必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): India

运营商(isp): Digital Ocean Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspam
2020-08-21T12:49:57.394970randservbullet-proofcloud-66.localdomain sshd[16265]: Invalid user ruser from 139.59.13.55 port 34145
2020-08-21T12:49:57.398735randservbullet-proofcloud-66.localdomain sshd[16265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55
2020-08-21T12:49:57.394970randservbullet-proofcloud-66.localdomain sshd[16265]: Invalid user ruser from 139.59.13.55 port 34145
2020-08-21T12:50:00.225948randservbullet-proofcloud-66.localdomain sshd[16265]: Failed password for invalid user ruser from 139.59.13.55 port 34145 ssh2
...
2020-08-21 22:08:05
attackspambots
Aug 21 11:28:59 buvik sshd[10515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55
Aug 21 11:29:02 buvik sshd[10515]: Failed password for invalid user ds from 139.59.13.55 port 40480 ssh2
Aug 21 11:33:46 buvik sshd[11217]: Invalid user monit from 139.59.13.55
...
2020-08-21 17:38:00
attack
Aug 17 22:52:27 vps647732 sshd[6556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55
Aug 17 22:52:29 vps647732 sshd[6556]: Failed password for invalid user melina from 139.59.13.55 port 48372 ssh2
...
2020-08-18 04:52:59
attackbots
$f2bV_matches
2020-08-17 15:09:51
attackbotsspam
2020-08-01T04:46:17.020196billing sshd[15061]: Failed password for root from 139.59.13.55 port 44240 ssh2
2020-08-01T04:48:22.182271billing sshd[18639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55  user=root
2020-08-01T04:48:25.072498billing sshd[18639]: Failed password for root from 139.59.13.55 port 60424 ssh2
...
2020-08-01 07:41:27
attackspambots
Jul 29 17:16:42 inter-technics sshd[8368]: Invalid user pbsadmin from 139.59.13.55 port 40173
Jul 29 17:16:42 inter-technics sshd[8368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55
Jul 29 17:16:42 inter-technics sshd[8368]: Invalid user pbsadmin from 139.59.13.55 port 40173
Jul 29 17:16:44 inter-technics sshd[8368]: Failed password for invalid user pbsadmin from 139.59.13.55 port 40173 ssh2
Jul 29 17:21:19 inter-technics sshd[8824]: Invalid user shenweifeng from 139.59.13.55 port 45901
...
2020-07-29 23:25:43
attackspam
Jul 16 18:49:07 itv-usvr-02 sshd[12776]: Invalid user hester from 139.59.13.55 port 58198
Jul 16 18:49:07 itv-usvr-02 sshd[12776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55
Jul 16 18:49:07 itv-usvr-02 sshd[12776]: Invalid user hester from 139.59.13.55 port 58198
Jul 16 18:49:08 itv-usvr-02 sshd[12776]: Failed password for invalid user hester from 139.59.13.55 port 58198 ssh2
Jul 16 18:53:43 itv-usvr-02 sshd[12949]: Invalid user katrin from 139.59.13.55 port 37380
2020-07-16 21:30:37
attackbotsspam
Jul 14 03:55:14 jumpserver sshd[53387]: Invalid user alex from 139.59.13.55 port 39869
Jul 14 03:55:15 jumpserver sshd[53387]: Failed password for invalid user alex from 139.59.13.55 port 39869 ssh2
Jul 14 03:58:20 jumpserver sshd[53395]: Invalid user deluge from 139.59.13.55 port 35951
...
2020-07-14 12:18:59
attackbotsspam
Jul  7 20:10:03 localhost sshd[15788]: Invalid user helena from 139.59.13.55 port 47677
Jul  7 20:10:03 localhost sshd[15788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55
Jul  7 20:10:03 localhost sshd[15788]: Invalid user helena from 139.59.13.55 port 47677
Jul  7 20:10:05 localhost sshd[15788]: Failed password for invalid user helena from 139.59.13.55 port 47677 ssh2
Jul  7 20:13:36 localhost sshd[16211]: Invalid user dujoey from 139.59.13.55 port 46794
...
2020-07-08 05:49:30
attack
fail2ban -- 139.59.13.55
...
2020-06-04 06:43:59
attack
Jun  2 06:26:50 vps639187 sshd\[30318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55  user=root
Jun  2 06:26:52 vps639187 sshd\[30318\]: Failed password for root from 139.59.13.55 port 53473 ssh2
Jun  2 06:33:01 vps639187 sshd\[30381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55  user=root
...
2020-06-02 12:35:35
attackbotsspam
May 25 08:57:33 ns382633 sshd\[25503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55  user=root
May 25 08:57:35 ns382633 sshd\[25503\]: Failed password for root from 139.59.13.55 port 46160 ssh2
May 25 09:14:04 ns382633 sshd\[28532\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55  user=root
May 25 09:14:05 ns382633 sshd\[28532\]: Failed password for root from 139.59.13.55 port 32824 ssh2
May 25 09:18:16 ns382633 sshd\[29398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55  user=root
2020-05-25 17:02:16
attack
Invalid user no from 139.59.13.55 port 53790
2020-05-15 16:33:56
attack
SSH authentication failure x 6 reported by Fail2Ban
...
2020-05-07 14:00:34
attackbots
2020-04-19T02:54:05.6250451495-001 sshd[22936]: Invalid user qs from 139.59.13.55 port 44801
2020-04-19T02:54:05.6324081495-001 sshd[22936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55
2020-04-19T02:54:05.6250451495-001 sshd[22936]: Invalid user qs from 139.59.13.55 port 44801
2020-04-19T02:54:07.1859341495-001 sshd[22936]: Failed password for invalid user qs from 139.59.13.55 port 44801 ssh2
2020-04-19T02:58:05.6473991495-001 sshd[23140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55  user=root
2020-04-19T02:58:07.8136891495-001 sshd[23140]: Failed password for root from 139.59.13.55 port 47754 ssh2
...
2020-04-19 17:56:43
attackbotsspam
SSH auth scanning - multiple failed logins
2020-03-28 23:24:56
attackbots
Mar 20 23:10:04 ArkNodeAT sshd\[21814\]: Invalid user endou from 139.59.13.55
Mar 20 23:10:04 ArkNodeAT sshd\[21814\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55
Mar 20 23:10:06 ArkNodeAT sshd\[21814\]: Failed password for invalid user endou from 139.59.13.55 port 60147 ssh2
2020-03-21 06:21:32
attackbots
Mar 11 15:08:53 * sshd[29713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55
Mar 11 15:08:55 * sshd[29713]: Failed password for invalid user avatar from 139.59.13.55 port 43068 ssh2
2020-03-12 02:57:50
attack
Mar  2 13:49:26 plusreed sshd[13438]: Invalid user test5 from 139.59.13.55
...
2020-03-03 03:02:11
attackbots
Unauthorized connection attempt detected from IP address 139.59.13.55 to port 2220 [J]
2020-02-06 01:18:59
attackspam
Feb  2 16:34:49 game-panel sshd[4026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55
Feb  2 16:34:51 game-panel sshd[4026]: Failed password for invalid user debian from 139.59.13.55 port 42570 ssh2
Feb  2 16:38:21 game-panel sshd[4157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55
2020-02-03 00:44:11
相同子网IP讨论:
IP 类型 评论内容 时间
139.59.135.84 attackbots
Invalid user kureyon from 139.59.135.84 port 48782
2020-10-13 22:04:05
139.59.135.84 attack
Invalid user kureyon from 139.59.135.84 port 48782
2020-10-13 13:30:00
139.59.135.84 attackspambots
Oct 12 22:40:32 eventyay sshd[28379]: Failed password for root from 139.59.135.84 port 59232 ssh2
Oct 12 22:44:59 eventyay sshd[28632]: Failed password for root from 139.59.135.84 port 35022 ssh2
...
2020-10-13 06:14:29
139.59.138.115 attackbotsspam
(sshd) Failed SSH login from 139.59.138.115 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 20:43:50 server sshd[3364]: Invalid user ssh from 139.59.138.115
Oct 11 20:43:51 server sshd[3364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115 
Oct 11 20:43:53 server sshd[3364]: Failed password for invalid user ssh from 139.59.138.115 port 58372 ssh2
Oct 11 20:48:12 server sshd[4014]: Invalid user teste from 139.59.138.115
Oct 11 20:48:12 server sshd[4014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115
2020-10-12 05:11:22
139.59.138.115 attackspam
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-10-11 21:16:04
139.59.138.115 attack
fail2ban
2020-10-11 06:37:06
139.59.138.115 attackbots
Oct 10 17:20:21 vps-51d81928 sshd[721914]: Failed password for invalid user ftpuser from 139.59.138.115 port 54242 ssh2
Oct 10 17:24:00 vps-51d81928 sshd[721975]: Invalid user travis from 139.59.138.115 port 60512
Oct 10 17:24:00 vps-51d81928 sshd[721975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115 
Oct 10 17:24:00 vps-51d81928 sshd[721975]: Invalid user travis from 139.59.138.115 port 60512
Oct 10 17:24:02 vps-51d81928 sshd[721975]: Failed password for invalid user travis from 139.59.138.115 port 60512 ssh2
...
2020-10-11 02:09:37
139.59.138.115 attackbots
Oct 10 11:08:39 vserver sshd\[2687\]: Invalid user zope from 139.59.138.115Oct 10 11:08:41 vserver sshd\[2687\]: Failed password for invalid user zope from 139.59.138.115 port 35194 ssh2Oct 10 11:16:52 vserver sshd\[2784\]: Invalid user acap from 139.59.138.115Oct 10 11:16:55 vserver sshd\[2784\]: Failed password for invalid user acap from 139.59.138.115 port 49926 ssh2
...
2020-10-10 17:54:02
139.59.135.84 attackbotsspam
Failed password for root from 139.59.135.84 port 51112 ssh2
2020-10-05 18:30:22
139.59.135.84 attackspam
$f2bV_matches
2020-10-04 04:12:07
139.59.135.84 attackspambots
Invalid user alan from 139.59.135.84 port 57124
2020-10-03 20:16:11
139.59.136.99 attackbotsspam
Invalid user ubnt from 139.59.136.99 port 47440
2020-09-23 00:42:15
139.59.136.99 attackbotsspam
 TCP (SYN) 139.59.136.99:59205 -> port 22, len 44
2020-09-22 16:42:32
139.59.136.99 attackspam
leo_www
2020-09-22 01:23:02
139.59.136.99 attackbotsspam
 TCP (SYN) 139.59.136.99:33612 -> port 22, len 44
2020-09-21 17:05:45
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.13.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37301
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.13.55.			IN	A

;; AUTHORITY SECTION:
.			567	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020200 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 03 00:44:07 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
Host 55.13.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 55.13.59.139.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
51.68.174.177 attackbotsspam
Invalid user sysadmin from 51.68.174.177 port 49812
2019-09-01 14:51:54
134.175.59.235 attackspam
Sep  1 06:48:06 www sshd\[26337\]: Invalid user karlijn from 134.175.59.235Sep  1 06:48:08 www sshd\[26337\]: Failed password for invalid user karlijn from 134.175.59.235 port 35656 ssh2Sep  1 06:52:18 www sshd\[26384\]: Invalid user informix from 134.175.59.235
...
2019-09-01 14:12:37
104.248.149.214 attack
DATE:2019-08-31 23:42:24, IP:104.248.149.214, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2019-09-01 14:27:49
23.129.64.188 attackspambots
$f2bV_matches
2019-09-01 14:02:33
91.228.63.224 attack
[portscan] Port scan
2019-09-01 14:04:34
189.45.192.4 attackspambots
Aug 31 15:42:23 mail postfix/postscreen[56851]: PREGREET 41 after 0.88 from [189.45.192.4]:35799: EHLO dynamic-179-127-181-236.tpa.net.br

...
2019-09-01 14:15:33
117.24.95.203 attackspam
Invalid user admin from 117.24.95.203 port 56525
2019-09-01 14:45:33
78.12.92.176 attackbotsspam
port scan and connect, tcp 23 (telnet)
2019-09-01 14:02:01
177.39.112.18 attackbotsspam
Aug 31 16:01:01 php1 sshd\[22961\]: Invalid user jswd from 177.39.112.18
Aug 31 16:01:01 php1 sshd\[22961\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.39.112.18
Aug 31 16:01:04 php1 sshd\[22961\]: Failed password for invalid user jswd from 177.39.112.18 port 57082 ssh2
Aug 31 16:06:05 php1 sshd\[23407\]: Invalid user 123qwe from 177.39.112.18
Aug 31 16:06:05 php1 sshd\[23407\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.39.112.18
2019-09-01 14:33:55
59.148.43.97 attackbotsspam
Invalid user admin from 59.148.43.97 port 48558
2019-09-01 14:43:44
212.85.35.205 attack
Unauthorized connection attempt from IP address 212.85.35.205 on Port 3389(RDP)
2019-09-01 14:28:09
58.254.132.156 attackspam
Sep  1 07:04:41 ArkNodeAT sshd\[30393\]: Invalid user dustin from 58.254.132.156
Sep  1 07:04:41 ArkNodeAT sshd\[30393\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.156
Sep  1 07:04:43 ArkNodeAT sshd\[30393\]: Failed password for invalid user dustin from 58.254.132.156 port 14301 ssh2
2019-09-01 13:48:08
38.98.158.52 attack
Sep  1 07:31:33 mail sshd\[10289\]: Failed password for invalid user godzilla from 38.98.158.52 port 42744 ssh2
Sep  1 07:48:40 mail sshd\[10643\]: Invalid user ks from 38.98.158.52 port 49652
Sep  1 07:48:40 mail sshd\[10643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.98.158.52
...
2019-09-01 14:57:16
77.245.35.170 attackbots
Invalid user tmp from 77.245.35.170 port 49519
2019-09-01 14:04:03
73.186.4.41 attackbots
SSH-bruteforce attempts
2019-09-01 14:28:48

最近上报的IP列表

189.150.92.105 66.164.91.59 32.32.19.5 53.174.146.15
105.145.177.69 214.169.116.87 219.84.125.191 88.29.211.248
59.113.26.31 73.73.142.177 23.136.197.181 204.145.171.61
155.138.247.93 169.222.172.49 209.156.231.195 196.37.186.72
212.231.36.60 91.140.9.208 187.95.154.148 170.24.150.99