu.com user=root 2020-03-04T00:08:03.420897vps751288.ovh.net sshd\[13006\]: Failed password for root from 139.59.0.90 port 54626 ssh2 2020-03-04T00:15:32.482107vps751288.ovh.net sshd\[13110\]: Invalid user ts6 from 139.59.0.90 port 58974 2020-03-04T00:15:32.490753vps751288.ovh.net sshd\[13110\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=blr.btrnaidu.com 2020-03-04T00:15:34.760292vps751288.ovh.net sshd\[13110\]: Failed password for invalid user ts6 from 139.59.0.90 port 58974 ssh2	2020-03-04 08:41:08
139.59.0.90	attack	Invalid user shannon from 139.59.0.90 port 46694	2020-02-21 18:02:43
139.59.0.90	attack	Invalid user shannon from 139.59.0.90 port 46694	2020-02-20 14:29:30

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.0.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58298
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.0.12.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081201 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Aug 13 12:41:21 CST 2019
;; MSG SIZE  rcvd: 115

HOST信息:

Host 12.0.59.139.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 12.0.59.139.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
139.155.86.144	attack	Mar 9 20:34:52 sshd[23859]: Failed password for invalid user node from 139.155.86.144 port 33060 ssh2	2020-03-10 03:38:46
69.229.6.2	attackspam	Mar 9 21:50:50 master sshd[7265]: Failed password for root from 69.229.6.2 port 3351 ssh2	2020-03-10 03:31:25
185.36.81.78	attackspambots	Mar 9 19:46:30 srv01 postfix/smtpd\[32392\]: warning: unknown\[185.36.81.78\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 9 19:52:05 srv01 postfix/smtpd\[32392\]: warning: unknown\[185.36.81.78\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 9 19:53:49 srv01 postfix/smtpd\[13172\]: warning: unknown\[185.36.81.78\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 9 19:54:28 srv01 postfix/smtpd\[13172\]: warning: unknown\[185.36.81.78\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 9 20:00:06 srv01 postfix/smtpd\[16572\]: warning: unknown\[185.36.81.78\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-03-10 03:17:51
61.74.111.129	attack	Mar 9 03:12:06 admin sshd[10908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.74.111.129 user=r.r Mar 9 03:12:08 admin sshd[10908]: Failed password for r.r from 61.74.111.129 port 44728 ssh2 Mar 9 03:12:09 admin sshd[10908]: Received disconnect from 61.74.111.129 port 44728:11: Bye Bye [preauth] Mar 9 03:12:09 admin sshd[10908]: Disconnected from 61.74.111.129 port 44728 [preauth] Mar 9 03:19:54 admin sshd[11117]: Invalid user air from 61.74.111.129 port 43898 Mar 9 03:19:54 admin sshd[11117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.74.111.129 Mar 9 03:19:56 admin sshd[11117]: Failed password for invalid user air from 61.74.111.129 port 43898 ssh2 Mar 9 03:19:56 admin sshd[11117]: Received disconnect from 61.74.111.129 port 43898:11: Bye Bye [preauth] Mar 9 03:19:56 admin sshd[11117]: Disconnected from 61.74.111.129 port 43898 [preauth] ........ ----------------------------------------------- https://	2020-03-10 03:41:07
189.108.198.42	attackspambots	Mar 9 19:52:08 vps691689 sshd[19433]: Failed password for root from 189.108.198.42 port 34938 ssh2 Mar 9 19:59:15 vps691689 sshd[19534]: Failed password for root from 189.108.198.42 port 37654 ssh2 ...	2020-03-10 03:07:39
197.247.138.73	attack	Email rejected due to spam filtering	2020-03-10 03:27:48
62.234.74.29	attack	suspicious action Mon, 09 Mar 2020 15:40:04 -0300	2020-03-10 03:11:59
113.174.142.218	attackspambots	Email rejected due to spam filtering	2020-03-10 03:42:39
61.216.131.31	attackspambots	SSH authentication failure x 6 reported by Fail2Ban ...	2020-03-10 03:32:56
81.213.187.212	attack	$f2bV_matches	2020-03-10 03:25:04
92.240.200.240	attackspambots	Chat Spam	2020-03-10 03:22:58
123.138.18.35	attack	Jan 3 15:52:42 ms-srv sshd[20326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.138.18.35 Jan 3 15:52:44 ms-srv sshd[20326]: Failed password for invalid user ubuntu from 123.138.18.35 port 53470 ssh2	2020-03-10 03:39:52
139.198.255.55	attack	SSH Bruteforce attempt	2020-03-10 03:39:16
85.186.38.228	attackbotsspam	Mar 9 15:29:07 server sshd\[23054\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.186.38.228 user=root Mar 9 15:29:09 server sshd\[23054\]: Failed password for root from 85.186.38.228 port 52370 ssh2 Mar 9 15:42:05 server sshd\[26201\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.186.38.228 user=root Mar 9 15:42:08 server sshd\[26201\]: Failed password for root from 85.186.38.228 port 52790 ssh2 Mar 9 16:20:46 server sshd\[3119\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.186.38.228 user=root ...	2020-03-10 03:37:00
123.16.68.83	attackbots	Email rejected due to spam filtering	2020-03-10 03:45:36

最近上报的IP列表

97.213.6.131	80.232.220.79	138.77.73.160	139.184.108.83
73.200.46.10	78.46.33.203	89.185.187.209	63.194.62.118
201.3.102.238	156.51.82.15	71.188.108.38	40.235.235.7
52.183.149.24	35.145.238.225	178.244.70.76	95.189.14.248
67.227.237.176	69.196.86.109	252.85.48.9	129.243.175.46