必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
点此参与IP信息讨论
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
139.59.5.179 attack 
139.59.5.179 - - [06/Oct/2020:19:11:30 +0100] "POST /wp-login.php HTTP/1.1" 200 2426 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.5.179 - - [06/Oct/2020:19:11:31 +0100] "POST /wp-login.php HTTP/1.1" 200 2407 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.5.179 - - [06/Oct/2020:19:11:33 +0100] "POST /wp-login.php HTTP/1.1" 200 2441 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
 2020-10-07 04:09:06
139.59.59.75 attackbots 
139.59.59.75 - - [06/Oct/2020:20:12:56 +0100] "POST /wp-login.php HTTP/1.1" 200 2141 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.59.75 - - [06/Oct/2020:20:12:58 +0100] "POST /wp-login.php HTTP/1.1" 200 2173 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.59.75 - - [06/Oct/2020:20:12:58 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
 2020-10-07 03:56:44
139.59.5.179 attack 
CMS (WordPress or Joomla) login attempt.
 2020-10-06 20:11:48
139.59.59.75 attackbots 
139.59.59.75 is unauthorized and has been banned by fail2ban
 2020-10-06 19:57:50
139.59.58.115 attackspam 
 TCP (SYN) 139.59.58.115:41161 -> port 16666, len 44
 2020-10-04 05:48:16
139.59.58.115 attackspam 
Port Scan
...
 2020-10-03 13:31:50
139.59.59.102 attackspam 
Port scan: Attack repeated for 24 hours
 2020-10-02 06:56:36
139.59.59.102 attackspambots 
Oct  1 17:23:04 localhost sshd\[6134\]: Invalid user mailer from 139.59.59.102
Oct  1 17:23:04 localhost sshd\[6134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.59.102
Oct  1 17:23:06 localhost sshd\[6134\]: Failed password for invalid user mailer from 139.59.59.102 port 58682 ssh2
Oct  1 17:26:56 localhost sshd\[6532\]: Invalid user Qwer123456 from 139.59.59.102
Oct  1 17:26:56 localhost sshd\[6532\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.59.102
...
 2020-10-01 23:28:05
139.59.57.2 attack 
2020-09-30T18:58:27.0319611495-001 sshd[24174]: Invalid user postgres from 139.59.57.2 port 38182
2020-09-30T18:58:28.9923601495-001 sshd[24174]: Failed password for invalid user postgres from 139.59.57.2 port 38182 ssh2
2020-09-30T19:01:48.3197441495-001 sshd[24371]: Invalid user jerry from 139.59.57.2 port 33216
2020-09-30T19:01:48.3238011495-001 sshd[24371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.57.2
2020-09-30T19:01:48.3197441495-001 sshd[24371]: Invalid user jerry from 139.59.57.2 port 33216
2020-09-30T19:01:50.2062181495-001 sshd[24371]: Failed password for invalid user jerry from 139.59.57.2 port 33216 ssh2
...
 2020-10-01 07:35:24
139.59.59.102 attackspambots 
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
 2020-09-29 03:29:55
139.59.57.64 attackspambots 
139.59.57.64 - - [16/Sep/2020:04:48:19 +0100] "POST /wp-login.php HTTP/1.1" 200 1967 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.57.64 - - [16/Sep/2020:04:48:21 +0100] "POST /wp-login.php HTTP/1.1" 200 1948 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.57.64 - - [16/Sep/2020:04:48:21 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
 2020-09-16 20:27:08
139.59.57.64 attackspam 
139.59.57.64 - - [16/Sep/2020:04:48:19 +0100] "POST /wp-login.php HTTP/1.1" 200 1967 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.57.64 - - [16/Sep/2020:04:48:21 +0100] "POST /wp-login.php HTTP/1.1" 200 1948 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.57.64 - - [16/Sep/2020:04:48:21 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
 2020-09-16 12:59:04
139.59.59.102 attack 
$f2bV_matches
 2020-09-16 12:38:29
139.59.57.64 attackspambots 
139.59.57.64 - - [15/Sep/2020:18:01:15 +0100] "POST /wp-login.php HTTP/1.1" 200 1996 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.57.64 - - [15/Sep/2020:18:01:21 +0100] "POST /wp-login.php HTTP/1.1" 200 1929 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.57.64 - - [15/Sep/2020:18:01:22 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
 2020-09-16 04:44:36
139.59.59.102 attackbotsspam 
Brute-force attempt banned
 2020-09-16 04:25:14
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.5.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33035
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.5.157.			IN	A

;; AUTHORITY SECTION:
.			377	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 12:41:06 CST 2022
;; MSG SIZE  rcvd: 105
HOST信息:
Host 157.5.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 157.5.59.139.in-addr.arpa: NXDOMAIN
相关IP信息:
139.59.5.218
139.59.5.160
139.59.5.148
139.59.5.236
139.59.5.241
139.59.5.254
139.59.5.235
139.59.5.141
139.59.5.95
139.59.5.229
139.59.5.38
139.59.5.158
139.59.5.27
139.59.5.20
139.59.5.231
139.59.5.25
139.59.5.224
139.59.5.30
139.59.5.112
139.59.5.51
139.59.5.153
139.59.5.250
139.59.5.248
139.59.5.80
139.59.5.55
139.59.5.73
139.59.5.42
139.59.5.89
139.59.5.213
139.59.5.205
139.59.5.226
139.59.5.122
139.59.5.137
139.59.5.17
139.59.5.151
139.59.5.232
139.59.5.75
139.59.5.29
139.59.5.129
139.59.5.28
139.59.5.50
139.59.5.178
139.59.5.66
139.59.5.155
139.59.5.96
139.59.5.185
139.59.5.207
139.59.5.221
139.59.5.59
139.59.5.190
139.59.5.136
139.59.5.132
139.59.5.107
139.59.5.128
139.59.5.163
139.59.5.11
139.59.5.134
139.59.5.103
139.59.5.228
139.59.5.84
139.59.5.44
139.59.5.204
139.59.5.219
139.59.5.162
139.59.5.202
139.59.5.197
139.59.5.189
139.59.5.225
139.59.5.201
139.59.5.217
139.59.5.168
139.59.5.109
139.59.5.82
139.59.5.124
139.59.5.54
139.59.5.88
139.59.5.195
139.59.5.173
139.59.5.67
139.59.5.104
139.59.5.181
139.59.5.144
139.59.5.184
139.59.5.133
139.59.5.78
139.59.5.24
139.59.5.108
139.59.5.186
139.59.5.101
139.59.5.61
139.59.5.33
139.59.5.1
139.59.5.165
139.59.5.240
139.59.5.119
139.59.5.94
139.59.5.71
139.59.5.176
139.59.5.83
139.59.5.125
139.59.5.23
139.59.5.58
139.59.5.16
139.59.5.91
139.59.5.150
139.59.5.146
139.59.5.243
139.59.5.187
139.59.5.81
139.59.5.177
139.59.5.19
139.59.5.203
139.59.5.215
139.59.5.222
139.59.5.53
139.59.5.106
139.59.5.34
139.59.5.105
139.59.5.60
139.59.5.140
139.59.5.56
139.59.5.98
139.59.5.188
139.59.5.13
139.59.5.171
139.59.5.252
139.59.5.194
139.59.5.142
139.59.5.161
139.59.5.68
139.59.5.90
139.59.5.76
139.59.5.220
139.59.5.43
139.59.5.72
139.59.5.182
139.59.5.180
139.59.5.175
139.59.5.7
139.59.5.70
139.59.5.156
139.59.5.21
139.59.5.10
139.59.5.149
139.59.5.193
139.59.5.159
139.59.5.116
139.59.5.87
139.59.5.143
139.59.5.8
139.59.5.120
139.59.5.223
139.59.5.5
139.59.5.196
139.59.5.208
139.59.5.138
139.59.5.253
139.59.5.4
139.59.5.247
139.59.5.22
139.59.5.100
139.59.5.246
139.59.5.214
139.59.5.126
139.59.5.166
139.59.5.85
139.59.5.239
139.59.5.102
139.59.5.37
139.59.5.127
139.59.5.18
139.59.5.174
139.59.5.35
139.59.5.145
139.59.5.49
139.59.5.244
139.59.5.233
139.59.5.234
139.59.5.79
139.59.5.216
139.59.5.238
139.59.5.99
139.59.5.147
139.59.5.199
139.59.5.130
139.59.5.249
139.59.5.110
139.59.5.69
139.59.5.114
139.59.5.157
139.59.5.2
139.59.5.139
139.59.5.121
139.59.5.170
139.59.5.212
139.59.5.131
139.59.5.200
139.59.5.227
139.59.5.211
139.59.5.9
139.59.5.111
139.59.5.183
139.59.5.6
139.59.5.14
139.59.5.237
139.59.5.115
139.59.5.242
139.59.5.179
139.59.5.3
139.59.5.39
139.59.5.113
139.59.5.152
139.59.5.192
139.59.5.118
139.59.5.209
139.59.5.164
139.59.5.31
139.59.5.15
139.59.5.117
139.59.5.32
139.59.5.64
139.59.5.230
139.59.5.135
139.59.5.62
139.59.5.63
139.59.5.97
139.59.5.65
139.59.5.123
139.59.5.36
139.59.5.57
139.59.5.210
139.59.5.154
139.59.5.40
139.59.5.48
139.59.5.169
139.59.5.52
139.59.5.251
139.59.5.45
139.59.5.245
139.59.5.172
139.59.5.77
139.59.5.191
139.59.5.26
139.59.5.46
139.59.5.198
139.59.5.92
139.59.5.86
139.59.5.41
139.59.5.12
139.59.5.74
139.59.5.167
139.59.5.47
139.59.5.93
139.59.5.206
最新评论:
IP 类型 评论内容 时间
121.40.212.94 attackspambots 
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
 2020-09-06 07:21:04
130.185.155.34 attackspam 
Sep  5 21:16:54 rancher-0 sshd[1452491]: Invalid user uftp from 130.185.155.34 port 36044
...
 2020-09-06 07:14:35
171.13.47.75 attackbots 
Lines containing failures of 171.13.47.75 (max 1000)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=171.13.47.75
 2020-09-06 07:15:41
61.133.232.253 attackspambots 
Sep  5 19:16:13 Tower sshd[29504]: Connection from 61.133.232.253 port 7757 on 192.168.10.220 port 22 rdomain ""
Sep  5 19:16:15 Tower sshd[29504]: Failed password for root from 61.133.232.253 port 7757 ssh2
Sep  5 19:16:15 Tower sshd[29504]: Received disconnect from 61.133.232.253 port 7757:11: Bye Bye [preauth]
Sep  5 19:16:15 Tower sshd[29504]: Disconnected from authenticating user root 61.133.232.253 port 7757 [preauth]
 2020-09-06 07:16:57
128.134.0.72 attackspam 
port scan and connect, tcp 23 (telnet)
 2020-09-06 07:24:07
91.106.38.182 attackbotsspam 
2020-09-05 11:37:41.137096-0500  localhost smtpd[41784]: NOQUEUE: reject: RCPT from unknown[91.106.38.182]: 554 5.7.1 Service unavailable; Client host [91.106.38.182] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/91.106.38.182; from= to= proto=ESMTP helo=<[91.106.38.181]>
 2020-09-06 07:39:33
52.125.140.56 attackbots 
Unauthorized IMAP connection attempt
 2020-09-06 07:29:15
78.154.217.251 attack 
Aug 31 07:15:38 uapps sshd[25225]: Invalid user admin from 78.154.217.251 port 48203
Aug 31 07:15:40 uapps sshd[25225]: Failed password for invalid user admin from 78.154.217.251 port 48203 ssh2
Aug 31 07:15:41 uapps sshd[25225]: Received disconnect from 78.154.217.251 port 48203:11: Bye Bye [preauth]
Aug 31 07:15:41 uapps sshd[25225]: Disconnected from invalid user admin 78.154.217.251 port 48203 [preauth]
Aug 31 07:15:42 uapps sshd[25227]: Invalid user admin from 78.154.217.251 port 48273
Aug 31 07:15:44 uapps sshd[25227]: Failed password for invalid user admin from 78.154.217.251 port 48273 ssh2
Aug 31 07:15:46 uapps sshd[25227]: Received disconnect from 78.154.217.251 port 48273:11: Bye Bye [preauth]
Aug 31 07:15:46 uapps sshd[25227]: Disconnected from invalid user admin 78.154.217.251 port 48273 [preauth]
Aug 31 07:15:47 uapps sshd[25229]: Invalid user admin from 78.154.217.251 port 48435
Aug 31 07:15:49 uapps sshd[25229]: Failed password for invalid user admin fro........
-------------------------------
 2020-09-06 07:35:41
165.227.48.147 attack 
Sep  5 20:26:11 prod4 sshd\[25841\]: Failed password for root from 165.227.48.147 port 35848 ssh2
Sep  5 20:30:54 prod4 sshd\[28213\]: Failed password for root from 165.227.48.147 port 43530 ssh2
Sep  5 20:35:34 prod4 sshd\[30868\]: Failed password for root from 165.227.48.147 port 51210 ssh2
...
 2020-09-06 07:07:41
45.142.120.61 attack 
2020-09-05T17:29:20.508116linuxbox-skyline auth[103878]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=megamediamanager rhost=45.142.120.61
...
 2020-09-06 07:34:29
80.82.64.210 attackbots 
[MK-VM2] Blocked by UFW
 2020-09-06 07:14:17
41.82.99.183 attack 
Sep  5 23:22:31 mxgate1 postfix/postscreen[9512]: CONNECT from [41.82.99.183]:37756 to [176.31.12.44]:25
Sep  5 23:22:31 mxgate1 postfix/dnsblog[9554]: addr 41.82.99.183 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  5 23:22:31 mxgate1 postfix/dnsblog[9554]: addr 41.82.99.183 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  5 23:22:31 mxgate1 postfix/dnsblog[9554]: addr 41.82.99.183 listed by domain zen.spamhaus.org as 127.0.0.11
Sep  5 23:22:31 mxgate1 postfix/dnsblog[9555]: addr 41.82.99.183 listed by domain cbl.abuseat.org as 127.0.0.2
Sep  5 23:22:31 mxgate1 postfix/dnsblog[9553]: addr 41.82.99.183 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Sep  5 23:22:31 mxgate1 postfix/dnsblog[9552]: addr 41.82.99.183 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  5 23:22:37 mxgate1 postfix/postscreen[9512]: DNSBL rank 5 for [41.82.99.183]:37756
Sep x@x
Sep  5 23:22:39 mxgate1 postfix/postscreen[9512]: HANGUP after 1.6 from [41.82.99.183]:37756 in tests ........
-------------------------------
 2020-09-06 07:37:14
222.186.42.213 attackspambots 
Sep  6 01:10:05 OPSO sshd\[23123\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.213  user=root
Sep  6 01:10:07 OPSO sshd\[23123\]: Failed password for root from 222.186.42.213 port 43549 ssh2
Sep  6 01:10:09 OPSO sshd\[23123\]: Failed password for root from 222.186.42.213 port 43549 ssh2
Sep  6 01:10:12 OPSO sshd\[23123\]: Failed password for root from 222.186.42.213 port 43549 ssh2
Sep  6 01:10:14 OPSO sshd\[23191\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.213  user=root
 2020-09-06 07:11:05
178.32.163.202 attackbotsspam 
Sep  5 21:07:14 ws26vmsma01 sshd[149646]: Failed password for root from 178.32.163.202 port 37398 ssh2
...
 2020-09-06 07:42:13
145.239.80.14 attackspambots 
Sep  6 00:00:51 markkoudstaal sshd[19338]: Failed password for root from 145.239.80.14 port 47432 ssh2
Sep  6 00:04:41 markkoudstaal sshd[28362]: Failed password for root from 145.239.80.14 port 53272 ssh2
...
 2020-09-06 07:12:54

最近上报的IP列表

139.59.46.233 139.59.53.123 139.59.56.177 139.59.50.239
139.59.58.204 139.59.56.84 139.59.58.252 139.59.59.170
139.59.59.50 139.59.6.114 139.59.6.178 139.59.59.51
139.59.6.154 139.59.60.165 139.59.63.182 139.59.65.141
139.59.64.151 139.59.65.239 139.59.56.7 139.59.64.47