必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): unknown

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
139.59.215.171 attack
2020-10-13T02:06:50.771160vps-web1.h3z.jp sshd[15016]: Invalid user ftpuser from 139.59.215.171 port 51442
2020-10-13T02:08:04.431562vps-web1.h3z.jp sshd[15026]: Invalid user ftpuser from 139.59.215.171 port 35640
2020-10-13T02:08:41.876310vps-web1.h3z.jp sshd[15032]: Invalid user postgres from 139.59.215.171 port 55970
...
2020-10-13 01:11:47
139.59.215.171 attack
2020-10-12T11:11:07.239948mail.standpoint.com.ua sshd[32054]: Invalid user steam from 139.59.215.171 port 60818
2020-10-12T11:11:07.242903mail.standpoint.com.ua sshd[32054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.215.171
2020-10-12T11:11:07.239948mail.standpoint.com.ua sshd[32054]: Invalid user steam from 139.59.215.171 port 60818
2020-10-12T11:11:08.523134mail.standpoint.com.ua sshd[32054]: Failed password for invalid user steam from 139.59.215.171 port 60818 ssh2
2020-10-12T11:11:48.644489mail.standpoint.com.ua sshd[32129]: Invalid user centos from 139.59.215.171 port 56396
...
2020-10-12 16:34:23
139.59.215.241 attackbots
139.59.215.241 - - [10/Oct/2020:22:22:10 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.215.241 - - [10/Oct/2020:22:22:11 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.215.241 - - [10/Oct/2020:22:22:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-10-11 04:38:14
139.59.212.248 attackbotsspam
Oct 3 09:02:34 *hidden* postfix/postscreen[61878]: DNSBL rank 3 for [139.59.212.248]:33318
2020-10-11 01:24:45
139.59.215.241 attackbotsspam
139.59.215.241 - - [10/Oct/2020:11:36:45 +0100] "POST /wp-login.php HTTP/1.1" 200 2556 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.215.241 - - [10/Oct/2020:11:36:47 +0100] "POST /wp-login.php HTTP/1.1" 200 2539 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.215.241 - - [10/Oct/2020:11:36:47 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-10 20:37:04
139.59.212.248 attackbotsspam
Oct 3 09:02:34 *hidden* postfix/postscreen[61878]: DNSBL rank 3 for [139.59.212.248]:33318
2020-10-10 17:17:27
139.59.212.248 attack
Oct  4 22:32:46 web01.agentur-b-2.de postfix/smtpd[1795543]: warning: unknown[139.59.212.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  4 22:32:46 web01.agentur-b-2.de postfix/smtpd[1795543]: lost connection after AUTH from unknown[139.59.212.248]
Oct  4 22:36:31 web01.agentur-b-2.de postfix/smtpd[1795503]: warning: unknown[139.59.212.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  4 22:36:31 web01.agentur-b-2.de postfix/smtpd[1795503]: lost connection after AUTH from unknown[139.59.212.248]
Oct  4 22:37:20 web01.agentur-b-2.de postfix/smtpd[1795498]: warning: unknown[139.59.212.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  4 22:37:20 web01.agentur-b-2.de postfix/smtpd[1795498]: lost connection after AUTH from unknown[139.59.212.248]
2020-10-05 05:31:26
139.59.211.245 attackspam
SSH brutforce
2020-10-05 04:59:23
139.59.212.248 attackspambots
Oct  4 06:04:42 web01.agentur-b-2.de postfix/smtpd[1400041]: warning: unknown[139.59.212.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  4 06:04:42 web01.agentur-b-2.de postfix/smtpd[1400041]: lost connection after AUTH from unknown[139.59.212.248]
Oct  4 06:08:26 web01.agentur-b-2.de postfix/smtpd[1400041]: warning: unknown[139.59.212.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  4 06:08:26 web01.agentur-b-2.de postfix/smtpd[1400041]: lost connection after AUTH from unknown[139.59.212.248]
Oct  4 06:09:15 web01.agentur-b-2.de postfix/smtpd[1400041]: warning: unknown[139.59.212.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-10-04 21:26:15
139.59.211.245 attackbots
Oct  4 14:52:35 host sshd[18768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.211.245  user=root
Oct  4 14:52:37 host sshd[18768]: Failed password for root from 139.59.211.245 port 38516 ssh2
...
2020-10-04 20:53:33
139.59.211.245 attackspambots
detected by Fail2Ban
2020-10-04 12:36:51
139.59.211.245 attackbots
Sep 30 20:24:04 buvik sshd[11406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.211.245
Sep 30 20:24:06 buvik sshd[11406]: Failed password for invalid user allan from 139.59.211.245 port 44884 ssh2
Sep 30 20:30:58 buvik sshd[12480]: Invalid user ftpuser from 139.59.211.245
...
2020-10-01 03:01:08
139.59.211.245 attack
Invalid user administrador from 139.59.211.245 port 40100
2020-09-30 19:13:32
139.59.215.241 attackbotsspam
139.59.215.241 - - [19/Sep/2020:16:13:02 +0100] "POST /wp-login.php HTTP/1.1" 200 2371 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.215.241 - - [19/Sep/2020:16:13:03 +0100] "POST /wp-login.php HTTP/1.1" 200 2342 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.215.241 - - [19/Sep/2020:16:13:03 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-20 01:56:43
139.59.215.241 attackbotsspam
139.59.215.241 - - [19/Sep/2020:06:55:27 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.215.241 - - [19/Sep/2020:06:55:27 +0200] "POST /wp-login.php HTTP/1.1" 200 2698 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.215.241 - - [19/Sep/2020:06:55:28 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.215.241 - - [19/Sep/2020:06:55:28 +0200] "POST /wp-login.php HTTP/1.1" 200 2697 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.215.241 - - [19/Sep/2020:06:55:28 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.215.241 - - [19/Sep/2020:06:55:28 +0200] "POST /wp-login.php HTTP/1.1" 200 2696 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/201001
...
2020-09-19 17:48:19
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.21.196
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4990
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.21.196.			IN	A

;; AUTHORITY SECTION:
.			541	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:36:40 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
Host 196.21.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 196.21.59.139.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
218.92.0.207 attackspam
Apr  3 15:57:39 eventyay sshd[13714]: Failed password for root from 218.92.0.207 port 31761 ssh2
Apr  3 15:59:10 eventyay sshd[13736]: Failed password for root from 218.92.0.207 port 22853 ssh2
Apr  3 15:59:12 eventyay sshd[13736]: Failed password for root from 218.92.0.207 port 22853 ssh2
...
2020-04-03 22:20:46
78.165.14.184 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 03-04-2020 14:00:11.
2020-04-03 22:16:29
159.65.11.106 attackbotsspam
Masscan Port Scanning Tool Detection
2020-04-03 21:39:12
185.210.244.48 attack
Port probing on unauthorized port 3390
2020-04-03 21:53:34
182.232.233.165 attackspambots
Unauthorized connection attempt from IP address 182.232.233.165 on Port 445(SMB)
2020-04-03 21:40:57
77.40.2.67 attackbots
$f2bV_matches
2020-04-03 22:04:19
144.217.214.100 attack
2020-04-03T09:00:11.873896mail.thespaminator.com sshd[5152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip100.ip-144-217-214.net  user=root
2020-04-03T09:00:14.237470mail.thespaminator.com sshd[5152]: Failed password for root from 144.217.214.100 port 50114 ssh2
...
2020-04-03 22:10:55
173.82.116.94 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 03-04-2020 14:00:10.
2020-04-03 22:18:24
185.41.207.45 attackbots
Attempt to attack host OS, exploiting network vulnerabilities, on 03-04-2020 14:00:11.
2020-04-03 22:17:15
162.243.133.158 attackbots
firewall-block, port(s): 3389/tcp
2020-04-03 22:26:11
145.239.95.206 attack
postfix
2020-04-03 21:57:39
120.133.1.16 attack
Apr  3 20:00:25 itv-usvr-02 sshd[12148]: Invalid user sj from 120.133.1.16 port 42400
Apr  3 20:00:25 itv-usvr-02 sshd[12148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.133.1.16
Apr  3 20:00:25 itv-usvr-02 sshd[12148]: Invalid user sj from 120.133.1.16 port 42400
Apr  3 20:00:28 itv-usvr-02 sshd[12148]: Failed password for invalid user sj from 120.133.1.16 port 42400 ssh2
2020-04-03 21:51:36
47.176.39.218 attackspam
Apr  3 15:15:52 srv206 sshd[26968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-47-176-39-218.lsan.ca.frontiernet.net  user=root
Apr  3 15:15:54 srv206 sshd[26968]: Failed password for root from 47.176.39.218 port 48889 ssh2
...
2020-04-03 21:49:26
205.185.125.140 attackspambots
Invalid user admin from 205.185.125.140 port 48784
2020-04-03 22:16:46
34.92.121.178 attackspambots
Lines containing failures of 34.92.121.178 (max 1000)
Apr  1 01:05:06 localhost sshd[30831]: User r.r from 34.92.121.178 not allowed because listed in DenyUsers
Apr  1 01:05:06 localhost sshd[30831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.121.178  user=r.r
Apr  1 01:05:08 localhost sshd[30831]: Failed password for invalid user r.r from 34.92.121.178 port 58624 ssh2
Apr  1 01:05:10 localhost sshd[30831]: Received disconnect from 34.92.121.178 port 58624:11: Bye Bye [preauth]
Apr  1 01:05:10 localhost sshd[30831]: Disconnected from invalid user r.r 34.92.121.178 port 58624 [preauth]
Apr  1 01:16:00 localhost sshd[1572]: User r.r from 34.92.121.178 not allowed because listed in DenyUsers
Apr  1 01:16:00 localhost sshd[1572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.121.178  user=r.r
Apr  1 01:16:02 localhost sshd[1572]: Failed password for invalid user r.r from 34.92.........
------------------------------
2020-04-03 21:49:51

最近上报的IP列表

139.59.21.12 139.59.21.158 139.59.21.20 139.59.21.228
139.59.21.25 139.59.21.37 139.59.210.1 139.59.21.27
139.59.210.125 139.59.210.134 118.254.202.155 139.59.210.191
139.59.211.247 139.59.211.6 139.59.211.77 139.59.212.10
139.59.212.100 139.59.212.30 139.59.211.142 139.59.211.183