必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Bengaluru

省份(region): Karnataka

国家(country): India

运营商(isp): Digital Ocean Inc.

主机名(hostname): unknown

机构(organization): DigitalOcean, LLC

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbotsspam
Jul 10 10:32:39 h2421860 postfix/postscreen[5150]: CONNECT from [139.59.77.128]:34880 to [85.214.119.52]:25
Jul 10 10:32:39 h2421860 postfix/dnsblog[5153]: addr 139.59.77.128 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jul 10 10:32:39 h2421860 postfix/dnsblog[5158]: addr 139.59.77.128 listed by domain zen.spamhaus.org as 127.0.0.3
Jul 10 10:32:39 h2421860 postfix/dnsblog[5159]: addr 139.59.77.128 listed by domain Unknown.trblspam.com as 185.53.179.7
Jul 10 10:32:39 h2421860 postfix/dnsblog[5155]: addr 139.59.77.128 listed by domain b.barracudacentral.org as 127.0.0.2
Jul 10 10:32:39 h2421860 postfix/dnsblog[5157]: addr 139.59.77.128 listed by domain dnsbl.sorbs.net as 127.0.0.6
Jul 10 10:32:45 h2421860 postfix/postscreen[5150]: DNSBL rank 8 for [139.59.77.128]:34880
Jul x@x
Jul 10 10:32:46 h2421860 postfix/postscreen[5150]: DISCONNECT [139.59.77.128]:34880


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=139.59.77.128
2019-07-11 01:30:58
相同子网IP讨论:
IP 类型 评论内容 时间
139.59.77.43 attackbotsspam
139.59.77.43 - - \[31/Aug/2020:08:21:10 +0200\] "POST /wp-login.php HTTP/1.0" 200 5615 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
139.59.77.43 - - \[31/Aug/2020:08:21:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 5607 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
139.59.77.43 - - \[31/Aug/2020:08:21:23 +0200\] "POST /wp-login.php HTTP/1.0" 200 5593 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-08-31 14:38:57
139.59.77.43 attackbotsspam
HTTP DDOS
2020-08-09 13:10:07
139.59.77.43 attack
139.59.77.43 - - [07/Aug/2020:05:44:42 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.77.43 - - [07/Aug/2020:05:51:04 +0200] "POST /xmlrpc.php HTTP/1.1" 403 11044 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-07 17:51:28
139.59.77.43 attackspambots
139.59.77.43 - - [15/Jul/2020:03:40:06 +0200] "POST /wp-login.php HTTP/1.1" 200 5418 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.77.43 - - [15/Jul/2020:03:40:12 +0200] "POST /wp-login.php HTTP/1.1" 200 5408 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.77.43 - - [15/Jul/2020:03:40:19 +0200] "POST /wp-login.php HTTP/1.1" 200 5410 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.77.43 - - [15/Jul/2020:03:40:24 +0200] "POST /wp-login.php HTTP/1.1" 200 5409 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.77.43 - - [15/Jul/2020:04:01:33 +0200] "POST /wp-login.php HTTP/1.1" 200 5418 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-07-15 15:36:25
139.59.77.240 attack
Jun  8 03:25:47 webhost01 sshd[18333]: Failed password for root from 139.59.77.240 port 50434 ssh2
...
2020-06-08 04:42:52
139.59.77.240 attackbotsspam
Jun  7 10:41:07 gw1 sshd[26843]: Failed password for root from 139.59.77.240 port 37928 ssh2
...
2020-06-07 14:58:59
139.59.77.101 attackspam
139.59.77.101 - - [05/Jun/2020:22:31:21 +0200] "GET /wp-login.php HTTP/1.1" 200 6521 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.77.101 - - [05/Jun/2020:22:31:23 +0200] "POST /wp-login.php HTTP/1.1" 200 6772 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.77.101 - - [05/Jun/2020:22:31:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-06 10:27:29
139.59.77.240 attackspambots
(sshd) Failed SSH login from 139.59.77.240 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun  3 10:20:52 s1 sshd[10336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240  user=root
Jun  3 10:20:54 s1 sshd[10336]: Failed password for root from 139.59.77.240 port 59984 ssh2
Jun  3 10:36:46 s1 sshd[10954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240  user=root
Jun  3 10:36:48 s1 sshd[10954]: Failed password for root from 139.59.77.240 port 50202 ssh2
Jun  3 10:40:46 s1 sshd[11083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240  user=root
2020-06-03 16:43:28
139.59.77.240 attackbotsspam
May 27 20:13:48 abendstille sshd\[8939\]: Invalid user forest from 139.59.77.240
May 27 20:13:48 abendstille sshd\[8939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240
May 27 20:13:50 abendstille sshd\[8939\]: Failed password for invalid user forest from 139.59.77.240 port 58990 ssh2
May 27 20:20:23 abendstille sshd\[15714\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240  user=root
May 27 20:20:25 abendstille sshd\[15714\]: Failed password for root from 139.59.77.240 port 58754 ssh2
...
2020-05-28 04:15:03
139.59.77.240 attack
May 26 00:03:42 host2 sshd[25721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240  user=r.r
May 26 00:03:45 host2 sshd[25721]: Failed password for r.r from 139.59.77.240 port 57682 ssh2
May 26 00:03:45 host2 sshd[25721]: Received disconnect from 139.59.77.240: 11: Bye Bye [preauth]
May 26 00:11:13 host2 sshd[22335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240  user=r.r
May 26 00:11:15 host2 sshd[22335]: Failed password for r.r from 139.59.77.240 port 58296 ssh2
May 26 00:11:16 host2 sshd[22335]: Received disconnect from 139.59.77.240: 11: Bye Bye [preauth]
May 26 00:15:00 host2 sshd[2672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240  user=r.r
May 26 00:15:02 host2 sshd[2672]: Failed password for r.r from 139.59.77.240 port 41836 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=139.59.77
2020-05-26 20:36:47
139.59.77.56 attackbotsspam
[munged]::80 139.59.77.56 - - [21/Feb/2020:22:29:40 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-"
[munged]::80 139.59.77.56 - - [21/Feb/2020:22:29:55 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-"
[munged]::80 139.59.77.56 - - [21/Feb/2020:22:30:13 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-"
[munged]::80 139.59.77.56 - - [21/Feb/2020:22:30:28 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-"
[munged]::80 139.59.77.56 - - [21/Feb/2020:22:30:43 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-"
[munged]::80 139.59.77.56 - - [21/Feb/2020:22:30:59 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-"
[munged]::80 139.59.77.56 - - [21/Feb/2020:22:31:16 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-"
[munged]::80 139.59.77.56 - - [21/Feb/2020:22:31:32 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-"
[munged]::80 139.59.77.56 - - [21/Feb/2020:22:31:48 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-"
[munged]::80 139.59.77.56 - - [21/Feb/2020:22:32:05 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-
2020-02-22 05:45:34
139.59.77.237 attack
Jan 20 04:40:40 vtv3 sshd[27161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.237 
Jan 20 04:40:42 vtv3 sshd[27161]: Failed password for invalid user antonio from 139.59.77.237 port 47728 ssh2
Jan 20 04:43:44 vtv3 sshd[28282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.237 
Jan 20 04:55:59 vtv3 sshd[2145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.237 
Jan 20 04:56:01 vtv3 sshd[2145]: Failed password for invalid user orange from 139.59.77.237 port 57394 ssh2
Jan 20 04:59:09 vtv3 sshd[3334]: Failed password for root from 139.59.77.237 port 42381 ssh2
Jan 20 05:11:24 vtv3 sshd[9294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.237 
Jan 20 05:11:26 vtv3 sshd[9294]: Failed password for invalid user ec2 from 139.59.77.237 port 38782 ssh2
Jan 20 05:14:30 vtv3 sshd[10473]: pam_unix(sshd:auth): authent
2020-01-20 14:57:39
139.59.77.237 attackspam
Jan  8 01:54:21 firewall sshd[26531]: Invalid user shclient from 139.59.77.237
Jan  8 01:54:22 firewall sshd[26531]: Failed password for invalid user shclient from 139.59.77.237 port 57237 ssh2
Jan  8 01:57:59 firewall sshd[26574]: Invalid user bqj from 139.59.77.237
...
2020-01-08 13:01:10
139.59.77.237 attack
Dec 27 07:55:09 sd-53420 sshd\[22667\]: Invalid user huangguo2010 from 139.59.77.237
Dec 27 07:55:09 sd-53420 sshd\[22667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.237
Dec 27 07:55:11 sd-53420 sshd\[22667\]: Failed password for invalid user huangguo2010 from 139.59.77.237 port 42849 ssh2
Dec 27 07:58:25 sd-53420 sshd\[23969\]: Invalid user kurtz from 139.59.77.237
Dec 27 07:58:25 sd-53420 sshd\[23969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.237
...
2019-12-27 18:14:07
139.59.77.237 attackspam
Dec 22 08:18:16 unicornsoft sshd\[12395\]: User root from 139.59.77.237 not allowed because not listed in AllowUsers
Dec 22 08:18:16 unicornsoft sshd\[12395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.237  user=root
Dec 22 08:18:18 unicornsoft sshd\[12395\]: Failed password for invalid user root from 139.59.77.237 port 54654 ssh2
2019-12-22 22:34:10
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.77.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13368
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.77.128.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071000 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 11 01:30:46 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 128.77.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 128.77.59.139.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
165.22.162.196 attackspam
Oct  9 11:50:03 dedicated sshd[30978]: Invalid user 123 from 165.22.162.196 port 60120
2019-10-09 18:50:51
202.21.98.166 attackspam
Unauthorised access (Oct  9) SRC=202.21.98.166 LEN=52 TTL=105 ID=22084 DF TCP DPT=445 WINDOW=8192 SYN
2019-10-09 18:51:56
103.74.120.201 attack
www.handydirektreparatur.de 103.74.120.201 \[09/Oct/2019:11:02:25 +0200\] "POST /wp-login.php HTTP/1.1" 200 5665 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
www.handydirektreparatur.de 103.74.120.201 \[09/Oct/2019:11:02:26 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4114 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-10-09 18:44:48
54.37.159.12 attackbotsspam
Oct  9 10:26:38 eventyay sshd[25731]: Failed password for root from 54.37.159.12 port 47222 ssh2
Oct  9 10:30:21 eventyay sshd[25811]: Failed password for root from 54.37.159.12 port 58334 ssh2
...
2019-10-09 18:54:03
45.248.167.211 attackspambots
"Fail2Ban detected SSH brute force attempt"
2019-10-09 19:09:53
157.230.38.38 attackspambots
May  6 19:26:20 server sshd\[166057\]: Invalid user hive from 157.230.38.38
May  6 19:26:20 server sshd\[166057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.38.38
May  6 19:26:22 server sshd\[166057\]: Failed password for invalid user hive from 157.230.38.38 port 60544 ssh2
...
2019-10-09 18:36:05
164.132.192.253 attackbotsspam
Oct  9 12:20:15 sso sshd[8792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.192.253
Oct  9 12:20:17 sso sshd[8792]: Failed password for invalid user Cream@2017 from 164.132.192.253 port 47732 ssh2
...
2019-10-09 19:01:22
222.186.42.4 attack
2019-10-09T18:06:14.423001enmeeting.mahidol.ac.th sshd\[14380\]: User root from 222.186.42.4 not allowed because not listed in AllowUsers
2019-10-09T18:06:15.699538enmeeting.mahidol.ac.th sshd\[14380\]: Failed none for invalid user root from 222.186.42.4 port 6788 ssh2
2019-10-09T18:06:17.074562enmeeting.mahidol.ac.th sshd\[14380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.4  user=root
...
2019-10-09 19:08:31
42.115.221.40 attack
2019-10-09T05:52:31.243179shield sshd\[31375\]: Invalid user Nicolas2017 from 42.115.221.40 port 35528
2019-10-09T05:52:31.247493shield sshd\[31375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.115.221.40
2019-10-09T05:52:33.811298shield sshd\[31375\]: Failed password for invalid user Nicolas2017 from 42.115.221.40 port 35528 ssh2
2019-10-09T06:02:19.261552shield sshd\[32159\]: Invalid user !@\#qweasdZXC from 42.115.221.40 port 50940
2019-10-09T06:02:19.265880shield sshd\[32159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.115.221.40
2019-10-09 18:50:26
132.148.129.180 attack
Oct  9 11:26:24 tuxlinux sshd[40669]: Invalid user jboss from 132.148.129.180 port 47360
Oct  9 11:26:24 tuxlinux sshd[40669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.148.129.180 
Oct  9 11:26:24 tuxlinux sshd[40669]: Invalid user jboss from 132.148.129.180 port 47360
Oct  9 11:26:24 tuxlinux sshd[40669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.148.129.180 
...
2019-10-09 18:49:26
51.38.37.128 attackspam
Oct  9 06:52:36 vpn01 sshd[12873]: Failed password for root from 51.38.37.128 port 39901 ssh2
...
2019-10-09 18:38:16
157.230.112.34 attack
Aug 19 15:03:37 server sshd\[59644\]: Invalid user ooooo from 157.230.112.34
Aug 19 15:03:37 server sshd\[59644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.112.34
Aug 19 15:03:40 server sshd\[59644\]: Failed password for invalid user ooooo from 157.230.112.34 port 48822 ssh2
...
2019-10-09 19:13:05
157.230.43.135 attackbots
May  7 05:07:38 server sshd\[178850\]: Invalid user merlin from 157.230.43.135
May  7 05:07:38 server sshd\[178850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.43.135
May  7 05:07:40 server sshd\[178850\]: Failed password for invalid user merlin from 157.230.43.135 port 41678 ssh2
...
2019-10-09 18:34:07
157.230.248.65 attack
Aug 12 21:34:58 server sshd\[173443\]: Invalid user jack from 157.230.248.65
Aug 12 21:34:58 server sshd\[173443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.248.65
Aug 12 21:35:00 server sshd\[173443\]: Failed password for invalid user jack from 157.230.248.65 port 52690 ssh2
...
2019-10-09 18:41:35
45.136.109.251 attackbots
firewall-block, port(s): 7854/tcp, 8090/tcp, 8099/tcp, 8559/tcp, 8571/tcp
2019-10-09 19:06:50

最近上报的IP列表

117.7.84.29 188.33.158.13 196.185.78.118 177.27.129.93
68.112.60.136 8.107.231.119 165.22.135.169 131.91.80.148
125.230.135.34 205.31.90.110 59.97.43.53 160.114.137.207
106.175.201.187 177.8.250.251 151.0.180.159 23.254.224.177
210.98.88.38 142.93.191.137 219.33.235.195 210.52.238.1