必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Huawei International Pte Ltd

主机名(hostname): unknown

机构(organization): HUAWEI CLOUDS

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Jul  1 15:56:16 giegler sshd[15635]: Invalid user both from 159.138.139.4 port 59656
Jul  1 15:56:17 giegler sshd[15635]: Failed password for invalid user both from 159.138.139.4 port 59656 ssh2
Jul  1 15:56:16 giegler sshd[15635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.139.4
Jul  1 15:56:16 giegler sshd[15635]: Invalid user both from 159.138.139.4 port 59656
Jul  1 15:56:17 giegler sshd[15635]: Failed password for invalid user both from 159.138.139.4 port 59656 ssh2
2019-07-02 03:04:37
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.138.139.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35507
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;159.138.139.4.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070101 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 02 03:04:32 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
4.139.138.159.in-addr.arpa domain name pointer ecs-159-138-139-4.compute.hwclouds-dns.com.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
4.139.138.159.in-addr.arpa	name = ecs-159-138-139-4.compute.hwclouds-dns.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
187.206.224.249 attackspam
Feb 24 17:52:26 v2hgb sshd[24566]: Invalid user postgres from 187.206.224.249 port 9032
Feb 24 17:52:26 v2hgb sshd[24566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.206.224.249 
Feb 24 17:52:28 v2hgb sshd[24566]: Failed password for invalid user postgres from 187.206.224.249 port 9032 ssh2
Feb 24 17:52:30 v2hgb sshd[24566]: Received disconnect from 187.206.224.249 port 9032:11: Bye Bye [preauth]
Feb 24 17:52:30 v2hgb sshd[24566]: Disconnected from invalid user postgres 187.206.224.249 port 9032 [preauth]
Feb 24 17:54:53 v2hgb sshd[24783]: Invalid user hanshow from 187.206.224.249 port 4962
Feb 24 17:54:53 v2hgb sshd[24783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.206.224.249 
Feb 24 17:54:55 v2hgb sshd[24783]: Failed password for invalid user hanshow from 187.206.224.249 port 4962 ssh2
Feb 24 17:54:57 v2hgb sshd[24783]: Received disconnect from 187.206.224.249 port 4962........
-------------------------------
2020-02-28 01:47:08
107.170.244.110 attack
Feb 27 18:05:19 ns381471 sshd[15157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.244.110
Feb 27 18:05:20 ns381471 sshd[15157]: Failed password for invalid user vyatta from 107.170.244.110 port 42948 ssh2
2020-02-28 01:35:15
77.232.100.198 attackspam
Lines containing failures of 77.232.100.198
Feb 27 00:04:17 nexus sshd[15016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.232.100.198  user=r.r
Feb 27 00:04:19 nexus sshd[15016]: Failed password for r.r from 77.232.100.198 port 54466 ssh2
Feb 27 00:04:19 nexus sshd[15016]: Received disconnect from 77.232.100.198 port 54466:11: Bye Bye [preauth]
Feb 27 00:04:19 nexus sshd[15016]: Disconnected from 77.232.100.198 port 54466 [preauth]
Feb 27 00:12:05 nexus sshd[16604]: Invalid user michael from 77.232.100.198 port 53494
Feb 27 00:12:05 nexus sshd[16604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.232.100.198
Feb 27 00:12:07 nexus sshd[16604]: Failed password for invalid user michael from 77.232.100.198 port 53494 ssh2
Feb 27 00:12:07 nexus sshd[16604]: Received disconnect from 77.232.100.198 port 53494:11: Bye Bye [preauth]
Feb 27 00:12:07 nexus sshd[16604]: Disconnected from 77.........
------------------------------
2020-02-28 02:12:43
1.53.156.20 attackspam
1582813502 - 02/27/2020 15:25:02 Host: 1.53.156.20/1.53.156.20 Port: 445 TCP Blocked
2020-02-28 01:28:21
203.57.46.120 attack
Feb 27 17:30:44 dev0-dcde-rnet sshd[1436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.57.46.120
Feb 27 17:30:46 dev0-dcde-rnet sshd[1436]: Failed password for invalid user couchdb from 203.57.46.120 port 52828 ssh2
Feb 27 17:38:16 dev0-dcde-rnet sshd[1529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.57.46.120
2020-02-28 02:01:42
23.95.254.144 attackbotsspam
suspicious action Thu, 27 Feb 2020 11:24:43 -0300
2020-02-28 01:49:20
106.13.182.160 attackspambots
Feb 27 15:37:51 hcbbdb sshd\[20697\]: Invalid user narciso from 106.13.182.160
Feb 27 15:37:51 hcbbdb sshd\[20697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.182.160
Feb 27 15:37:53 hcbbdb sshd\[20697\]: Failed password for invalid user narciso from 106.13.182.160 port 40322 ssh2
Feb 27 15:42:58 hcbbdb sshd\[21241\]: Invalid user dick from 106.13.182.160
Feb 27 15:42:58 hcbbdb sshd\[21241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.182.160
2020-02-28 01:53:25
185.180.129.212 attackspam
Automatic report - Port Scan Attack
2020-02-28 02:05:20
139.99.144.50 attackbots
Brute force attack against VPN service
2020-02-28 01:40:42
173.22.33.5 attack
Port 23 (Telnet) access denied
2020-02-28 01:46:17
115.218.16.168 attack
Feb 27 17:24:13 server sshd\[16390\]: Invalid user admin from 115.218.16.168
Feb 27 17:24:13 server sshd\[16390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.218.16.168 
Feb 27 17:24:15 server sshd\[16390\]: Failed password for invalid user admin from 115.218.16.168 port 46781 ssh2
Feb 27 17:24:38 server sshd\[16407\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.218.16.168  user=root
Feb 27 17:24:40 server sshd\[16407\]: Failed password for root from 115.218.16.168 port 46806 ssh2
...
2020-02-28 01:50:53
151.52.84.99 attack
Telnet/23 MH Probe, Scan, BF, Hack -
2020-02-28 01:47:38
149.12.216.143 attack
DATE:2020-02-27 18:05:48, IP:149.12.216.143, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-02-28 02:02:17
190.64.213.155 attackbots
Feb 27 19:04:21 MK-Soft-VM3 sshd[9789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.64.213.155 
Feb 27 19:04:23 MK-Soft-VM3 sshd[9789]: Failed password for invalid user daniel from 190.64.213.155 port 46218 ssh2
...
2020-02-28 02:14:01
103.208.34.199 attack
(sshd) Failed SSH login from 103.208.34.199 (HK/Hong Kong/-): 5 in the last 3600 secs
2020-02-28 01:32:50

最近上报的IP列表

157.108.16.80 209.28.61.161 39.108.97.62 90.108.12.27
150.109.67.152 35.160.220.175 195.114.121.66 107.14.166.230
39.33.84.231 175.199.101.12 145.138.227.178 62.251.155.157
91.225.57.171 117.35.90.213 220.48.17.224 125.148.41.108
103.114.107.234 182.157.175.32 31.204.12.36 55.182.188.119