必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Korea (Republic of)

运营商(isp): ILinkKorea

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attack
Automatic report - Port Scan
2020-06-05 20:12:56
attack
(ftpd) Failed FTP login from 113.52.139.131 (KR/South Korea/-): 10 in the last 3600 secs
2020-05-16 21:38:49
attackspam
Time:     Mon Apr 27 09:52:02 2020 -0300
IP:       113.52.139.131 (KR/South Korea/-)
Failures: 15 (ftpd)
Interval: 3600 seconds
Blocked:  Permanent Block
2020-04-28 00:52:32
attack
Apr 17 12:53:33 prod4 vsftpd\[22058\]: \[anonymous\] FAIL LOGIN: Client "113.52.139.131"
Apr 17 12:53:36 prod4 vsftpd\[22062\]: \[www\] FAIL LOGIN: Client "113.52.139.131"
Apr 17 12:53:39 prod4 vsftpd\[22078\]: \[www\] FAIL LOGIN: Client "113.52.139.131"
Apr 17 12:53:42 prod4 vsftpd\[22097\]: \[www\] FAIL LOGIN: Client "113.52.139.131"
Apr 17 12:53:45 prod4 vsftpd\[22107\]: \[www\] FAIL LOGIN: Client "113.52.139.131"
...
2020-04-18 01:01:18
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.52.139.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64673
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.52.139.131.			IN	A

;; AUTHORITY SECTION:
.			548	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041701 1800 900 604800 86400

;; Query time: 192 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Apr 18 01:01:13 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 131.139.52.113.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 131.139.52.113.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
212.64.8.10 attack
2020-06-18T11:58:26.094116abusebot-3.cloudsearch.cf sshd[11397]: Invalid user jessica from 212.64.8.10 port 54026
2020-06-18T11:58:26.102414abusebot-3.cloudsearch.cf sshd[11397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.8.10
2020-06-18T11:58:26.094116abusebot-3.cloudsearch.cf sshd[11397]: Invalid user jessica from 212.64.8.10 port 54026
2020-06-18T11:58:28.483653abusebot-3.cloudsearch.cf sshd[11397]: Failed password for invalid user jessica from 212.64.8.10 port 54026 ssh2
2020-06-18T12:02:59.204023abusebot-3.cloudsearch.cf sshd[11688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.8.10  user=root
2020-06-18T12:03:01.063400abusebot-3.cloudsearch.cf sshd[11688]: Failed password for root from 212.64.8.10 port 44030 ssh2
2020-06-18T12:07:21.453794abusebot-3.cloudsearch.cf sshd[11902]: Invalid user ekp from 212.64.8.10 port 34026
...
2020-06-18 23:14:58
129.204.177.32 attack
Jun 18 15:54:08 h2779839 sshd[22079]: Invalid user ftptest1 from 129.204.177.32 port 46094
Jun 18 15:54:08 h2779839 sshd[22079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.177.32
Jun 18 15:54:08 h2779839 sshd[22079]: Invalid user ftptest1 from 129.204.177.32 port 46094
Jun 18 15:54:11 h2779839 sshd[22079]: Failed password for invalid user ftptest1 from 129.204.177.32 port 46094 ssh2
Jun 18 15:58:37 h2779839 sshd[22296]: Invalid user amos from 129.204.177.32 port 46500
Jun 18 15:58:37 h2779839 sshd[22296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.177.32
Jun 18 15:58:37 h2779839 sshd[22296]: Invalid user amos from 129.204.177.32 port 46500
Jun 18 15:58:38 h2779839 sshd[22296]: Failed password for invalid user amos from 129.204.177.32 port 46500 ssh2
Jun 18 16:03:15 h2779839 sshd[22445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.
...
2020-06-18 23:05:32
210.211.116.204 attackspambots
Jun 18 05:59:45 pixelmemory sshd[1491169]: Invalid user president from 210.211.116.204 port 24261
Jun 18 05:59:45 pixelmemory sshd[1491169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.211.116.204 
Jun 18 05:59:45 pixelmemory sshd[1491169]: Invalid user president from 210.211.116.204 port 24261
Jun 18 05:59:47 pixelmemory sshd[1491169]: Failed password for invalid user president from 210.211.116.204 port 24261 ssh2
Jun 18 06:03:47 pixelmemory sshd[1501173]: Invalid user abi from 210.211.116.204 port 23490
...
2020-06-18 23:42:38
201.91.86.28 attackspambots
Jun 18 17:13:29 Ubuntu-1404-trusty-64-minimal sshd\[20130\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.91.86.28  user=root
Jun 18 17:13:31 Ubuntu-1404-trusty-64-minimal sshd\[20130\]: Failed password for root from 201.91.86.28 port 2415 ssh2
Jun 18 17:21:26 Ubuntu-1404-trusty-64-minimal sshd\[11166\]: Invalid user user from 201.91.86.28
Jun 18 17:21:26 Ubuntu-1404-trusty-64-minimal sshd\[11166\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.91.86.28
Jun 18 17:21:28 Ubuntu-1404-trusty-64-minimal sshd\[11166\]: Failed password for invalid user user from 201.91.86.28 port 14275 ssh2
2020-06-18 23:32:18
80.42.68.115 attackbotsspam
Automatic report - Banned IP Access
2020-06-18 23:08:25
109.125.240.73 attackbots
Automatic report - XMLRPC Attack
2020-06-18 23:06:16
218.92.0.165 attackbots
2020-06-18T17:50:11.611794afi-git.jinr.ru sshd[17588]: Failed password for root from 218.92.0.165 port 35269 ssh2
2020-06-18T17:50:14.740911afi-git.jinr.ru sshd[17588]: Failed password for root from 218.92.0.165 port 35269 ssh2
2020-06-18T17:50:18.278796afi-git.jinr.ru sshd[17588]: Failed password for root from 218.92.0.165 port 35269 ssh2
2020-06-18T17:50:18.278935afi-git.jinr.ru sshd[17588]: error: maximum authentication attempts exceeded for root from 218.92.0.165 port 35269 ssh2 [preauth]
2020-06-18T17:50:18.278949afi-git.jinr.ru sshd[17588]: Disconnecting: Too many authentication failures [preauth]
...
2020-06-18 23:33:47
128.199.106.169 attack
Jun 18 16:02:48 minden010 sshd[14541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.106.169
Jun 18 16:02:50 minden010 sshd[14541]: Failed password for invalid user mxx from 128.199.106.169 port 35838 ssh2
Jun 18 16:06:02 minden010 sshd[14950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.106.169
...
2020-06-18 23:11:56
185.86.164.104 attack
Automatic report - Banned IP Access
2020-06-18 23:26:39
45.135.187.22 attack
0,31-00/00 [bc00/m53] PostRequest-Spammer scoring: Durban01
2020-06-18 23:04:07
144.168.199.71 attackspambots
Spammer
2020-06-18 23:03:05
129.226.174.139 attack
SSH Brute-Forcing (server2)
2020-06-18 23:16:17
93.177.102.220 attack
IP: 93.177.102.220
Ports affected
    Simple Mail Transfer (25) 
Found in DNSBL('s)
ASN Details
   AS202505 Onlinenet Bil. Turzm. Teks. San. Ve Tic. Ltd. Sti.
   Turkey (TR)
   CIDR 93.177.102.0/24
Log Date: 18/06/2020 11:53:51 AM UTC
2020-06-18 23:20:33
222.186.173.238 attackspambots
2020-06-18T11:24:35.665733xentho-1 sshd[426594]: Failed password for root from 222.186.173.238 port 64154 ssh2
2020-06-18T11:24:28.816737xentho-1 sshd[426594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238  user=root
2020-06-18T11:24:30.620640xentho-1 sshd[426594]: Failed password for root from 222.186.173.238 port 64154 ssh2
2020-06-18T11:24:35.665733xentho-1 sshd[426594]: Failed password for root from 222.186.173.238 port 64154 ssh2
2020-06-18T11:24:40.111036xentho-1 sshd[426594]: Failed password for root from 222.186.173.238 port 64154 ssh2
2020-06-18T11:24:28.816737xentho-1 sshd[426594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238  user=root
2020-06-18T11:24:30.620640xentho-1 sshd[426594]: Failed password for root from 222.186.173.238 port 64154 ssh2
2020-06-18T11:24:35.665733xentho-1 sshd[426594]: Failed password for root from 222.186.173.238 port 64154 ssh2
2020-0
...
2020-06-18 23:29:29
125.132.73.28 attackspam
Jun 18 05:27:59 dignus sshd[3336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.132.73.28  user=root
Jun 18 05:28:01 dignus sshd[3336]: Failed password for root from 125.132.73.28 port 51093 ssh2
Jun 18 05:31:38 dignus sshd[3776]: Invalid user mcserver from 125.132.73.28 port 48986
Jun 18 05:31:38 dignus sshd[3776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.132.73.28
Jun 18 05:31:40 dignus sshd[3776]: Failed password for invalid user mcserver from 125.132.73.28 port 48986 ssh2
...
2020-06-18 23:37:17

最近上报的IP列表

79.184.160.7 110.204.61.138 227.34.103.142 88.247.231.67
226.69.116.73 165.22.8.79 46.76.33.251 195.9.33.186
74.252.242.34 211.20.41.77 220.167.89.67 193.56.28.107
117.50.74.15 222.154.229.60 67.234.182.63 113.16.195.189
77.50.177.236 36.90.42.59 31.163.161.215 13.68.187.205