必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): Digital Ocean Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspambots
May 17 11:53:33 server sshd\[116832\]: Invalid user appuser from 139.59.1.138
May 17 11:53:33 server sshd\[116832\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.1.138
May 17 11:53:35 server sshd\[116832\]: Failed password for invalid user appuser from 139.59.1.138 port 49178 ssh2
...
2019-07-12 07:40:34
相同子网IP讨论:
IP 类型 评论内容 时间
139.59.157.225 attackproxy
Brute-force attacker IP
2024-06-13 12:39:38
139.59.173.205 attack
Fraud connect
2024-05-12 23:34:25
139.59.11.31 attackproxy
, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
2023-01-16 21:48:53
139.59.108.225 attackspam
Oct 13 23:27:26 vps647732 sshd[5538]: Failed password for root from 139.59.108.225 port 45492 ssh2
...
2020-10-14 08:41:11
139.59.18.215 attackbots
SSH_scan
2020-10-14 08:03:41
139.59.148.56 attack
Oct 13 14:30:51 staging sshd[30119]: Invalid user adm from 139.59.148.56 port 59726
Oct 13 14:30:51 staging sshd[30119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.148.56 
Oct 13 14:30:51 staging sshd[30119]: Invalid user adm from 139.59.148.56 port 59726
Oct 13 14:30:53 staging sshd[30119]: Failed password for invalid user adm from 139.59.148.56 port 59726 ssh2
...
2020-10-14 04:31:27
139.59.135.84 attackbots
Invalid user kureyon from 139.59.135.84 port 48782
2020-10-13 22:04:05
139.59.135.84 attack
Invalid user kureyon from 139.59.135.84 port 48782
2020-10-13 13:30:00
139.59.135.84 attackspambots
Oct 12 22:40:32 eventyay sshd[28379]: Failed password for root from 139.59.135.84 port 59232 ssh2
Oct 12 22:44:59 eventyay sshd[28632]: Failed password for root from 139.59.135.84 port 35022 ssh2
...
2020-10-13 06:14:29
139.59.104.134 attackbots
(sshd) Failed SSH login from 139.59.104.134 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 12 18:45:52 server2 sshd[16898]: Invalid user ed from 139.59.104.134 port 19534
Oct 12 18:45:55 server2 sshd[16898]: Failed password for invalid user ed from 139.59.104.134 port 19534 ssh2
Oct 12 18:47:43 server2 sshd[17237]: Invalid user neeraj from 139.59.104.134 port 36290
Oct 12 18:47:45 server2 sshd[17237]: Failed password for invalid user neeraj from 139.59.104.134 port 36290 ssh2
Oct 12 18:49:00 server2 sshd[17586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.104.134  user=root
2020-10-13 04:34:53
139.59.151.124 attackspam
Invalid user wille from 139.59.151.124 port 45162
2020-10-13 00:43:35
139.59.104.134 attack
SSH/22 MH Probe, BF, Hack -
2020-10-12 20:14:50
139.59.151.124 attackspambots
Oct  6 17:55:26 myhostname sshd[20688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.151.124  user=r.r
Oct  6 17:55:28 myhostname sshd[20688]: Failed password for r.r from 139.59.151.124 port 55302 ssh2
Oct  6 17:55:28 myhostname sshd[20688]: Received disconnect from 139.59.151.124 port 55302:11: Bye Bye [preauth]
Oct  6 17:55:28 myhostname sshd[20688]: Disconnected from 139.59.151.124 port 55302 [preauth]
Oct  6 18:17:38 myhostname sshd[13694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.151.124  user=r.r
Oct  6 18:17:40 myhostname sshd[13694]: Failed password for r.r from 139.59.151.124 port 35740 ssh2
Oct  6 18:17:40 myhostname sshd[13694]: Received disconnect from 139.59.151.124 port 35740:11: Bye Bye [preauth]
Oct  6 18:17:40 myhostname sshd[13694]: Disconnected from 139.59.151.124 port 35740 [preauth]
Oct  6 18:21:58 myhostname sshd[18541]: pam_unix(sshd:auth): aut........
-------------------------------
2020-10-12 16:08:26
139.59.138.115 attackbotsspam
(sshd) Failed SSH login from 139.59.138.115 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 20:43:50 server sshd[3364]: Invalid user ssh from 139.59.138.115
Oct 11 20:43:51 server sshd[3364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115 
Oct 11 20:43:53 server sshd[3364]: Failed password for invalid user ssh from 139.59.138.115 port 58372 ssh2
Oct 11 20:48:12 server sshd[4014]: Invalid user teste from 139.59.138.115
Oct 11 20:48:12 server sshd[4014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115
2020-10-12 05:11:22
139.59.102.170 attack
2020-10-11T22:29:07+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)
2020-10-12 04:32:28
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.1.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61285
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.1.138.			IN	A

;; AUTHORITY SECTION:
.			3126	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019051504 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu May 16 07:32:53 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:
Host 138.1.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 138.1.59.139.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
185.234.219.75 attack
Jul  1 12:00:12 mail postfix/smtpd\[7292\]: warning: unknown\[185.234.219.75\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul  1 12:30:57 mail postfix/smtpd\[7983\]: warning: unknown\[185.234.219.75\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul  1 12:35:25 mail postfix/smtpd\[8613\]: warning: unknown\[185.234.219.75\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul  1 12:38:02 mail postfix/smtpd\[8613\]: warning: unknown\[185.234.219.75\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2019-07-01 19:42:18
159.203.131.94 attackspam
proto=tcp  .  spt=21643  .  dpt=25  .     (listed on Blocklist de  Jun 30)     (445)
2019-07-01 19:56:44
174.236.131.189 attackspambots
Hit on /wp-login.php
2019-07-01 19:46:42
51.255.83.178 attackbotsspam
Jul  1 05:17:39 localhost sshd\[25167\]: Invalid user rabbitmq from 51.255.83.178 port 38852
Jul  1 05:17:39 localhost sshd\[25167\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.83.178
...
2019-07-01 19:53:50
218.22.187.66 attack
'IP reached maximum auth failures for a one day block'
2019-07-01 19:28:46
103.61.101.74 attack
port scan and connect, tcp 8080 (http-proxy)
2019-07-01 19:51:01
162.252.58.70 attackbots
Jul  1 05:28:03 srv1 postfix/smtpd[5440]: connect from ns.ecodominio.com[162.252.58.70]
Jul x@x
Jul  1 05:28:09 srv1 postfix/smtpd[5440]: lost connection after RCPT from ns.ecodominio.com[162.252.58.70]
Jul  1 05:28:09 srv1 postfix/smtpd[5440]: disconnect from ns.ecodominio.com[162.252.58.70]
Jul  1 05:30:13 srv1 postfix/smtpd[3584]: connect from ns.ecodominio.com[162.252.58.70]
Jul x@x
Jul  1 05:30:19 srv1 postfix/smtpd[3584]: lost connection after RCPT from ns.ecodominio.com[162.252.58.70]
Jul  1 05:30:19 srv1 postfix/smtpd[3584]: disconnect from ns.ecodominio.com[162.252.58.70]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=162.252.58.70
2019-07-01 19:58:22
91.134.140.32 attackspam
Jul  1 13:29:53 MK-Soft-Root1 sshd\[8029\]: Invalid user config from 91.134.140.32 port 33642
Jul  1 13:29:53 MK-Soft-Root1 sshd\[8029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.140.32
Jul  1 13:29:55 MK-Soft-Root1 sshd\[8029\]: Failed password for invalid user config from 91.134.140.32 port 33642 ssh2
...
2019-07-01 20:05:57
212.64.59.94 attack
Jul  1 08:07:19 ip-172-31-62-245 sshd\[861\]: Invalid user teamspeak from 212.64.59.94\
Jul  1 08:07:21 ip-172-31-62-245 sshd\[861\]: Failed password for invalid user teamspeak from 212.64.59.94 port 29042 ssh2\
Jul  1 08:09:37 ip-172-31-62-245 sshd\[953\]: Invalid user infortec from 212.64.59.94\
Jul  1 08:09:40 ip-172-31-62-245 sshd\[953\]: Failed password for invalid user infortec from 212.64.59.94 port 45478 ssh2\
Jul  1 08:11:47 ip-172-31-62-245 sshd\[959\]: Invalid user tonglink from 212.64.59.94\
2019-07-01 19:37:31
113.141.70.249 attackbotsspam
\[2019-07-01 03:02:08\] NOTICE\[5148\] chan_sip.c: Registration from '"90" \' failed for '113.141.70.249:5064' - Wrong password
\[2019-07-01 03:02:08\] SECURITY\[5156\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-01T03:02:08.005-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="90",SessionID="0x7f13a854c218",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/113.141.70.249/5064",Challenge="43a260c9",ReceivedChallenge="43a260c9",ReceivedHash="76f1b31199c997f30ef0090ee731a71c"
\[2019-07-01 03:02:08\] NOTICE\[5148\] chan_sip.c: Registration from '"90" \' failed for '113.141.70.249:5064' - Wrong password
\[2019-07-01 03:02:08\] SECURITY\[5156\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-01T03:02:08.339-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="90",SessionID="0x7f13a909e138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/113.141
2019-07-01 19:31:16
3.92.185.156 attackbots
Jul  1 03:43:38   TCP Attack: SRC=3.92.185.156 DST=[Masked] LEN=250 TOS=0x00 PREC=0x00 TTL=234  DF PROTO=TCP SPT=60042 DPT=80 WINDOW=913 RES=0x00 ACK PSH URGP=0
2019-07-01 19:54:21
188.166.165.52 attack
01.07.2019 03:44:08 SSH access blocked by firewall
2019-07-01 19:39:26
51.83.74.203 attackspambots
ssh failed login
2019-07-01 20:00:41
111.196.201.86 attack
2222/tcp
[2019-07-01]1pkt
2019-07-01 19:53:06
88.132.30.2 attackbotsspam
(sshd) Failed SSH login from 88.132.30.2 (host-88-132-30-2.prtelecom.hu): 5 in the last 3600 secs
2019-07-01 19:28:22

最近上报的IP列表

172.241.169.44 199.158.118.38 139.237.186.101 41.45.182.79
66.79.137.0 69.219.236.11 199.23.9.61 61.19.30.156
170.78.241.197 179.61.183.6 70.126.142.232 89.221.46.229
250.141.235.254 28.30.82.6 217.133.99.111 128.147.245.117
85.32.251.27 113.173.106.185 155.83.8.71 242.165.254.124