必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): unknown

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
139.99.148.4 attackbots
139.99.148.4 - - [07/Oct/2020:15:35:38 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [07/Oct/2020:16:01:07 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-08 04:29:11
139.99.148.4 attack
Attempted WordPress login: "GET /wp-login.php"
2020-10-07 20:48:50
139.99.148.4 attackspam
139.99.148.4 - - [07/Oct/2020:02:44:52 +0100] "POST /wp-login.php HTTP/1.1" 200 2394 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [07/Oct/2020:02:44:54 +0100] "POST /wp-login.php HTTP/1.1" 200 2328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [07/Oct/2020:02:44:56 +0100] "POST /wp-login.php HTTP/1.1" 200 2376 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-07 12:33:19
139.99.148.4 attackspambots
Automatic report - XMLRPC Attack
2020-09-21 01:35:44
139.99.148.4 attack
139.99.148.4 - - [20/Sep/2020:09:02:17 +0200] "GET /wp-login.php HTTP/1.1" 200 8558 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [20/Sep/2020:09:02:19 +0200] "POST /wp-login.php HTTP/1.1" 200 8809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [20/Sep/2020:09:02:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-20 17:34:25
139.99.148.4 attackbotsspam
php WP PHPmyadamin ABUSE blocked for 12h
2020-09-12 23:56:56
139.99.148.4 attackspam
139.99.148.4 - - [12/Sep/2020:07:11:02 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [12/Sep/2020:07:11:04 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [12/Sep/2020:07:11:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-12 15:59:01
139.99.148.4 attackspam
139.99.148.4 - - [11/Sep/2020:17:53:47 +0100] "POST /wp-login.php HTTP/1.1" 200 2221 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [11/Sep/2020:17:53:49 +0100] "POST /wp-login.php HTTP/1.1" 200 2147 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [11/Sep/2020:17:53:50 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-12 07:46:05
139.99.148.4 attackspambots
Automatic report - XMLRPC Attack
2020-09-09 02:41:56
139.99.148.4 attack
139.99.148.4 has been banned for [WebApp Attack]
...
2020-09-08 18:12:42
139.99.148.4 attack
139.99.148.4 - - [14/Aug/2020:12:21:41 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [14/Aug/2020:12:21:45 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [14/Aug/2020:12:21:50 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-14 20:21:14
139.99.148.4 attackspam
139.99.148.4 - - [07/Aug/2020:06:52:42 +0200] "POST /xmlrpc.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [07/Aug/2020:07:05:56 +0200] "POST /xmlrpc.php HTTP/1.1" 403 10519 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-07 13:49:44
139.99.148.4 attackbots
139.99.148.4 - - [31/Jul/2020:15:11:09 +0100] "POST /wp-login.php HTTP/1.1" 302 5 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [31/Jul/2020:15:11:16 +0100] "POST /wp-login.php HTTP/1.1" 302 5 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [31/Jul/2020:15:11:22 +0100] "POST /wp-login.php HTTP/1.1" 302 5 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-01 02:05:11
139.99.148.4 attackbotsspam
CMS (WordPress or Joomla) login attempt.
2020-07-30 07:41:44
139.99.148.4 attackbots
139.99.148.4 - - [27/Jul/2020:15:16:18 +0100] "POST /wp-login.php HTTP/1.1" 200 1968 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [27/Jul/2020:15:16:21 +0100] "POST /wp-login.php HTTP/1.1" 200 1972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [27/Jul/2020:15:16:22 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-07-27 23:21:14
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.148.152
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63831
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.99.148.152.			IN	A

;; AUTHORITY SECTION:
.			350	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:41:55 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
152.148.99.139.in-addr.arpa domain name pointer ns547198.ip-139-99-148.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
152.148.99.139.in-addr.arpa	name = ns547198.ip-139-99-148.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
189.57.73.18 attack
Apr 25 17:15:45 roki-contabo sshd\[13695\]: Invalid user jx from 189.57.73.18
Apr 25 17:15:45 roki-contabo sshd\[13695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.57.73.18
Apr 25 17:15:47 roki-contabo sshd\[13695\]: Failed password for invalid user jx from 189.57.73.18 port 36385 ssh2
Apr 25 17:30:26 roki-contabo sshd\[13999\]: Invalid user test from 189.57.73.18
Apr 25 17:30:26 roki-contabo sshd\[13999\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.57.73.18
...
2020-04-26 02:47:22
35.229.216.125 attack
Apr 25 19:20:03 gw1 sshd[32049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.229.216.125
Apr 25 19:20:06 gw1 sshd[32049]: Failed password for invalid user super from 35.229.216.125 port 57432 ssh2
...
2020-04-26 02:39:10
95.111.74.98 attackbotsspam
(sshd) Failed SSH login from 95.111.74.98 (BG/Bulgaria/ip-95-111-74-98.home.megalan.bg): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 25 20:13:12 amsweb01 sshd[14121]: Invalid user elsdilokullari from 95.111.74.98 port 51478
Apr 25 20:13:14 amsweb01 sshd[14121]: Failed password for invalid user elsdilokullari from 95.111.74.98 port 51478 ssh2
Apr 25 20:23:21 amsweb01 sshd[15340]: Invalid user deploy from 95.111.74.98 port 59848
Apr 25 20:23:22 amsweb01 sshd[15340]: Failed password for invalid user deploy from 95.111.74.98 port 59848 ssh2
Apr 25 20:27:22 amsweb01 sshd[15772]: Invalid user test from 95.111.74.98 port 43302
2020-04-26 02:28:44
91.241.19.42 attackbotsspam
2020-04-25T12:44:16.179045abusebot-5.cloudsearch.cf sshd[18771]: Invalid user admin from 91.241.19.42 port 14063
2020-04-25T12:44:16.194606abusebot-5.cloudsearch.cf sshd[18771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.241.19.42
2020-04-25T12:44:16.179045abusebot-5.cloudsearch.cf sshd[18771]: Invalid user admin from 91.241.19.42 port 14063
2020-04-25T12:44:18.148774abusebot-5.cloudsearch.cf sshd[18771]: Failed password for invalid user admin from 91.241.19.42 port 14063 ssh2
2020-04-25T12:44:18.297623abusebot-5.cloudsearch.cf sshd[18773]: Invalid user admin from 91.241.19.42 port 14618
2020-04-25T12:44:18.310821abusebot-5.cloudsearch.cf sshd[18773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.241.19.42
2020-04-25T12:44:18.297623abusebot-5.cloudsearch.cf sshd[18773]: Invalid user admin from 91.241.19.42 port 14618
2020-04-25T12:44:20.204947abusebot-5.cloudsearch.cf sshd[18773]: Failed passwo
...
2020-04-26 02:23:40
103.103.42.82 attackbotsspam
Email rejected due to spam filtering
2020-04-26 02:51:41
193.112.42.13 attack
Apr 25 14:07:49 Ubuntu-1404-trusty-64-minimal sshd\[23877\]: Invalid user johnh from 193.112.42.13
Apr 25 14:07:49 Ubuntu-1404-trusty-64-minimal sshd\[23877\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.42.13
Apr 25 14:07:52 Ubuntu-1404-trusty-64-minimal sshd\[23877\]: Failed password for invalid user johnh from 193.112.42.13 port 52790 ssh2
Apr 25 14:12:27 Ubuntu-1404-trusty-64-minimal sshd\[27176\]: Invalid user password from 193.112.42.13
Apr 25 14:12:27 Ubuntu-1404-trusty-64-minimal sshd\[27176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.42.13
2020-04-26 02:27:14
222.188.101.254 attackspam
2020-04-2514:10:591jSJe6-0001KP-16\<=info@whatsup2013.chH=\(localhost\)[222.188.101.254]:34267P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3087id=aae355060d260c04989d2b876094bea2ce1ec8@whatsup2013.chT="Yousparkmyheartandsoul."forqeslovelmp@gmail.comjamesdale1971@yahoo.com2020-04-2514:12:141jSJfJ-0001S3-DR\<=info@whatsup2013.chH=\(localhost\)[95.54.114.5]:43548P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3164id=acc317323912c73417e91f4c4793aa86a54f1fbad2@whatsup2013.chT="Tryingtofindmybesthalf"forpasammonasda@gmail.comguillermov61@yahoo.com2020-04-2514:10:321jSJdb-00016i-HV\<=info@whatsup2013.chH=\(localhost\)[171.242.125.95]:45228P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3188id=a8893f6c674c666ef2f741ed0afed4c854a005@whatsup2013.chT="Iwishtofeelyou"fortjgarner@live.comstandridgedavid317@gmail.com2020-04-2514:11:501jSJeu-0001Lq-8P\<=info@whatsup2013.chH=\(localhost\)[
2020-04-26 02:34:28
92.118.38.83 attackspam
2020-04-26 06:45:54 fixed_login authenticator failed for (User) [92.118.38.83]: 535 Incorrect authentication data (set_id=demo12@thepuddles.net.nz)
2020-04-26 06:48:50 fixed_login authenticator failed for (User) [92.118.38.83]: 535 Incorrect authentication data (set_id=compass@thepuddles.net.nz)
2020-04-26 06:51:51 fixed_login authenticator failed for (User) [92.118.38.83]: 535 Incorrect authentication data (set_id=icm@thepuddles.net.nz)
...
2020-04-26 02:52:34
204.15.110.165 attackbotsspam
Scanning for exploits - //wp-includes/wlwmanifest.xml
2020-04-26 02:32:05
79.127.97.19 attackbotsspam
Unauthorized connection attempt from IP address 79.127.97.19 on Port 445(SMB)
2020-04-26 02:19:26
222.186.175.150 attackbotsspam
Apr 25 14:28:54 NPSTNNYC01T sshd[901]: Failed password for root from 222.186.175.150 port 15782 ssh2
Apr 25 14:28:57 NPSTNNYC01T sshd[901]: Failed password for root from 222.186.175.150 port 15782 ssh2
Apr 25 14:29:00 NPSTNNYC01T sshd[901]: Failed password for root from 222.186.175.150 port 15782 ssh2
Apr 25 14:29:03 NPSTNNYC01T sshd[901]: Failed password for root from 222.186.175.150 port 15782 ssh2
...
2020-04-26 02:38:29
188.131.218.217 attackspambots
Apr 25 16:18:14 cloud sshd[24129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.218.217 
Apr 25 16:18:16 cloud sshd[24129]: Failed password for invalid user Tapio from 188.131.218.217 port 56136 ssh2
2020-04-26 02:33:48
216.218.206.95 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-04-26 02:23:11
104.236.211.129 attackbotsspam
Apr 25 02:54:50 foo sshd[22303]: Did not receive identification string from 104.236.211.129
Apr 25 02:57:31 foo sshd[22345]: Invalid user pi from 104.236.211.129
Apr 25 02:57:33 foo sshd[22345]: Failed password for invalid user pi from 104.236.211.129 port 33786 ssh2
Apr 25 02:57:33 foo sshd[22345]: Received disconnect from 104.236.211.129: 11: Normal Shutdown, Thank you for playing [preauth]
Apr 25 02:58:26 foo sshd[22360]: Invalid user pi from 104.236.211.129
Apr 25 02:58:28 foo sshd[22360]: Failed password for invalid user pi from 104.236.211.129 port 45689 ssh2
Apr 25 02:58:28 foo sshd[22360]: Received disconnect from 104.236.211.129: 11: Normal Shutdown, Thank you for playing [preauth]
Apr 25 02:59:27 foo sshd[22366]: Failed password for r.r from 104.236.211.129 port 57592 ssh2
Apr 25 02:59:27 foo sshd[22366]: Received disconnect from 104.236.211.129: 11: Normal Shutdown, Thank you for playing [preauth]
Apr 25 03:00:24 foo sshd[22374]: Failed password for r.r from ........
-------------------------------
2020-04-26 02:24:43
8.42.68.86 attack
TCP src-port=34527   dst-port=25   Listed on   dnsbl-sorbs abuseat-org barracuda       (Project Honey Pot rated Suspicious)   (253)
2020-04-26 02:54:22

最近上报的IP列表

139.99.138.191 139.99.138.248 139.99.136.115 139.99.136.17
139.99.144.232 139.99.143.100 139.99.141.196 118.254.209.139
139.99.148.148 139.99.149.124 139.99.149.173 139.99.149.48
139.99.152.32 139.99.153.48 139.99.155.3 139.99.155.12
118.254.209.141 139.99.149.8 237.52.117.217 139.99.155.60