必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): India

运营商(isp): Digital Ocean Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Automatic report - Port Scan
2020-03-17 05:39:38
attackspam
Mar 11 16:05:50 gw1 sshd[31193]: Failed password for root from 139.59.0.243 port 37976 ssh2
...
2020-03-11 22:32:54
attack
Automatic report - SSH Brute-Force Attack
2020-03-07 18:47:55
attackspam
Mar  6 11:24:13 gw1 sshd[25897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.0.243
Mar  6 11:24:16 gw1 sshd[25897]: Failed password for invalid user shiqian from 139.59.0.243 port 48950 ssh2
...
2020-03-06 14:32:25
attackbotsspam
Feb 17 14:32:50 plex sshd[825]: Invalid user admin from 139.59.0.243 port 53990
2020-02-18 04:48:16
attackbotsspam
Brute force attempt
2020-02-10 15:54:40
attack
Feb  5 14:49:48 pornomens sshd\[9046\]: Invalid user dspace from 139.59.0.243 port 46166
Feb  5 14:49:48 pornomens sshd\[9046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.0.243
Feb  5 14:49:49 pornomens sshd\[9046\]: Failed password for invalid user dspace from 139.59.0.243 port 46166 ssh2
...
2020-02-05 22:23:33
attackbots
Invalid user dave from 139.59.0.243 port 46400
2020-02-02 07:46:04
attack
Jan 28 16:15:09 MK-Soft-VM6 sshd[28359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.0.243 
Jan 28 16:15:11 MK-Soft-VM6 sshd[28359]: Failed password for invalid user shproject from 139.59.0.243 port 59530 ssh2
...
2020-01-28 23:16:22
attack
Jan 25 23:23:57 hcbbdb sshd\[14974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.0.243  user=root
Jan 25 23:23:58 hcbbdb sshd\[14974\]: Failed password for root from 139.59.0.243 port 56562 ssh2
Jan 25 23:27:11 hcbbdb sshd\[15406\]: Invalid user roger from 139.59.0.243
Jan 25 23:27:11 hcbbdb sshd\[15406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.0.243
Jan 25 23:27:12 hcbbdb sshd\[15406\]: Failed password for invalid user roger from 139.59.0.243 port 56384 ssh2
2020-01-26 07:30:17
attackbotsspam
Unauthorized connection attempt detected from IP address 139.59.0.243 to port 2220 [J]
2020-01-25 06:33:46
attack
Unauthorized connection attempt detected from IP address 139.59.0.243 to port 2220 [J]
2020-01-19 01:02:50
attackbotsspam
Unauthorized connection attempt detected from IP address 139.59.0.243 to port 2220 [J]
2020-01-18 03:41:14
attackspam
Unauthorized connection attempt detected from IP address 139.59.0.243 to port 2220 [J]
2020-01-17 02:50:16
attackspambots
Unauthorized connection attempt detected from IP address 139.59.0.243 to port 2220 [J]
2020-01-14 01:29:00
attackbotsspam
Unauthorized connection attempt detected from IP address 139.59.0.243 to port 2220 [J]
2020-01-12 00:06:45
attack
Dec 20 17:31:22 game-panel sshd[3135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.0.243
Dec 20 17:31:24 game-panel sshd[3135]: Failed password for invalid user kaden from 139.59.0.243 port 59208 ssh2
Dec 20 17:37:29 game-panel sshd[3370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.0.243
2019-12-21 01:53:45
attack
Dec 18 01:26:24 ArkNodeAT sshd\[25799\]: Invalid user mara from 139.59.0.243
Dec 18 01:26:24 ArkNodeAT sshd\[25799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.0.243
Dec 18 01:26:26 ArkNodeAT sshd\[25799\]: Failed password for invalid user mara from 139.59.0.243 port 53676 ssh2
2019-12-18 09:01:37
attackbots
Dec 14 09:39:30 vps647732 sshd[32178]: Failed password for root from 139.59.0.243 port 51394 ssh2
Dec 14 09:45:50 vps647732 sshd[32412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.0.243
...
2019-12-14 19:40:41
attackbots
Dec 13 18:17:36 meumeu sshd[22230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.0.243 
Dec 13 18:17:38 meumeu sshd[22230]: Failed password for invalid user ftp from 139.59.0.243 port 47468 ssh2
Dec 13 18:24:14 meumeu sshd[23224]: Failed password for root from 139.59.0.243 port 56956 ssh2
...
2019-12-14 01:51:02
attackbots
Dec 10 08:28:11 mail sshd[974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.0.243 
Dec 10 08:28:13 mail sshd[974]: Failed password for invalid user maxiaoli from 139.59.0.243 port 37444 ssh2
Dec 10 08:34:12 mail sshd[2689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.0.243
2019-12-10 16:06:09
相同子网IP讨论:
IP 类型 评论内容 时间
139.59.0.96 attackspambots
 TCP (SYN) 139.59.0.96:43611 -> port 16986, len 44
2020-07-07 16:12:27
139.59.0.96 attackspam
May 28 17:28:22 debian-2gb-nbg1-2 kernel: \[12938491.471257\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=139.59.0.96 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=24141 PROTO=TCP SPT=41434 DPT=7013 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-29 00:44:48
139.59.0.96 attackspam
" "
2020-05-24 22:26:16
139.59.0.96 attackspambots
May 22 05:57:14 debian-2gb-nbg1-2 kernel: \[12378653.377579\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=139.59.0.96 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=50713 PROTO=TCP SPT=55494 DPT=11544 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-22 13:40:58
139.59.0.90 attackbotsspam
Invalid user octavia from 139.59.0.90 port 48830
2020-03-26 14:04:53
139.59.0.90 attackbotsspam
SSH login attempts @ 2020-03-20 22:29:05
2020-03-22 01:48:35
139.59.0.90 attackspambots
SSH brute force
2020-03-14 08:23:00
139.59.0.90 attackspambots
2020-03-12T16:17:24.150677abusebot-5.cloudsearch.cf sshd[19654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=blr.btrnaidu.com  user=root
2020-03-12T16:17:26.541707abusebot-5.cloudsearch.cf sshd[19654]: Failed password for root from 139.59.0.90 port 46854 ssh2
2020-03-12T16:19:48.682893abusebot-5.cloudsearch.cf sshd[19717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=blr.btrnaidu.com  user=root
2020-03-12T16:19:50.842700abusebot-5.cloudsearch.cf sshd[19717]: Failed password for root from 139.59.0.90 port 54060 ssh2
2020-03-12T16:24:16.970154abusebot-5.cloudsearch.cf sshd[19906]: Invalid user fjseclib from 139.59.0.90 port 33050
2020-03-12T16:24:16.976868abusebot-5.cloudsearch.cf sshd[19906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=blr.btrnaidu.com
2020-03-12T16:24:16.970154abusebot-5.cloudsearch.cf sshd[19906]: Invalid user fjseclib from 139.59.0.90 por
...
2020-03-13 01:12:30
139.59.0.90 attackspambots
2020-03-04T00:08:01.066643vps751288.ovh.net sshd\[13006\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=blr.btrnaidu.com  user=root
2020-03-04T00:08:03.420897vps751288.ovh.net sshd\[13006\]: Failed password for root from 139.59.0.90 port 54626 ssh2
2020-03-04T00:15:32.482107vps751288.ovh.net sshd\[13110\]: Invalid user ts6 from 139.59.0.90 port 58974
2020-03-04T00:15:32.490753vps751288.ovh.net sshd\[13110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=blr.btrnaidu.com
2020-03-04T00:15:34.760292vps751288.ovh.net sshd\[13110\]: Failed password for invalid user ts6 from 139.59.0.90 port 58974 ssh2
2020-03-04 08:41:08
139.59.0.90 attack
Invalid user shannon from 139.59.0.90 port 46694
2020-02-21 18:02:43
139.59.0.90 attack
Invalid user shannon from 139.59.0.90 port 46694
2020-02-20 14:29:30
139.59.0.90 attackspam
"SSH brute force auth login attempt."
2020-01-23 18:15:46
139.59.0.12 attackspam
Brute forcing Wordpress login
2019-08-13 12:41:29
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.0.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46006
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.0.243.			IN	A

;; AUTHORITY SECTION:
.			115	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121000 1800 900 604800 86400

;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 10 16:06:06 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
Host 243.0.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 243.0.59.139.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
99.34.232.58 attackbots
Lines containing failures of 99.34.232.58
Sep  7 10:40:27 nextcloud sshd[12520]: Invalid user pi from 99.34.232.58 port 50916
Sep  7 10:40:27 nextcloud sshd[12520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=99.34.232.58
Sep  7 10:40:27 nextcloud sshd[12522]: Invalid user pi from 99.34.232.58 port 50918
Sep  7 10:40:27 nextcloud sshd[12522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=99.34.232.58
Sep  7 10:40:29 nextcloud sshd[12520]: Failed password for invalid user pi from 99.34.232.58 port 50916 ssh2
Sep  7 10:40:29 nextcloud sshd[12520]: Connection closed by invalid user pi 99.34.232.58 port 50916 [preauth]
Sep  7 10:40:29 nextcloud sshd[12522]: Failed password for invalid user pi from 99.34.232.58 port 50918 ssh2
Sep  7 10:40:29 nextcloud sshd[12522]: Connection closed by invalid user pi 99.34.232.58 port 50918 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html
2020-09-07 18:13:55
87.255.25.165 attackbotsspam
2 VoIP Fraud Attacks in last 24 hours
2020-09-07 17:53:00
119.28.238.101 attackspam
Sep  6 23:34:31 web9 sshd\[8237\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.238.101  user=root
Sep  6 23:34:34 web9 sshd\[8237\]: Failed password for root from 119.28.238.101 port 55826 ssh2
Sep  6 23:37:15 web9 sshd\[8676\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.238.101  user=root
Sep  6 23:37:17 web9 sshd\[8676\]: Failed password for root from 119.28.238.101 port 40746 ssh2
Sep  6 23:40:05 web9 sshd\[9073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.238.101  user=root
2020-09-07 18:05:24
208.187.166.27 attack
2020-09-06 11:34:57.086827-0500  localhost smtpd[58132]: NOQUEUE: reject: RCPT from unknown[208.187.166.27]: 554 5.7.1 Service unavailable; Client host [208.187.166.27] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
2020-09-07 17:51:30
103.87.28.153 attackbotsspam
Time:     Mon Sep  7 11:15:48 2020 +0200
IP:       103.87.28.153 (IN/India/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep  7 10:54:29 mail-03 sshd[22582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.87.28.153  user=root
Sep  7 10:54:31 mail-03 sshd[22582]: Failed password for root from 103.87.28.153 port 57528 ssh2
Sep  7 11:11:27 mail-03 sshd[22822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.87.28.153  user=root
Sep  7 11:11:29 mail-03 sshd[22822]: Failed password for root from 103.87.28.153 port 57140 ssh2
Sep  7 11:15:46 mail-03 sshd[22910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.87.28.153  user=root
2020-09-07 17:54:08
162.247.74.213 attackspam
SSH login attempts.
2020-09-07 17:36:28
198.27.81.188 attack
12 attacks on PHP URLs:
198.27.81.188 - - [06/Sep/2020:17:55:57 +0100] "POST /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php HTTP/1.1" 403 9
2020-09-07 18:06:47
27.128.162.183 attackbotsspam
(sshd) Failed SSH login from 27.128.162.183 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  7 05:11:10 server sshd[32734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.128.162.183  user=root
Sep  7 05:11:11 server sshd[32734]: Failed password for root from 27.128.162.183 port 39515 ssh2
Sep  7 05:21:02 server sshd[4415]: Invalid user grafana from 27.128.162.183 port 49215
Sep  7 05:21:05 server sshd[4415]: Failed password for invalid user grafana from 27.128.162.183 port 49215 ssh2
Sep  7 05:24:51 server sshd[5429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.128.162.183  user=root
2020-09-07 17:54:19
36.66.151.17 attack
Automatic Fail2ban report - Trying login SSH
2020-09-07 18:04:48
183.136.222.142 attackspam
Lines containing failures of 183.136.222.142
Sep  6 18:54:07 neweola sshd[12519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.136.222.142  user=r.r
Sep  6 18:54:08 neweola sshd[12519]: Failed password for r.r from 183.136.222.142 port 54546 ssh2
Sep  6 18:54:09 neweola sshd[12519]: Received disconnect from 183.136.222.142 port 54546:11: Bye Bye [preauth]
Sep  6 18:54:09 neweola sshd[12519]: Disconnected from authenticating user r.r 183.136.222.142 port 54546 [preauth]
Sep  6 18:59:05 neweola sshd[12603]: Invalid user oracle from 183.136.222.142 port 24538
Sep  6 18:59:05 neweola sshd[12603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.136.222.142 
Sep  6 18:59:07 neweola sshd[12603]: Failed password for invalid user oracle from 183.136.222.142 port 24538 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=183.136.222.142
2020-09-07 17:41:27
106.12.173.236 attackspam
Sep  7 11:37:04 nuernberg-4g-01 sshd[5317]: Failed password for root from 106.12.173.236 port 56025 ssh2
Sep  7 11:39:06 nuernberg-4g-01 sshd[5975]: Failed password for root from 106.12.173.236 port 41434 ssh2
2020-09-07 17:59:21
58.182.119.33 attack
Port 22 Scan, PTR: None
2020-09-07 18:14:26
106.75.123.95 attackspambots
Scanning for:
Monero.Servers
Bladabindi.Botnet
Gh0st.Rat.Botnet
Ganiw.Botnet
2020-09-07 18:00:32
92.222.75.80 attackspam
Sep  7 09:21:44 root sshd[11636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.75.80 
...
2020-09-07 17:44:54
64.91.247.113 attack
Sep  7 11:22:13 theomazars sshd[27984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.91.247.113  user=root
Sep  7 11:22:15 theomazars sshd[27984]: Failed password for root from 64.91.247.113 port 36454 ssh2
2020-09-07 17:48:51

最近上报的IP列表

252.61.203.61 122.51.112.109 132.15.103.134 134.175.11.179
138.207.146.246 45.224.105.135 11.186.96.235 125.74.27.31
219.139.154.29 129.204.105.244 140.143.207.171 62.210.232.250
180.247.234.3 123.180.2.92 222.232.45.129 159.138.151.224
124.156.105.251 58.215.215.134 14.174.236.42 35.157.76.164