139.59.77.13 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): Digital Ocean Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	xmlrpc attack	2019-06-23 22:13:55

相同子网IP讨论:

IP	类型	评论内容	时间
139.59.77.43	attackbotsspam	139.59.77.43 - - \[31/Aug/2020:08:21:10 +0200\] "POST /wp-login.php HTTP/1.0" 200 5615 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.77.43 - - \[31/Aug/2020:08:21:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 5607 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.77.43 - - \[31/Aug/2020:08:21:23 +0200\] "POST /wp-login.php HTTP/1.0" 200 5593 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-08-31 14:38:57
139.59.77.43	attackbotsspam	HTTP DDOS	2020-08-09 13:10:07
139.59.77.43	attack	139.59.77.43 - - [07/Aug/2020:05:44:42 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.77.43 - - [07/Aug/2020:05:51:04 +0200] "POST /xmlrpc.php HTTP/1.1" 403 11044 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-07 17:51:28
139.59.77.43	attackspambots	139.59.77.43 - - [15/Jul/2020:03:40:06 +0200] "POST /wp-login.php HTTP/1.1" 200 5418 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.77.43 - - [15/Jul/2020:03:40:12 +0200] "POST /wp-login.php HTTP/1.1" 200 5408 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.77.43 - - [15/Jul/2020:03:40:19 +0200] "POST /wp-login.php HTTP/1.1" 200 5410 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.77.43 - - [15/Jul/2020:03:40:24 +0200] "POST /wp-login.php HTTP/1.1" 200 5409 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.77.43 - - [15/Jul/2020:04:01:33 +0200] "POST /wp-login.php HTTP/1.1" 200 5418 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-15 15:36:25
139.59.77.240	attack	Jun 8 03:25:47 webhost01 sshd[18333]: Failed password for root from 139.59.77.240 port 50434 ssh2 ...	2020-06-08 04:42:52
139.59.77.240	attackbotsspam	Jun 7 10:41:07 gw1 sshd[26843]: Failed password for root from 139.59.77.240 port 37928 ssh2 ...	2020-06-07 14:58:59
139.59.77.101	attackspam	139.59.77.101 - - [05/Jun/2020:22:31:21 +0200] "GET /wp-login.php HTTP/1.1" 200 6521 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.77.101 - - [05/Jun/2020:22:31:23 +0200] "POST /wp-login.php HTTP/1.1" 200 6772 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.77.101 - - [05/Jun/2020:22:31:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-06-06 10:27:29
139.59.77.240	attackspambots	(sshd) Failed SSH login from 139.59.77.240 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 3 10:20:52 s1 sshd[10336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240 user=root Jun 3 10:20:54 s1 sshd[10336]: Failed password for root from 139.59.77.240 port 59984 ssh2 Jun 3 10:36:46 s1 sshd[10954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240 user=root Jun 3 10:36:48 s1 sshd[10954]: Failed password for root from 139.59.77.240 port 50202 ssh2 Jun 3 10:40:46 s1 sshd[11083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240 user=root	2020-06-03 16:43:28
139.59.77.240	attackbotsspam	May 27 20:13:48 abendstille sshd\[8939\]: Invalid user forest from 139.59.77.240 May 27 20:13:48 abendstille sshd\[8939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240 May 27 20:13:50 abendstille sshd\[8939\]: Failed password for invalid user forest from 139.59.77.240 port 58990 ssh2 May 27 20:20:23 abendstille sshd\[15714\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240 user=root May 27 20:20:25 abendstille sshd\[15714\]: Failed password for root from 139.59.77.240 port 58754 ssh2 ...	2020-05-28 04:15:03
139.59.77.240	attack	May 26 00:03:42 host2 sshd[25721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240 user=r.r May 26 00:03:45 host2 sshd[25721]: Failed password for r.r from 139.59.77.240 port 57682 ssh2 May 26 00:03:45 host2 sshd[25721]: Received disconnect from 139.59.77.240: 11: Bye Bye [preauth] May 26 00:11:13 host2 sshd[22335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240 user=r.r May 26 00:11:15 host2 sshd[22335]: Failed password for r.r from 139.59.77.240 port 58296 ssh2 May 26 00:11:16 host2 sshd[22335]: Received disconnect from 139.59.77.240: 11: Bye Bye [preauth] May 26 00:15:00 host2 sshd[2672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.240 user=r.r May 26 00:15:02 host2 sshd[2672]: Failed password for r.r from 139.59.77.240 port 41836 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=139.59.77	2020-05-26 20:36:47
139.59.77.56	attackbotsspam	[munged]::80 139.59.77.56 - - [21/Feb/2020:22:29:40 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-" [munged]::80 139.59.77.56 - - [21/Feb/2020:22:29:55 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-" [munged]::80 139.59.77.56 - - [21/Feb/2020:22:30:13 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-" [munged]::80 139.59.77.56 - - [21/Feb/2020:22:30:28 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-" [munged]::80 139.59.77.56 - - [21/Feb/2020:22:30:43 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-" [munged]::80 139.59.77.56 - - [21/Feb/2020:22:30:59 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-" [munged]::80 139.59.77.56 - - [21/Feb/2020:22:31:16 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-" [munged]::80 139.59.77.56 - - [21/Feb/2020:22:31:32 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-" [munged]::80 139.59.77.56 - - [21/Feb/2020:22:31:48 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-" "-" [munged]::80 139.59.77.56 - - [21/Feb/2020:22:32:05 +0100] "POST /[munged]: HTTP/1.1" 200 4647 "-	2020-02-22 05:45:34
139.59.77.237	attack	Jan 20 04:40:40 vtv3 sshd[27161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.237 Jan 20 04:40:42 vtv3 sshd[27161]: Failed password for invalid user antonio from 139.59.77.237 port 47728 ssh2 Jan 20 04:43:44 vtv3 sshd[28282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.237 Jan 20 04:55:59 vtv3 sshd[2145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.237 Jan 20 04:56:01 vtv3 sshd[2145]: Failed password for invalid user orange from 139.59.77.237 port 57394 ssh2 Jan 20 04:59:09 vtv3 sshd[3334]: Failed password for root from 139.59.77.237 port 42381 ssh2 Jan 20 05:11:24 vtv3 sshd[9294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.237 Jan 20 05:11:26 vtv3 sshd[9294]: Failed password for invalid user ec2 from 139.59.77.237 port 38782 ssh2 Jan 20 05:14:30 vtv3 sshd[10473]: pam_unix(sshd:auth): authent	2020-01-20 14:57:39
139.59.77.237	attackspam	Jan 8 01:54:21 firewall sshd[26531]: Invalid user shclient from 139.59.77.237 Jan 8 01:54:22 firewall sshd[26531]: Failed password for invalid user shclient from 139.59.77.237 port 57237 ssh2 Jan 8 01:57:59 firewall sshd[26574]: Invalid user bqj from 139.59.77.237 ...	2020-01-08 13:01:10
139.59.77.237	attack	Dec 27 07:55:09 sd-53420 sshd\[22667\]: Invalid user huangguo2010 from 139.59.77.237 Dec 27 07:55:09 sd-53420 sshd\[22667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.237 Dec 27 07:55:11 sd-53420 sshd\[22667\]: Failed password for invalid user huangguo2010 from 139.59.77.237 port 42849 ssh2 Dec 27 07:58:25 sd-53420 sshd\[23969\]: Invalid user kurtz from 139.59.77.237 Dec 27 07:58:25 sd-53420 sshd\[23969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.237 ...	2019-12-27 18:14:07
139.59.77.237	attackspam	Dec 22 08:18:16 unicornsoft sshd\[12395\]: User root from 139.59.77.237 not allowed because not listed in AllowUsers Dec 22 08:18:16 unicornsoft sshd\[12395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.237 user=root Dec 22 08:18:18 unicornsoft sshd\[12395\]: Failed password for invalid user root from 139.59.77.237 port 54654 ssh2	2019-12-22 22:34:10

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.77.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62033
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.77.13.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062300 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jun 23 22:13:43 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

13.77.59.139.in-addr.arpa domain name pointer 102119.cloudwaysapps.com.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
13.77.59.139.in-addr.arpa	name = 102119.cloudwaysapps.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
51.75.163.206	attackspambots	Apr 30 00:35:14 server sshd[63572]: Failed password for root from 51.75.163.206 port 60993 ssh2 Apr 30 00:35:45 server sshd[64037]: Failed password for root from 51.75.163.206 port 44204 ssh2 Apr 30 00:36:15 server sshd[64463]: Failed password for root from 51.75.163.206 port 55656 ssh2	2020-04-30 06:49:46
119.254.155.187	attackspam	Invalid user attic from 119.254.155.187 port 9569	2020-04-30 06:40:50
222.186.175.167	attack	[ssh] SSH attack	2020-04-30 06:34:26
185.202.1.240	attackbotsspam	2020-04-29T22:36:46.364094abusebot-4.cloudsearch.cf sshd[29300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.202.1.240 user=ftp 2020-04-29T22:36:48.908916abusebot-4.cloudsearch.cf sshd[29300]: Failed password for ftp from 185.202.1.240 port 14817 ssh2 2020-04-29T22:36:49.070711abusebot-4.cloudsearch.cf sshd[29304]: Invalid user admin from 185.202.1.240 port 17319 2020-04-29T22:36:49.085633abusebot-4.cloudsearch.cf sshd[29304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.202.1.240 2020-04-29T22:36:49.070711abusebot-4.cloudsearch.cf sshd[29304]: Invalid user admin from 185.202.1.240 port 17319 2020-04-29T22:36:50.707090abusebot-4.cloudsearch.cf sshd[29304]: Failed password for invalid user admin from 185.202.1.240 port 17319 ssh2 2020-04-29T22:36:50.869894abusebot-4.cloudsearch.cf sshd[29308]: Invalid user admin from 185.202.1.240 port 18938 ...	2020-04-30 06:49:28
222.127.97.91	attackspam	Apr 29 22:03:57 meumeu sshd[10652]: Failed password for root from 222.127.97.91 port 14655 ssh2 Apr 29 22:08:33 meumeu sshd[11299]: Failed password for root from 222.127.97.91 port 40644 ssh2 ...	2020-04-30 07:00:50
115.84.92.29	attackspam	(imapd) Failed IMAP login from 115.84.92.29 (LA/Laos/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 30 00:43:28 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=115.84.92.29, lip=5.63.12.44, TLS, session=	2020-04-30 06:33:04
157.245.81.162	attackspam	" "	2020-04-30 06:50:38
123.207.74.24	attackbots	prod6 ...	2020-04-30 07:01:12
188.166.60.138	attackspambots	188.166.60.138 - - [29/Apr/2020:23:13:34 +0300] "POST /wp-login.php HTTP/1.1" 200 2172 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-30 06:41:50
222.252.17.12	attackspam	Dovecot Invalid User Login Attempt.	2020-04-30 06:57:30
185.220.101.195	attackspambots	Invalid user test from 185.220.101.195 port 3220	2020-04-30 06:48:59
213.217.0.130	attack	Apr 30 00:44:34 debian-2gb-nbg1-2 kernel: \[10459193.820847\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=213.217.0.130 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=60831 PROTO=TCP SPT=58667 DPT=45077 WINDOW=1024 RES=0x00 SYN URGP=0	2020-04-30 06:54:56
84.2.226.70	attackbotsspam	Apr 30 01:20:03 lukav-desktop sshd\[13039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.2.226.70 user=root Apr 30 01:20:05 lukav-desktop sshd\[13039\]: Failed password for root from 84.2.226.70 port 58198 ssh2 Apr 30 01:24:14 lukav-desktop sshd\[23651\]: Invalid user ke from 84.2.226.70 Apr 30 01:24:14 lukav-desktop sshd\[23651\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.2.226.70 Apr 30 01:24:16 lukav-desktop sshd\[23651\]: Failed password for invalid user ke from 84.2.226.70 port 43176 ssh2	2020-04-30 06:59:52
166.62.122.244	attack	Automatic report - WordPress Brute Force	2020-04-30 06:26:05
51.158.117.176	attackbotsspam	April 29 2020, 22:15:13 [sshd] - Banned from the Cipher Host hosting platform by Fail2ban.	2020-04-30 06:28:25

最近上报的IP列表

208.66.72.242	107.173.78.116	81.18.146.89	213.226.79.162
191.53.200.63	191.53.199.151	119.2.17.138	107.175.230.238
105.155.250.60	103.85.95.5	91.181.238.14	82.166.139.74
80.211.53.107	77.252.61.133	23.245.143.89	187.111.54.169
187.111.54.89	185.101.32.170	182.254.220.40	97.74.229.105