必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Clifton

省份(region): New Jersey

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): DigitalOcean, LLC

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Mar  1 05:58:50 amit sshd\[12218\]: Invalid user glassfish1 from 159.203.139.128
Mar  1 05:58:50 amit sshd\[12218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
Mar  1 05:58:51 amit sshd\[12218\]: Failed password for invalid user glassfish1 from 159.203.139.128 port 47124 ssh2
...
2020-03-01 13:16:56
attackbotsspam
Feb 21 16:28:08 dedicated sshd[21302]: Invalid user student from 159.203.139.128 port 50310
2020-02-21 23:42:58
attack
Unauthorized connection attempt detected from IP address 159.203.139.128 to port 2220 [J]
2020-02-02 19:35:22
attackbotsspam
Jan 26 05:52:53 lnxded63 sshd[22945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
2020-01-26 14:24:41
attackspambots
Jan  1 05:58:35 lnxded64 sshd[27379]: Failed password for root from 159.203.139.128 port 57768 ssh2
Jan  1 05:58:35 lnxded64 sshd[27379]: Failed password for root from 159.203.139.128 port 57768 ssh2
2020-01-01 13:12:27
attackspambots
Dec 23 09:12:21 mail sshd[8185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128  user=root
Dec 23 09:12:24 mail sshd[8185]: Failed password for root from 159.203.139.128 port 48346 ssh2
Dec 23 10:00:02 mail sshd[14050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128  user=root
Dec 23 10:00:04 mail sshd[14050]: Failed password for root from 159.203.139.128 port 54740 ssh2
Dec 23 10:14:59 mail sshd[16133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128  user=root
Dec 23 10:15:01 mail sshd[16133]: Failed password for root from 159.203.139.128 port 60290 ssh2
...
2019-12-23 22:29:54
attackspam
SSH invalid-user multiple login attempts
2019-12-03 18:59:08
attackspambots
Nov 28 08:46:50 server sshd\[4515\]: Invalid user m1 from 159.203.139.128
Nov 28 08:46:50 server sshd\[4515\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128 
Nov 28 08:46:52 server sshd\[4515\]: Failed password for invalid user m1 from 159.203.139.128 port 39240 ssh2
Nov 28 09:27:03 server sshd\[14883\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128  user=root
Nov 28 09:27:06 server sshd\[14883\]: Failed password for root from 159.203.139.128 port 49342 ssh2
...
2019-11-28 17:13:45
attack
Nov  9 13:04:33 localhost sshd\[18865\]: Invalid user lidl from 159.203.139.128 port 52154
Nov  9 13:04:33 localhost sshd\[18865\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
Nov  9 13:04:35 localhost sshd\[18865\]: Failed password for invalid user lidl from 159.203.139.128 port 52154 ssh2
...
2019-11-09 21:27:41
attackbotsspam
Nov  7 10:59:23 auw2 sshd\[7095\]: Invalid user prueba1234 from 159.203.139.128
Nov  7 10:59:23 auw2 sshd\[7095\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
Nov  7 10:59:25 auw2 sshd\[7095\]: Failed password for invalid user prueba1234 from 159.203.139.128 port 35284 ssh2
Nov  7 11:03:23 auw2 sshd\[7423\]: Invalid user 23dec1987 from 159.203.139.128
Nov  7 11:03:23 auw2 sshd\[7423\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
2019-11-08 06:10:42
attack
Nov  7 12:55:07 vmanager6029 sshd\[6123\]: Invalid user coolgirl from 159.203.139.128 port 44868
Nov  7 12:55:07 vmanager6029 sshd\[6123\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
Nov  7 12:55:09 vmanager6029 sshd\[6123\]: Failed password for invalid user coolgirl from 159.203.139.128 port 44868 ssh2
2019-11-07 20:32:37
attackbots
Nov  6 16:41:37 root sshd[22441]: Failed password for root from 159.203.139.128 port 36048 ssh2
Nov  6 16:46:51 root sshd[22485]: Failed password for root from 159.203.139.128 port 46414 ssh2
...
2019-11-07 02:14:25
attackbotsspam
Nov  1 21:52:04 srv01 sshd[26170]: Invalid user Badboy from 159.203.139.128
Nov  1 21:52:04 srv01 sshd[26170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
Nov  1 21:52:04 srv01 sshd[26170]: Invalid user Badboy from 159.203.139.128
Nov  1 21:52:06 srv01 sshd[26170]: Failed password for invalid user Badboy from 159.203.139.128 port 42852 ssh2
Nov  1 21:55:42 srv01 sshd[26415]: Invalid user drachenbot from 159.203.139.128
...
2019-11-02 05:15:39
attack
Oct 27 23:56:52 kapalua sshd\[21210\]: Invalid user \* from 159.203.139.128
Oct 27 23:56:52 kapalua sshd\[21210\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
Oct 27 23:56:54 kapalua sshd\[21210\]: Failed password for invalid user \* from 159.203.139.128 port 34530 ssh2
Oct 28 00:01:03 kapalua sshd\[21554\]: Invalid user tf2mgeserver from 159.203.139.128
Oct 28 00:01:03 kapalua sshd\[21554\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
2019-10-28 18:17:43
attackbotsspam
2019-10-24T07:06:10.138829abusebot-5.cloudsearch.cf sshd\[16033\]: Invalid user 123thunder from 159.203.139.128 port 44000
2019-10-24 15:25:27
attackspambots
Oct 18 06:57:07 www sshd\[13553\]: Invalid user test from 159.203.139.128
Oct 18 06:57:07 www sshd\[13553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
Oct 18 06:57:10 www sshd\[13553\]: Failed password for invalid user test from 159.203.139.128 port 52516 ssh2
...
2019-10-18 12:16:30
attack
Sep 29 23:24:07 mail sshd\[23093\]: Failed password for invalid user support from 159.203.139.128 port 41988 ssh2
Sep 29 23:27:56 mail sshd\[23461\]: Invalid user a from 159.203.139.128 port 53596
Sep 29 23:27:56 mail sshd\[23461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
Sep 29 23:27:58 mail sshd\[23461\]: Failed password for invalid user a from 159.203.139.128 port 53596 ssh2
Sep 29 23:31:52 mail sshd\[23803\]: Invalid user ef from 159.203.139.128 port 36964
2019-09-30 05:41:43
attackbots
Sep 28 15:29:47 MK-Soft-VM3 sshd[14467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128 
Sep 28 15:29:48 MK-Soft-VM3 sshd[14467]: Failed password for invalid user amavis from 159.203.139.128 port 41848 ssh2
...
2019-09-29 02:38:25
attackspam
Sep 24 22:03:54 vps01 sshd[31077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
Sep 24 22:03:56 vps01 sshd[31077]: Failed password for invalid user cheryl from 159.203.139.128 port 41108 ssh2
2019-09-25 04:20:42
attack
Invalid user legal3 from 159.203.139.128 port 36610
2019-09-21 04:48:34
attack
SSH invalid-user multiple login attempts
2019-09-01 21:16:48
attackspambots
$f2bV_matches
2019-08-29 05:09:09
attackspambots
Aug 27 12:08:33 ncomp sshd[19428]: Invalid user archive from 159.203.139.128
Aug 27 12:08:33 ncomp sshd[19428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
Aug 27 12:08:33 ncomp sshd[19428]: Invalid user archive from 159.203.139.128
Aug 27 12:08:35 ncomp sshd[19428]: Failed password for invalid user archive from 159.203.139.128 port 50674 ssh2
2019-08-27 18:36:50
attackbots
Aug 24 21:52:44 eddieflores sshd\[6847\]: Invalid user xbox from 159.203.139.128
Aug 24 21:52:44 eddieflores sshd\[6847\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
Aug 24 21:52:46 eddieflores sshd\[6847\]: Failed password for invalid user xbox from 159.203.139.128 port 50214 ssh2
Aug 24 21:56:36 eddieflores sshd\[7214\]: Invalid user server from 159.203.139.128
Aug 24 21:56:36 eddieflores sshd\[7214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
2019-08-26 02:01:23
attackbotsspam
Aug 22 13:10:06 home sshd[32254]: Invalid user leo from 159.203.139.128 port 33422
Aug 22 13:10:06 home sshd[32254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
Aug 22 13:10:06 home sshd[32254]: Invalid user leo from 159.203.139.128 port 33422
Aug 22 13:10:08 home sshd[32254]: Failed password for invalid user leo from 159.203.139.128 port 33422 ssh2
Aug 22 13:19:49 home sshd[32304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128  user=root
Aug 22 13:19:51 home sshd[32304]: Failed password for root from 159.203.139.128 port 44972 ssh2
Aug 22 13:23:45 home sshd[32332]: Invalid user Test from 159.203.139.128 port 34402
Aug 22 13:23:45 home sshd[32332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
Aug 22 13:23:45 home sshd[32332]: Invalid user Test from 159.203.139.128 port 34402
Aug 22 13:23:47 home sshd[32332]: Failed password for invalid
2019-08-23 07:20:46
attackspambots
Aug 17 18:55:17 aiointranet sshd\[30103\]: Invalid user ccradio from 159.203.139.128
Aug 17 18:55:17 aiointranet sshd\[30103\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
Aug 17 18:55:19 aiointranet sshd\[30103\]: Failed password for invalid user ccradio from 159.203.139.128 port 36974 ssh2
Aug 17 18:59:20 aiointranet sshd\[30442\]: Invalid user centos from 159.203.139.128
Aug 17 18:59:20 aiointranet sshd\[30442\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
2019-08-18 14:38:31
attackspambots
Invalid user luky from 159.203.139.128 port 54358
2019-08-16 21:20:36
attack
Automatic report - Banned IP Access
2019-08-12 23:33:10
attackspambots
2019-08-08T05:10:04.072171WS-Zach sshd[1435]: Invalid user user9 from 159.203.139.128 port 54918
2019-08-08T05:10:04.075614WS-Zach sshd[1435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
2019-08-08T05:10:04.072171WS-Zach sshd[1435]: Invalid user user9 from 159.203.139.128 port 54918
2019-08-08T05:10:06.506405WS-Zach sshd[1435]: Failed password for invalid user user9 from 159.203.139.128 port 54918 ssh2
2019-08-08T15:40:09.719844WS-Zach sshd[16469]: Invalid user raghu from 159.203.139.128 port 35840
...
2019-08-09 04:43:14
attackspam
SSH Brute Force
2019-07-31 13:37:26
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.203.139.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12753
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;159.203.139.128.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040600 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Apr 07 00:04:07 +08 2019
;; MSG SIZE  rcvd: 119

HOST信息:
Host 128.139.203.159.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 128.139.203.159.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
122.141.13.219 attackbotsspam
Port probing on unauthorized port 23
2020-09-05 05:20:54
93.113.111.193 attackspambots
93.113.111.193 - - [04/Sep/2020:17:52:40 +0100] "POST /wp-login.php HTTP/1.1" 200 2254 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
93.113.111.193 - - [04/Sep/2020:17:52:40 +0100] "POST /wp-login.php HTTP/1.1" 200 2257 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
93.113.111.193 - - [04/Sep/2020:17:52:41 +0100] "POST /wp-login.php HTTP/1.1" 200 2253 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-05 05:23:57
39.41.26.111 attack
Sep  4 18:53:05 mellenthin postfix/smtpd[32352]: NOQUEUE: reject: RCPT from unknown[39.41.26.111]: 554 5.7.1 Service unavailable; Client host [39.41.26.111] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/39.41.26.111; from= to= proto=ESMTP helo=<[39.41.26.111]>
2020-09-05 05:23:05
121.58.212.102 attack
Honeypot attack, port: 445, PTR: 102.212.58.121.-rev.convergeict.com.
2020-09-05 05:56:01
193.227.16.35 attack
1 attempts against mh-modsecurity-ban on comet
2020-09-05 05:23:35
191.243.92.1 attackspambots
445/tcp
[2020-09-04]1pkt
2020-09-05 05:42:53
24.76.121.101 attackspam
Honeypot attack, port: 5555, PTR: S0106889e681b91c0.wp.shawcable.net.
2020-09-05 05:26:06
132.232.11.218 attack
2020-09-04T16:49:58.907716abusebot-7.cloudsearch.cf sshd[9440]: Invalid user noel from 132.232.11.218 port 47882
2020-09-04T16:49:58.911985abusebot-7.cloudsearch.cf sshd[9440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.11.218
2020-09-04T16:49:58.907716abusebot-7.cloudsearch.cf sshd[9440]: Invalid user noel from 132.232.11.218 port 47882
2020-09-04T16:50:01.092264abusebot-7.cloudsearch.cf sshd[9440]: Failed password for invalid user noel from 132.232.11.218 port 47882 ssh2
2020-09-04T16:55:32.108453abusebot-7.cloudsearch.cf sshd[9538]: Invalid user al from 132.232.11.218 port 47466
2020-09-04T16:55:32.112990abusebot-7.cloudsearch.cf sshd[9538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.11.218
2020-09-04T16:55:32.108453abusebot-7.cloudsearch.cf sshd[9538]: Invalid user al from 132.232.11.218 port 47466
2020-09-04T16:55:34.147462abusebot-7.cloudsearch.cf sshd[9538]: Failed password 
...
2020-09-05 05:53:43
145.239.92.26 attack
Failed password for invalid user from 145.239.92.26 port 40037 ssh2
2020-09-05 05:44:04
222.186.30.112 attack
Sep  4 23:28:46 vps639187 sshd\[2197\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.112  user=root
Sep  4 23:28:48 vps639187 sshd\[2197\]: Failed password for root from 222.186.30.112 port 63125 ssh2
Sep  4 23:28:50 vps639187 sshd\[2197\]: Failed password for root from 222.186.30.112 port 63125 ssh2
...
2020-09-05 05:38:46
218.92.0.185 attackspambots
Sep  4 23:43:56 vps647732 sshd[7563]: Failed password for root from 218.92.0.185 port 61443 ssh2
Sep  4 23:44:11 vps647732 sshd[7563]: error: maximum authentication attempts exceeded for root from 218.92.0.185 port 61443 ssh2 [preauth]
...
2020-09-05 05:46:44
73.244.49.52 attack
Honeypot attack, port: 81, PTR: c-73-244-49-52.hsd1.fl.comcast.net.
2020-09-05 05:39:18
132.232.53.85 attackbots
Sep  4 16:48:35 ws26vmsma01 sshd[142266]: Failed password for root from 132.232.53.85 port 52202 ssh2
...
2020-09-05 05:36:48
211.155.225.104 attackbots
leo_www
2020-09-05 05:46:57
45.123.40.42 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-05 05:46:16

最近上报的IP列表

92.59.33.2 58.242.82.7 106.12.110.78 139.199.227.208
36.228.7.252 178.128.35.195 118.25.128.19 197.232.47.210
148.70.106.160 196.189.159.131 182.162.96.184 74.92.210.138
103.109.0.242 175.154.50.238 211.75.194.80 152.251.210.10
61.12.84.13 85.115.249.130 3.91.197.249 27.254.144.67