必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Guangdong Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Aug 24 16:04:44 sso sshd[24134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.30
Aug 24 16:04:46 sso sshd[24134]: Failed password for invalid user pfy from 106.124.142.30 port 36650 ssh2
...
2020-08-25 01:15:26
attack
$f2bV_matches
2020-07-26 16:21:57
attackspambots
2020-07-19T16:37:06.857999-07:00 suse-nuc sshd[11066]: Invalid user said from 106.124.142.30 port 51420
...
2020-07-20 08:08:56
attack
Invalid user yago from 106.124.142.30 port 51188
2020-07-14 21:04:15
attackbots
Jul  9 22:21:01 srv sshd[1488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.30
2020-07-10 05:05:45
attackspam
Jun 14 05:55:16 hell sshd[16948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.30
Jun 14 05:55:18 hell sshd[16948]: Failed password for invalid user confluence from 106.124.142.30 port 32856 ssh2
...
2020-06-14 13:00:10
attackbots
May 25 06:32:00 haigwepa sshd[24156]: Failed password for root from 106.124.142.30 port 36282 ssh2
...
2020-05-25 16:19:57
attackbots
May 15 00:15:05 vps sshd[467050]: Failed password for invalid user www from 106.124.142.30 port 35974 ssh2
May 15 00:19:01 vps sshd[487734]: Invalid user deploy from 106.124.142.30 port 38910
May 15 00:19:01 vps sshd[487734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.30
May 15 00:19:03 vps sshd[487734]: Failed password for invalid user deploy from 106.124.142.30 port 38910 ssh2
May 15 00:23:27 vps sshd[507998]: Invalid user test1 from 106.124.142.30 port 41844
...
2020-05-15 07:20:41
attackspam
May  5 13:23:13 pve1 sshd[8004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.30 
May  5 13:23:15 pve1 sshd[8004]: Failed password for invalid user otp from 106.124.142.30 port 39164 ssh2
...
2020-05-05 20:14:51
attackbots
$f2bV_matches
2020-05-05 16:39:10
attackspambots
Apr 28 08:01:09 mout sshd[28681]: Invalid user gitlab-runner from 106.124.142.30 port 38230
2020-04-28 14:19:19
attack
Apr 19 05:48:26 MainVPS sshd[8120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.30  user=root
Apr 19 05:48:28 MainVPS sshd[8120]: Failed password for root from 106.124.142.30 port 41814 ssh2
Apr 19 05:55:28 MainVPS sshd[14060]: Invalid user qa from 106.124.142.30 port 36206
Apr 19 05:55:28 MainVPS sshd[14060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.30
Apr 19 05:55:28 MainVPS sshd[14060]: Invalid user qa from 106.124.142.30 port 36206
Apr 19 05:55:29 MainVPS sshd[14060]: Failed password for invalid user qa from 106.124.142.30 port 36206 ssh2
...
2020-04-19 13:22:28
attackspam
2020-04-11T22:01:24.855464shield sshd\[12433\]: Invalid user temp from 106.124.142.30 port 38588
2020-04-11T22:01:24.858973shield sshd\[12433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.30
2020-04-11T22:01:26.881947shield sshd\[12433\]: Failed password for invalid user temp from 106.124.142.30 port 38588 ssh2
2020-04-11T22:05:26.219676shield sshd\[12845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.30  user=root
2020-04-11T22:05:28.132186shield sshd\[12845\]: Failed password for root from 106.124.142.30 port 40220 ssh2
2020-04-12 06:45:48
attackbots
Invalid user qa from 106.124.142.30 port 50416
2020-04-05 04:46:36
attack
Mar 27 05:32:06 eventyay sshd[6930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.30
Mar 27 05:32:08 eventyay sshd[6930]: Failed password for invalid user vg from 106.124.142.30 port 38490 ssh2
Mar 27 05:36:52 eventyay sshd[7074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.30
...
2020-03-27 12:49:55
attack
Mar 23 07:35:33 mout sshd[10156]: Invalid user dedicated from 106.124.142.30 port 42294
2020-03-23 18:39:37
相同子网IP讨论:
IP 类型 评论内容 时间
106.124.142.64 attackbots
2020-10-13T20:39:59.371795abusebot-6.cloudsearch.cf sshd[10733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.64  user=root
2020-10-13T20:40:01.583916abusebot-6.cloudsearch.cf sshd[10733]: Failed password for root from 106.124.142.64 port 40794 ssh2
2020-10-13T20:44:20.434166abusebot-6.cloudsearch.cf sshd[10832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.64  user=root
2020-10-13T20:44:22.475849abusebot-6.cloudsearch.cf sshd[10832]: Failed password for root from 106.124.142.64 port 39613 ssh2
2020-10-13T20:47:59.860581abusebot-6.cloudsearch.cf sshd[10890]: Invalid user sanchez from 106.124.142.64 port 38431
2020-10-13T20:47:59.866884abusebot-6.cloudsearch.cf sshd[10890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.64
2020-10-13T20:47:59.860581abusebot-6.cloudsearch.cf sshd[10890]: Invalid user sanchez from 106.124.142.64
...
2020-10-14 08:16:04
106.124.142.206 attackbots
Aug 28 07:13:15 mellenthin sshd[28527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.206
Aug 28 07:13:18 mellenthin sshd[28527]: Failed password for invalid user git from 106.124.142.206 port 51180 ssh2
2020-08-28 13:25:52
106.124.142.64 attackbotsspam
Aug 20 07:33:11 webhost01 sshd[24315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.64
Aug 20 07:33:12 webhost01 sshd[24315]: Failed password for invalid user llb from 106.124.142.64 port 51515 ssh2
...
2020-08-20 08:56:37
106.124.142.64 attackbotsspam
2020-08-02T14:06:48.464434vps751288.ovh.net sshd\[24745\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.64  user=root
2020-08-02T14:06:50.780435vps751288.ovh.net sshd\[24745\]: Failed password for root from 106.124.142.64 port 36474 ssh2
2020-08-02T14:09:52.218494vps751288.ovh.net sshd\[24765\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.64  user=root
2020-08-02T14:09:54.459496vps751288.ovh.net sshd\[24765\]: Failed password for root from 106.124.142.64 port 52254 ssh2
2020-08-02T14:12:54.168213vps751288.ovh.net sshd\[24792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.64  user=root
2020-08-02 21:41:16
106.124.142.64 attackbots
Jul 23 16:39:45 eventyay sshd[5033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.64
Jul 23 16:39:48 eventyay sshd[5033]: Failed password for invalid user server from 106.124.142.64 port 45514 ssh2
Jul 23 16:47:09 eventyay sshd[5375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.64
...
2020-07-24 00:38:20
106.124.142.64 attackspam
Jul 17 16:19:22 sip sshd[981669]: Invalid user victor from 106.124.142.64 port 37724
Jul 17 16:19:24 sip sshd[981669]: Failed password for invalid user victor from 106.124.142.64 port 37724 ssh2
Jul 17 16:23:18 sip sshd[981709]: Invalid user iwan from 106.124.142.64 port 55269
...
2020-07-17 23:41:22
106.124.142.206 attackspambots
$f2bV_matches
2020-07-16 12:47:55
106.124.142.64 attackbotsspam
bruteforce detected
2020-07-08 08:10:47
106.124.142.206 attackspambots
Jul  4 22:21:41 srv-ubuntu-dev3 sshd[99272]: Invalid user andrew from 106.124.142.206
Jul  4 22:21:41 srv-ubuntu-dev3 sshd[99272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.206
Jul  4 22:21:41 srv-ubuntu-dev3 sshd[99272]: Invalid user andrew from 106.124.142.206
Jul  4 22:21:43 srv-ubuntu-dev3 sshd[99272]: Failed password for invalid user andrew from 106.124.142.206 port 46347 ssh2
Jul  4 22:25:10 srv-ubuntu-dev3 sshd[99806]: Invalid user enlace from 106.124.142.206
Jul  4 22:25:10 srv-ubuntu-dev3 sshd[99806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.206
Jul  4 22:25:10 srv-ubuntu-dev3 sshd[99806]: Invalid user enlace from 106.124.142.206
Jul  4 22:25:12 srv-ubuntu-dev3 sshd[99806]: Failed password for invalid user enlace from 106.124.142.206 port 43018 ssh2
Jul  4 22:28:14 srv-ubuntu-dev3 sshd[100313]: Invalid user forge from 106.124.142.206
...
2020-07-05 05:19:53
106.124.142.206 attackbotsspam
Jun 20 23:09:38 OPSO sshd\[25483\]: Invalid user tty from 106.124.142.206 port 44915
Jun 20 23:09:38 OPSO sshd\[25483\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.206
Jun 20 23:09:39 OPSO sshd\[25483\]: Failed password for invalid user tty from 106.124.142.206 port 44915 ssh2
Jun 20 23:13:16 OPSO sshd\[26167\]: Invalid user jupyter from 106.124.142.206 port 43554
Jun 20 23:13:16 OPSO sshd\[26167\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.206
2020-06-21 05:38:04
106.124.142.64 attack
sshd jail - ssh hack attempt
2020-06-07 12:16:35
106.124.142.206 attackspambots
(sshd) Failed SSH login from 106.124.142.206 (CN/China/-): 5 in the last 3600 secs
2020-06-01 16:43:17
106.124.142.64 attackspambots
May 21 13:03:32 sigma sshd\[5198\]: Invalid user ese from 106.124.142.64May 21 13:03:34 sigma sshd\[5198\]: Failed password for invalid user ese from 106.124.142.64 port 38927 ssh2
...
2020-05-21 21:01:28
106.124.142.206 attackspam
May  9 00:59:15 eventyay sshd[4944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.206
May  9 00:59:17 eventyay sshd[4944]: Failed password for invalid user ubuntu from 106.124.142.206 port 55375 ssh2
May  9 01:03:41 eventyay sshd[5038]: Failed password for root from 106.124.142.206 port 56868 ssh2
...
2020-05-09 23:23:40
106.124.142.206 attackbots
May  8 23:51:51 eventyay sshd[3559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.206
May  8 23:51:53 eventyay sshd[3559]: Failed password for invalid user sandra from 106.124.142.206 port 59802 ssh2
May  8 23:56:04 eventyay sshd[3678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.142.206
...
2020-05-09 05:58:05
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.124.142.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37811
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.124.142.30.			IN	A

;; AUTHORITY SECTION:
.			542	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032300 1800 900 604800 86400

;; Query time: 127 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 23 18:39:24 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 30.142.124.106.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 30.142.124.106.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
112.85.42.176 attack
2020-08-20T08:22:16.320786afi-git.jinr.ru sshd[10006]: Failed password for root from 112.85.42.176 port 35030 ssh2
2020-08-20T08:22:19.602337afi-git.jinr.ru sshd[10006]: Failed password for root from 112.85.42.176 port 35030 ssh2
2020-08-20T08:22:22.480632afi-git.jinr.ru sshd[10006]: Failed password for root from 112.85.42.176 port 35030 ssh2
2020-08-20T08:22:22.480780afi-git.jinr.ru sshd[10006]: error: maximum authentication attempts exceeded for root from 112.85.42.176 port 35030 ssh2 [preauth]
2020-08-20T08:22:22.480793afi-git.jinr.ru sshd[10006]: Disconnecting: Too many authentication failures [preauth]
...
2020-08-20 13:32:54
58.218.204.196 attack
Icarus honeypot on github
2020-08-20 13:19:36
212.47.237.75 attackbots
Aug 20 04:54:30 ms-srv sshd[26046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.47.237.75
Aug 20 04:54:32 ms-srv sshd[26046]: Failed password for invalid user zabbix from 212.47.237.75 port 46388 ssh2
2020-08-20 13:31:35
106.13.226.34 attack
Aug 20 09:24:37 lunarastro sshd[3149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.226.34 
Aug 20 09:24:39 lunarastro sshd[3149]: Failed password for invalid user ftptest from 106.13.226.34 port 39906 ssh2
2020-08-20 13:25:28
106.12.10.8 attackspambots
(sshd) Failed SSH login from 106.12.10.8 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 20 05:40:22 amsweb01 sshd[15011]: User operator from 106.12.10.8 not allowed because not listed in AllowUsers
Aug 20 05:40:22 amsweb01 sshd[15011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.10.8  user=operator
Aug 20 05:40:24 amsweb01 sshd[15011]: Failed password for invalid user operator from 106.12.10.8 port 42866 ssh2
Aug 20 05:54:28 amsweb01 sshd[16974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.10.8  user=root
Aug 20 05:54:30 amsweb01 sshd[16974]: Failed password for root from 106.12.10.8 port 56286 ssh2
2020-08-20 13:30:37
217.171.147.164 attackbotsspam
Automatic report - Banned IP Access
2020-08-20 13:35:20
112.85.42.173 attackspambots
web-1 [ssh_2] SSH Attack
2020-08-20 13:50:19
218.92.0.133 attackspam
Aug 20 07:36:52 santamaria sshd\[18969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.133  user=root
Aug 20 07:36:54 santamaria sshd\[18969\]: Failed password for root from 218.92.0.133 port 26849 ssh2
Aug 20 07:37:16 santamaria sshd\[18971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.133  user=root
...
2020-08-20 13:49:10
218.94.143.226 attack
Aug 20 01:55:21 firewall sshd[17857]: Invalid user a123456789 from 218.94.143.226
Aug 20 01:55:23 firewall sshd[17857]: Failed password for invalid user a123456789 from 218.94.143.226 port 37625 ssh2
Aug 20 02:02:11 firewall sshd[18066]: Invalid user 12345 from 218.94.143.226
...
2020-08-20 13:32:13
61.177.172.177 attack
Aug 20 07:28:44 plg sshd[11062]: Failed none for invalid user root from 61.177.172.177 port 3674 ssh2
Aug 20 07:28:44 plg sshd[11062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.177  user=root
Aug 20 07:28:47 plg sshd[11062]: Failed password for invalid user root from 61.177.172.177 port 3674 ssh2
Aug 20 07:28:50 plg sshd[11062]: Failed password for invalid user root from 61.177.172.177 port 3674 ssh2
Aug 20 07:28:54 plg sshd[11062]: Failed password for invalid user root from 61.177.172.177 port 3674 ssh2
Aug 20 07:28:58 plg sshd[11062]: Failed password for invalid user root from 61.177.172.177 port 3674 ssh2
Aug 20 07:29:02 plg sshd[11062]: Failed password for invalid user root from 61.177.172.177 port 3674 ssh2
Aug 20 07:29:02 plg sshd[11062]: error: maximum authentication attempts exceeded for invalid user root from 61.177.172.177 port 3674 ssh2 [preauth]
...
2020-08-20 13:41:22
138.68.94.173 attackbots
Aug 20 07:03:08 rancher-0 sshd[1172212]: Invalid user redmine from 138.68.94.173 port 54758
...
2020-08-20 13:25:48
139.59.141.196 attackbots
CMS (WordPress or Joomla) login attempt.
2020-08-20 13:14:37
139.59.140.133 attackbots
139.59.140.133 - - [20/Aug/2020:05:26:43 +0100] "POST /wp-login.php HTTP/1.1" 200 2604 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.140.133 - - [20/Aug/2020:05:26:44 +0100] "POST /wp-login.php HTTP/1.1" 200 2580 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.140.133 - - [20/Aug/2020:05:26:45 +0100] "POST /wp-login.php HTTP/1.1" 200 2577 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-20 13:12:31
40.84.238.168 attack
Port scan on 1 port(s): 8080
2020-08-20 13:13:31
193.228.91.108 attackbotsspam
Aug 20 05:06:33 game-panel sshd[16079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.228.91.108
Aug 20 05:06:34 game-panel sshd[16079]: Failed password for invalid user ubnt from 193.228.91.108 port 53636 ssh2
Aug 20 05:06:36 game-panel sshd[16080]: Failed password for root from 193.228.91.108 port 53634 ssh2
2020-08-20 13:17:38

最近上报的IP列表

220.164.192.25 113.255.237.152 177.30.46.3 138.201.133.205
183.178.241.54 40.115.60.71 5.53.35.249 189.174.155.139
118.172.146.171 190.37.106.173 51.91.75.44 41.232.49.60
122.170.68.202 68.183.197.39 36.149.79.171 195.211.87.139
189.101.183.107 173.249.60.159 103.7.10.182 36.149.79.107