139.99.201.155

基本信息:

城市(city): Sydney

省份(region): New South Wales

国家(country): Australia

运营商(isp): OVH Australia Pty Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	$f2bV_matches	2020-08-18 14:27:58
attack	Aug 18 04:18:51 itv-usvr-01 sshd[24676]: Invalid user mn from 139.99.201.155 Aug 18 04:18:51 itv-usvr-01 sshd[24676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.155 Aug 18 04:18:51 itv-usvr-01 sshd[24676]: Invalid user mn from 139.99.201.155 Aug 18 04:18:53 itv-usvr-01 sshd[24676]: Failed password for invalid user mn from 139.99.201.155 port 42350 ssh2 Aug 18 04:27:52 itv-usvr-01 sshd[25015]: Invalid user yves from 139.99.201.155	2020-08-18 07:39:53

类型

评论内容

时间

attackspambots

$f2bV_matches

2020-08-18 14:27:58

attack

Aug 18 04:18:51 itv-usvr-01 sshd[24676]: Invalid user mn from 139.99.201.155
Aug 18 04:18:51 itv-usvr-01 sshd[24676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.155
Aug 18 04:18:51 itv-usvr-01 sshd[24676]: Invalid user mn from 139.99.201.155
Aug 18 04:18:53 itv-usvr-01 sshd[24676]: Failed password for invalid user mn from 139.99.201.155 port 42350 ssh2
Aug 18 04:27:52 itv-usvr-01 sshd[25015]: Invalid user yves from 139.99.201.155

2020-08-18 07:39:53

相同子网IP讨论:

IP	类型	评论内容	时间
139.99.201.100	attackspam	Oct 6 09:38:03 vtv3 sshd\[31066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.100 user=root Oct 6 09:38:05 vtv3 sshd\[31066\]: Failed password for root from 139.99.201.100 port 47310 ssh2 Oct 6 09:42:55 vtv3 sshd\[1022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.100 user=root Oct 6 09:42:57 vtv3 sshd\[1022\]: Failed password for root from 139.99.201.100 port 59314 ssh2 Oct 6 09:47:56 vtv3 sshd\[3545\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.100 user=root Oct 6 10:02:20 vtv3 sshd\[10661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.100 user=root Oct 6 10:02:22 vtv3 sshd\[10661\]: Failed password for root from 139.99.201.100 port 50862 ssh2 Oct 6 10:07:09 vtv3 sshd\[12985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rho	2019-10-06 17:37:48
139.99.201.100	attackbotsspam	Oct 3 07:07:59 fr01 sshd[23523]: Invalid user alar from 139.99.201.100 ...	2019-10-03 15:21:05
139.99.201.100	attackspam	Sep 13 07:54:40 SilenceServices sshd[9764]: Failed password for sinusbot from 139.99.201.100 port 41834 ssh2 Sep 13 08:00:17 SilenceServices sshd[13848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.100 Sep 13 08:00:19 SilenceServices sshd[13848]: Failed password for invalid user deploy from 139.99.201.100 port 57948 ssh2	2019-09-13 14:10:57
139.99.201.100	attackbotsspam	Sep 11 16:02:03 webhost01 sshd[12265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.100 Sep 11 16:02:04 webhost01 sshd[12265]: Failed password for invalid user 123123 from 139.99.201.100 port 55318 ssh2 ...	2019-09-11 17:05:30
139.99.201.100	attack	Sep 11 05:08:48 minden010 sshd[29977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.100 Sep 11 05:08:50 minden010 sshd[29977]: Failed password for invalid user vyos from 139.99.201.100 port 36600 ssh2 Sep 11 05:16:41 minden010 sshd[305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.100 ...	2019-09-11 11:34:20
139.99.201.100	attackbotsspam	Aug 23 22:04:02 SilenceServices sshd[16965]: Failed password for root from 139.99.201.100 port 60128 ssh2 Aug 23 22:08:57 SilenceServices sshd[21480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.100 Aug 23 22:08:59 SilenceServices sshd[21480]: Failed password for invalid user qiu from 139.99.201.100 port 49060 ssh2	2019-08-24 04:13:37
139.99.201.100	attackbots	Aug 22 21:24:49 lnxmysql61 sshd[26727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.100	2019-08-23 12:38:51
139.99.201.100	attackspambots	Aug 19 09:29:31 SilenceServices sshd[6030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.100 Aug 19 09:29:33 SilenceServices sshd[6030]: Failed password for invalid user mariusz from 139.99.201.100 port 49370 ssh2 Aug 19 09:35:28 SilenceServices sshd[10687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.100	2019-08-19 22:39:00
139.99.201.100	attackbots	Aug 19 00:18:44 SilenceServices sshd[8426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.100 Aug 19 00:18:46 SilenceServices sshd[8426]: Failed password for invalid user doming from 139.99.201.100 port 37784 ssh2 Aug 19 00:25:19 SilenceServices sshd[12354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.100	2019-08-19 06:38:49
139.99.201.100	attackbotsspam	Aug 18 00:27:22 SilenceServices sshd[14449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.100 Aug 18 00:27:24 SilenceServices sshd[14449]: Failed password for invalid user gmod from 139.99.201.100 port 46638 ssh2 Aug 18 00:32:55 SilenceServices sshd[17795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.201.100	2019-08-18 06:48:32
139.99.201.100	attackspam	Aug 13 22:36:42 www2 sshd\[3997\]: Invalid user admin from 139.99.201.100Aug 13 22:36:44 www2 sshd\[3997\]: Failed password for invalid user admin from 139.99.201.100 port 39796 ssh2Aug 13 22:42:30 www2 sshd\[4650\]: Invalid user tss3 from 139.99.201.100 ...	2019-08-14 03:51:34
139.99.201.74	attack	139.99.201.74 - - [02/Jul/2019:15:52:37 +0200] "GET /wp-login.php HTTP/1.1" 200 4404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.99.201.74 - - [02/Jul/2019:15:52:38 +0200] "POST /wp-login.php HTTP/1.1" 200 4404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.99.201.74 - - [02/Jul/2019:15:52:38 +0200] "GET /wp-login.php HTTP/1.1" 200 4404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.99.201.74 - - [02/Jul/2019:15:52:39 +0200] "POST /wp-login.php HTTP/1.1" 200 4404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.99.201.74 - - [02/Jul/2019:15:52:40 +0200] "GET /wp-login.php HTTP/1.1" 200 4404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.99.201.74 - - [02/Jul/2019:15:52:41 +0200] "POST /wp-login.php HTTP/1.1" 200 4404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-07-03 01:03:55

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.201.155
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12174
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.99.201.155.			IN	A

;; AUTHORITY SECTION:
.			280	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081701 1800 900 604800 86400

;; Query time: 78 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 18 07:39:49 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

155.201.99.139.in-addr.arpa domain name pointer 155.ip-139-99-201.eu.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
155.201.99.139.in-addr.arpa	name = 155.ip-139-99-201.eu.

Authoritative answers can be found from:

IP	类型	评论内容	时间
111.229.79.17	attackspambots	Feb 25 15:03:08 mockhub sshd[26331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.79.17 Feb 25 15:03:10 mockhub sshd[26331]: Failed password for invalid user sandeep from 111.229.79.17 port 53830 ssh2 ...	2020-02-26 07:03:49
2.236.254.252	attackspambots	Automatic report - Port Scan Attack	2020-02-26 07:21:16
112.85.42.180	attack	Feb 25 23:56:22 silence02 sshd[16063]: Failed password for root from 112.85.42.180 port 30964 ssh2 Feb 25 23:56:26 silence02 sshd[16063]: Failed password for root from 112.85.42.180 port 30964 ssh2 Feb 25 23:56:30 silence02 sshd[16063]: Failed password for root from 112.85.42.180 port 30964 ssh2 Feb 25 23:56:33 silence02 sshd[16063]: Failed password for root from 112.85.42.180 port 30964 ssh2	2020-02-26 07:16:12
190.134.150.6	attack	Automatic report - Port Scan Attack	2020-02-26 07:35:00
121.33.146.70	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-26 07:25:39
93.158.239.2	attackbots	Invalid user ubuntu from 93.158.239.2 port 39298	2020-02-26 07:20:33
177.86.20.79	attack	Feb 25 17:33:08 grey postfix/smtpd\[19664\]: NOQUEUE: reject: RCPT from unknown\[177.86.20.79\]: 554 5.7.1 Service unavailable\; Client host \[177.86.20.79\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[177.86.20.79\]\; from=\ to=\ proto=ESMTP helo=\<20-79.pox.com.br\> ...	2020-02-26 07:03:16
81.33.27.115	attackspam	Unauthorized connection attempt from IP address 81.33.27.115 on Port 445(SMB)	2020-02-26 07:09:11
51.75.153.230	attackspambots	Invalid user vivek from 51.75.153.230 port 56093	2020-02-26 07:24:18
120.143.1.12	attackbotsspam	Honeypot attack, port: 5555, PTR: 120.143.1.12.static.zoot.jp.	2020-02-26 07:27:52
80.234.92.31	attackspambots	suspicious action Tue, 25 Feb 2020 13:32:23 -0300	2020-02-26 07:33:13
220.132.17.221	attack	Honeypot attack, port: 81, PTR: 220-132-17-221.HINET-IP.hinet.net.	2020-02-26 07:28:52
59.126.158.139	attackbots	suspicious action Tue, 25 Feb 2020 13:32:31 -0300	2020-02-26 07:29:08
190.102.140.7	attackbotsspam	Feb 25 20:57:36 h2177944 sshd\[21070\]: Invalid user bruno from 190.102.140.7 port 47512 Feb 25 20:57:36 h2177944 sshd\[21070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.102.140.7 Feb 25 20:57:38 h2177944 sshd\[21070\]: Failed password for invalid user bruno from 190.102.140.7 port 47512 ssh2 Feb 25 21:04:16 h2177944 sshd\[21313\]: Invalid user dolphin from 190.102.140.7 port 36892 Feb 25 21:04:16 h2177944 sshd\[21313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.102.140.7 ...	2020-02-26 07:37:26
162.243.132.79	attack	scan z	2020-02-26 07:00:40

最近上报的IP列表

78.169.44.111	128.252.14.203	191.26.68.190	220.141.121.134
98.100.182.124	65.153.185.222	165.182.197.103	100.195.238.144
204.178.168.137	76.28.3.143	89.169.77.199	175.231.244.135
144.160.123.237	63.227.237.214	174.204.56.141	85.104.117.183
190.162.110.139	222.238.237.209	104.225.252.10	125.208.112.196