139.59.13.51 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): India

运营商(isp): Digital Ocean Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Invalid user 123 from 139.59.13.51 port 16790	2019-11-02 06:41:42
attack	Oct 15 06:45:23 www2 sshd\[10682\]: Failed password for root from 139.59.13.51 port 58914 ssh2Oct 15 06:49:46 www2 sshd\[10998\]: Failed password for mail from 139.59.13.51 port 25894 ssh2Oct 15 06:54:09 www2 sshd\[11559\]: Failed password for root from 139.59.13.51 port 49438 ssh2 ...	2019-10-15 12:34:51
attackspambots	$f2bV_matches	2019-10-14 17:11:57
attack	$f2bV_matches	2019-10-13 06:08:50
attack	Oct 12 01:37:18 vps01 sshd[27652]: Failed password for root from 139.59.13.51 port 29412 ssh2	2019-10-12 07:46:56
attack	Oct 6 06:15:08 vps sshd[16836]: Failed password for root from 139.59.13.51 port 23866 ssh2 Oct 6 06:26:49 vps sshd[17439]: Failed password for root from 139.59.13.51 port 54460 ssh2 ...	2019-10-06 17:24:24
attack	Oct 4 22:55:42 vps01 sshd[9780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.51 Oct 4 22:55:44 vps01 sshd[9780]: Failed password for invalid user Alpes!23 from 139.59.13.51 port 58070 ssh2	2019-10-05 05:08:04

相同子网IP讨论:

IP	类型	评论内容	时间
139.59.135.84	attackbots	Invalid user kureyon from 139.59.135.84 port 48782	2020-10-13 22:04:05
139.59.135.84	attack	Invalid user kureyon from 139.59.135.84 port 48782	2020-10-13 13:30:00
139.59.135.84	attackspambots	Oct 12 22:40:32 eventyay sshd[28379]: Failed password for root from 139.59.135.84 port 59232 ssh2 Oct 12 22:44:59 eventyay sshd[28632]: Failed password for root from 139.59.135.84 port 35022 ssh2 ...	2020-10-13 06:14:29
139.59.138.115	attackbotsspam	(sshd) Failed SSH login from 139.59.138.115 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 20:43:50 server sshd[3364]: Invalid user ssh from 139.59.138.115 Oct 11 20:43:51 server sshd[3364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115 Oct 11 20:43:53 server sshd[3364]: Failed password for invalid user ssh from 139.59.138.115 port 58372 ssh2 Oct 11 20:48:12 server sshd[4014]: Invalid user teste from 139.59.138.115 Oct 11 20:48:12 server sshd[4014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115	2020-10-12 05:11:22
139.59.138.115	attackspam	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):	2020-10-11 21:16:04
139.59.138.115	attack	fail2ban	2020-10-11 06:37:06
139.59.138.115	attackbots	Oct 10 17:20:21 vps-51d81928 sshd[721914]: Failed password for invalid user ftpuser from 139.59.138.115 port 54242 ssh2 Oct 10 17:24:00 vps-51d81928 sshd[721975]: Invalid user travis from 139.59.138.115 port 60512 Oct 10 17:24:00 vps-51d81928 sshd[721975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115 Oct 10 17:24:00 vps-51d81928 sshd[721975]: Invalid user travis from 139.59.138.115 port 60512 Oct 10 17:24:02 vps-51d81928 sshd[721975]: Failed password for invalid user travis from 139.59.138.115 port 60512 ssh2 ...	2020-10-11 02:09:37
139.59.138.115	attackbots	Oct 10 11:08:39 vserver sshd\[2687\]: Invalid user zope from 139.59.138.115Oct 10 11:08:41 vserver sshd\[2687\]: Failed password for invalid user zope from 139.59.138.115 port 35194 ssh2Oct 10 11:16:52 vserver sshd\[2784\]: Invalid user acap from 139.59.138.115Oct 10 11:16:55 vserver sshd\[2784\]: Failed password for invalid user acap from 139.59.138.115 port 49926 ssh2 ...	2020-10-10 17:54:02
139.59.135.84	attackbotsspam	Failed password for root from 139.59.135.84 port 51112 ssh2	2020-10-05 18:30:22
139.59.135.84	attackspam	$f2bV_matches	2020-10-04 04:12:07
139.59.135.84	attackspambots	Invalid user alan from 139.59.135.84 port 57124	2020-10-03 20:16:11
139.59.136.99	attackbotsspam	Invalid user ubnt from 139.59.136.99 port 47440	2020-09-23 00:42:15
139.59.136.99	attackbotsspam	TCP (SYN) 139.59.136.99:59205 -> port 22, len 44	2020-09-22 16:42:32
139.59.136.99	attackspam	leo_www	2020-09-22 01:23:02
139.59.136.99	attackbotsspam	TCP (SYN) 139.59.136.99:33612 -> port 22, len 44	2020-09-21 17:05:45

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.13.51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32877
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.13.51.			IN	A

;; AUTHORITY SECTION:
.			484	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100402 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 05 05:08:02 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 51.13.59.139.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 51.13.59.139.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
45.141.84.86	attack	RDP Bruteforce	2020-09-13 12:17:13
116.236.189.134	attack	Sep 13 04:38:52 cho sshd[2795578]: Failed password for invalid user website from 116.236.189.134 port 45176 ssh2 Sep 13 04:40:43 cho sshd[2795731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.236.189.134 user=root Sep 13 04:40:46 cho sshd[2795731]: Failed password for root from 116.236.189.134 port 33814 ssh2 Sep 13 04:42:36 cho sshd[2795776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.236.189.134 user=root Sep 13 04:42:38 cho sshd[2795776]: Failed password for root from 116.236.189.134 port 50834 ssh2 ...	2020-09-13 12:34:32
45.145.67.171	attackspambots	Icarus honeypot on github	2020-09-13 12:16:37
187.72.177.131	attackbotsspam	Sep 13 02:47:37 * sshd[15325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.177.131 Sep 13 02:47:39 * sshd[15325]: Failed password for invalid user viorel from 187.72.177.131 port 36840 ssh2	2020-09-13 12:39:44
213.32.122.80	attack	TCP (SYN) 213.32.122.80:58579 -> port 443, len 44	2020-09-13 12:26:42
124.193.224.11	attackbots	2020-09-13T05:14:22.254830n23.at sshd[3328689]: Failed password for root from 124.193.224.11 port 22812 ssh2 2020-09-13T05:14:25.331268n23.at sshd[3328689]: Failed password for root from 124.193.224.11 port 22812 ssh2 2020-09-13T05:14:28.699738n23.at sshd[3328689]: Failed password for root from 124.193.224.11 port 22812 ssh2 ...	2020-09-13 12:30:32
123.55.98.17	attack	Brute forcing email accounts	2020-09-13 12:22:11
49.233.85.15	attackbots	Sep 13 05:10:30 cho sshd[2796829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.85.15 Sep 13 05:10:30 cho sshd[2796829]: Invalid user QueryEntry from 49.233.85.15 port 45472 Sep 13 05:10:31 cho sshd[2796829]: Failed password for invalid user QueryEntry from 49.233.85.15 port 45472 ssh2 Sep 13 05:14:02 cho sshd[2797022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.85.15 user=root Sep 13 05:14:04 cho sshd[2797022]: Failed password for root from 49.233.85.15 port 56150 ssh2 ...	2020-09-13 12:10:31
46.46.85.97	attackspam	RDP Bruteforce	2020-09-13 12:16:07
119.42.91.72	attackspam	Unauthorized connection attempt from IP address 119.42.91.72 on Port 445(SMB)	2020-09-13 12:44:28
23.129.64.204	attackspam	Sep 13 02:42:48 shivevps sshd[8240]: Failed password for root from 23.129.64.204 port 31483 ssh2 Sep 13 02:43:03 shivevps sshd[8240]: Failed password for root from 23.129.64.204 port 31483 ssh2 Sep 13 02:43:03 shivevps sshd[8240]: error: maximum authentication attempts exceeded for root from 23.129.64.204 port 31483 ssh2 [preauth] ...	2020-09-13 12:38:03
176.111.173.51	attackbotsspam	Unauthorized connection attempt from IP address 176.111.173.51 on port 3389	2020-09-13 12:39:09
51.77.66.35	attack	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-13T03:34:22Z and 2020-09-13T04:05:45Z	2020-09-13 12:43:28
211.97.122.144	attack	Sep 12 17:59:56 ms-srv sshd[36215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.97.122.144 user=root Sep 12 17:59:58 ms-srv sshd[36215]: Failed password for invalid user root from 211.97.122.144 port 7683 ssh2	2020-09-13 12:27:06
49.235.146.95	attackbotsspam	Sep 12 23:38:25 firewall sshd[27751]: Failed password for root from 49.235.146.95 port 40474 ssh2 Sep 12 23:41:18 firewall sshd[27815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.146.95 user=root Sep 12 23:41:20 firewall sshd[27815]: Failed password for root from 49.235.146.95 port 48972 ssh2 ...	2020-09-13 12:36:01

最近上报的IP列表

72.183.251.97	72.82.166.205	202.211.139.16	124.217.213.255
67.13.249.16	208.144.242.155	20.4.132.14	93.155.246.239
66.136.135.31	60.224.87.137	99.249.167.141	101.247.80.26
67.236.165.151	38.32.76.241	75.49.1.190	222.252.104.84
111.67.197.59	189.90.255.208	78.46.211.148	192.99.166.179