必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Huelva

省份(region): Andalusia

国家(country): Spain

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
2.139.209.78 attackspambots
(sshd) Failed SSH login from 2.139.209.78 (ES/Spain/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 31 05:09:26 server4 sshd[18373]: Invalid user usuario from 2.139.209.78
Aug 31 05:09:27 server4 sshd[18373]: Failed password for invalid user usuario from 2.139.209.78 port 35261 ssh2
Aug 31 05:15:07 server4 sshd[21530]: Failed password for root from 2.139.209.78 port 38041 ssh2
Aug 31 05:18:40 server4 sshd[23485]: Invalid user minecraft from 2.139.209.78
Aug 31 05:18:42 server4 sshd[23485]: Failed password for invalid user minecraft from 2.139.209.78 port 55985 ssh2
2020-08-31 17:24:53
2.139.209.78 attackbots
Aug 29 20:12:58 eddieflores sshd\[6867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78  user=backup
Aug 29 20:13:00 eddieflores sshd\[6867\]: Failed password for backup from 2.139.209.78 port 35830 ssh2
Aug 29 20:16:39 eddieflores sshd\[7084\]: Invalid user untu from 2.139.209.78
Aug 29 20:16:39 eddieflores sshd\[7084\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78
Aug 29 20:16:41 eddieflores sshd\[7084\]: Failed password for invalid user untu from 2.139.209.78 port 47416 ssh2
2020-08-30 14:32:41
2.139.209.78 attackspambots
Aug 30 03:14:54 vps768472 sshd\[1164\]: Invalid user elastic from 2.139.209.78 port 58301
Aug 30 03:14:54 vps768472 sshd\[1164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78
Aug 30 03:14:57 vps768472 sshd\[1164\]: Failed password for invalid user elastic from 2.139.209.78 port 58301 ssh2
...
2020-08-30 08:15:35
2.139.209.78 attack
2020-08-29T09:17:07.104076morrigan.ad5gb.com sshd[13799]: Invalid user kundan from 2.139.209.78 port 45356
2020-08-29T09:17:09.317738morrigan.ad5gb.com sshd[13799]: Failed password for invalid user kundan from 2.139.209.78 port 45356 ssh2
2020-08-29 23:09:10
2.139.209.78 attack
$f2bV_matches
2020-08-27 22:09:42
2.139.209.78 attackspam
Invalid user test from 2.139.209.78 port 49053
2020-08-27 07:43:50
2.139.209.78 attackbotsspam
Aug 24 00:51:47 serwer sshd\[25062\]: Invalid user alfredo from 2.139.209.78 port 47082
Aug 24 00:51:47 serwer sshd\[25062\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78
Aug 24 00:51:49 serwer sshd\[25062\]: Failed password for invalid user alfredo from 2.139.209.78 port 47082 ssh2
Aug 24 00:55:27 serwer sshd\[25435\]: Invalid user alejandro from 2.139.209.78 port 42746
Aug 24 00:55:27 serwer sshd\[25435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78
Aug 24 00:55:29 serwer sshd\[25435\]: Failed password for invalid user alejandro from 2.139.209.78 port 42746 ssh2
Aug 24 00:58:03 serwer sshd\[25622\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78  user=root
Aug 24 00:58:05 serwer sshd\[25622\]: Failed password for root from 2.139.209.78 port 57053 ssh2
Aug 24 01:00:15 serwer sshd\[25910\]: pam_unix\(sshd:auth\):
...
2020-08-24 16:48:32
2.139.209.78 attack
Aug 23 17:16:53 rush sshd[15054]: Failed password for root from 2.139.209.78 port 36495 ssh2
Aug 23 17:22:48 rush sshd[15359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78
Aug 23 17:22:51 rush sshd[15359]: Failed password for invalid user buser from 2.139.209.78 port 35947 ssh2
...
2020-08-24 01:38:44
2.139.209.78 attackbotsspam
SSH Brute-Forcing (server2)
2020-08-22 20:21:07
2.139.209.78 attack
prod8
...
2020-08-21 22:56:49
2.139.209.78 attack
Aug 21 14:05:30 jane sshd[6929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78 
Aug 21 14:05:32 jane sshd[6929]: Failed password for invalid user kenji from 2.139.209.78 port 37243 ssh2
...
2020-08-21 20:06:35
2.139.209.78 attack
Bruteforce detected by fail2ban
2020-08-21 05:37:41
2.139.209.78 attackbots
Brute-force attempt banned
2020-08-20 22:24:30
2.139.209.78 attackspam
Aug 19 15:55:41 game-panel sshd[4419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78
Aug 19 15:55:43 game-panel sshd[4419]: Failed password for invalid user sftp from 2.139.209.78 port 41601 ssh2
Aug 19 16:00:56 game-panel sshd[4597]: Failed password for root from 2.139.209.78 port 43847 ssh2
2020-08-20 00:36:53
2.139.201.243 attackbotsspam
Unauthorized connection attempt from IP address 2.139.201.243 on Port 445(SMB)
2020-08-19 06:45:55
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.139.20.194
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29273
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.139.20.194.			IN	A

;; AUTHORITY SECTION:
.			380	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050200 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 02 16:39:18 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
194.20.139.2.in-addr.arpa domain name pointer 194.red-2-139-20.dynamicip.rima-tde.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
194.20.139.2.in-addr.arpa	name = 194.red-2-139-20.dynamicip.rima-tde.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
112.140.187.72 attackspambots
fail2ban honeypot
2019-11-06 20:26:38
118.163.181.157 attackspam
Jan 10 02:44:31 mail sshd\[10278\]: Invalid user tomcat from 118.163.181.157 port 47508
Jan 10 02:44:31 mail sshd\[10278\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.163.181.157
Jan 10 02:44:33 mail sshd\[10278\]: Failed password for invalid user tomcat from 118.163.181.157 port 47508 ssh2
Jan 10 02:50:28 mail sshd\[13053\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.163.181.157  user=www-data
Jan 10 02:50:30 mail sshd\[13053\]: Failed password for www-data from 118.163.181.157 port 51356 ssh2
Jan 18 15:37:14 mail sshd\[18139\]: Invalid user vyatta from 118.163.181.157 port 47948
Jan 18 15:37:14 mail sshd\[18139\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.163.181.157
Jan 18 15:37:16 mail sshd\[18139\]: Failed password for invalid user vyatta from 118.163.181.157 port 47948 ssh2
Jan 18 15:45:34 mail sshd\[23586\]: Invalid user vbox from 118.163.181.157 p
2019-11-06 20:28:49
114.40.9.123 attack
2323/tcp
[2019-11-06]1pkt
2019-11-06 20:33:03
71.6.232.4 attack
firewall-block, port(s): 80/tcp
2019-11-06 20:20:05
213.251.192.18 attackbots
Lines containing failures of 213.251.192.18 (max 1000)
Nov  5 11:55:40 localhost sshd[31394]: Invalid user zoey from 213.251.192.18 port 59966
Nov  5 11:55:40 localhost sshd[31394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.251.192.18 
Nov  5 11:55:42 localhost sshd[31394]: Failed password for invalid user zoey from 213.251.192.18 port 59966 ssh2
Nov  5 11:55:42 localhost sshd[31394]: Received disconnect from 213.251.192.18 port 59966:11: Bye Bye [preauth]
Nov  5 11:55:42 localhost sshd[31394]: Disconnected from invalid user zoey 213.251.192.18 port 59966 [preauth]
Nov  5 12:17:11 localhost sshd[9162]: User r.r from 213.251.192.18 not allowed because listed in DenyUsers
Nov  5 12:17:11 localhost sshd[9162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.251.192.18  user=r.r
Nov  5 12:17:13 localhost sshd[9162]: Failed password for invalid user r.r from 213.251.192.18 port 40764........
------------------------------
2019-11-06 19:55:47
45.136.110.41 attackspam
Nov  6 12:13:43 h2177944 kernel: \[5914457.872700\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.41 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=32286 PROTO=TCP SPT=43937 DPT=28282 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  6 12:25:22 h2177944 kernel: \[5915157.239618\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.41 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=10935 PROTO=TCP SPT=43937 DPT=9520 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  6 12:33:15 h2177944 kernel: \[5915629.624214\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.41 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=34656 PROTO=TCP SPT=43937 DPT=41714 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  6 12:38:28 h2177944 kernel: \[5915942.919899\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.41 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=44711 PROTO=TCP SPT=43937 DPT=955 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  6 12:39:57 h2177944 kernel: \[5916031.711770\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.41 DST=85.214.117.
2019-11-06 20:15:12
193.23.160.14 attackbots
2019-11-06T21:39:01.911079luisaranguren sshd[3156981]: Connection from 193.23.160.14 port 45000 on 10.10.10.6 port 22
2019-11-06T21:39:03.341794luisaranguren sshd[3156981]: Invalid user mongo from 193.23.160.14 port 45000
2019-11-06T21:39:03.354237luisaranguren sshd[3156981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.23.160.14
2019-11-06T21:39:01.911079luisaranguren sshd[3156981]: Connection from 193.23.160.14 port 45000 on 10.10.10.6 port 22
2019-11-06T21:39:03.341794luisaranguren sshd[3156981]: Invalid user mongo from 193.23.160.14 port 45000
2019-11-06T21:39:05.438672luisaranguren sshd[3156981]: Failed password for invalid user mongo from 193.23.160.14 port 45000 ssh2
...
2019-11-06 20:26:04
37.59.119.181 attackbotsspam
Lines containing failures of 37.59.119.181
Nov  5 21:14:29 shared04 sshd[16905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.119.181  user=r.r
Nov  5 21:14:31 shared04 sshd[16905]: Failed password for r.r from 37.59.119.181 port 49936 ssh2
Nov  5 21:14:31 shared04 sshd[16905]: Received disconnect from 37.59.119.181 port 49936:11: Bye Bye [preauth]
Nov  5 21:14:31 shared04 sshd[16905]: Disconnected from authenticating user r.r 37.59.119.181 port 49936 [preauth]
Nov  5 21:43:32 shared04 sshd[24392]: Invalid user deployer from 37.59.119.181 port 34324
Nov  5 21:43:32 shared04 sshd[24392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.119.181
Nov  5 21:43:33 shared04 sshd[24392]: Failed password for invalid user deployer from 37.59.119.181 port 34324 ssh2
Nov  5 21:43:33 shared04 sshd[24392]: Received disconnect from 37.59.119.181 port 34324:11: Bye Bye [preauth]
Nov  5 21:43:33........
------------------------------
2019-11-06 20:06:53
49.232.23.127 attackspam
Nov  6 07:13:40 v22019058497090703 sshd[26653]: Failed password for root from 49.232.23.127 port 49416 ssh2
Nov  6 07:18:14 v22019058497090703 sshd[26956]: Failed password for root from 49.232.23.127 port 49068 ssh2
...
2019-11-06 20:30:52
178.128.112.98 attack
Nov  6 11:37:44 XXX sshd[29077]: Invalid user ofsaa from 178.128.112.98 port 56917
2019-11-06 20:22:21
79.137.217.226 attackspambots
[portscan] Port scan
2019-11-06 20:33:16
58.27.217.68 attackspambots
Sniffing for wp-login
2019-11-06 20:08:18
212.86.102.214 attackbotsspam
[portscan] tcp/3389 [MS RDP]
*(RWIN=1024)(11061245)
2019-11-06 20:17:56
104.200.134.150 attack
CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2019-11-06 20:26:24
106.13.52.159 attackspam
Nov  6 13:10:10 [munged] sshd[29329]: Failed password for root from 106.13.52.159 port 49174 ssh2
2019-11-06 20:23:27

最近上报的IP列表

180.251.175.20 146.122.174.179 195.189.188.125 220.131.126.32
77.28.92.223 115.252.208.144 23.253.71.57 87.235.68.144
128.173.135.178 175.28.8.32 109.16.30.58 124.143.57.102
150.114.139.127 114.100.5.132 137.156.197.223 130.239.163.188
199.195.161.28 133.153.141.6 113.110.194.25 217.163.30.151