必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Jiangxi Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Unauthorized connection attempt from IP address 59.63.139.51 on Port 445(SMB)
2019-07-25 13:11:00
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.63.139.51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49324
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;59.63.139.51.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072401 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 25 13:10:52 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
Host 51.139.63.59.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 51.139.63.59.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
114.7.120.10 attackbotsspam
Aug 15 01:51:44 hanapaa sshd\[3395\]: Invalid user lily from 114.7.120.10
Aug 15 01:51:44 hanapaa sshd\[3395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.7.120.10
Aug 15 01:51:46 hanapaa sshd\[3395\]: Failed password for invalid user lily from 114.7.120.10 port 36077 ssh2
Aug 15 01:57:35 hanapaa sshd\[3924\]: Invalid user wellendorff from 114.7.120.10
Aug 15 01:57:35 hanapaa sshd\[3924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.7.120.10
2019-08-15 20:07:43
173.234.225.20 attackspambots
173.234.225.20 - - [15/Aug/2019:04:52:38 -0400] "GET /?page=products&action=../../../../../../../etc/passwd%00&linkID=10296 HTTP/1.1" 200 17660 "https://faucetsupply.com/?page=products&action=../../../../../../../etc/passwd%00&linkID=10296" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0"
...
2019-08-15 20:16:39
138.122.38.108 attackbots
$f2bV_matches
2019-08-15 20:18:45
188.166.228.244 attack
$f2bV_matches_ltvn
2019-08-15 20:05:49
173.208.36.222 attackspambots
173.208.36.222 - - [15/Aug/2019:04:52:41 -0400] "GET /?page=products&action=../../../../../../../etc/passwd&linkID=15892 HTTP/1.1" 200 16857 "https://www.newportbrassfaucets.com/?page=products&action=../../../../../../../etc/passwd&linkID=15892" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0"
...
2019-08-15 20:10:32
122.195.200.148 attackspam
Aug 15 12:12:04 unicornsoft sshd\[15372\]: User root from 122.195.200.148 not allowed because not listed in AllowUsers
Aug 15 12:12:04 unicornsoft sshd\[15372\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.195.200.148  user=root
Aug 15 12:12:07 unicornsoft sshd\[15372\]: Failed password for invalid user root from 122.195.200.148 port 25235 ssh2
2019-08-15 20:23:56
106.87.40.132 attackbotsspam
Reported by AbuseIPDB proxy server.
2019-08-15 20:46:00
202.86.173.59 attack
Aug 15 11:26:30 tuxlinux sshd[6789]: Invalid user control from 202.86.173.59 port 56846
Aug 15 11:26:30 tuxlinux sshd[6789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.86.173.59 
Aug 15 11:26:30 tuxlinux sshd[6789]: Invalid user control from 202.86.173.59 port 56846
Aug 15 11:26:30 tuxlinux sshd[6789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.86.173.59 
Aug 15 11:26:30 tuxlinux sshd[6789]: Invalid user control from 202.86.173.59 port 56846
Aug 15 11:26:30 tuxlinux sshd[6789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.86.173.59 
Aug 15 11:26:31 tuxlinux sshd[6789]: Failed password for invalid user control from 202.86.173.59 port 56846 ssh2
...
2019-08-15 20:43:21
121.130.125.205 attackspam
Fail2Ban - FTP Abuse Attempt
2019-08-15 20:23:20
104.248.254.51 attack
Aug 15 13:03:17 mail sshd\[31995\]: Invalid user camera from 104.248.254.51 port 48434
Aug 15 13:03:17 mail sshd\[31995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.254.51
...
2019-08-15 20:17:42
185.220.101.68 attackspambots
2019-08-15T14:37:12.161490wiz-ks3 sshd[9407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.68  user=root
2019-08-15T14:37:14.246021wiz-ks3 sshd[9407]: Failed password for root from 185.220.101.68 port 40962 ssh2
2019-08-15T14:37:17.809644wiz-ks3 sshd[9407]: Failed password for root from 185.220.101.68 port 40962 ssh2
2019-08-15T14:37:12.161490wiz-ks3 sshd[9407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.68  user=root
2019-08-15T14:37:14.246021wiz-ks3 sshd[9407]: Failed password for root from 185.220.101.68 port 40962 ssh2
2019-08-15T14:37:17.809644wiz-ks3 sshd[9407]: Failed password for root from 185.220.101.68 port 40962 ssh2
2019-08-15T14:37:12.161490wiz-ks3 sshd[9407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.68  user=root
2019-08-15T14:37:14.246021wiz-ks3 sshd[9407]: Failed password for root from 185.220.101.68 port 40962 ssh2
2019-08-1
2019-08-15 21:01:30
31.27.38.242 attackspam
Aug 15 11:34:45 MK-Soft-VM5 sshd\[26409\]: Invalid user angga from 31.27.38.242 port 58866
Aug 15 11:34:45 MK-Soft-VM5 sshd\[26409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.27.38.242
Aug 15 11:34:47 MK-Soft-VM5 sshd\[26409\]: Failed password for invalid user angga from 31.27.38.242 port 58866 ssh2
...
2019-08-15 20:08:59
42.157.129.158 attackspam
Aug 15 11:29:07 vtv3 sshd\[21485\]: Invalid user demouser from 42.157.129.158 port 40124
Aug 15 11:29:07 vtv3 sshd\[21485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Aug 15 11:29:09 vtv3 sshd\[21485\]: Failed password for invalid user demouser from 42.157.129.158 port 40124 ssh2
Aug 15 11:37:19 vtv3 sshd\[25611\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158  user=root
Aug 15 11:37:22 vtv3 sshd\[25611\]: Failed password for root from 42.157.129.158 port 60618 ssh2
Aug 15 11:54:10 vtv3 sshd\[1428\]: Invalid user test from 42.157.129.158 port 45148
Aug 15 11:54:10 vtv3 sshd\[1428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.129.158
Aug 15 11:54:13 vtv3 sshd\[1428\]: Failed password for invalid user test from 42.157.129.158 port 45148 ssh2
Aug 15 12:02:45 vtv3 sshd\[5689\]: Invalid user mathlida from 42.157.129.158 port 37416
Aug 15
2019-08-15 20:35:32
202.138.242.121 attackspambots
Aug 15 02:09:59 web9 sshd\[26350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.138.242.121  user=mysql
Aug 15 02:10:00 web9 sshd\[26350\]: Failed password for mysql from 202.138.242.121 port 43046 ssh2
Aug 15 02:15:44 web9 sshd\[27399\]: Invalid user omsagent from 202.138.242.121
Aug 15 02:15:44 web9 sshd\[27399\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.138.242.121
Aug 15 02:15:46 web9 sshd\[27399\]: Failed password for invalid user omsagent from 202.138.242.121 port 36398 ssh2
2019-08-15 20:22:52
5.39.79.48 attackspambots
Aug 15 14:44:46 tux-35-217 sshd\[30520\]: Invalid user hhh from 5.39.79.48 port 59580
Aug 15 14:44:46 tux-35-217 sshd\[30520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.79.48
Aug 15 14:44:48 tux-35-217 sshd\[30520\]: Failed password for invalid user hhh from 5.39.79.48 port 59580 ssh2
Aug 15 14:49:34 tux-35-217 sshd\[30544\]: Invalid user photon from 5.39.79.48 port 55921
Aug 15 14:49:34 tux-35-217 sshd\[30544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.79.48
...
2019-08-15 20:51:58

最近上报的IP列表

109.168.40.107 52.35.71.164 177.146.61.137 201.217.194.29
188.158.238.235 63.212.232.26 36.84.242.254 178.128.54.223
115.52.203.99 46.90.92.61 180.254.179.98 114.67.64.121
187.1.28.194 166.210.179.150 119.28.222.11 154.73.66.38
157.202.190.205 49.230.13.32 113.183.54.101 130.217.123.30