139.59.136.64 - IPInfo

基本信息:

城市(city): Frankfurt am Main

省份(region): Hesse

国家(country): Germany

运营商(isp): Digital Ocean Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Wordpress attack	2020-06-29 04:59:57
attack	CMS (WordPress or Joomla) login attempt.	2020-06-15 09:22:45
attackspam	Automatic report - Banned IP Access	2020-02-10 02:11:31
attackspambots	php WP PHPmyadamin ABUSE blocked for 12h	2020-01-15 13:00:15
attackspambots	139.59.136.64 - - \[27/Dec/2019:23:54:58 +0100\] "POST /wp-login.php HTTP/1.0" 200 3080 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.136.64 - - \[27/Dec/2019:23:55:00 +0100\] "POST /wp-login.php HTTP/1.0" 200 3039 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.136.64 - - \[27/Dec/2019:23:55:02 +0100\] "POST /wp-login.php HTTP/1.0" 200 3048 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-12-28 08:18:50
attackspam	Automatic report - Banned IP Access	2019-11-20 05:29:42
attack	139.59.136.64 - - \[18/Nov/2019:05:54:24 +0100\] "POST /wp-login.php HTTP/1.0" 200 4532 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.136.64 - - \[18/Nov/2019:05:54:32 +0100\] "POST /wp-login.php HTTP/1.0" 200 5222 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.136.64 - - \[18/Nov/2019:05:54:40 +0100\] "POST /wp-login.php HTTP/1.0" 200 5148 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-11-18 13:15:40
attackspambots	Automatic report - Banned IP Access	2019-11-11 04:56:58

相同子网IP讨论:

IP	类型	评论内容	时间
139.59.136.99	attackbotsspam	Invalid user ubnt from 139.59.136.99 port 47440	2020-09-23 00:42:15
139.59.136.99	attackbotsspam	TCP (SYN) 139.59.136.99:59205 -> port 22, len 44	2020-09-22 16:42:32
139.59.136.99	attackspam	leo_www	2020-09-22 01:23:02
139.59.136.99	attackbotsspam	TCP (SYN) 139.59.136.99:33612 -> port 22, len 44	2020-09-21 17:05:45
139.59.136.91	attackbots	Jun 3 17:24:41 foo sshd[11779]: Did not receive identification string from 139.59.136.91 Jun 3 17:27:16 foo sshd[11800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.91 user=r.r Jun 3 17:27:19 foo sshd[11800]: Failed password for r.r from 139.59.136.91 port 57652 ssh2 Jun 3 17:27:19 foo sshd[11800]: Received disconnect from 139.59.136.91: 11: Normal Shutdown, Thank you for playing [preauth] Jun 3 17:27:45 foo sshd[11802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.91 user=r.r Jun 3 17:27:47 foo sshd[11802]: Failed password for r.r from 139.59.136.91 port 52336 ssh2 Jun 3 17:27:47 foo sshd[11802]: Received disconnect from 139.59.136.91: 11: Normal Shutdown, Thank you for playing [preauth] Jun 3 17:28:13 foo sshd[11810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.91 user=r.r Jun 3 17:28:15 foo ssh........ -------------------------------	2020-06-04 07:51:43
139.59.136.254	attack	Invalid user lox from 139.59.136.254 port 41076	2020-05-23 17:45:58
139.59.136.254	attackbots	Triggered by Fail2Ban at Ares web server	2020-05-12 07:37:17
139.59.136.254	attackbotsspam	IP blocked	2020-05-09 20:56:12
139.59.136.254	attackbotsspam	May 2 21:48:02 php1 sshd\[28626\]: Invalid user user from 139.59.136.254 May 2 21:48:02 php1 sshd\[28626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 May 2 21:48:04 php1 sshd\[28626\]: Failed password for invalid user user from 139.59.136.254 port 59262 ssh2 May 2 21:51:43 php1 sshd\[28950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 user=root May 2 21:51:45 php1 sshd\[28950\]: Failed password for root from 139.59.136.254 port 49002 ssh2	2020-05-03 19:17:38
139.59.136.254	attackbots	Apr 29 05:00:21 game-panel sshd[19596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 Apr 29 05:00:24 game-panel sshd[19596]: Failed password for invalid user testbed from 139.59.136.254 port 38752 ssh2 Apr 29 05:05:26 game-panel sshd[19828]: Failed password for proxy from 139.59.136.254 port 50368 ssh2	2020-04-29 13:08:12
139.59.136.254	attack	Invalid user server from 139.59.136.254 port 43142	2020-04-25 03:37:37
139.59.136.254	attack	Invalid user server from 139.59.136.254 port 43142	2020-04-24 04:29:25
139.59.136.254	attackbotsspam	Apr 21 21:24:37 DAAP sshd[16147]: Invalid user sn from 139.59.136.254 port 52618 Apr 21 21:24:37 DAAP sshd[16147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 Apr 21 21:24:37 DAAP sshd[16147]: Invalid user sn from 139.59.136.254 port 52618 Apr 21 21:24:39 DAAP sshd[16147]: Failed password for invalid user sn from 139.59.136.254 port 52618 ssh2 Apr 21 21:32:51 DAAP sshd[16346]: Invalid user admin from 139.59.136.254 port 52006 ...	2020-04-22 03:37:46
139.59.136.254	attackbotsspam	Apr 20 19:51:57 localhost sshd[77106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 user=root Apr 20 19:51:59 localhost sshd[77106]: Failed password for root from 139.59.136.254 port 54038 ssh2 Apr 20 19:57:40 localhost sshd[77615]: Invalid user ftpuser from 139.59.136.254 port 44516 Apr 20 19:57:40 localhost sshd[77615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 Apr 20 19:57:40 localhost sshd[77615]: Invalid user ftpuser from 139.59.136.254 port 44516 Apr 20 19:57:42 localhost sshd[77615]: Failed password for invalid user ftpuser from 139.59.136.254 port 44516 ssh2 ...	2020-04-21 04:20:28
139.59.136.254	attackspambots	Apr 20 14:52:38 ncomp sshd[18559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 user=root Apr 20 14:52:40 ncomp sshd[18559]: Failed password for root from 139.59.136.254 port 52980 ssh2 Apr 20 14:58:39 ncomp sshd[18778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 user=root Apr 20 14:58:41 ncomp sshd[18778]: Failed password for root from 139.59.136.254 port 41516 ssh2	2020-04-20 22:46:46

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.136.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17952
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.136.64.			IN	A

;; AUTHORITY SECTION:
.			186	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111001 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 11 04:56:55 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 64.136.59.139.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 64.136.59.139.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
89.151.134.78	attackbotsspam	Jul 30 14:05:36 ny01 sshd[27620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.151.134.78 Jul 30 14:05:39 ny01 sshd[27620]: Failed password for invalid user benny from 89.151.134.78 port 37070 ssh2 Jul 30 14:11:56 ny01 sshd[28327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.151.134.78	2020-07-31 02:13:02
222.186.175.212	attack	Jul 30 20:28:47 vpn01 sshd[32601]: Failed password for root from 222.186.175.212 port 36904 ssh2 Jul 30 20:29:00 vpn01 sshd[32601]: error: maximum authentication attempts exceeded for root from 222.186.175.212 port 36904 ssh2 [preauth] ...	2020-07-31 02:32:23
122.246.147.31	attack	hacking my emails	2020-07-31 02:19:14
151.236.95.4	attackbotsspam	ICMP MH Probe, Scan /Distributed -	2020-07-31 02:34:08
103.117.163.209	attack	eintrachtkultkellerfulda.de 103.117.163.209 [30/Jul/2020:14:04:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 408 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" eintrachtkultkellerfulda.de 103.117.163.209 [30/Jul/2020:14:04:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 408 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"	2020-07-31 02:45:58
132.145.128.157	attack	2020-07-30T16:34:01.996962v22018076590370373 sshd[17034]: Invalid user silvia from 132.145.128.157 port 56934 2020-07-30T16:34:02.002935v22018076590370373 sshd[17034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.128.157 2020-07-30T16:34:01.996962v22018076590370373 sshd[17034]: Invalid user silvia from 132.145.128.157 port 56934 2020-07-30T16:34:04.289776v22018076590370373 sshd[17034]: Failed password for invalid user silvia from 132.145.128.157 port 56934 ssh2 2020-07-30T16:37:52.900116v22018076590370373 sshd[3399]: Invalid user zanron from 132.145.128.157 port 40118 ...	2020-07-31 02:18:49
122.51.109.222	attack	Failed password for invalid user shr from 122.51.109.222 port 50934 ssh2	2020-07-31 02:38:30
192.144.218.143	attack	2020-07-31T00:53:38.877086billing sshd[12096]: Invalid user lodwin from 192.144.218.143 port 42018 2020-07-31T00:53:41.064402billing sshd[12096]: Failed password for invalid user lodwin from 192.144.218.143 port 42018 ssh2 2020-07-31T01:00:39.504289billing sshd[27480]: Invalid user lasse from 192.144.218.143 port 57200 ...	2020-07-31 02:43:44
128.199.84.251	attack	2020-07-30T13:58:21.592510mail.thespaminator.com sshd[26755]: Invalid user furuiliu from 128.199.84.251 port 42398 2020-07-30T13:58:22.983058mail.thespaminator.com sshd[26755]: Failed password for invalid user furuiliu from 128.199.84.251 port 42398 ssh2 ...	2020-07-31 02:16:08
95.243.136.198	attackbots	2020-07-30T17:11:32.578612abusebot-4.cloudsearch.cf sshd[18655]: Invalid user user from 95.243.136.198 port 63107 2020-07-30T17:11:32.584321abusebot-4.cloudsearch.cf sshd[18655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-95-243-136-198.business.telecomitalia.it 2020-07-30T17:11:32.578612abusebot-4.cloudsearch.cf sshd[18655]: Invalid user user from 95.243.136.198 port 63107 2020-07-30T17:11:34.661736abusebot-4.cloudsearch.cf sshd[18655]: Failed password for invalid user user from 95.243.136.198 port 63107 ssh2 2020-07-30T17:19:55.531991abusebot-4.cloudsearch.cf sshd[18713]: Invalid user mikami from 95.243.136.198 port 49854 2020-07-30T17:19:55.541136abusebot-4.cloudsearch.cf sshd[18713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-95-243-136-198.business.telecomitalia.it 2020-07-30T17:19:55.531991abusebot-4.cloudsearch.cf sshd[18713]: Invalid user mikami from 95.243.136.198 port 49854 202 ...	2020-07-31 02:48:33
31.209.21.17	attack	Jul 30 20:09:56 [host] sshd[11603]: Invalid user y Jul 30 20:09:56 [host] sshd[11603]: pam_unix(sshd: Jul 30 20:09:58 [host] sshd[11603]: Failed passwor	2020-07-31 02:15:03
59.126.251.230	attack	Portscan detected	2020-07-31 02:13:30
211.252.87.97	attack	Jul 30 17:57:17 hidden sshd[53951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.252.87.97 Jul 30 17:57:18 hidden sshd[53951]: Failed password for invalid user liying from 211.252.87.97 port 55042 ssh2 Jul 30 17:59:57 hidden sshd[54272]: Invalid user wangz from 211.252.87.97 port 34728	2020-07-31 02:47:06
220.133.76.163	attackbotsspam	Port probing on unauthorized port 23	2020-07-31 02:21:26
151.236.95.6	attackspam	ICMP MH Probe, Scan /Distributed -	2020-07-31 02:29:56

最近上报的IP列表

111.161.74.100	45.118.145.167	5.236.129.72	36.99.141.210
162.241.192.138	46.56.73.43	114.40.77.56	89.187.173.241
14.139.171.173	96.44.133.106	167.71.211.142	115.79.212.106
81.88.49.32	46.39.53.45	47.74.129.4	108.30.75.26
142.169.78.200	125.105.83.104	182.20.53.118	146.196.33.99