必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Singapore

省份(region): unknown

国家(country): Singapore

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
139.99.91.43 attackbotsspam
SSH 2020-09-17 06:43:07	139.99.91.43	139.99.182.230	>	POST	serenevillasbali.indonesiaroom.com	/wp-login.php	HTTP/1.1	-	-
2020-09-17 23:54:08	139.99.91.43	139.99.182.230	>	GET	shinichisurabaya.com	/wp-login.php	HTTP/1.1	-	-
2020-09-17 23:54:08	139.99.91.43	139.99.182.230	>	POST	shinichisurabaya.com	/wp-login.php	HTTP/1.1	-	-
2020-09-19 03:35:21
139.99.91.43 attack
SSH 2020-09-17 06:43:07	139.99.91.43	139.99.182.230	>	POST	serenevillasbali.indonesiaroom.com	/wp-login.php	HTTP/1.1	-	-
2020-09-17 23:54:08	139.99.91.43	139.99.182.230	>	GET	shinichisurabaya.com	/wp-login.php	HTTP/1.1	-	-
2020-09-17 23:54:08	139.99.91.43	139.99.182.230	>	POST	shinichisurabaya.com	/wp-login.php	HTTP/1.1	-	-
2020-09-18 19:38:02
139.99.91.151 attackbots
ssh brute force
2020-08-26 17:04:27
139.99.91.132 attackbots
Apr 27 13:46:29 ns392434 sshd[10712]: Invalid user rashmi from 139.99.91.132 port 35618
Apr 27 13:46:29 ns392434 sshd[10712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.91.132
Apr 27 13:46:29 ns392434 sshd[10712]: Invalid user rashmi from 139.99.91.132 port 35618
Apr 27 13:46:31 ns392434 sshd[10712]: Failed password for invalid user rashmi from 139.99.91.132 port 35618 ssh2
Apr 27 13:53:53 ns392434 sshd[10931]: Invalid user sj from 139.99.91.132 port 56048
Apr 27 13:53:53 ns392434 sshd[10931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.91.132
Apr 27 13:53:53 ns392434 sshd[10931]: Invalid user sj from 139.99.91.132 port 56048
Apr 27 13:53:55 ns392434 sshd[10931]: Failed password for invalid user sj from 139.99.91.132 port 56048 ssh2
Apr 27 13:58:12 ns392434 sshd[11090]: Invalid user gavin from 139.99.91.132 port 39114
2020-04-27 20:33:57
139.99.91.132 attackbotsspam
Apr 23 22:10:05 sxvn sshd[417655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.91.132
2020-04-24 04:10:13
139.99.91.132 attackspambots
Apr 17 11:55:54 sshgateway sshd\[11379\]: Invalid user oracle from 139.99.91.132
Apr 17 11:55:54 sshgateway sshd\[11379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.ip-139-99-91.net
Apr 17 11:55:57 sshgateway sshd\[11379\]: Failed password for invalid user oracle from 139.99.91.132 port 34736 ssh2
2020-04-17 20:43:28
139.99.91.132 attackspam
"Unauthorized connection attempt on SSHD detected"
2020-04-14 01:49:00
139.99.91.132 attackspam
Mar 30 02:29:26 XXX sshd[53004]: Invalid user usa from 139.99.91.132 port 46016
2020-03-30 09:33:49
139.99.91.161 attackbotsspam
Mar 25 13:19:56 localhost sshd[92545]: Invalid user usertest from 139.99.91.161 port 60422
Mar 25 13:19:56 localhost sshd[92545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.ip-139-99-91.net
Mar 25 13:19:56 localhost sshd[92545]: Invalid user usertest from 139.99.91.161 port 60422
Mar 25 13:19:57 localhost sshd[92545]: Failed password for invalid user usertest from 139.99.91.161 port 60422 ssh2
Mar 25 13:28:02 localhost sshd[93269]: Invalid user raamatukogu from 139.99.91.161 port 58896
...
2020-03-25 21:39:59
139.99.91.161 attackspambots
Brute force attempt
2020-03-25 17:05:50
139.99.91.161 attackbotsspam
$f2bV_matches
2020-03-21 14:24:14
139.99.91.161 attackbotsspam
Mar 19 09:18:16 gw1 sshd[496]: Failed password for root from 139.99.91.161 port 53600 ssh2
...
2020-03-19 12:47:28
139.99.91.35 attackspam
Feb 22 15:00:22 hanapaa sshd\[18593\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.ip-139-99-91.net  user=root
Feb 22 15:00:24 hanapaa sshd\[18593\]: Failed password for root from 139.99.91.35 port 40618 ssh2
Feb 22 15:04:19 hanapaa sshd\[18952\]: Invalid user www from 139.99.91.35
Feb 22 15:04:19 hanapaa sshd\[18952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.ip-139-99-91.net
Feb 22 15:04:20 hanapaa sshd\[18952\]: Failed password for invalid user www from 139.99.91.35 port 35834 ssh2
2020-02-23 09:07:39
139.99.91.35 attackbotsspam
Feb 12 05:45:13 roki sshd[9406]: Invalid user ruhnow from 139.99.91.35
Feb 12 05:45:13 roki sshd[9406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.91.35
Feb 12 05:45:15 roki sshd[9406]: Failed password for invalid user ruhnow from 139.99.91.35 port 51972 ssh2
Feb 12 05:58:41 roki sshd[11771]: Invalid user goodluck from 139.99.91.35
Feb 12 05:58:41 roki sshd[11771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.91.35
...
2020-02-12 13:13:37
139.99.91.84 attack
Feb  7 23:20:56 ovpn sshd\[16557\]: Invalid user pfy from 139.99.91.84
Feb  7 23:20:56 ovpn sshd\[16557\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.91.84
Feb  7 23:20:58 ovpn sshd\[16557\]: Failed password for invalid user pfy from 139.99.91.84 port 39270 ssh2
Feb  7 23:37:29 ovpn sshd\[20700\]: Invalid user ogo from 139.99.91.84
Feb  7 23:37:29 ovpn sshd\[20700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.91.84
2020-02-08 08:55:16
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.91.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26437
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.99.91.128.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021072501 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jul 26 04:20:02 CST 2021
;; MSG SIZE  rcvd: 106
HOST信息:
128.91.99.139.in-addr.arpa domain name pointer vps1-sg.hzmi.xyz.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
128.91.99.139.in-addr.arpa	name = vps1-sg.hzmi.xyz.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
101.80.78.96 attack
Lines containing failures of 101.80.78.96
Aug 15 00:28:22 shared03 sshd[29114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.80.78.96  user=r.r
Aug 15 00:28:24 shared03 sshd[29114]: Failed password for r.r from 101.80.78.96 port 33074 ssh2
Aug 15 00:28:24 shared03 sshd[29114]: Received disconnect from 101.80.78.96 port 33074:11: Bye Bye [preauth]
Aug 15 00:28:24 shared03 sshd[29114]: Disconnected from authenticating user r.r 101.80.78.96 port 33074 [preauth]
Aug 15 00:34:28 shared03 sshd[31992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.80.78.96  user=r.r
Aug 15 00:34:31 shared03 sshd[31992]: Failed password for r.r from 101.80.78.96 port 36432 ssh2
Aug 15 00:34:31 shared03 sshd[31992]: Received disconnect from 101.80.78.96 port 36432:11: Bye Bye [preauth]
Aug 15 00:34:31 shared03 sshd[31992]: Disconnected from authenticating user r.r 101.80.78.96 port 36432 [preauth]


........
-----------------------------------
2020-08-15 18:40:28
114.107.145.86 attackspam
Email rejected due to spam filtering
2020-08-15 18:11:25
62.210.7.59 attackbotsspam
62.210.7.59 - - [15/Aug/2020:10:49:10 +0100] "POST /wp-login.php HTTP/1.1" 200 2100 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
62.210.7.59 - - [15/Aug/2020:10:49:11 +0100] "POST /wp-login.php HTTP/1.1" 200 2101 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
62.210.7.59 - - [15/Aug/2020:10:49:11 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-15 18:25:23
128.199.92.187 attack
TCP port : 13478
2020-08-15 18:26:26
167.88.161.218 attack
TCP port : 5985
2020-08-15 18:39:18
77.140.108.131 attack
Aug 15 05:50:20 ovpn sshd[12358]: Invalid user pi from 77.140.108.131
Aug 15 05:50:20 ovpn sshd[12359]: Invalid user pi from 77.140.108.131
Aug 15 05:50:20 ovpn sshd[12358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.140.108.131
Aug 15 05:50:20 ovpn sshd[12359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.140.108.131
Aug 15 05:50:23 ovpn sshd[12358]: Failed password for invalid user pi from 77.140.108.131 port 33956 ssh2
Aug 15 05:50:23 ovpn sshd[12358]: Connection closed by 77.140.108.131 port 33956 [preauth]
Aug 15 05:50:23 ovpn sshd[12359]: Failed password for invalid user pi from 77.140.108.131 port 33960 ssh2
Aug 15 05:50:23 ovpn sshd[12359]: Connection closed by 77.140.108.131 port 33960 [preauth]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=77.140.108.131
2020-08-15 18:34:51
198.20.103.244 attackbotsspam
firewall-block, port(s): 53/tcp
2020-08-15 18:35:41
158.69.197.113 attackbotsspam
2020-08-15T08:28:20.970239abusebot.cloudsearch.cf sshd[12551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.ip-158-69-197.net  user=root
2020-08-15T08:28:23.323250abusebot.cloudsearch.cf sshd[12551]: Failed password for root from 158.69.197.113 port 54568 ssh2
2020-08-15T08:31:30.812757abusebot.cloudsearch.cf sshd[12590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.ip-158-69-197.net  user=root
2020-08-15T08:31:32.846116abusebot.cloudsearch.cf sshd[12590]: Failed password for root from 158.69.197.113 port 39994 ssh2
2020-08-15T08:32:53.523026abusebot.cloudsearch.cf sshd[12601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.ip-158-69-197.net  user=root
2020-08-15T08:32:55.615005abusebot.cloudsearch.cf sshd[12601]: Failed password for root from 158.69.197.113 port 33048 ssh2
2020-08-15T08:34:12.489684abusebot.cloudsearch.cf sshd[12613]: pam_unix(sshd
...
2020-08-15 18:51:48
202.51.98.226 attack
Aug 15 12:19:02 kh-dev-server sshd[31239]: Failed password for root from 202.51.98.226 port 53016 ssh2
...
2020-08-15 18:46:23
52.62.23.37 attackspambots
52.62.23.37 - - \[15/Aug/2020:12:09:31 +0200\] "POST /wp-login.php HTTP/1.0" 200 6728 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
52.62.23.37 - - \[15/Aug/2020:12:09:35 +0200\] "POST /wp-login.php HTTP/1.0" 200 6736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
52.62.23.37 - - \[15/Aug/2020:12:09:39 +0200\] "POST /wp-login.php HTTP/1.0" 200 6724 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-08-15 18:10:10
185.253.99.230 attackspambots
[2020-08-15 04:42:12] NOTICE[1185] chan_sip.c: Registration from '"230"' failed for '185.253.99.230:3633' - Wrong password
[2020-08-15 04:42:12] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-15T04:42:12.791-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="230",SessionID="0x7f10c43e3a48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.253.99.230/3633",Challenge="15fbe24d",ReceivedChallenge="15fbe24d",ReceivedHash="f716fb8cbe061b8cbef07a756c342189"
[2020-08-15 04:44:44] NOTICE[1185] chan_sip.c: Registration from '"231"' failed for '185.253.99.230:31121' - Wrong password
[2020-08-15 04:44:44] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-15T04:44:44.994-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="231",SessionID="0x7f10c405ea98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.25
...
2020-08-15 18:34:15
45.124.144.116 attackbotsspam
SSH Bruteforce attack
2020-08-15 18:15:08
209.105.243.145 attack
frenzy
2020-08-15 18:48:37
218.92.0.221 attackspambots
Aug 15 10:20:52 scw-6657dc sshd[26536]: Failed password for root from 218.92.0.221 port 23380 ssh2
Aug 15 10:20:52 scw-6657dc sshd[26536]: Failed password for root from 218.92.0.221 port 23380 ssh2
Aug 15 10:20:54 scw-6657dc sshd[26536]: Failed password for root from 218.92.0.221 port 23380 ssh2
...
2020-08-15 18:25:55
193.112.70.95 attackspambots
frenzy
2020-08-15 18:51:22

最近上报的IP列表

23.251.121.238 170.51.140.148 23.251.121.135 173.212.213.166
173.212.213.114 169.149.210.201 209.97.161.120 23.44.51.248
120.239.36.68 83.99.206.210 39.208.155.108 165.225.200.210
81.14.174.66 82.144.32.66 222.127.28.213 120.126.45.134
52.188.162.137 203.177.154.1 203.205.141.116 164.163.99.216