139.59.136.99 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Invalid user ubnt from 139.59.136.99 port 47440	2020-09-23 00:42:15
attackbotsspam	TCP (SYN) 139.59.136.99:59205 -> port 22, len 44	2020-09-22 16:42:32
attackspam	leo_www	2020-09-22 01:23:02
attackbotsspam	TCP (SYN) 139.59.136.99:33612 -> port 22, len 44	2020-09-21 17:05:45

相同子网IP讨论:

IP	类型	评论内容	时间
139.59.136.64	attackspambots	Wordpress attack	2020-06-29 04:59:57
139.59.136.64	attack	CMS (WordPress or Joomla) login attempt.	2020-06-15 09:22:45
139.59.136.91	attackbots	Jun 3 17:24:41 foo sshd[11779]: Did not receive identification string from 139.59.136.91 Jun 3 17:27:16 foo sshd[11800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.91 user=r.r Jun 3 17:27:19 foo sshd[11800]: Failed password for r.r from 139.59.136.91 port 57652 ssh2 Jun 3 17:27:19 foo sshd[11800]: Received disconnect from 139.59.136.91: 11: Normal Shutdown, Thank you for playing [preauth] Jun 3 17:27:45 foo sshd[11802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.91 user=r.r Jun 3 17:27:47 foo sshd[11802]: Failed password for r.r from 139.59.136.91 port 52336 ssh2 Jun 3 17:27:47 foo sshd[11802]: Received disconnect from 139.59.136.91: 11: Normal Shutdown, Thank you for playing [preauth] Jun 3 17:28:13 foo sshd[11810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.91 user=r.r Jun 3 17:28:15 foo ssh........ -------------------------------	2020-06-04 07:51:43
139.59.136.254	attack	Invalid user lox from 139.59.136.254 port 41076	2020-05-23 17:45:58
139.59.136.254	attackbots	Triggered by Fail2Ban at Ares web server	2020-05-12 07:37:17
139.59.136.254	attackbotsspam	IP blocked	2020-05-09 20:56:12
139.59.136.254	attackbotsspam	May 2 21:48:02 php1 sshd\[28626\]: Invalid user user from 139.59.136.254 May 2 21:48:02 php1 sshd\[28626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 May 2 21:48:04 php1 sshd\[28626\]: Failed password for invalid user user from 139.59.136.254 port 59262 ssh2 May 2 21:51:43 php1 sshd\[28950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 user=root May 2 21:51:45 php1 sshd\[28950\]: Failed password for root from 139.59.136.254 port 49002 ssh2	2020-05-03 19:17:38
139.59.136.254	attackbots	Apr 29 05:00:21 game-panel sshd[19596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 Apr 29 05:00:24 game-panel sshd[19596]: Failed password for invalid user testbed from 139.59.136.254 port 38752 ssh2 Apr 29 05:05:26 game-panel sshd[19828]: Failed password for proxy from 139.59.136.254 port 50368 ssh2	2020-04-29 13:08:12
139.59.136.254	attack	Invalid user server from 139.59.136.254 port 43142	2020-04-25 03:37:37
139.59.136.254	attack	Invalid user server from 139.59.136.254 port 43142	2020-04-24 04:29:25
139.59.136.254	attackbotsspam	Apr 21 21:24:37 DAAP sshd[16147]: Invalid user sn from 139.59.136.254 port 52618 Apr 21 21:24:37 DAAP sshd[16147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 Apr 21 21:24:37 DAAP sshd[16147]: Invalid user sn from 139.59.136.254 port 52618 Apr 21 21:24:39 DAAP sshd[16147]: Failed password for invalid user sn from 139.59.136.254 port 52618 ssh2 Apr 21 21:32:51 DAAP sshd[16346]: Invalid user admin from 139.59.136.254 port 52006 ...	2020-04-22 03:37:46
139.59.136.254	attackbotsspam	Apr 20 19:51:57 localhost sshd[77106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 user=root Apr 20 19:51:59 localhost sshd[77106]: Failed password for root from 139.59.136.254 port 54038 ssh2 Apr 20 19:57:40 localhost sshd[77615]: Invalid user ftpuser from 139.59.136.254 port 44516 Apr 20 19:57:40 localhost sshd[77615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 Apr 20 19:57:40 localhost sshd[77615]: Invalid user ftpuser from 139.59.136.254 port 44516 Apr 20 19:57:42 localhost sshd[77615]: Failed password for invalid user ftpuser from 139.59.136.254 port 44516 ssh2 ...	2020-04-21 04:20:28
139.59.136.254	attackspambots	Apr 20 14:52:38 ncomp sshd[18559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 user=root Apr 20 14:52:40 ncomp sshd[18559]: Failed password for root from 139.59.136.254 port 52980 ssh2 Apr 20 14:58:39 ncomp sshd[18778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 user=root Apr 20 14:58:41 ncomp sshd[18778]: Failed password for root from 139.59.136.254 port 41516 ssh2	2020-04-20 22:46:46
139.59.136.182	attackspambots	Apr 18 22:19:08 debian-2gb-nbg1-2 kernel: \[9500118.974819\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=139.59.136.182 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=34759 PROTO=TCP SPT=50641 DPT=9776 WINDOW=1024 RES=0x00 SYN URGP=0	2020-04-19 07:09:55
139.59.136.84	attackspam	Automatic report - XMLRPC Attack	2020-02-29 21:09:08

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.136.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57387
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.136.99.			IN	A

;; AUTHORITY SECTION:
.			510	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092100 1800 900 604800 86400

;; Query time: 46 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 21 17:05:42 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 99.136.59.139.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 99.136.59.139.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
94.191.83.249	attackbots	Fail2Ban Ban Triggered	2020-10-13 08:30:42
118.25.144.49	attack	(sshd) Failed SSH login from 118.25.144.49 (CN/China/-): 5 in the last 3600 secs	2020-10-13 08:39:06
222.82.250.5	attackbotsspam	bruteforce detected	2020-10-13 08:26:37
61.177.172.54	attack	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-10-13 08:49:22
82.193.145.123	attackspam	Oct 13 02:10:18 santamaria sshd\[27358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.193.145.123 user=root Oct 13 02:10:20 santamaria sshd\[27358\]: Failed password for root from 82.193.145.123 port 36772 ssh2 Oct 13 02:12:47 santamaria sshd\[27436\]: Invalid user kobayashi-pal from 82.193.145.123 Oct 13 02:12:47 santamaria sshd\[27436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.193.145.123 ...	2020-10-13 09:00:37
222.222.31.70	attack	2020-10-12T17:29:01.7520961495-001 sshd[33533]: Invalid user ethan from 222.222.31.70 port 54826 2020-10-12T17:29:03.9677521495-001 sshd[33533]: Failed password for invalid user ethan from 222.222.31.70 port 54826 ssh2 2020-10-12T17:32:41.2432291495-001 sshd[33753]: Invalid user wilson from 222.222.31.70 port 57086 2020-10-12T17:32:41.2463191495-001 sshd[33753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.222.31.70 2020-10-12T17:32:41.2432291495-001 sshd[33753]: Invalid user wilson from 222.222.31.70 port 57086 2020-10-12T17:32:43.3267751495-001 sshd[33753]: Failed password for invalid user wilson from 222.222.31.70 port 57086 ssh2 ...	2020-10-13 08:49:44
61.133.232.249	attackspambots	[SID2] Fail2ban detected 5 failed SSH login attempts within 30 minutes. This report was submitted automatically.	2020-10-13 08:26:13
12.32.37.130	attackbots	Oct 12 22:40:13 abendstille sshd\[26050\]: Invalid user prashant from 12.32.37.130 Oct 12 22:40:13 abendstille sshd\[26050\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=12.32.37.130 Oct 12 22:40:14 abendstille sshd\[26050\]: Failed password for invalid user prashant from 12.32.37.130 port 28049 ssh2 Oct 12 22:46:17 abendstille sshd\[1334\]: Invalid user fred from 12.32.37.130 Oct 12 22:46:17 abendstille sshd\[1334\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=12.32.37.130 ...	2020-10-13 08:51:52
208.86.163.79	attackspambots	Oct 12 22:35:09 extapp sshd[11323]: Invalid user admin from 208.86.163.79 Oct 12 22:35:11 extapp sshd[11323]: Failed password for invalid user admin from 208.86.163.79 port 60300 ssh2 Oct 12 22:35:15 extapp sshd[11329]: Invalid user admin from 208.86.163.79 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=208.86.163.79	2020-10-13 08:37:58
118.25.1.48	attack	Oct 13 06:18:19 dhoomketu sshd[3819987]: Invalid user mailman from 118.25.1.48 port 39754 Oct 13 06:18:19 dhoomketu sshd[3819987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.1.48 Oct 13 06:18:19 dhoomketu sshd[3819987]: Invalid user mailman from 118.25.1.48 port 39754 Oct 13 06:18:22 dhoomketu sshd[3819987]: Failed password for invalid user mailman from 118.25.1.48 port 39754 ssh2 Oct 13 06:20:38 dhoomketu sshd[3820071]: Invalid user mytest from 118.25.1.48 port 37922 ...	2020-10-13 08:59:53
175.24.67.217	attack	Invalid user roger from 175.24.67.217 port 48980	2020-10-13 08:33:29
157.245.98.160	attack	Oct 12 22:59:23 email sshd\[5639\]: Invalid user harris from 157.245.98.160 Oct 12 22:59:23 email sshd\[5639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.98.160 Oct 12 22:59:25 email sshd\[5639\]: Failed password for invalid user harris from 157.245.98.160 port 57044 ssh2 Oct 12 23:02:47 email sshd\[6254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.98.160 user=sync Oct 12 23:02:49 email sshd\[6254\]: Failed password for sync from 157.245.98.160 port 54070 ssh2 ...	2020-10-13 08:24:14
217.160.108.188	attackbots	2 attempts against mh-modsecurity-ban on comet	2020-10-13 08:30:56
196.1.97.206	attack	Oct 13 07:35:22 web1 sshd[6632]: Invalid user grandy from 196.1.97.206 port 40822 Oct 13 07:35:22 web1 sshd[6632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.1.97.206 Oct 13 07:35:22 web1 sshd[6632]: Invalid user grandy from 196.1.97.206 port 40822 Oct 13 07:35:25 web1 sshd[6632]: Failed password for invalid user grandy from 196.1.97.206 port 40822 ssh2 Oct 13 07:43:08 web1 sshd[9144]: Invalid user xvf from 196.1.97.206 port 41918 Oct 13 07:43:08 web1 sshd[9144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.1.97.206 Oct 13 07:43:08 web1 sshd[9144]: Invalid user xvf from 196.1.97.206 port 41918 Oct 13 07:43:11 web1 sshd[9144]: Failed password for invalid user xvf from 196.1.97.206 port 41918 ssh2 Oct 13 07:46:28 web1 sshd[10259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.1.97.206 user=root Oct 13 07:46:30 web1 sshd[10259]: Failed password for ...	2020-10-13 08:41:20
222.186.30.76	attackspambots	13.10.2020 00:41:02 SSH access blocked by firewall	2020-10-13 08:43:37

最近上报的IP列表

58.65.218.242	223.70.163.82	192.168.3.124	177.73.2.57
187.27.162.221	128.14.225.175	5.83.162.38	180.76.165.58
3.21.185.167	119.29.143.201	24.140.199.170	179.215.7.177
124.180.32.34	112.216.226.146	193.107.91.24	109.14.155.220
66.239.207.20	23.254.144.167	114.215.203.127	42.228.42.231