必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Korea Republic of

运营商(isp): KT Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackbotsspam
2019-12-04T11:20:42.500746abusebot-5.cloudsearch.cf sshd\[26182\]: Invalid user bjorn from 59.13.139.54 port 36786
2019-12-04 19:47:27
attackbots
2019-11-28T18:40:12.612212abusebot-5.cloudsearch.cf sshd\[26103\]: Invalid user hp from 59.13.139.54 port 42872
2019-11-29 06:24:26
attackbotsspam
Nov 19 14:15:58 nextcloud sshd\[5287\]: Invalid user tracyf from 59.13.139.54
Nov 19 14:15:58 nextcloud sshd\[5287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.54
Nov 19 14:16:00 nextcloud sshd\[5287\]: Failed password for invalid user tracyf from 59.13.139.54 port 54408 ssh2
...
2019-11-20 02:10:33
attackspambots
Nov 18 05:09:04 icinga sshd[1924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.54 
Nov 18 05:09:06 icinga sshd[1924]: Failed password for invalid user robert from 59.13.139.54 port 39278 ssh2
Nov 18 05:52:21 icinga sshd[41992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.54 
...
2019-11-18 14:09:52
attackspam
Automatic report - Banned IP Access
2019-11-17 00:50:49
attack
2019-11-04T06:40:09.803586abusebot-5.cloudsearch.cf sshd\[12371\]: Invalid user bjorn from 59.13.139.54 port 53410
2019-11-04 14:45:28
attack
Invalid user vbox from 59.13.139.54 port 49350
2019-10-30 07:55:31
attackbotsspam
Invalid user vbox from 59.13.139.54 port 49350
2019-10-29 07:42:29
attackspambots
2019-10-28T06:51:03.671865abusebot-5.cloudsearch.cf sshd\[13525\]: Invalid user robert from 59.13.139.54 port 56552
2019-10-28 16:03:44
attackbots
Oct 23 11:09:55 XXX sshd[43344]: Invalid user ofsaa from 59.13.139.54 port 60294
2019-10-23 18:25:26
attackspam
Sep 19 12:57:50 ns3367391 sshd\[741\]: Invalid user admin from 59.13.139.54 port 53894
Sep 19 12:57:50 ns3367391 sshd\[741\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.54
...
2019-09-19 19:37:55
attack
Sep  7 00:44:56 www5 sshd\[1849\]: Invalid user benites from 59.13.139.54
Sep  7 00:44:56 www5 sshd\[1849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.54
Sep  7 00:44:58 www5 sshd\[1849\]: Failed password for invalid user benites from 59.13.139.54 port 53280 ssh2
...
2019-09-07 06:32:20
attackspam
Sep  5 00:43:15 XXX sshd[55722]: Invalid user ofsaa from 59.13.139.54 port 47192
2019-09-05 10:17:00
attack
2019-08-25T20:04:08.666577abusebot.cloudsearch.cf sshd\[23201\]: Invalid user demon from 59.13.139.54 port 41870
2019-08-25T20:04:08.670802abusebot.cloudsearch.cf sshd\[23201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.54
2019-08-26 08:28:04
attack
Invalid user iesse from 59.13.139.54 port 58902
2019-08-23 01:41:37
attackbotsspam
Aug 18 04:11:52 Ubuntu-1404-trusty-64-minimal sshd\[13112\]: Invalid user parker from 59.13.139.54
Aug 18 04:11:52 Ubuntu-1404-trusty-64-minimal sshd\[13112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.54
Aug 18 04:11:54 Ubuntu-1404-trusty-64-minimal sshd\[13112\]: Failed password for invalid user parker from 59.13.139.54 port 34140 ssh2
Aug 18 05:09:34 Ubuntu-1404-trusty-64-minimal sshd\[9165\]: Invalid user kathi from 59.13.139.54
Aug 18 05:09:34 Ubuntu-1404-trusty-64-minimal sshd\[9165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.54
2019-08-18 11:49:06
attack
Automatic report - Banned IP Access
2019-08-09 05:13:13
相同子网IP讨论:
IP 类型 评论内容 时间
59.13.139.46 attackspambots
2019-12-04T20:33:03.360942abusebot-5.cloudsearch.cf sshd\[32260\]: Invalid user robert from 59.13.139.46 port 57190
2019-12-05 06:49:19
59.13.139.42 attackspambots
Nov 29 14:31:37 sip sshd[28730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.42
Nov 29 14:31:39 sip sshd[28730]: Failed password for invalid user incoming from 59.13.139.42 port 49644 ssh2
Nov 29 15:40:54 sip sshd[8927]: Failed password for ubuntu from 59.13.139.42 port 38418 ssh2
2019-12-01 08:32:42
59.13.139.50 attack
Nov 30 18:22:01 host sshd[20584]: Invalid user cinema from 59.13.139.50 port 49914
...
2019-12-01 04:00:27
59.13.139.42 attackbots
2019-11-30T11:55:30.927513abusebot-7.cloudsearch.cf sshd\[10430\]: Invalid user aris from 59.13.139.42 port 48590
2019-11-30 19:56:27
59.13.139.46 attackspambots
Nov 27 09:29:43 [host] sshd[29546]: Invalid user yar from 59.13.139.46
Nov 27 09:29:43 [host] sshd[29546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.46
Nov 27 09:29:44 [host] sshd[29546]: Failed password for invalid user yar from 59.13.139.46 port 54712 ssh2
2019-11-27 18:09:25
59.13.139.50 attack
Invalid user plaza from 59.13.139.50 port 37880
2019-11-23 17:10:31
59.13.139.50 attack
Invalid user plaza from 59.13.139.50 port 37880
2019-11-21 16:52:29
59.13.139.46 attackbotsspam
Nov 12 06:53:03 icinga sshd[57150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.46 
Nov 12 06:53:05 icinga sshd[57150]: Failed password for invalid user hp from 59.13.139.46 port 36106 ssh2
Nov 12 07:27:34 icinga sshd[24487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.46 
...
2019-11-12 18:04:55
59.13.139.46 attack
Nov  7 17:05:25 XXX sshd[3218]: Invalid user ofsaa from 59.13.139.46 port 58350
2019-11-08 01:05:24
59.13.139.46 attackbotsspam
Nov  2 12:04:04 XXX sshd[40006]: Invalid user ofsaa from 59.13.139.46 port 40272
2019-11-02 20:15:00
59.13.139.50 attack
2019-10-31T04:17:29.828694abusebot-5.cloudsearch.cf sshd\[27207\]: Invalid user hp from 59.13.139.50 port 49660
2019-10-31 16:36:55
59.13.139.46 attack
SSH Brute Force, server-1 sshd[20887]: Failed password for invalid user clock from 59.13.139.46 port 38550 ssh2
2019-10-31 04:32:17
59.13.139.46 attackspam
2019-10-26T11:45:41.195989abusebot-5.cloudsearch.cf sshd\[17427\]: Invalid user bjorn from 59.13.139.46 port 45852
2019-10-26T11:45:41.200876abusebot-5.cloudsearch.cf sshd\[17427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.46
2019-10-26 19:49:21
59.13.139.46 attack
Oct 25 12:46:08 marvibiene sshd[54057]: Invalid user anne from 59.13.139.46 port 58404
Oct 25 12:46:08 marvibiene sshd[54057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.46
Oct 25 12:46:08 marvibiene sshd[54057]: Invalid user anne from 59.13.139.46 port 58404
Oct 25 12:46:09 marvibiene sshd[54057]: Failed password for invalid user anne from 59.13.139.46 port 58404 ssh2
...
2019-10-25 21:51:02
59.13.139.50 attackspam
2019-10-24T15:13:53.057709abusebot-5.cloudsearch.cf sshd\[21683\]: Invalid user hp from 59.13.139.50 port 53126
2019-10-24T15:13:53.062460abusebot-5.cloudsearch.cf sshd\[21683\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.50
2019-10-24 23:18:05
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.13.139.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19252
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;59.13.139.54.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072801 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 29 04:59:02 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
Host 54.139.13.59.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 54.139.13.59.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
88.247.110.88 attack
Oct 10 06:44:59 www sshd\[14288\]: Invalid user Centos2016 from 88.247.110.88Oct 10 06:45:02 www sshd\[14288\]: Failed password for invalid user Centos2016 from 88.247.110.88 port 32574 ssh2Oct 10 06:48:56 www sshd\[14355\]: Invalid user Centos2016 from 88.247.110.88
...
2019-10-10 16:28:40
148.70.18.216 attackspam
Oct  6 18:16:58 km20725 sshd[32186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.18.216  user=r.r
Oct  6 18:17:00 km20725 sshd[32186]: Failed password for r.r from 148.70.18.216 port 42144 ssh2
Oct  6 18:17:01 km20725 sshd[32186]: Received disconnect from 148.70.18.216: 11: Bye Bye [preauth]
Oct  6 18:24:09 km20725 sshd[32594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.18.216  user=r.r
Oct  6 18:24:12 km20725 sshd[32594]: Failed password for r.r from 148.70.18.216 port 59502 ssh2
Oct  6 18:24:12 km20725 sshd[32594]: Received disconnect from 148.70.18.216: 11: Bye Bye [preauth]
Oct  6 18:42:32 km20725 sshd[1857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.18.216  user=r.r
Oct  6 1
.... truncated .... 

Oct  6 18:16:58 km20725 sshd[32186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser........
-------------------------------
2019-10-10 16:14:38
77.247.181.162 attackbots
2019-10-10T07:35:12.490415abusebot.cloudsearch.cf sshd\[9764\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=chomsky.torservers.net  user=root
2019-10-10 16:37:59
183.102.114.59 attackbotsspam
Oct 10 09:22:13 vpn01 sshd[2675]: Failed password for root from 183.102.114.59 port 39672 ssh2
...
2019-10-10 16:32:04
203.110.179.26 attackspambots
Oct 10 09:38:04 sso sshd[28242]: Failed password for root from 203.110.179.26 port 10255 ssh2
...
2019-10-10 16:25:45
177.135.103.54 attack
Dovecot Brute-Force
2019-10-10 16:45:51
222.186.42.117 attackbots
$f2bV_matches
2019-10-10 16:06:42
125.160.114.41 attackspam
Unauthorised access (Oct 10) SRC=125.160.114.41 LEN=52 TTL=247 ID=22354 DF TCP DPT=445 WINDOW=8192 SYN
2019-10-10 16:42:49
146.120.17.141 attackspambots
3389BruteforceFW22
2019-10-10 16:16:53
65.60.27.157 attackbotsspam
webserver:80 [10/Oct/2019]  "GET /wp-admin HTTP/1.1" 302 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
webserver:80 [10/Oct/2019]  "GET /wordpress HTTP/1.1" 302 469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
webserver:80 [10/Oct/2019]  "GET /wp HTTP/1.1" 302 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
webserver:80 [10/Oct/2019]  "GET / HTTP/1.1" 302 451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
2019-10-10 16:17:54
128.199.142.138 attack
2019-10-10T04:00:16.6003411495-001 sshd\[30264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.138  user=root
2019-10-10T04:00:18.9826611495-001 sshd\[30264\]: Failed password for root from 128.199.142.138 port 49514 ssh2
2019-10-10T04:04:46.2178121495-001 sshd\[30523\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.138  user=root
2019-10-10T04:04:48.3342541495-001 sshd\[30523\]: Failed password for root from 128.199.142.138 port 60410 ssh2
2019-10-10T04:09:09.1342971495-001 sshd\[30775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.138  user=root
2019-10-10T04:09:10.6880901495-001 sshd\[30775\]: Failed password for root from 128.199.142.138 port 43064 ssh2
...
2019-10-10 16:43:48
46.176.171.92 attackspambots
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/46.176.171.92/ 
 GR - 1H : (107)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : GR 
 NAME ASN : ASN3329 
 
 IP : 46.176.171.92 
 
 CIDR : 46.176.160.0/19 
 
 PREFIX COUNT : 167 
 
 UNIQUE IP COUNT : 788480 
 
 
 WYKRYTE ATAKI Z ASN3329 :  
  1H - 9 
  3H - 18 
  6H - 28 
 12H - 30 
 24H - 53 
 
 DateTime : 2019-10-10 05:48:42 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-10 16:38:26
111.231.215.244 attack
Oct  9 20:56:13 auw2 sshd\[31606\]: Invalid user 123 from 111.231.215.244
Oct  9 20:56:13 auw2 sshd\[31606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.215.244
Oct  9 20:56:15 auw2 sshd\[31606\]: Failed password for invalid user 123 from 111.231.215.244 port 50164 ssh2
Oct  9 21:01:11 auw2 sshd\[32016\]: Invalid user P@ssw0rt@12 from 111.231.215.244
Oct  9 21:01:11 auw2 sshd\[32016\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.215.244
2019-10-10 16:40:17
107.179.95.9 attackbots
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/107.179.95.9/ 
 DE - 1H : (54)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : DE 
 NAME ASN : ASN46573 
 
 IP : 107.179.95.9 
 
 CIDR : 107.179.95.0/24 
 
 PREFIX COUNT : 1029 
 
 UNIQUE IP COUNT : 263680 
 
 
 WYKRYTE ATAKI Z ASN46573 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-10-10 05:48:41 
 
 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN  - data recovery
2019-10-10 16:37:45
132.232.4.33 attackbotsspam
Oct 10 06:59:18 www5 sshd\[535\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.4.33  user=root
Oct 10 06:59:20 www5 sshd\[535\]: Failed password for root from 132.232.4.33 port 58886 ssh2
Oct 10 07:04:20 www5 sshd\[1655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.4.33  user=root
...
2019-10-10 16:31:47

最近上报的IP列表

33.209.161.116 60.135.44.221 71.5.109.43 92.115.106.160
112.124.194.195 138.0.162.67 132.46.68.170 213.232.125.37
117.50.50.62 138.94.48.62 83.54.43.246 223.26.48.131
153.151.246.179 60.248.18.81 145.236.150.89 244.193.76.156
5.39.253.64 62.210.99.93 227.94.92.18 68.78.234.26