必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): unknown

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
点此参与IP信息讨论
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
139.59.172.23 attackbotsspam 
WordPress login Brute force / Web App Attack on client site.
 2020-07-06 07:03:40
139.59.172.23 attack 
Unauthorized connection attempt detected, IP banned.
 2020-06-08 18:12:11
139.59.172.23 attackspam 
139.59.172.23 - - [28/Apr/2020:08:03:48 +0200] "POST /wp-login.php HTTP/1.1" 200 3405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.172.23 - - [28/Apr/2020:08:03:50 +0200] "POST /wp-login.php HTTP/1.1" 200 3404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
 2020-04-28 14:49:43
139.59.172.149 attackspambots 
Automatic report - XMLRPC Attack
 2020-04-24 22:32:09
139.59.172.23 attackbots 
139.59.172.23 - - [19/Apr/2020:01:29:23 +0200] "GET /wp-login.php HTTP/1.1" 200 5821 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.172.23 - - [19/Apr/2020:01:29:23 +0200] "POST /wp-login.php HTTP/1.1" 200 6601 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.172.23 - - [19/Apr/2020:01:29:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
 2020-04-19 07:33:09
139.59.172.23 attackbotsspam 
139.59.172.23 - - [06/Apr/2020:06:56:25 +0300] "GET /wp-login.php HTTP/1.0" 404 371 "http://dogan.gen.tr/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.172.23 - - [06/Apr/2020:06:56:25 +0300] "GET /wp-login.php HTTP/1.0" 404 371 "http://dogan.gen.tr/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.172.23 - - [06/Apr/2020:06:56:26 +0300] "GET /wp-login.php HTTP/1.0" 404 371 "http://dogan.org/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.172.23 - - [06/Apr/2020:06:56:26 +0300] "GET /wp-login.php HTTP/1.0" 404 371 "http://dogan.org/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.172.23 - - [06/Apr/2020:06:56:26 +0300] "GET /wp-login.php HTTP/1.0" 404 371 "http://dogan.org/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
 2020-04-06 12:14:18
139.59.172.23 attackspam 
CMS (WordPress or Joomla) login attempt.
 2020-03-25 17:31:53
139.59.172.23 attackbots 
139.59.172.23 - - [20/Mar/2020:08:08:25 +0100] "GET /wp-login.php HTTP/1.1" 200 5963 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.172.23 - - [20/Mar/2020:08:08:26 +0100] "POST /wp-login.php HTTP/1.1" 200 6743 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.172.23 - - [20/Mar/2020:08:08:27 +0100] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
 2020-03-20 19:15:37
139.59.172.23 attack 
CMS (WordPress or Joomla) login attempt.
 2020-03-14 12:18:26
139.59.172.23 attackspam 
Automatic report - XMLRPC Attack
 2020-03-09 15:52:04
139.59.172.23 attack 
139.59.172.23 - - [19/Jan/2020:12:54:34 +0000] "POST /wp-login.php HTTP/1.1" 200 6409 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.172.23 - - [19/Jan/2020:12:54:35 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
 2020-01-20 02:14:02
139.59.172.23 attackspam 
139.59.172.23 - - \[06/Jan/2020:22:11:22 +0100\] "POST /wp-login.php HTTP/1.0" 200 7556 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
139.59.172.23 - - \[06/Jan/2020:22:11:23 +0100\] "POST /wp-login.php HTTP/1.0" 200 7381 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
139.59.172.23 - - \[06/Jan/2020:22:11:25 +0100\] "POST /wp-login.php HTTP/1.0" 200 7376 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
 2020-01-07 07:04:16
139.59.172.23 attackspambots 
WordPress login Brute force / Web App Attack on client site.
 2019-12-25 16:42:08
139.59.172.23 attackbotsspam 
WordPress login Brute force / Web App Attack on client site.
 2019-11-11 18:58:32
139.59.172.23 attackbots 
Wordpress bruteforce
 2019-11-05 01:12:37
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.172.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65516
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.172.6.			IN	A

;; AUTHORITY SECTION:
.			539	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:35:43 CST 2022
;; MSG SIZE  rcvd: 105
HOST信息:
6.172.59.139.in-addr.arpa domain name pointer jfdglobal.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
6.172.59.139.in-addr.arpa	name = jfdglobal.com.

Authoritative answers can be found from:
相关IP信息:
139.59.172.34
139.59.172.65
139.59.172.32
139.59.172.134
139.59.172.47
139.59.172.1
139.59.172.132
139.59.172.7
139.59.172.78
139.59.172.94
139.59.172.22
139.59.172.211
139.59.172.240
139.59.172.238
139.59.172.18
139.59.172.245
139.59.172.20
139.59.172.25
139.59.172.54
139.59.172.96
139.59.172.57
139.59.172.235
139.59.172.99
139.59.172.209
139.59.172.73
139.59.172.121
139.59.172.95
139.59.172.92
139.59.172.128
139.59.172.110
139.59.172.129
139.59.172.90
139.59.172.79
139.59.172.53
139.59.172.160
139.59.172.141
139.59.172.247
139.59.172.159
139.59.172.91
139.59.172.66
139.59.172.172
139.59.172.225
139.59.172.200
139.59.172.199
139.59.172.153
139.59.172.125
139.59.172.222
139.59.172.109
139.59.172.120
139.59.172.189
139.59.172.111
139.59.172.205
139.59.172.150
139.59.172.67
139.59.172.123
139.59.172.229
139.59.172.237
139.59.172.64
139.59.172.51
139.59.172.9
139.59.172.126
139.59.172.124
139.59.172.165
139.59.172.191
139.59.172.158
139.59.172.230
139.59.172.192
139.59.172.33
139.59.172.251
139.59.172.118
139.59.172.239
139.59.172.221
139.59.172.174
139.59.172.27
139.59.172.17
139.59.172.202
139.59.172.182
139.59.172.8
139.59.172.250
139.59.172.29
139.59.172.137
139.59.172.232
139.59.172.56
139.59.172.145
139.59.172.23
139.59.172.116
139.59.172.234
139.59.172.11
139.59.172.15
139.59.172.49
139.59.172.2
139.59.172.52
139.59.172.184
139.59.172.151
139.59.172.187
139.59.172.39
139.59.172.31
139.59.172.106
139.59.172.130
139.59.172.12
139.59.172.71
139.59.172.180
139.59.172.75
139.59.172.114
139.59.172.157
139.59.172.76
139.59.172.163
139.59.172.102
139.59.172.210
139.59.172.155
139.59.172.236
139.59.172.175
139.59.172.93
139.59.172.101
139.59.172.60
139.59.172.41
139.59.172.24
139.59.172.248
139.59.172.136
139.59.172.113
139.59.172.178
139.59.172.246
139.59.172.135
139.59.172.152
139.59.172.208
139.59.172.59
139.59.172.181
139.59.172.10
139.59.172.103
139.59.172.168
139.59.172.69
139.59.172.50
139.59.172.220
139.59.172.140
139.59.172.14
139.59.172.231
139.59.172.190
139.59.172.68
139.59.172.13
139.59.172.42
139.59.172.149
139.59.172.215
139.59.172.226
139.59.172.142
139.59.172.100
139.59.172.193
139.59.172.89
139.59.172.176
139.59.172.144
139.59.172.212
139.59.172.217
139.59.172.254
139.59.172.156
139.59.172.16
139.59.172.186
139.59.172.117
139.59.172.48
139.59.172.204
139.59.172.85
139.59.172.194
139.59.172.104
139.59.172.183
139.59.172.198
139.59.172.188
139.59.172.161
139.59.172.173
139.59.172.62
139.59.172.105
139.59.172.4
139.59.172.164
139.59.172.228
139.59.172.5
139.59.172.196
139.59.172.3
139.59.172.214
139.59.172.148
139.59.172.139
139.59.172.6
139.59.172.127
139.59.172.72
139.59.172.82
139.59.172.28
139.59.172.216
139.59.172.201
139.59.172.74
139.59.172.146
139.59.172.44
139.59.172.46
139.59.172.122
139.59.172.179
139.59.172.108
139.59.172.241
139.59.172.97
139.59.172.70
139.59.172.61
139.59.172.167
139.59.172.252
139.59.172.143
139.59.172.81
139.59.172.233
139.59.172.37
139.59.172.63
139.59.172.77
139.59.172.80
139.59.172.138
139.59.172.243
139.59.172.213
139.59.172.171
139.59.172.40
139.59.172.242
139.59.172.147
139.59.172.36
139.59.172.244
139.59.172.19
139.59.172.177
139.59.172.195
139.59.172.58
139.59.172.98
139.59.172.55
139.59.172.30
139.59.172.203
139.59.172.218
139.59.172.219
139.59.172.38
139.59.172.107
139.59.172.162
139.59.172.43
139.59.172.131
139.59.172.115
139.59.172.35
139.59.172.223
139.59.172.87
139.59.172.185
139.59.172.119
139.59.172.253
139.59.172.133
139.59.172.206
139.59.172.83
139.59.172.154
139.59.172.86
139.59.172.166
139.59.172.207
139.59.172.88
139.59.172.84
139.59.172.112
139.59.172.197
139.59.172.170
139.59.172.224
139.59.172.169
139.59.172.227
139.59.172.45
139.59.172.249
139.59.172.26
139.59.172.21
最新评论:
IP 类型 评论内容 时间
172.247.157.206 attackbots 
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/172.247.157.206/ 
 NL - 1H : (19)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : NL 
 NAME ASN : ASN132839 
 
 IP : 172.247.157.206 
 
 CIDR : 172.247.157.0/24 
 
 PREFIX COUNT : 303 
 
 UNIQUE IP COUNT : 604160 
 
 
 WYKRYTE ATAKI Z ASN132839 :  
  1H - 2 
  3H - 2 
  6H - 2 
 12H - 2 
 24H - 3 
 
 DateTime : 2019-10-14 21:53:29 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery
 2019-10-15 07:46:55
113.188.84.14 attackspambots 
Unauthorised access (Oct 15) SRC=113.188.84.14 LEN=52 TTL=118 ID=25449 DF TCP DPT=445 WINDOW=8192 SYN
 2019-10-15 12:10:29
98.143.145.30 attackspambots 
[munged]::443 98.143.145.30 - - [15/Oct/2019:00:07:29 +0200] "POST /[munged]: HTTP/1.1" 200 5530 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 98.143.145.30 - - [15/Oct/2019:00:07:31 +0200] "POST /[munged]: HTTP/1.1" 200 5387 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 98.143.145.30 - - [15/Oct/2019:00:07:32 +0200] "POST /[munged]: HTTP/1.1" 200 5387 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 98.143.145.30 - - [15/Oct/2019:00:07:34 +0200] "POST /[munged]: HTTP/1.1" 200 5387 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 98.143.145.30 - - [15/Oct/2019:00:07:36 +0200] "POST /[munged]: HTTP/1.1" 200 5387 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 98.143.145.30 - - [15/Oct/2019:00:07:37
 2019-10-15 07:46:25
125.162.227.100 attackbots 
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/125.162.227.100/ 
 ID - 1H : (38)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : ID 
 NAME ASN : ASN7713 
 
 IP : 125.162.227.100 
 
 CIDR : 125.162.224.0/22 
 
 PREFIX COUNT : 2255 
 
 UNIQUE IP COUNT : 2765312 
 
 
 WYKRYTE ATAKI Z ASN7713 :  
  1H - 1 
  3H - 1 
  6H - 4 
 12H - 8 
 24H - 9 
 
 DateTime : 2019-10-15 05:54:37 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
 2019-10-15 12:14:42
41.76.169.43 attack 
Oct 14 17:44:53 hanapaa sshd\[5581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.76.169.43  user=root
Oct 14 17:44:56 hanapaa sshd\[5581\]: Failed password for root from 41.76.169.43 port 58470 ssh2
Oct 14 17:49:47 hanapaa sshd\[5951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.76.169.43  user=root
Oct 14 17:49:49 hanapaa sshd\[5951\]: Failed password for root from 41.76.169.43 port 42282 ssh2
Oct 14 17:54:42 hanapaa sshd\[6355\]: Invalid user dan from 41.76.169.43
Oct 14 17:54:42 hanapaa sshd\[6355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.76.169.43
 2019-10-15 12:11:39
188.166.208.131 attack 
Oct 14 11:28:45 hanapaa sshd\[5612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.208.131  user=root
Oct 14 11:28:48 hanapaa sshd\[5612\]: Failed password for root from 188.166.208.131 port 43138 ssh2
Oct 14 11:33:25 hanapaa sshd\[6026\]: Invalid user dice from 188.166.208.131
Oct 14 11:33:25 hanapaa sshd\[6026\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.208.131
Oct 14 11:33:27 hanapaa sshd\[6026\]: Failed password for invalid user dice from 188.166.208.131 port 54988 ssh2
 2019-10-15 07:55:56
123.231.236.196 attack 
*Port Scan* detected from 123.231.236.196 (ID/Indonesia/-). 4 hits in the last 100 seconds
 2019-10-15 12:03:05
51.75.195.39 attack 
Oct 15 06:55:15 tuotantolaitos sshd[31416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.195.39
Oct 15 06:55:17 tuotantolaitos sshd[31416]: Failed password for invalid user admin1 from 51.75.195.39 port 37072 ssh2
...
 2019-10-15 12:07:34
128.199.243.138 attackbotsspam 
Oct 14 21:44:21 rotator sshd\[18809\]: Invalid user toor from 128.199.243.138Oct 14 21:44:23 rotator sshd\[18809\]: Failed password for invalid user toor from 128.199.243.138 port 56910 ssh2Oct 14 21:48:47 rotator sshd\[19609\]: Invalid user 2wsx\#EDC from 128.199.243.138Oct 14 21:48:49 rotator sshd\[19609\]: Failed password for invalid user 2wsx\#EDC from 128.199.243.138 port 40598 ssh2Oct 14 21:53:18 rotator sshd\[20399\]: Invalid user 123ASDasd$%\^ from 128.199.243.138Oct 14 21:53:19 rotator sshd\[20399\]: Failed password for invalid user 123ASDasd$%\^ from 128.199.243.138 port 52520 ssh2
...
 2019-10-15 07:52:43
206.81.21.47 attack 
WordPress login Brute force / Web App Attack on client site.
 2019-10-15 12:08:05
128.199.240.173 attack 
*Port Scan* detected from 128.199.240.173 (SG/Singapore/-). 4 hits in the last 186 seconds
 2019-10-15 12:01:03
89.110.48.143 attack 
[munged]::443 89.110.48.143 - - [14/Oct/2019:23:40:34 +0200] "POST /[munged]: HTTP/1.1" 200 10072 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 89.110.48.143 - - [14/Oct/2019:23:40:34 +0200] "POST /[munged]: HTTP/1.1" 200 5396 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 89.110.48.143 - - [14/Oct/2019:23:40:35 +0200] "POST /[munged]: HTTP/1.1" 200 5396 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 89.110.48.143 - - [14/Oct/2019:23:40:35 +0200] "POST /[munged]: HTTP/1.1" 200 5396 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 89.110.48.143 - - [14/Oct/2019:23:40:36 +0200] "POST /[munged]: HTTP/1.1" 200 5396 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 89.110.48.143 - - [14/Oct/2019:23:40:37
 2019-10-15 07:44:16
31.171.0.55 attackspambots 
Oct 14 21:51:28 imap-login: Info: Disconnected \(auth failed, 1 attempts in 14 secs\): user=\, method=PLAIN, rip=31.171.0.55, lip=192.168.100.101, session=\\
Oct 14 21:51:36 imap-login: Info: Disconnected \(auth failed, 1 attempts in 14 secs\): user=\, method=PLAIN, rip=31.171.0.55, lip=192.168.100.101, session=\\
Oct 14 21:51:37 imap-login: Info: Disconnected \(no auth attempts in 0 secs\): user=\<\>, rip=31.171.0.55, lip=192.168.100.101, session=\\
Oct 14 21:51:38 imap-login: Info: Disconnected \(no auth attempts in 0 secs\): user=\<\>, rip=31.171.0.55, lip=192.168.100.101, session=\\
Oct 14 21:51:48 imap-login: Info: Disconnected \(no auth attempts in 0 secs\): user=\<\>, rip=31.171.0.55, lip=192.168.100.101, session=\\
Oct 14 21:51:51 imap-login: Info: Disconnected \(no auth attempts in 0 secs\): user=\<\>, rip=31.171.0.55, lip=192.168.100.101, session=\
 2019-10-15 07:42:53
134.249.133.197 attackbotsspam 
$f2bV_matches
 2019-10-15 07:46:01
23.94.133.72 attack 
Oct 15 05:54:52 srv206 sshd[31044]: Invalid user ij from 23.94.133.72
Oct 15 05:54:52 srv206 sshd[31044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.133.72
Oct 15 05:54:52 srv206 sshd[31044]: Invalid user ij from 23.94.133.72
Oct 15 05:54:54 srv206 sshd[31044]: Failed password for invalid user ij from 23.94.133.72 port 47746 ssh2
...
 2019-10-15 12:06:56

最近上报的IP列表

139.59.172.121 118.254.157.63 139.59.171.66 139.59.172.159
139.59.170.36 139.59.173.151 139.59.173.192 139.59.173.206
139.59.173.234 118.254.157.7 139.59.173.5 139.59.174.253
139.59.173.21 139.59.173.75 139.59.173.58 139.59.173.7
139.59.174.244 139.59.174.41 139.59.175.192 139.59.175.219