必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Huelva

省份(region): Andalusia

国家(country): Spain

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
2.139.209.78 attackspambots
(sshd) Failed SSH login from 2.139.209.78 (ES/Spain/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 31 05:09:26 server4 sshd[18373]: Invalid user usuario from 2.139.209.78
Aug 31 05:09:27 server4 sshd[18373]: Failed password for invalid user usuario from 2.139.209.78 port 35261 ssh2
Aug 31 05:15:07 server4 sshd[21530]: Failed password for root from 2.139.209.78 port 38041 ssh2
Aug 31 05:18:40 server4 sshd[23485]: Invalid user minecraft from 2.139.209.78
Aug 31 05:18:42 server4 sshd[23485]: Failed password for invalid user minecraft from 2.139.209.78 port 55985 ssh2
2020-08-31 17:24:53
2.139.209.78 attackbots
Aug 29 20:12:58 eddieflores sshd\[6867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78  user=backup
Aug 29 20:13:00 eddieflores sshd\[6867\]: Failed password for backup from 2.139.209.78 port 35830 ssh2
Aug 29 20:16:39 eddieflores sshd\[7084\]: Invalid user untu from 2.139.209.78
Aug 29 20:16:39 eddieflores sshd\[7084\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78
Aug 29 20:16:41 eddieflores sshd\[7084\]: Failed password for invalid user untu from 2.139.209.78 port 47416 ssh2
2020-08-30 14:32:41
2.139.209.78 attackspambots
Aug 30 03:14:54 vps768472 sshd\[1164\]: Invalid user elastic from 2.139.209.78 port 58301
Aug 30 03:14:54 vps768472 sshd\[1164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78
Aug 30 03:14:57 vps768472 sshd\[1164\]: Failed password for invalid user elastic from 2.139.209.78 port 58301 ssh2
...
2020-08-30 08:15:35
2.139.209.78 attack
2020-08-29T09:17:07.104076morrigan.ad5gb.com sshd[13799]: Invalid user kundan from 2.139.209.78 port 45356
2020-08-29T09:17:09.317738morrigan.ad5gb.com sshd[13799]: Failed password for invalid user kundan from 2.139.209.78 port 45356 ssh2
2020-08-29 23:09:10
2.139.209.78 attack
$f2bV_matches
2020-08-27 22:09:42
2.139.209.78 attackspam
Invalid user test from 2.139.209.78 port 49053
2020-08-27 07:43:50
2.139.209.78 attackbotsspam
Aug 24 00:51:47 serwer sshd\[25062\]: Invalid user alfredo from 2.139.209.78 port 47082
Aug 24 00:51:47 serwer sshd\[25062\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78
Aug 24 00:51:49 serwer sshd\[25062\]: Failed password for invalid user alfredo from 2.139.209.78 port 47082 ssh2
Aug 24 00:55:27 serwer sshd\[25435\]: Invalid user alejandro from 2.139.209.78 port 42746
Aug 24 00:55:27 serwer sshd\[25435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78
Aug 24 00:55:29 serwer sshd\[25435\]: Failed password for invalid user alejandro from 2.139.209.78 port 42746 ssh2
Aug 24 00:58:03 serwer sshd\[25622\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78  user=root
Aug 24 00:58:05 serwer sshd\[25622\]: Failed password for root from 2.139.209.78 port 57053 ssh2
Aug 24 01:00:15 serwer sshd\[25910\]: pam_unix\(sshd:auth\):
...
2020-08-24 16:48:32
2.139.209.78 attack
Aug 23 17:16:53 rush sshd[15054]: Failed password for root from 2.139.209.78 port 36495 ssh2
Aug 23 17:22:48 rush sshd[15359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78
Aug 23 17:22:51 rush sshd[15359]: Failed password for invalid user buser from 2.139.209.78 port 35947 ssh2
...
2020-08-24 01:38:44
2.139.209.78 attackbotsspam
SSH Brute-Forcing (server2)
2020-08-22 20:21:07
2.139.209.78 attack
prod8
...
2020-08-21 22:56:49
2.139.209.78 attack
Aug 21 14:05:30 jane sshd[6929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78 
Aug 21 14:05:32 jane sshd[6929]: Failed password for invalid user kenji from 2.139.209.78 port 37243 ssh2
...
2020-08-21 20:06:35
2.139.209.78 attack
Bruteforce detected by fail2ban
2020-08-21 05:37:41
2.139.209.78 attackbots
Brute-force attempt banned
2020-08-20 22:24:30
2.139.209.78 attackspam
Aug 19 15:55:41 game-panel sshd[4419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78
Aug 19 15:55:43 game-panel sshd[4419]: Failed password for invalid user sftp from 2.139.209.78 port 41601 ssh2
Aug 19 16:00:56 game-panel sshd[4597]: Failed password for root from 2.139.209.78 port 43847 ssh2
2020-08-20 00:36:53
2.139.201.243 attackbotsspam
Unauthorized connection attempt from IP address 2.139.201.243 on Port 445(SMB)
2020-08-19 06:45:55
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.139.20.194
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29273
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.139.20.194.			IN	A

;; AUTHORITY SECTION:
.			380	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050200 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 02 16:39:18 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
194.20.139.2.in-addr.arpa domain name pointer 194.red-2-139-20.dynamicip.rima-tde.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
194.20.139.2.in-addr.arpa	name = 194.red-2-139-20.dynamicip.rima-tde.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
128.199.139.15 attackbotsspam
/TP/public/index.php
2019-06-21 17:10:51
109.228.58.164 attackspambots
20 attempts against mh-ssh on web1-pre.any-lamp.com
2019-06-21 17:43:35
104.236.58.55 attack
Automatic report - Web App Attack
2019-06-21 16:42:56
5.255.250.33 attack
IP: 5.255.250.33
ASN: AS13238 YANDEX LLC
Port: World Wide Web HTTP 80
Found in one or more Blacklists
Date: 21/06/2019 5:06:45 AM UTC
2019-06-21 17:25:03
0.0.0.77 attackbotsspam
masters-of-media.de 2a06:dd00:1:4:1::77 \[21/Jun/2019:06:36:25 +0200\] "POST /wp-login.php HTTP/1.1" 200 5856 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
masters-of-media.de 2a06:dd00:1:4:1::77 \[21/Jun/2019:06:36:26 +0200\] "POST /wp-login.php HTTP/1.1" 200 5811 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-06-21 17:19:17
61.177.172.157 attackspambots
Jun 21 12:27:25 webhost01 sshd[4598]: Failed password for root from 61.177.172.157 port 32880 ssh2
...
2019-06-21 17:22:27
94.179.248.13 attack
¯\_(ツ)_/¯
2019-06-21 17:05:46
77.40.2.206 attack
IP: 77.40.2.206
ASN: AS12389 Rostelecom
Port: Simple Mail Transfer 25
Found in one or more Blacklists
Date: 21/06/2019 5:06:46 AM UTC
2019-06-21 17:17:01
103.81.114.63 attackbots
$f2bV_matches
2019-06-21 17:17:47
112.133.245.170 attackspambots
445/tcp
[2019-06-21]1pkt
2019-06-21 17:00:52
94.60.116.71 attackspambots
Jun 21 00:25:15 aat-srv002 sshd[22679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.60.116.71
Jun 21 00:25:17 aat-srv002 sshd[22679]: Failed password for invalid user jboss from 94.60.116.71 port 49246 ssh2
Jun 21 00:35:00 aat-srv002 sshd[22772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.60.116.71
Jun 21 00:35:03 aat-srv002 sshd[22772]: Failed password for invalid user teste1 from 94.60.116.71 port 59676 ssh2
...
2019-06-21 16:57:28
191.205.7.229 attack
Unauthorised access (Jun 21) SRC=191.205.7.229 LEN=40 TTL=240 ID=8198 TCP DPT=445 WINDOW=1024 SYN
2019-06-21 17:21:24
14.169.4.224 attack
TCP port 445 (SMB) attempt blocked by firewall. [2019-06-21 11:24:32]
2019-06-21 17:48:39
77.40.23.12 attack
mail.log:Jun 21 00:23:01 mail postfix/smtpd[26789]: warning: unknown[77.40.23.12]: SASL LOGIN authentication failed: authentication failure
2019-06-21 16:52:28
103.24.125.186 attackspam
Unauthorised access (Jun 21) SRC=103.24.125.186 LEN=52 TTL=117 ID=11385 DF TCP DPT=445 WINDOW=8192 SYN
2019-06-21 16:50:56

最近上报的IP列表

180.251.175.20 146.122.174.179 195.189.188.125 220.131.126.32
77.28.92.223 115.252.208.144 23.253.71.57 87.235.68.144
128.173.135.178 175.28.8.32 109.16.30.58 124.143.57.102
150.114.139.127 114.100.5.132 137.156.197.223 130.239.163.188
199.195.161.28 133.153.141.6 113.110.194.25 217.163.30.151