139.59.13.51 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): India

运营商(isp): Digital Ocean Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Invalid user 123 from 139.59.13.51 port 16790	2019-11-02 06:41:42
attack	Oct 15 06:45:23 www2 sshd\[10682\]: Failed password for root from 139.59.13.51 port 58914 ssh2Oct 15 06:49:46 www2 sshd\[10998\]: Failed password for mail from 139.59.13.51 port 25894 ssh2Oct 15 06:54:09 www2 sshd\[11559\]: Failed password for root from 139.59.13.51 port 49438 ssh2 ...	2019-10-15 12:34:51
attackspambots	$f2bV_matches	2019-10-14 17:11:57
attack	$f2bV_matches	2019-10-13 06:08:50
attack	Oct 12 01:37:18 vps01 sshd[27652]: Failed password for root from 139.59.13.51 port 29412 ssh2	2019-10-12 07:46:56
attack	Oct 6 06:15:08 vps sshd[16836]: Failed password for root from 139.59.13.51 port 23866 ssh2 Oct 6 06:26:49 vps sshd[17439]: Failed password for root from 139.59.13.51 port 54460 ssh2 ...	2019-10-06 17:24:24
attack	Oct 4 22:55:42 vps01 sshd[9780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.51 Oct 4 22:55:44 vps01 sshd[9780]: Failed password for invalid user Alpes!23 from 139.59.13.51 port 58070 ssh2	2019-10-05 05:08:04

相同子网IP讨论:

IP	类型	评论内容	时间
139.59.135.84	attackbots	Invalid user kureyon from 139.59.135.84 port 48782	2020-10-13 22:04:05
139.59.135.84	attack	Invalid user kureyon from 139.59.135.84 port 48782	2020-10-13 13:30:00
139.59.135.84	attackspambots	Oct 12 22:40:32 eventyay sshd[28379]: Failed password for root from 139.59.135.84 port 59232 ssh2 Oct 12 22:44:59 eventyay sshd[28632]: Failed password for root from 139.59.135.84 port 35022 ssh2 ...	2020-10-13 06:14:29
139.59.138.115	attackbotsspam	(sshd) Failed SSH login from 139.59.138.115 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 20:43:50 server sshd[3364]: Invalid user ssh from 139.59.138.115 Oct 11 20:43:51 server sshd[3364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115 Oct 11 20:43:53 server sshd[3364]: Failed password for invalid user ssh from 139.59.138.115 port 58372 ssh2 Oct 11 20:48:12 server sshd[4014]: Invalid user teste from 139.59.138.115 Oct 11 20:48:12 server sshd[4014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115	2020-10-12 05:11:22
139.59.138.115	attackspam	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):	2020-10-11 21:16:04
139.59.138.115	attack	fail2ban	2020-10-11 06:37:06
139.59.138.115	attackbots	Oct 10 17:20:21 vps-51d81928 sshd[721914]: Failed password for invalid user ftpuser from 139.59.138.115 port 54242 ssh2 Oct 10 17:24:00 vps-51d81928 sshd[721975]: Invalid user travis from 139.59.138.115 port 60512 Oct 10 17:24:00 vps-51d81928 sshd[721975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115 Oct 10 17:24:00 vps-51d81928 sshd[721975]: Invalid user travis from 139.59.138.115 port 60512 Oct 10 17:24:02 vps-51d81928 sshd[721975]: Failed password for invalid user travis from 139.59.138.115 port 60512 ssh2 ...	2020-10-11 02:09:37
139.59.138.115	attackbots	Oct 10 11:08:39 vserver sshd\[2687\]: Invalid user zope from 139.59.138.115Oct 10 11:08:41 vserver sshd\[2687\]: Failed password for invalid user zope from 139.59.138.115 port 35194 ssh2Oct 10 11:16:52 vserver sshd\[2784\]: Invalid user acap from 139.59.138.115Oct 10 11:16:55 vserver sshd\[2784\]: Failed password for invalid user acap from 139.59.138.115 port 49926 ssh2 ...	2020-10-10 17:54:02
139.59.135.84	attackbotsspam	Failed password for root from 139.59.135.84 port 51112 ssh2	2020-10-05 18:30:22
139.59.135.84	attackspam	$f2bV_matches	2020-10-04 04:12:07
139.59.135.84	attackspambots	Invalid user alan from 139.59.135.84 port 57124	2020-10-03 20:16:11
139.59.136.99	attackbotsspam	Invalid user ubnt from 139.59.136.99 port 47440	2020-09-23 00:42:15
139.59.136.99	attackbotsspam	TCP (SYN) 139.59.136.99:59205 -> port 22, len 44	2020-09-22 16:42:32
139.59.136.99	attackspam	leo_www	2020-09-22 01:23:02
139.59.136.99	attackbotsspam	TCP (SYN) 139.59.136.99:33612 -> port 22, len 44	2020-09-21 17:05:45

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.13.51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32877
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.13.51.			IN	A

;; AUTHORITY SECTION:
.			484	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100402 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 05 05:08:02 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 51.13.59.139.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 51.13.59.139.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
39.98.205.38	attack	Honeypot hit: [2020-03-17 02:30:29 +0300] Connected from 39.98.205.38 to (HoneypotIP):143	2020-03-17 13:47:21
178.213.186.51	attack	IP: 178.213.186.51 Ports affected World Wide Web HTTP (80) Abuse Confidence rating 100% Found in DNSBL('s) ASN Details AS196777 Skoruk Andriy Oleksandrovych Ukraine (UA) CIDR 178.213.184.0/21 Log Date: 16/03/2020 10:50:33 PM UTC	2020-03-17 14:10:26
14.169.146.24	attackbotsspam	SpamScore above: 10.0	2020-03-17 13:24:44
218.20.227.30	attackspambots	Mar 16 18:31:15 mailman postfix/smtpd[30723]: warning: unknown[218.20.227.30]: SASL LOGIN authentication failed: authentication failure	2020-03-17 13:18:10
142.93.151.22	attack	67/tcp 9943/tcp 1962/tcp... [2020-01-31/03-15]32pkt,30pt.(tcp)	2020-03-17 14:12:50
71.6.232.4	attack	firewall-block, port(s): 8080/tcp	2020-03-17 14:08:17
189.16.233.194	attackspam	Unauthorized connection attempt from IP address 189.16.233.194 on Port 445(SMB)	2020-03-17 13:47:51
88.222.184.208	attackspambots	Chat Spam	2020-03-17 13:27:30
122.129.123.145	attackbots	Mar 17 05:34:18 ewelt sshd[7780]: Invalid user its from 122.129.123.145 port 45534 Mar 17 05:34:18 ewelt sshd[7780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.129.123.145 Mar 17 05:34:18 ewelt sshd[7780]: Invalid user its from 122.129.123.145 port 45534 Mar 17 05:34:20 ewelt sshd[7780]: Failed password for invalid user its from 122.129.123.145 port 45534 ssh2 ...	2020-03-17 13:26:48
203.89.97.130	attackbots	Automatic report - Port Scan Attack	2020-03-17 13:20:34
80.234.92.155	attackspambots	Unauthorized connection attempt from IP address 80.234.92.155 on Port 445(SMB)	2020-03-17 13:52:37
196.52.43.88	attack	Mar 17 03:01:30 src: 196.52.43.88 signature match: "SCAN UPnP communication attempt" (sid: 100074) udp port: 1900	2020-03-17 13:49:50
201.249.202.250	attack	Unauthorized connection attempt from IP address 201.249.202.250 on Port 445(SMB)	2020-03-17 13:53:09
45.55.224.209	attack	Mar 17 00:55:45 localhost sshd\[30309\]: Invalid user redmine from 45.55.224.209 port 39502 Mar 17 00:55:45 localhost sshd\[30309\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.224.209 Mar 17 00:55:47 localhost sshd\[30309\]: Failed password for invalid user redmine from 45.55.224.209 port 39502 ssh2	2020-03-17 13:46:53
106.12.51.193	attackbotsspam	Mar 16 21:17:20 mail sshd\[9809\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.51.193 user=root ...	2020-03-17 13:58:54

最近上报的IP列表

72.183.251.97	72.82.166.205	202.211.139.16	124.217.213.255
67.13.249.16	208.144.242.155	20.4.132.14	93.155.246.239
66.136.135.31	60.224.87.137	99.249.167.141	101.247.80.26
67.236.165.151	38.32.76.241	75.49.1.190	222.252.104.84
111.67.197.59	189.90.255.208	78.46.211.148	192.99.166.179