必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Shanghai UCloud Information Technology Company Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspam
SSH invalid-user multiple login try
2020-06-20 21:26:46
attackbots
Jun 13 19:06:23 ns392434 sshd[17156]: Invalid user hi from 106.75.139.232 port 39624
Jun 13 19:06:23 ns392434 sshd[17156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.139.232
Jun 13 19:06:23 ns392434 sshd[17156]: Invalid user hi from 106.75.139.232 port 39624
Jun 13 19:06:25 ns392434 sshd[17156]: Failed password for invalid user hi from 106.75.139.232 port 39624 ssh2
Jun 13 19:08:39 ns392434 sshd[17214]: Invalid user kapil from 106.75.139.232 port 59130
Jun 13 19:08:39 ns392434 sshd[17214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.139.232
Jun 13 19:08:39 ns392434 sshd[17214]: Invalid user kapil from 106.75.139.232 port 59130
Jun 13 19:08:42 ns392434 sshd[17214]: Failed password for invalid user kapil from 106.75.139.232 port 59130 ssh2
Jun 13 19:10:19 ns392434 sshd[17340]: Invalid user bwd from 106.75.139.232 port 45248
2020-06-14 04:08:00
attackbotsspam
Ssh brute force
2020-06-05 08:08:07
attackspambots
SSH brute force attempt
2020-06-01 05:44:12
相同子网IP讨论:
IP 类型 评论内容 时间
106.75.139.131 attack
Oct  7 11:19:41 dhoomketu sshd[3625984]: Failed password for root from 106.75.139.131 port 40808 ssh2
Oct  7 11:21:25 dhoomketu sshd[3626010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.139.131  user=root
Oct  7 11:21:26 dhoomketu sshd[3626010]: Failed password for root from 106.75.139.131 port 57422 ssh2
Oct  7 11:23:06 dhoomketu sshd[3626061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.139.131  user=root
Oct  7 11:23:08 dhoomketu sshd[3626061]: Failed password for root from 106.75.139.131 port 45804 ssh2
...
2020-10-07 20:38:21
106.75.139.131 attackbotsspam
Oct  7 09:44:01 dhoomketu sshd[3623264]: Failed password for root from 106.75.139.131 port 53698 ssh2
Oct  7 09:45:35 dhoomketu sshd[3623291]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.139.131  user=root
Oct  7 09:45:38 dhoomketu sshd[3623291]: Failed password for root from 106.75.139.131 port 42080 ssh2
Oct  7 09:47:19 dhoomketu sshd[3623324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.139.131  user=root
Oct  7 09:47:22 dhoomketu sshd[3623324]: Failed password for root from 106.75.139.131 port 58694 ssh2
...
2020-10-07 12:23:48
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.75.139.232
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23008
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.75.139.232.			IN	A

;; AUTHORITY SECTION:
.			513	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020053101 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 01 05:44:09 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 232.139.75.106.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 232.139.75.106.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
150.109.63.147 attackspambots
Invalid user team from 150.109.63.147 port 60640
2019-11-02 17:51:40
124.123.104.209 attackbots
Unauthorized connection attempt from IP address 124.123.104.209 on Port 445(SMB)
2019-11-02 17:39:01
45.64.134.198 attack
Unauthorised access (Nov  2) SRC=45.64.134.198 LEN=52 TTL=114 ID=14336 DF TCP DPT=445 WINDOW=8192 SYN 
Unauthorised access (Oct 27) SRC=45.64.134.198 LEN=52 TTL=114 ID=31785 DF TCP DPT=445 WINDOW=8192 SYN
2019-11-02 17:43:38
185.26.99.102 attackspambots
slow and persistent scanner
2019-11-02 17:15:34
222.186.180.8 attackbotsspam
Nov  2 09:35:10 ip-172-31-1-72 sshd\[28840\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.8  user=root
Nov  2 09:35:12 ip-172-31-1-72 sshd\[28840\]: Failed password for root from 222.186.180.8 port 46252 ssh2
Nov  2 09:35:40 ip-172-31-1-72 sshd\[28842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.8  user=root
Nov  2 09:35:42 ip-172-31-1-72 sshd\[28842\]: Failed password for root from 222.186.180.8 port 58970 ssh2
Nov  2 09:35:46 ip-172-31-1-72 sshd\[28842\]: Failed password for root from 222.186.180.8 port 58970 ssh2
2019-11-02 17:42:04
181.49.164.253 attack
Nov  2 08:28:43 bouncer sshd\[17556\]: Invalid user uunet1 from 181.49.164.253 port 45938
Nov  2 08:28:43 bouncer sshd\[17556\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.164.253 
Nov  2 08:28:45 bouncer sshd\[17556\]: Failed password for invalid user uunet1 from 181.49.164.253 port 45938 ssh2
...
2019-11-02 17:30:14
163.172.84.50 attack
Invalid user reigo from 163.172.84.50 port 50674
2019-11-02 17:28:33
68.183.32.197 attackspam
SQL Injection Attempts
2019-11-02 17:46:20
118.46.202.35 attackbots
SSH Bruteforce attack
2019-11-02 17:50:25
222.186.180.9 attackspambots
Nov  2 10:26:27 MK-Soft-VM7 sshd[15871]: Failed password for root from 222.186.180.9 port 52278 ssh2
Nov  2 10:26:32 MK-Soft-VM7 sshd[15871]: Failed password for root from 222.186.180.9 port 52278 ssh2
...
2019-11-02 17:30:38
183.89.83.27 attackspambots
Unauthorized connection attempt from IP address 183.89.83.27 on Port 445(SMB)
2019-11-02 17:42:18
103.78.73.171 attackbots
Unauthorized connection attempt from IP address 103.78.73.171 on Port 445(SMB)
2019-11-02 17:40:27
222.252.21.40 attack
Unauthorized connection attempt from IP address 222.252.21.40 on Port 445(SMB)
2019-11-02 17:48:10
157.230.113.218 attackspam
Nov  1 23:25:52 tdfoods sshd\[1378\]: Invalid user lanzhong2009idc from 157.230.113.218
Nov  1 23:25:52 tdfoods sshd\[1378\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.113.218
Nov  1 23:25:53 tdfoods sshd\[1378\]: Failed password for invalid user lanzhong2009idc from 157.230.113.218 port 60278 ssh2
Nov  1 23:29:56 tdfoods sshd\[1741\]: Invalid user ctk from 157.230.113.218
Nov  1 23:29:56 tdfoods sshd\[1741\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.113.218
2019-11-02 17:31:22
51.38.238.205 attackspambots
SSH Brute-Force reported by Fail2Ban
2019-11-02 17:50:49

最近上报的IP列表

187.243.20.112 12.149.195.71 180.51.28.209 52.15.245.63
198.10.252.3 107.113.172.97 238.100.249.10 181.29.159.121
98.202.61.52 144.250.90.216 155.47.230.154 56.198.34.79
22.176.70.45 164.198.135.175 177.111.176.165 235.36.199.217
32.95.218.174 32.234.16.93 230.1.15.107 141.5.173.229