必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
139.59.61.103 attack
2020-10-13T21:49:56.558044shield sshd\[20328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.61.103  user=root
2020-10-13T21:49:57.942513shield sshd\[20328\]: Failed password for root from 139.59.61.103 port 39274 ssh2
2020-10-13T21:51:12.508806shield sshd\[20501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.61.103  user=root
2020-10-13T21:51:13.993354shield sshd\[20501\]: Failed password for root from 139.59.61.103 port 57790 ssh2
2020-10-13T21:52:32.116952shield sshd\[20665\]: Invalid user Affordable from 139.59.61.103 port 48074
2020-10-14 08:03:24
139.59.61.103 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-10-13 03:02:47
139.59.61.103 attack
Oct 11 19:29:31 auw2 sshd\[25585\]: Invalid user dulap from 139.59.61.103
Oct 11 19:29:31 auw2 sshd\[25585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.61.103
Oct 11 19:29:32 auw2 sshd\[25585\]: Failed password for invalid user dulap from 139.59.61.103 port 49060 ssh2
Oct 11 19:33:30 auw2 sshd\[25908\]: Invalid user tsukada from 139.59.61.103
Oct 11 19:33:30 auw2 sshd\[25908\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.61.103
2020-10-12 18:30:40
139.59.61.103 attackbotsspam
Sep 29 00:07:59 *hidden* sshd[21038]: Invalid user sql from 139.59.61.103 port 49496 Sep 29 00:07:59 *hidden* sshd[21038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.61.103 Sep 29 00:08:00 *hidden* sshd[21038]: Failed password for invalid user sql from 139.59.61.103 port 49496 ssh2
2020-09-29 06:53:36
139.59.61.103 attackspam
Time:     Sun Sep 27 02:26:36 2020 +0000
IP:       139.59.61.103 (IN/India/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 27 02:21:17 activeserver sshd[18781]: Invalid user vbox from 139.59.61.103 port 41542
Sep 27 02:21:19 activeserver sshd[18781]: Failed password for invalid user vbox from 139.59.61.103 port 41542 ssh2
Sep 27 02:24:47 activeserver sshd[27012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.61.103  user=postgres
Sep 27 02:24:49 activeserver sshd[27012]: Failed password for postgres from 139.59.61.103 port 59988 ssh2
Sep 27 02:26:32 activeserver sshd[31455]: Invalid user canal from 139.59.61.103 port 40978
2020-09-28 23:21:40
139.59.61.103 attackspambots
2020-09-28T09:52:17.961948afi-git.jinr.ru sshd[3444]: Invalid user jeremy from 139.59.61.103 port 35444
2020-09-28T09:52:17.965352afi-git.jinr.ru sshd[3444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.61.103
2020-09-28T09:52:17.961948afi-git.jinr.ru sshd[3444]: Invalid user jeremy from 139.59.61.103 port 35444
2020-09-28T09:52:19.884653afi-git.jinr.ru sshd[3444]: Failed password for invalid user jeremy from 139.59.61.103 port 35444 ssh2
2020-09-28T09:56:45.397638afi-git.jinr.ru sshd[4796]: Invalid user ubuntu from 139.59.61.103 port 45374
...
2020-09-28 15:25:13
139.59.61.103 attack
Sep  7 01:12:53 serwer sshd\[5769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.61.103  user=root
Sep  7 01:12:55 serwer sshd\[5769\]: Failed password for root from 139.59.61.103 port 50532 ssh2
Sep  7 01:19:17 serwer sshd\[6461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.61.103  user=root
Sep  7 01:19:19 serwer sshd\[6461\]: Failed password for root from 139.59.61.103 port 49128 ssh2
Sep  7 01:23:13 serwer sshd\[6878\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.61.103  user=root
Sep  7 01:23:15 serwer sshd\[6878\]: Failed password for root from 139.59.61.103 port 50104 ssh2
Sep  7 01:27:06 serwer sshd\[7272\]: Invalid user murka from 139.59.61.103 port 51090
Sep  7 01:27:06 serwer sshd\[7272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.61.103
Sep  7 01:27:08 serwer
...
2020-09-08 20:47:46
139.59.61.103 attackspam
 TCP (SYN) 139.59.61.103:57595 -> port 15459, len 44
2020-09-08 12:40:34
139.59.61.103 attackspambots
Port Scan
...
2020-09-08 05:17:04
139.59.61.103 attackspam
Too many connections or unauthorized access detected from Arctic banned ip
2020-08-08 02:51:11
139.59.61.103 attackspam
2020-08-06T02:08:22.9814581495-001 sshd[15283]: Invalid user b.321 from 139.59.61.103 port 56422
2020-08-06T02:08:24.7597021495-001 sshd[15283]: Failed password for invalid user b.321 from 139.59.61.103 port 56422 ssh2
2020-08-06T02:12:49.4721471495-001 sshd[15502]: Invalid user ABcd%1234 from 139.59.61.103 port 38780
2020-08-06T02:12:49.4751311495-001 sshd[15502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.61.103
2020-08-06T02:12:49.4721471495-001 sshd[15502]: Invalid user ABcd%1234 from 139.59.61.103 port 38780
2020-08-06T02:12:51.2395491495-001 sshd[15502]: Failed password for invalid user ABcd%1234 from 139.59.61.103 port 38780 ssh2
...
2020-08-06 15:10:40
139.59.61.103 attackbotsspam
Repeated brute force against a port
2020-08-02 23:50:18
139.59.61.103 attack
Jul 31 08:04:00 localhost sshd\[29305\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.61.103  user=root
Jul 31 08:04:01 localhost sshd\[29305\]: Failed password for root from 139.59.61.103 port 39390 ssh2
Jul 31 08:13:00 localhost sshd\[29488\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.61.103  user=root
...
2020-07-31 18:28:15
139.59.61.103 attack
Jul 23 11:08:09 Tower sshd[1396]: refused connect from 39.106.33.124 (39.106.33.124)
Jul 24 02:48:53 Tower sshd[1396]: Connection from 139.59.61.103 port 43788 on 192.168.10.220 port 22 rdomain ""
Jul 24 02:48:55 Tower sshd[1396]: Invalid user evan from 139.59.61.103 port 43788
Jul 24 02:48:55 Tower sshd[1396]: error: Could not get shadow information for NOUSER
Jul 24 02:48:55 Tower sshd[1396]: Failed password for invalid user evan from 139.59.61.103 port 43788 ssh2
Jul 24 02:48:55 Tower sshd[1396]: Received disconnect from 139.59.61.103 port 43788:11: Bye Bye [preauth]
Jul 24 02:48:55 Tower sshd[1396]: Disconnected from invalid user evan 139.59.61.103 port 43788 [preauth]
2020-07-24 17:59:26
139.59.61.103 attackbots
"$f2bV_matches"
2020-07-23 04:08:36
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.61.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22305
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.61.14.			IN	A

;; AUTHORITY SECTION:
.			220	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 17:37:55 CST 2022
;; MSG SIZE  rcvd: 105
HOST信息:
Host 14.61.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 14.61.59.139.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
206.189.52.160 attackbots
miraniessen.de 206.189.52.160 \[11/Nov/2019:07:25:28 +0100\] "POST /wp-login.php HTTP/1.1" 200 5974 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
miraniessen.de 206.189.52.160 \[11/Nov/2019:07:25:33 +0100\] "POST /wp-login.php HTTP/1.1" 200 5975 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-11-11 17:59:57
198.108.66.144 attackbotsspam
PORT-SCAN
2019-11-11 17:41:09
103.140.83.43 attack
Nov 11 07:06:58 mxgate1 postfix/postscreen[31181]: CONNECT from [103.140.83.43]:39657 to [176.31.12.44]:25
Nov 11 07:06:58 mxgate1 postfix/dnsblog[31185]: addr 103.140.83.43 listed by domain cbl.abuseat.org as 127.0.0.2
Nov 11 07:06:58 mxgate1 postfix/dnsblog[31183]: addr 103.140.83.43 listed by domain zen.spamhaus.org as 127.0.0.3
Nov 11 07:06:58 mxgate1 postfix/dnsblog[31183]: addr 103.140.83.43 listed by domain zen.spamhaus.org as 127.0.0.4
Nov 11 07:06:58 mxgate1 postfix/dnsblog[31183]: addr 103.140.83.43 listed by domain zen.spamhaus.org as 127.0.0.11
Nov 11 07:06:58 mxgate1 postfix/dnsblog[31184]: addr 103.140.83.43 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Nov 11 07:06:59 mxgate1 postfix/dnsblog[31201]: addr 103.140.83.43 listed by domain bl.spamcop.net as 127.0.0.2
Nov 11 07:06:59 mxgate1 postfix/dnsblog[31182]: addr 103.140.83.43 listed by domain b.barracudacentral.org as 127.0.0.2
Nov 11 07:07:04 mxgate1 postfix/postscreen[31181]: DNSBL rank 6 for [103........
-------------------------------
2019-11-11 17:57:08
51.254.220.20 attackspambots
$f2bV_matches
2019-11-11 17:49:58
102.68.77.106 attack
Lines containing failures of 102.68.77.106
Nov 11 06:13:41 expertgeeks postfix/smtpd[30505]: connect from unknown[102.68.77.106]
Nov x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=102.68.77.106
2019-11-11 17:38:12
106.12.84.115 attack
$f2bV_matches
2019-11-11 17:49:41
118.25.126.32 attackspam
Nov 11 09:37:12 vps666546 sshd\[5874\]: Invalid user test from 118.25.126.32 port 36552
Nov 11 09:37:12 vps666546 sshd\[5874\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.126.32
Nov 11 09:37:13 vps666546 sshd\[5874\]: Failed password for invalid user test from 118.25.126.32 port 36552 ssh2
Nov 11 09:42:38 vps666546 sshd\[6071\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.126.32  user=root
Nov 11 09:42:40 vps666546 sshd\[6071\]: Failed password for root from 118.25.126.32 port 45800 ssh2
...
2019-11-11 17:55:23
80.211.132.145 attack
Nov 10 23:22:35 hanapaa sshd\[21182\]: Invalid user jsu from 80.211.132.145
Nov 10 23:22:35 hanapaa sshd\[21182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.132.145
Nov 10 23:22:38 hanapaa sshd\[21182\]: Failed password for invalid user jsu from 80.211.132.145 port 49636 ssh2
Nov 10 23:26:18 hanapaa sshd\[21465\]: Invalid user pentrudealerudavid from 80.211.132.145
Nov 10 23:26:18 hanapaa sshd\[21465\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.132.145
2019-11-11 17:35:05
59.36.75.227 attack
$f2bV_matches
2019-11-11 17:38:44
95.54.89.39 attack
Chat Spam
2019-11-11 17:31:33
181.120.246.83 attackbotsspam
2019-11-11T09:36:58.956982abusebot-4.cloudsearch.cf sshd\[19083\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.120.246.83  user=root
2019-11-11 17:39:17
152.32.134.90 attackspambots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/152.32.134.90/ 
 
 HK - 1H : (32)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : HK 
 NAME ASN : ASN135377 
 
 IP : 152.32.134.90 
 
 CIDR : 152.32.134.0/24 
 
 PREFIX COUNT : 216 
 
 UNIQUE IP COUNT : 68352 
 
 
 ATTACKS DETECTED ASN135377 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-11-11 06:26:07 
 
 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN  - data recovery
2019-11-11 17:44:11
86.83.195.222 attack
Automatic report - SSH Brute-Force Attack
2019-11-11 17:46:30
107.129.174.198 attackbotsspam
$f2bV_matches
2019-11-11 17:57:39
129.213.153.229 attack
Nov 11 15:22:12 vibhu-HP-Z238-Microtower-Workstation sshd\[9675\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.153.229  user=root
Nov 11 15:22:14 vibhu-HP-Z238-Microtower-Workstation sshd\[9675\]: Failed password for root from 129.213.153.229 port 28892 ssh2
Nov 11 15:25:38 vibhu-HP-Z238-Microtower-Workstation sshd\[10927\]: Invalid user noge from 129.213.153.229
Nov 11 15:25:38 vibhu-HP-Z238-Microtower-Workstation sshd\[10927\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.153.229
Nov 11 15:25:39 vibhu-HP-Z238-Microtower-Workstation sshd\[10927\]: Failed password for invalid user noge from 129.213.153.229 port 47209 ssh2
...
2019-11-11 18:09:17

最近上报的IP列表

139.59.66.50 139.59.7.192 139.59.66.44 139.59.7.40
139.59.71.27 139.59.75.228 139.59.72.138 139.59.72.87
139.59.72.54 139.59.72.88 139.59.73.216 139.59.78.67
139.59.80.24 139.59.79.139 139.59.80.137 139.59.80.56
139.59.85.26 139.59.85.95 139.59.85.69 139.59.84.119