必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
139.59.82.163 attackbotsspam
php vulnerability probing
2020-06-28 23:25:20
139.59.82.111 attackspam
Automatic report - Banned IP Access
2020-05-27 13:39:02
139.59.82.111 attackspambots
xmlrpc attack
2020-05-25 18:57:23
139.59.82.111 attackbotsspam
ft-1848-fussball.de 139.59.82.111 [01/May/2020:22:32:44 +0200] "POST /wp-login.php HTTP/1.1" 200 2640 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
ft-1848-fussball.de 139.59.82.111 [01/May/2020:22:32:46 +0200] "POST /wp-login.php HTTP/1.1" 200 2609 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-05-02 04:57:50
139.59.82.163 attack
[munged]::443 139.59.82.163 - - [09/Mar/2020:13:30:15 +0100] "POST /[munged]: HTTP/1.1" 200 9129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.82.163 - - [09/Mar/2020:13:30:19 +0100] "POST /[munged]: HTTP/1.1" 200 9129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.82.163 - - [09/Mar/2020:13:30:22 +0100] "POST /[munged]: HTTP/1.1" 200 9129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.82.163 - - [09/Mar/2020:13:30:26 +0100] "POST /[munged]: HTTP/1.1" 200 9129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.82.163 - - [09/Mar/2020:13:30:29 +0100] "POST /[munged]: HTTP/1.1" 200 9129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.82.163 - - [09/Mar/2020:13:30:32 +0100] "POST /[munged]: HTTP/1.1" 200 9129 "-" "Mozilla/5.0 (X11; Ubun
2020-03-09 21:56:38
139.59.82.133 attackbotsspam
2019-04-19 04:56:49 1hHJhp-0003Pc-ON SMTP connection from placidity.oyunbenim.com \(ossified.classroommega.icu\) \[139.59.82.133\]:56790 I=\[193.107.90.29\]:25 closed by DROP in ACL
2019-04-19 04:58:14 1hHJjC-0003SW-7H SMTP connection from placidity.oyunbenim.com \(coagulate.classroommega.icu\) \[139.59.82.133\]:38658 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-04-19 04:58:33 1hHJjV-0003Sw-Da SMTP connection from placidity.oyunbenim.com \(blithe.classroommega.icu\) \[139.59.82.133\]:41094 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-04-20 04:50:15 1hHg51-00036n-9k SMTP connection from placidity.oyunbenim.com \(spooky.classroommega.icu\) \[139.59.82.133\]:58435 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-04-20 04:52:47 1hHg7T-00039s-D5 SMTP connection from placidity.oyunbenim.com \(gleaming.classroommega.icu\) \[139.59.82.133\]:50069 I=\[193.107.90.29\]:25 closed by DROP in ACL
2019-04-20 04:54:04 1hHg8i-0003Bb-3P SMTP connection from placidity.oyunbenim.com \(rod.cl
...
2020-02-05 00:10:02
139.59.82.232 attackspambots
RDP Bruteforce
2020-01-30 02:50:18
139.59.82.105 attackspam
Jan 26 16:19:56 SilenceServices sshd[10679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.82.105
Jan 26 16:19:58 SilenceServices sshd[10679]: Failed password for invalid user akj from 139.59.82.105 port 51102 ssh2
Jan 26 16:23:41 SilenceServices sshd[24482]: Failed password for root from 139.59.82.105 port 52330 ssh2
2020-01-26 23:53:26
139.59.82.232 attackspambots
RDP Bruteforce
2020-01-26 14:04:16
139.59.82.105 attackbots
Jan 22 06:05:57 euve59663 sshd[31037]: reveeclipse mapping checking getaddr=
info for vip.india [139.59.82.105] failed - POSSIBLE BREAK-IN ATTEMPT!
Jan 22 06:05:57 euve59663 sshd[31037]: pam_unix(sshd:auth): authenticat=
ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D139=
.59.82.105  user=3Dr.r
Jan 22 06:05:59 euve59663 sshd[31037]: Failed password for r.r from 13=
9.59.82.105 port 50396 ssh2
Jan 22 06:05:59 euve59663 sshd[31037]: Received disconnect from 139.59.=
82.105: 11: Bye Bye [preauth]
Jan 22 06:17:56 euve59663 sshd[31192]: reveeclipse mapping checking getaddr=
info for vip.india [139.59.82.105] failed - POSSIBLE BREAK-IN ATTEMPT!
Jan 22 06:17:56 euve59663 sshd[31192]: Invalid user ll from 139.59.82.1=
05
Jan 22 06:17:56 euve59663 sshd[31192]: pam_unix(sshd:auth): authenticat=
ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D139=
.59.82.105=20
Jan 22 06:17:58 euve59663 sshd[31192]: Failed password for invalid user=
 ll fro........
-------------------------------
2020-01-24 08:06:57
139.59.82.78 attackbotsspam
Unauthorized connection attempt detected from IP address 139.59.82.78 to port 2220 [J]
2020-01-22 02:08:20
139.59.82.182 attackbots
2020-01-21T14:29:04.278562scmdmz1 sshd[12500]: Invalid user ircd from 139.59.82.182 port 50578
2020-01-21T14:29:04.282409scmdmz1 sshd[12500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.82.182
2020-01-21T14:29:04.278562scmdmz1 sshd[12500]: Invalid user ircd from 139.59.82.182 port 50578
2020-01-21T14:29:06.142847scmdmz1 sshd[12500]: Failed password for invalid user ircd from 139.59.82.182 port 50578 ssh2
2020-01-21T14:32:25.330814scmdmz1 sshd[13185]: Invalid user test123 from 139.59.82.182 port 51528
...
2020-01-21 22:03:09
139.59.82.91 attack
Jan 20 21:10:28 baguette sshd\[13124\]: Invalid user bdos from 139.59.82.91 port 34964
Jan 20 21:10:28 baguette sshd\[13124\]: Invalid user bdos from 139.59.82.91 port 34964
Jan 20 21:12:25 baguette sshd\[13133\]: Invalid user es from 139.59.82.91 port 42460
Jan 20 21:12:25 baguette sshd\[13133\]: Invalid user es from 139.59.82.91 port 42460
Jan 20 21:14:23 baguette sshd\[13138\]: Invalid user es from 139.59.82.91 port 49914
Jan 20 21:14:23 baguette sshd\[13138\]: Invalid user es from 139.59.82.91 port 49914
...
2020-01-21 06:06:54
139.59.82.78 attackbots
Unauthorized connection attempt detected from IP address 139.59.82.78 to port 2220 [J]
2020-01-11 23:52:57
139.59.82.147 attack
2019-12-05T08:21:09Z - RDP login failed multiple times. (139.59.82.147)
2019-12-05 21:02:27
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.82.210
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49327
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.82.210.			IN	A

;; AUTHORITY SECTION:
.			233	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021801 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 03:38:21 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
Host 210.82.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 210.82.59.139.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
185.147.68.23 attackspambots
Invalid user teste2 from 185.147.68.23 port 48946
2020-04-14 07:13:56
203.195.252.228 attackspam
2020-04-13T17:54:40.158177ns386461 sshd\[3033\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.252.228  user=root
2020-04-13T17:54:41.846657ns386461 sshd\[3033\]: Failed password for root from 203.195.252.228 port 42366 ssh2
2020-04-13T19:05:58.934197ns386461 sshd\[3168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.252.228  user=root
2020-04-13T19:06:00.917984ns386461 sshd\[3168\]: Failed password for root from 203.195.252.228 port 46286 ssh2
2020-04-13T19:13:42.669780ns386461 sshd\[9874\]: Invalid user a from 203.195.252.228 port 49064
...
2020-04-14 07:09:19
222.186.173.215 attackbotsspam
Apr 14 01:01:55 vpn01 sshd[14489]: Failed password for root from 222.186.173.215 port 26146 ssh2
Apr 14 01:02:06 vpn01 sshd[14489]: Failed password for root from 222.186.173.215 port 26146 ssh2
Apr 14 01:02:06 vpn01 sshd[14489]: error: maximum authentication attempts exceeded for root from 222.186.173.215 port 26146 ssh2 [preauth]
...
2020-04-14 07:11:36
159.89.165.5 attackbotsspam
Apr 13 18:29:43 NPSTNNYC01T sshd[3063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.165.5
Apr 13 18:29:45 NPSTNNYC01T sshd[3063]: Failed password for invalid user test from 159.89.165.5 port 54758 ssh2
Apr 13 18:35:59 NPSTNNYC01T sshd[3753]: Failed password for root from 159.89.165.5 port 35508 ssh2
...
2020-04-14 06:50:22
192.34.57.113 attackspambots
5x Failed Password
2020-04-14 06:52:33
222.186.31.166 attackbotsspam
Apr 14 00:51:40 vmd38886 sshd\[18893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166  user=root
Apr 14 00:51:42 vmd38886 sshd\[18893\]: Failed password for root from 222.186.31.166 port 14770 ssh2
Apr 14 00:51:44 vmd38886 sshd\[18893\]: Failed password for root from 222.186.31.166 port 14770 ssh2
2020-04-14 07:13:38
37.49.230.161 attackbotsspam
(pop3d) Failed POP3 login from 37.49.230.161 (NL/Netherlands/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 13 21:44:06 ir1 dovecot[566034]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=37.49.230.161, lip=5.63.12.44, session=
2020-04-14 06:53:07
139.59.161.78 attackbots
SSH Brute Force
2020-04-14 06:47:44
176.31.244.63 attackspam
Invalid user admin from 176.31.244.63 port 59735
2020-04-14 07:16:20
45.136.108.85 attack
Apr 14 00:29:16 legacy sshd[840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.136.108.85
Apr 14 00:29:18 legacy sshd[840]: Failed password for invalid user 0 from 45.136.108.85 port 41470 ssh2
Apr 14 00:29:23 legacy sshd[851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.136.108.85
...
2020-04-14 07:05:06
59.127.195.93 attack
Invalid user memcached from 59.127.195.93 port 49002
2020-04-14 07:01:43
27.115.127.177 attackbotsspam
Brute forcing RDP port 3389
2020-04-14 07:13:13
91.134.235.254 attackbotsspam
Port Scan: Events[1] countPorts[1]: 18237 ..
2020-04-14 07:19:24
188.159.170.25 attackbotsspam
(pop3d) Failed POP3 login from 188.159.170.25 (IR/Iran/adsl-188-159-170-25.sabanet.ir): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 13 21:43:37 ir1 dovecot[566034]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=188.159.170.25, lip=5.63.12.44, session=
2020-04-14 07:12:38
2.37.231.114 attack
Automatic report - Port Scan Attack
2020-04-14 07:19:44

最近上报的IP列表

139.59.63.144 139.99.114.113 139.99.120.237 139.99.113.140
139.99.116.205 139.99.126.159 139.99.136.236 139.99.191.198
139.99.150.21 139.99.36.241 139.99.62.99 139.99.55.198
139.99.8.140 139.99.67.188 14.115.107.240 139.99.77.55
139.99.9.144 14.102.152.73 139.99.69.88 14.115.107.63