必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Canada

运营商(isp): VeryGames

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
 UDP 139.99.114.230:27015 -> port 45394, len 273
2020-09-15 01:36:02
attack
SIP/5060 Probe, BF, Hack -
2020-09-14 17:20:03
attack
139.99.114.230 was recorded 15 times by 6 hosts attempting to connect to the following ports: 33185,51856,26014,50570. Incident counter (4h, 24h, all-time): 15, 85, 146
2020-05-12 02:15:51
attack
139.99.114.230 was recorded 10 times by 4 hosts attempting to connect to the following ports: 26014,33185,51856,50570. Incident counter (4h, 24h, all-time): 10, 25, 38
2020-05-10 08:22:12
相同子网IP讨论:
IP 类型 评论内容 时间
139.99.114.236 attackspam
WordPress login Brute force / Web App Attack on client site.
2019-07-20 01:01:16
139.99.114.236 attack
139.99.114.236 - - \[23/Jun/2019:14:09:15 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
139.99.114.236 - - \[23/Jun/2019:14:09:16 +0200\] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
139.99.114.236 - - \[23/Jun/2019:14:09:17 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
139.99.114.236 - - \[23/Jun/2019:14:09:17 +0200\] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
139.99.114.236 - - \[23/Jun/2019:14:09:18 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
139.99.114.236 - - \[23/Jun/2019:14:09:18 +0200\] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:6
2019-06-23 22:07:38
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.114.230
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29090
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.99.114.230.			IN	A

;; AUTHORITY SECTION:
.			146	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050901 1800 900 604800 86400

;; Query time: 132 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 10 08:22:09 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
230.114.99.139.in-addr.arpa domain name pointer ip230.ip-139-99-114.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
230.114.99.139.in-addr.arpa	name = ip230.ip-139-99-114.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
103.56.225.202 attackbots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/103.56.225.202/ 
 
 IN - 1H : (84)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : IN 
 NAME ASN : ASN138309 
 
 IP : 103.56.225.202 
 
 CIDR : 103.56.225.0/24 
 
 PREFIX COUNT : 5 
 
 UNIQUE IP COUNT : 1280 
 
 
 ATTACKS DETECTED ASN138309 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-11-16 07:25:47 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery
2019-11-16 17:19:05
165.227.69.39 attack
Nov 16 04:27:27 firewall sshd[13545]: Invalid user password12345 from 165.227.69.39
Nov 16 04:27:28 firewall sshd[13545]: Failed password for invalid user password12345 from 165.227.69.39 port 48991 ssh2
Nov 16 04:30:51 firewall sshd[13628]: Invalid user cz123 from 165.227.69.39
...
2019-11-16 17:38:48
49.234.34.235 attackbots
Invalid user adachi from 49.234.34.235 port 53326
2019-11-16 17:10:17
45.143.220.60 attack
\[2019-11-16 02:24:56\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-16T02:24:56.291-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="0046431313352",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.60/5127",ACLName="no_extension_match"
\[2019-11-16 02:29:21\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-16T02:29:21.325-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146431313352",SessionID="0x7fdf2c5e87f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.60/5106",ACLName="no_extension_match"
\[2019-11-16 02:33:42\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-16T02:33:42.284-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="901146431313352",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.60/5105",ACLName="no_extension
2019-11-16 17:16:54
106.13.148.44 attack
Nov 16 10:36:47 MK-Soft-VM6 sshd[20817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44 
Nov 16 10:36:49 MK-Soft-VM6 sshd[20817]: Failed password for invalid user markland from 106.13.148.44 port 53936 ssh2
...
2019-11-16 17:47:32
142.93.212.168 attack
2019-11-16T08:28:23.699388hub.schaetter.us sshd\[23635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.168  user=bin
2019-11-16T08:28:25.975308hub.schaetter.us sshd\[23635\]: Failed password for bin from 142.93.212.168 port 49512 ssh2
2019-11-16T08:32:42.837558hub.schaetter.us sshd\[23675\]: Invalid user worren from 142.93.212.168 port 60280
2019-11-16T08:32:42.859118hub.schaetter.us sshd\[23675\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.168
2019-11-16T08:32:45.024428hub.schaetter.us sshd\[23675\]: Failed password for invalid user worren from 142.93.212.168 port 60280 ssh2
...
2019-11-16 17:20:10
152.168.137.2 attackbotsspam
Nov 16 07:55:56 root sshd[13554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.168.137.2 
Nov 16 07:55:58 root sshd[13554]: Failed password for invalid user menzies from 152.168.137.2 port 51039 ssh2
Nov 16 08:00:24 root sshd[13590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.168.137.2 
...
2019-11-16 17:16:27
209.17.96.42 attack
209.17.96.42 was recorded 5 times by 5 hosts attempting to connect to the following ports: 1026,50070,502,111. Incident counter (4h, 24h, all-time): 5, 28, 365
2019-11-16 17:23:55
195.88.66.108 attackspambots
Nov 16 04:18:19 server sshd\[4720\]: Failed password for invalid user sheasley from 195.88.66.108 port 54465 ssh2
Nov 16 10:21:28 server sshd\[32516\]: Invalid user p\?ssworD from 195.88.66.108
Nov 16 10:21:28 server sshd\[32516\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.88.66.108 
Nov 16 10:21:30 server sshd\[32516\]: Failed password for invalid user p\?ssworD from 195.88.66.108 port 44027 ssh2
Nov 16 10:55:20 server sshd\[9180\]: Invalid user macallister from 195.88.66.108
Nov 16 10:55:20 server sshd\[9180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.88.66.108 
...
2019-11-16 17:12:49
51.75.24.200 attackbots
Automatic report - Banned IP Access
2019-11-16 17:46:43
139.162.99.243 attack
SASL Brute Force
2019-11-16 17:37:04
118.24.221.125 attackbots
Nov 15 23:11:47 web1 sshd\[7092\]: Invalid user helpdesk from 118.24.221.125
Nov 15 23:11:47 web1 sshd\[7092\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.221.125
Nov 15 23:11:49 web1 sshd\[7092\]: Failed password for invalid user helpdesk from 118.24.221.125 port 60410 ssh2
Nov 15 23:16:47 web1 sshd\[7574\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.221.125  user=root
Nov 15 23:16:48 web1 sshd\[7574\]: Failed password for root from 118.24.221.125 port 39515 ssh2
2019-11-16 17:21:31
223.171.32.56 attackspambots
F2B jail: sshd. Time: 2019-11-16 10:21:35, Reported by: VKReport
2019-11-16 17:26:52
218.92.0.191 attackbotsspam
Nov 16 10:31:36 dcd-gentoo sshd[8690]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups
Nov 16 10:31:39 dcd-gentoo sshd[8690]: error: PAM: Authentication failure for illegal user root from 218.92.0.191
Nov 16 10:31:36 dcd-gentoo sshd[8690]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups
Nov 16 10:31:39 dcd-gentoo sshd[8690]: error: PAM: Authentication failure for illegal user root from 218.92.0.191
Nov 16 10:31:36 dcd-gentoo sshd[8690]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups
Nov 16 10:31:39 dcd-gentoo sshd[8690]: error: PAM: Authentication failure for illegal user root from 218.92.0.191
Nov 16 10:31:39 dcd-gentoo sshd[8690]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 15812 ssh2
...
2019-11-16 17:38:32
191.32.109.219 attackbots
CloudCIX Reconnaissance Scan Detected, PTR: 191.32.109.219.dynamic.adsl.gvt.net.br.
2019-11-16 17:27:23

最近上报的IP列表

86.77.132.185 123.231.74.38 105.111.64.131 75.71.96.87
18.221.254.167 51.77.198.102 93.75.206.183 152.183.25.137
119.73.179.114 78.119.195.246 217.13.222.170 84.228.1.130
100.238.250.96 118.113.190.246 68.249.135.172 196.112.41.68
172.76.60.243 186.178.83.129 176.153.123.218 122.1.98.145