必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): unknown

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
139.99.69.189 attackspam
139.99.69.189 - - [13/Oct/2020:17:28:32 +0200] "POST /wp-login.php HTTP/1.0" 200 4794 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-14 00:03:50
139.99.69.189 attackbots
139.99.69.189 - - [13/Oct/2020:07:22:18 +0100] "POST /wp-login.php HTTP/1.1" 200 2463 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.69.189 - - [13/Oct/2020:07:22:20 +0100] "POST /wp-login.php HTTP/1.1" 200 2443 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.69.189 - - [13/Oct/2020:07:22:20 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-13 15:18:24
139.99.69.189 attackspam
CMS (WordPress or Joomla) login attempt.
2020-10-13 07:54:32
139.99.62.85 attack
Automatic report - Banned IP Access
2020-10-08 05:44:40
139.99.62.85 attackspam
xmlrpc attack
2020-10-07 13:58:46
139.99.69.189 attackspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-10-01 03:55:57
139.99.69.189 attackspam
139.99.69.189 - - [30/Sep/2020:01:50:49 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.69.189 - - [30/Sep/2020:02:16:54 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-30 12:31:51
139.99.66.210 attack
Trying ports that it shouldn't be.
2020-08-27 20:04:19
139.99.61.247 attackspambots
Aug 20 07:57:14 pornomens sshd\[1983\]: Invalid user ubuntu from 139.99.61.247 port 36570
Aug 20 07:57:14 pornomens sshd\[1983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.61.247
Aug 20 07:57:16 pornomens sshd\[1983\]: Failed password for invalid user ubuntu from 139.99.61.247 port 36570 ssh2
...
2020-08-20 14:46:06
139.99.61.56 attack
1 Attack(s) Detected
[DoS Attack: SYN/ACK Scan] from source: 139.99.61.56, port 30120, Tuesday, August 11, 2020 05:53:26
2020-08-13 15:05:51
139.99.66.210 attack
Port Scan detected!
...
2020-07-01 01:39:28
139.99.69.74 attackbotsspam
Feb 18 10:45:16 ns382633 sshd\[14335\]: Invalid user support from 139.99.69.74 port 63515
Feb 18 10:45:16 ns382633 sshd\[14335\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.69.74
Feb 18 10:45:19 ns382633 sshd\[14335\]: Failed password for invalid user support from 139.99.69.74 port 63515 ssh2
Feb 18 10:45:21 ns382633 sshd\[14337\]: Invalid user user from 139.99.69.74 port 59712
Feb 18 10:45:21 ns382633 sshd\[14337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.69.74
2020-02-18 19:15:30
139.99.69.74 attackbots
Invalid user support from 139.99.69.74 port 60370
2020-02-11 15:19:36
139.99.62.85 attackbots
139.99.62.85 - - [14/Dec/2019:10:38:28 +0000] "POST /wp-login.php HTTP/1.1" 200 6393 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.99.62.85 - - [14/Dec/2019:10:38:29 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-12-14 22:44:26
139.99.62.85 attack
Automatic report - XMLRPC Attack
2019-12-08 20:08:45
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.6.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43364
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.99.6.14.			IN	A

;; AUTHORITY SECTION:
.			597	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:43:11 CST 2022
;; MSG SIZE  rcvd: 104
HOST信息:
14.6.99.139.in-addr.arpa domain name pointer bpest.sgp1.dgprasetya.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
14.6.99.139.in-addr.arpa	name = bpest.sgp1.dgprasetya.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
51.174.116.225 attackspambots
Oct 12 07:21:31 webhost01 sshd[16846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.174.116.225
Oct 12 07:21:33 webhost01 sshd[16846]: Failed password for invalid user 1234QWERasdf from 51.174.116.225 port 46742 ssh2
...
2019-10-12 11:11:11
49.88.112.71 attackbotsspam
2019-10-11T15:50:58.314560shield sshd\[5070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.71  user=root
2019-10-11T15:51:00.049606shield sshd\[5070\]: Failed password for root from 49.88.112.71 port 56560 ssh2
2019-10-11T15:51:02.663815shield sshd\[5070\]: Failed password for root from 49.88.112.71 port 56560 ssh2
2019-10-11T15:51:04.545794shield sshd\[5070\]: Failed password for root from 49.88.112.71 port 56560 ssh2
2019-10-11T15:51:44.020414shield sshd\[5074\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.71  user=root
2019-10-12 11:35:11
122.195.200.148 attackspambots
Oct 12 05:06:48 dcd-gentoo sshd[617]: User root from 122.195.200.148 not allowed because none of user's groups are listed in AllowGroups
Oct 12 05:06:50 dcd-gentoo sshd[617]: error: PAM: Authentication failure for illegal user root from 122.195.200.148
Oct 12 05:06:48 dcd-gentoo sshd[617]: User root from 122.195.200.148 not allowed because none of user's groups are listed in AllowGroups
Oct 12 05:06:50 dcd-gentoo sshd[617]: error: PAM: Authentication failure for illegal user root from 122.195.200.148
Oct 12 05:06:48 dcd-gentoo sshd[617]: User root from 122.195.200.148 not allowed because none of user's groups are listed in AllowGroups
Oct 12 05:06:50 dcd-gentoo sshd[617]: error: PAM: Authentication failure for illegal user root from 122.195.200.148
Oct 12 05:06:50 dcd-gentoo sshd[617]: Failed keyboard-interactive/pam for invalid user root from 122.195.200.148 port 17970 ssh2
...
2019-10-12 11:09:15
129.211.125.167 attackbotsspam
Oct 11 17:51:23 localhost sshd\[27468\]: Invalid user imunybtvrcexwz from 129.211.125.167 port 52662
Oct 11 17:51:23 localhost sshd\[27468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.125.167
Oct 11 17:51:25 localhost sshd\[27468\]: Failed password for invalid user imunybtvrcexwz from 129.211.125.167 port 52662 ssh2
2019-10-12 11:40:15
180.92.235.125 attackspam
RDPBruteGSL24
2019-10-12 11:12:29
193.32.160.142 attack
Oct 12 05:14:41 webserver postfix/smtpd\[4882\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.142\]: 454 4.7.1 Service unavailable\; Client host \[193.32.160.142\] blocked using dnsbl.sorbs.net\; Exploitable Server See: http://www.sorbs.net/lookup.shtml\?193.32.160.142\; from=\<10i1zkxby2bb7h@fireware.com\> to=\ proto=ESMTP helo=\<\[193.32.160.142\]\>
Oct 12 05:14:41 webserver postfix/smtpd\[4882\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.142\]: 454 4.7.1 Service unavailable\; Client host \[193.32.160.142\] blocked using dnsbl.sorbs.net\; Exploitable Server See: http://www.sorbs.net/lookup.shtml\?193.32.160.142\; from=\<10i1zkxby2bb7h@fireware.com\> to=\ proto=ESMTP helo=\<\[193.32.160.142\]\>
Oct 12 05:14:41 webserver postfix/smtpd\[4882\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.142\]: 454 4.7.1 Service unavailable\; Client host \[193.32.160.142\] blocked using dnsbl.sorbs.net\; Exploitable Server See: http://www.sorbs.net/lookup.shtml
...
2019-10-12 11:20:23
222.186.42.117 attackbots
Oct 12 00:33:58 firewall sshd[23029]: Failed password for root from 222.186.42.117 port 36656 ssh2
Oct 12 00:34:01 firewall sshd[23029]: Failed password for root from 222.186.42.117 port 36656 ssh2
Oct 12 00:34:03 firewall sshd[23029]: Failed password for root from 222.186.42.117 port 36656 ssh2
...
2019-10-12 11:34:20
165.22.86.58 attackspambots
Automatic report - Banned IP Access
2019-10-12 11:13:57
58.254.132.239 attackbots
Oct 12 05:05:07 localhost sshd\[11496\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.239  user=root
Oct 12 05:05:09 localhost sshd\[11496\]: Failed password for root from 58.254.132.239 port 3465 ssh2
Oct 12 05:09:51 localhost sshd\[11968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.239  user=root
2019-10-12 11:22:55
112.85.42.195 attack
Oct 12 04:36:04 ArkNodeAT sshd\[6634\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.195  user=root
Oct 12 04:36:06 ArkNodeAT sshd\[6634\]: Failed password for root from 112.85.42.195 port 23183 ssh2
Oct 12 04:36:48 ArkNodeAT sshd\[6643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.195  user=root
2019-10-12 11:02:12
211.20.181.186 attack
Oct 11 21:48:59 intra sshd\[32424\]: Invalid user 123!@\#abc from 211.20.181.186Oct 11 21:49:01 intra sshd\[32424\]: Failed password for invalid user 123!@\#abc from 211.20.181.186 port 63338 ssh2Oct 11 21:53:59 intra sshd\[32498\]: Invalid user 123!@\#abc from 211.20.181.186Oct 11 21:54:01 intra sshd\[32498\]: Failed password for invalid user 123!@\#abc from 211.20.181.186 port 38138 ssh2Oct 11 21:58:49 intra sshd\[32562\]: Invalid user Grenoble from 211.20.181.186Oct 11 21:58:51 intra sshd\[32562\]: Failed password for invalid user Grenoble from 211.20.181.186 port 29266 ssh2
...
2019-10-12 11:04:20
113.125.36.43 attackbots
Bruteforcing port 3389 (Remote Desktop) - Exceed maximum 10 attempts/hour
2019-10-12 11:36:55
54.37.88.73 attack
Brute force SMTP login attempted.
...
2019-10-12 11:25:57
94.8.86.46 attackbots
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/94.8.86.46/ 
 GB - 1H : (65)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : GB 
 NAME ASN : ASN5607 
 
 IP : 94.8.86.46 
 
 CIDR : 94.0.0.0/12 
 
 PREFIX COUNT : 35 
 
 UNIQUE IP COUNT : 5376768 
 
 
 WYKRYTE ATAKI Z ASN5607 :  
  1H - 1 
  3H - 1 
  6H - 3 
 12H - 7 
 24H - 14 
 
 DateTime : 2019-10-11 17:58:34 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-12 11:11:25
52.193.236.34 attackspambots
Automatic report - XMLRPC Attack
2019-10-12 11:04:47

最近上报的IP列表

139.99.53.152 139.99.57.60 46.37.253.222 139.99.6.142
139.99.61.143 139.99.6.158 139.99.61.5 139.99.61.101
139.99.61.238 139.99.61.158 139.99.57.40 139.99.61.83
139.99.61.161 139.99.62.221 139.99.64.121 139.99.62.101
118.27.122.183 139.99.62.80 139.99.65.161 139.99.64.99