必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Australia

运营商(isp): OVH Australia Pty Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbots
139.99.148.4 - - [07/Oct/2020:15:35:38 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [07/Oct/2020:16:01:07 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-08 04:29:11
attack
Attempted WordPress login: "GET /wp-login.php"
2020-10-07 20:48:50
attackspam
139.99.148.4 - - [07/Oct/2020:02:44:52 +0100] "POST /wp-login.php HTTP/1.1" 200 2394 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [07/Oct/2020:02:44:54 +0100] "POST /wp-login.php HTTP/1.1" 200 2328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [07/Oct/2020:02:44:56 +0100] "POST /wp-login.php HTTP/1.1" 200 2376 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-07 12:33:19
attackspambots
Automatic report - XMLRPC Attack
2020-09-21 01:35:44
attack
139.99.148.4 - - [20/Sep/2020:09:02:17 +0200] "GET /wp-login.php HTTP/1.1" 200 8558 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [20/Sep/2020:09:02:19 +0200] "POST /wp-login.php HTTP/1.1" 200 8809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [20/Sep/2020:09:02:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-20 17:34:25
attackbotsspam
php WP PHPmyadamin ABUSE blocked for 12h
2020-09-12 23:56:56
attackspam
139.99.148.4 - - [12/Sep/2020:07:11:02 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [12/Sep/2020:07:11:04 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [12/Sep/2020:07:11:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-12 15:59:01
attackspam
139.99.148.4 - - [11/Sep/2020:17:53:47 +0100] "POST /wp-login.php HTTP/1.1" 200 2221 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [11/Sep/2020:17:53:49 +0100] "POST /wp-login.php HTTP/1.1" 200 2147 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [11/Sep/2020:17:53:50 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-12 07:46:05
attackspambots
Automatic report - XMLRPC Attack
2020-09-09 02:41:56
attack
139.99.148.4 has been banned for [WebApp Attack]
...
2020-09-08 18:12:42
attack
139.99.148.4 - - [14/Aug/2020:12:21:41 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [14/Aug/2020:12:21:45 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [14/Aug/2020:12:21:50 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-14 20:21:14
attackspam
139.99.148.4 - - [07/Aug/2020:06:52:42 +0200] "POST /xmlrpc.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [07/Aug/2020:07:05:56 +0200] "POST /xmlrpc.php HTTP/1.1" 403 10519 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-07 13:49:44
attackbots
139.99.148.4 - - [31/Jul/2020:15:11:09 +0100] "POST /wp-login.php HTTP/1.1" 302 5 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [31/Jul/2020:15:11:16 +0100] "POST /wp-login.php HTTP/1.1" 302 5 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [31/Jul/2020:15:11:22 +0100] "POST /wp-login.php HTTP/1.1" 302 5 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-01 02:05:11
attackbotsspam
CMS (WordPress or Joomla) login attempt.
2020-07-30 07:41:44
attackbots
139.99.148.4 - - [27/Jul/2020:15:16:18 +0100] "POST /wp-login.php HTTP/1.1" 200 1968 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [27/Jul/2020:15:16:21 +0100] "POST /wp-login.php HTTP/1.1" 200 1972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [27/Jul/2020:15:16:22 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-07-27 23:21:14
attack
php WP PHPmyadamin ABUSE blocked for 12h
2020-07-11 04:17:51
attackspam
139.99.148.4 - - [24/Jun/2020:08:46:38 +0100] "POST /wp-login.php HTTP/1.1" 200 1791 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [24/Jun/2020:08:46:40 +0100] "POST /wp-login.php HTTP/1.1" 200 1772 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [24/Jun/2020:08:46:42 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-06-24 16:18:46
attackspam
09.06.2020 22:19:30 - Wordpress fail 
Detected by ELinOX-ALM
2020-06-10 05:52:51
attackspambots
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-06-10 01:09:00
attack
Automatic report - XMLRPC Attack
2020-06-06 03:35:07
attackbots
Automatic report - Banned IP Access
2020-05-11 23:50:20
attack
Automatic report - Banned IP Access
2020-05-04 12:30:04
attack
Attempted WordPress login: "GET /wp-login.php"
2020-03-14 05:10:03
attackbots
CMS (WordPress or Joomla) login attempt.
2020-03-08 18:53:36
attackbots
xmlrpc attack
2020-02-12 18:23:19
attackbotsspam
WordPress login Brute force / Web App Attack on client site.
2020-02-09 02:04:06
attackspambots
This client attempted to login to an administrator account on a Website, or abused from another resource.
2020-01-13 16:58:08
attackbotsspam
139.99.148.4 - - [07/Jan/2020:22:19:32 +0100] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [07/Jan/2020:22:19:33 +0100] "POST /wp-login.php HTTP/1.1" 200 2298 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [07/Jan/2020:22:19:33 +0100] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [07/Jan/2020:22:19:34 +0100] "POST /wp-login.php HTTP/1.1" 200 2272 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [07/Jan/2020:22:19:34 +0100] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - [07/Jan/2020:22:19:35 +0100] "POST /wp-login.php HTTP/1.1" 200 2273 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-01-08 06:22:25
attack
Automatic report - Banned IP Access
2019-11-29 13:47:38
attack
139.99.148.4 - - \[26/Nov/2019:11:17:16 +0000\] "POST /wp-login.php HTTP/1.1" 200 6393 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
139.99.148.4 - - \[26/Nov/2019:11:17:18 +0000\] "POST /wp-login.php HTTP/1.1" 200 6254 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2019-11-26 21:46:10
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.148.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26616
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.99.148.4.			IN	A

;; AUTHORITY SECTION:
.			125	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092400 1800 900 604800 86400

;; Query time: 346 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 25 00:25:36 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
4.148.99.139.in-addr.arpa domain name pointer fashion.zebrano.co.nz.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
4.148.99.139.in-addr.arpa	name = fashion.zebrano.co.nz.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
120.31.135.195 attackspambots
Honeypot attack, port: 445, PTR: ns1.eflydns.net.
2020-06-22 02:11:36
41.224.246.224 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-06-22 02:16:27
170.0.56.29 attackbots
Attempts against non-existent wp-login
2020-06-22 02:11:16
103.45.150.111 attackbotsspam
Jun 21 14:05:05 ns382633 sshd\[20616\]: Invalid user cn from 103.45.150.111 port 45516
Jun 21 14:05:05 ns382633 sshd\[20616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.150.111
Jun 21 14:05:08 ns382633 sshd\[20616\]: Failed password for invalid user cn from 103.45.150.111 port 45516 ssh2
Jun 21 14:11:54 ns382633 sshd\[22007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.150.111  user=root
Jun 21 14:11:56 ns382633 sshd\[22007\]: Failed password for root from 103.45.150.111 port 36266 ssh2
2020-06-22 01:47:32
49.234.50.247 attackbotsspam
Jun 21 16:09:12 ovpn sshd\[15954\]: Invalid user sysadmin from 49.234.50.247
Jun 21 16:09:12 ovpn sshd\[15954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.50.247
Jun 21 16:09:14 ovpn sshd\[15954\]: Failed password for invalid user sysadmin from 49.234.50.247 port 47360 ssh2
Jun 21 16:24:54 ovpn sshd\[6093\]: Invalid user yqc from 49.234.50.247
Jun 21 16:24:54 ovpn sshd\[6093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.50.247
2020-06-22 01:44:01
71.187.183.209 attackspambots
Honeypot attack, port: 445, PTR: pool-71-187-183-209.nwrknj.fios.verizon.net.
2020-06-22 02:10:59
86.69.2.215 attackbots
2020-06-21T08:16:28.987890linuxbox-skyline sshd[61186]: Invalid user sinus from 86.69.2.215 port 48234
...
2020-06-22 02:10:40
181.13.197.4 attackspambots
Jun 21 15:11:50 jane sshd[4400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.13.197.4 
Jun 21 15:11:52 jane sshd[4400]: Failed password for invalid user dina from 181.13.197.4 port 36071 ssh2
...
2020-06-22 02:04:44
111.229.204.62 attack
Lines containing failures of 111.229.204.62
Jun 17 17:59:26 kmh-wmh-001-nbg01 sshd[2792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.204.62  user=r.r
Jun 17 17:59:28 kmh-wmh-001-nbg01 sshd[2792]: Failed password for r.r from 111.229.204.62 port 35866 ssh2
Jun 17 17:59:28 kmh-wmh-001-nbg01 sshd[2792]: Received disconnect from 111.229.204.62 port 35866:11: Bye Bye [preauth]
Jun 17 17:59:28 kmh-wmh-001-nbg01 sshd[2792]: Disconnected from authenticating user r.r 111.229.204.62 port 35866 [preauth]
Jun 17 18:05:59 kmh-wmh-001-nbg01 sshd[4102]: Invalid user josue from 111.229.204.62 port 58686
Jun 17 18:05:59 kmh-wmh-001-nbg01 sshd[4102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.204.62 
Jun 17 18:06:01 kmh-wmh-001-nbg01 sshd[4102]: Failed password for invalid user josue from 111.229.204.62 port 58686 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=111.2
2020-06-22 02:07:42
31.193.125.236 attackspam
Unauthorised access (Jun 21) SRC=31.193.125.236 LEN=52 TTL=118 ID=29819 DF TCP DPT=445 WINDOW=8192 SYN
2020-06-22 01:41:31
106.52.19.71 attackbots
leo_www
2020-06-22 02:12:28
49.7.21.115 attack
Automatic report - Banned IP Access
2020-06-22 02:16:12
61.139.23.69 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-06-22 02:09:55
192.144.228.253 attackbots
Jun 21 19:21:39 lnxded63 sshd[8535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.228.253
Jun 21 19:21:39 lnxded63 sshd[8535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.228.253
2020-06-22 01:56:43
130.61.242.104 attack
Automated report (2020-06-21T20:11:58+08:00). Scraper detected at this address.
2020-06-22 01:46:52

最近上报的IP列表

85.114.207.10 91.179.237.93 51.68.226.66 40.114.126.73
101.228.122.53 83.234.244.77 138.184.138.110 212.7.220.20
27.76.243.60 166.62.121.76 60.174.20.214 141.255.150.34
1.169.141.180 103.206.129.211 177.157.89.103 123.21.104.145
49.67.111.135 54.36.250.123 68.100.119.84 77.34.178.80