必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Saigon Tourist Cable Television

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackspam
Unauthorized connection attempt detected from IP address 112.197.139.54 to port 5555 [J]
2020-02-23 21:00:02
相同子网IP讨论:
IP 类型 评论内容 时间
112.197.139.91 attackspambots
Sep  3 06:00:56 sip sshd[4743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.197.139.91
Sep  3 06:00:57 sip sshd[4749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.197.139.91
Sep  3 06:00:59 sip sshd[4743]: Failed password for invalid user guest from 112.197.139.91 port 51444 ssh2
2020-09-03 21:34:27
112.197.139.91 attack
Sep  3 06:00:56 sip sshd[4743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.197.139.91
Sep  3 06:00:57 sip sshd[4749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.197.139.91
Sep  3 06:00:59 sip sshd[4743]: Failed password for invalid user guest from 112.197.139.91 port 51444 ssh2
2020-09-03 13:17:05
112.197.139.91 attackbotsspam
SSH login attempts brute force.
2020-09-03 05:33:05
112.197.139.117 attackbots
Jun  2 14:08:34 fhem-rasp sshd[7977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.197.139.117 
Jun  2 14:08:37 fhem-rasp sshd[7977]: Failed password for invalid user ubnt from 112.197.139.117 port 35332 ssh2
...
2020-06-02 20:49:13
112.197.139.98 attack
May 25 10:17:23 vpn01 sshd[7258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.197.139.98
May 25 10:17:25 vpn01 sshd[7258]: Failed password for invalid user admin from 112.197.139.98 port 42217 ssh2
...
2020-05-25 19:08:38
112.197.139.37 attackspam
Honeypot attack, port: 5555, PTR: PTR record not found
2020-01-14 04:48:11
112.197.139.28 attack
Unauthorized connection attempt detected from IP address 112.197.139.28 to port 5555
2020-01-01 04:11:01
112.197.139.27 attackbots
Unauthorized connection attempt detected from IP address 112.197.139.27 to port 5555
2019-12-31 02:08:19
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.197.139.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33102
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.197.139.54.			IN	A

;; AUTHORITY SECTION:
.			305	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022300 1800 900 604800 86400

;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 23 20:59:57 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 54.139.197.112.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 54.139.197.112.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
156.196.9.209 attack
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/156.196.9.209/ 
 FR - 1H : (679)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : FR 
 NAME ASN : ASN8452 
 
 IP : 156.196.9.209 
 
 CIDR : 156.196.0.0/19 
 
 PREFIX COUNT : 833 
 
 UNIQUE IP COUNT : 7610368 
 
 
 WYKRYTE ATAKI Z ASN8452 :  
  1H - 25 
  3H - 79 
  6H - 145 
 12H - 275 
 24H - 597 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-09-25 21:40:42
66.249.79.136 attack
Web App Attack
2019-09-25 21:33:00
185.55.226.123 attackbotsspam
Sep 25 03:29:15 php1 sshd\[24818\]: Invalid user user from 185.55.226.123
Sep 25 03:29:15 php1 sshd\[24818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.55.226.123
Sep 25 03:29:17 php1 sshd\[24818\]: Failed password for invalid user user from 185.55.226.123 port 47576 ssh2
Sep 25 03:33:52 php1 sshd\[25163\]: Invalid user nm-openconnect from 185.55.226.123
Sep 25 03:33:52 php1 sshd\[25163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.55.226.123
2019-09-25 21:42:54
213.139.144.10 attackspam
Sep 25 02:56:18 web1 sshd\[18824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.139.144.10  user=lp
Sep 25 02:56:20 web1 sshd\[18824\]: Failed password for lp from 213.139.144.10 port 50915 ssh2
Sep 25 03:02:51 web1 sshd\[19405\]: Invalid user hadoop from 213.139.144.10
Sep 25 03:02:51 web1 sshd\[19405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.139.144.10
Sep 25 03:02:53 web1 sshd\[19405\]: Failed password for invalid user hadoop from 213.139.144.10 port 62587 ssh2
2019-09-25 21:31:51
83.97.20.218 attackspambots
5432/tcp 5432/tcp
[2019-09-24]2pkt
2019-09-25 21:21:44
151.106.11.190 attackspam
fell into ViewStateTrap:Lusaka02
2019-09-25 21:41:14
197.48.144.54 attack
Lines containing failures of 197.48.144.54
Sep 25 14:19:29 shared02 sshd[29860]: Invalid user admin from 197.48.144.54 port 59393
Sep 25 14:19:29 shared02 sshd[29860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.48.144.54
Sep 25 14:19:31 shared02 sshd[29860]: Failed password for invalid user admin from 197.48.144.54 port 59393 ssh2
Sep 25 14:19:31 shared02 sshd[29860]: Connection closed by invalid user admin 197.48.144.54 port 59393 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=197.48.144.54
2019-09-25 21:32:22
101.231.104.82 attackspambots
Sep 25 14:05:33 game-panel sshd[6402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.104.82
Sep 25 14:05:36 game-panel sshd[6402]: Failed password for invalid user jiaoyue from 101.231.104.82 port 38364 ssh2
Sep 25 14:10:04 game-panel sshd[6629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.104.82
2019-09-25 22:10:36
176.56.236.21 attackbots
Sep 25 03:32:40 hiderm sshd\[32329\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.56.236.21  user=root
Sep 25 03:32:42 hiderm sshd\[32329\]: Failed password for root from 176.56.236.21 port 57892 ssh2
Sep 25 03:36:32 hiderm sshd\[32678\]: Invalid user wasadmin from 176.56.236.21
Sep 25 03:36:32 hiderm sshd\[32678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.56.236.21
Sep 25 03:36:34 hiderm sshd\[32678\]: Failed password for invalid user wasadmin from 176.56.236.21 port 48314 ssh2
2019-09-25 21:47:39
42.115.221.40 attack
Sep 25 15:05:14 eventyay sshd[20812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.115.221.40
Sep 25 15:05:17 eventyay sshd[20812]: Failed password for invalid user teamspeak from 42.115.221.40 port 45086 ssh2
Sep 25 15:10:51 eventyay sshd[20914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.115.221.40
...
2019-09-25 21:25:36
114.242.245.251 attackbots
2019-09-25T15:26:12.414150  sshd[827]: Invalid user sun from 114.242.245.251 port 36962
2019-09-25T15:26:12.427456  sshd[827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.242.245.251
2019-09-25T15:26:12.414150  sshd[827]: Invalid user sun from 114.242.245.251 port 36962
2019-09-25T15:26:14.614766  sshd[827]: Failed password for invalid user sun from 114.242.245.251 port 36962 ssh2
2019-09-25T15:30:33.745832  sshd[913]: Invalid user info from 114.242.245.251 port 45204
...
2019-09-25 22:07:02
49.89.127.16 attackbots
2019-09-25 07:22:24 dovecot_login authenticator failed for (xn--66t80dn9s88i) [49.89.127.16]:54967 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=test@lerctr.org)
2019-09-25 07:22:24 H=(xn--66t80dn9s88i) [49.89.127.16]:54967 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address
2019-09-25 07:22:24 H=(xn--66t80dn9s88i) [49.89.127.16]:54967 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed
...
2019-09-25 21:55:41
199.195.248.63 attack
23/tcp 23/tcp 23/tcp...
[2019-09-10/25]4pkt,1pt.(tcp)
2019-09-25 21:29:01
190.112.233.166 attack
Automatic report - Port Scan Attack
2019-09-25 21:53:25
202.122.23.70 attackspambots
2019-09-25T13:28:53.637022abusebot-8.cloudsearch.cf sshd\[28296\]: Invalid user test from 202.122.23.70 port 33432
2019-09-25 21:30:03

最近上报的IP列表

219.85.54.87 218.210.35.49 211.75.219.143 200.75.221.130
194.186.195.194 190.232.172.38 189.226.116.151 189.134.233.218
188.158.121.143 187.111.180.13 182.52.143.165 181.51.56.51
171.247.5.160 161.0.156.169 150.129.151.212 125.231.130.106
123.195.115.39 122.165.205.189 122.160.46.61 120.35.26.129