必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Hong Kong Telecommunications (HKT) Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspambots
Sep 19 00:06:56 ssh2 sshd[7728]: User root from n11649132142.netvigator.com not allowed because not listed in AllowUsers
Sep 19 00:06:56 ssh2 sshd[7728]: Failed password for invalid user root from 116.49.132.142 port 38680 ssh2
Sep 19 00:06:57 ssh2 sshd[7728]: Connection closed by invalid user root 116.49.132.142 port 38680 [preauth]
...
2020-09-19 21:31:46
attack
Sep 19 00:06:56 ssh2 sshd[7728]: User root from n11649132142.netvigator.com not allowed because not listed in AllowUsers
Sep 19 00:06:56 ssh2 sshd[7728]: Failed password for invalid user root from 116.49.132.142 port 38680 ssh2
Sep 19 00:06:57 ssh2 sshd[7728]: Connection closed by invalid user root 116.49.132.142 port 38680 [preauth]
...
2020-09-19 13:25:08
attackspambots
Connection to SSH Honeypot - Detected by HoneypotDB
2020-09-19 05:03:45
attackbotsspam
Sep  2 22:43:34 sip sshd[18517]: Failed password for root from 116.49.132.142 port 37391 ssh2
Sep  3 10:02:43 sip sshd[3832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.49.132.142
Sep  3 10:02:45 sip sshd[3832]: Failed password for invalid user admin from 116.49.132.142 port 34174 ssh2
2020-09-03 22:16:36
attack
SSH_attack
2020-09-03 06:10:37
相同子网IP讨论:
IP 类型 评论内容 时间
116.49.132.113 attackbotsspam
Port probing on unauthorized port 5555
2020-03-04 02:12:34
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.49.132.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44820
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.49.132.142.			IN	A

;; AUTHORITY SECTION:
.			327	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020090202 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 03 06:10:34 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
142.132.49.116.in-addr.arpa domain name pointer n11649132142.netvigator.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.132.49.116.in-addr.arpa	name = n11649132142.netvigator.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
46.148.205.2 attackspam
IP blocked
2020-01-03 13:25:45
193.112.219.228 attackspambots
Jan  3 00:54:07 legacy sshd[13528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.219.228
Jan  3 00:54:09 legacy sshd[13528]: Failed password for invalid user password from 193.112.219.228 port 52800 ssh2
Jan  3 00:55:46 legacy sshd[13577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.219.228
...
2020-01-03 09:29:48
104.244.72.98 attack
Bruteforce on SSH Honeypot
2020-01-03 13:20:07
222.186.30.187 attackspambots
Jan  3 05:03:02 localhost sshd\[107176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.187  user=root
Jan  3 05:03:04 localhost sshd\[107176\]: Failed password for root from 222.186.30.187 port 58285 ssh2
Jan  3 05:03:06 localhost sshd\[107176\]: Failed password for root from 222.186.30.187 port 58285 ssh2
Jan  3 05:03:09 localhost sshd\[107176\]: Failed password for root from 222.186.30.187 port 58285 ssh2
Jan  3 05:14:06 localhost sshd\[107527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.187  user=root
...
2020-01-03 13:18:32
180.96.28.87 attack
2020-01-03T00:31:53.102837shield sshd\[31246\]: Invalid user ubuntu from 180.96.28.87 port 53946
2020-01-03T00:31:53.107483shield sshd\[31246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.96.28.87
2020-01-03T00:31:55.134505shield sshd\[31246\]: Failed password for invalid user ubuntu from 180.96.28.87 port 53946 ssh2
2020-01-03T00:36:01.174201shield sshd\[331\]: Invalid user mc3 from 180.96.28.87 port 26017
2020-01-03T00:36:01.178314shield sshd\[331\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.96.28.87
2020-01-03 09:22:47
171.97.83.34 attackspambots
Automatic report - Port Scan Attack
2020-01-03 13:25:18
86.57.217.241 attackbots
Jan  3 06:15:19 localhost sshd\[10351\]: Invalid user fuck from 86.57.217.241 port 45588
Jan  3 06:15:19 localhost sshd\[10351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.57.217.241
Jan  3 06:15:20 localhost sshd\[10351\]: Failed password for invalid user fuck from 86.57.217.241 port 45588 ssh2
2020-01-03 13:16:46
159.65.84.164 attackbots
Jan  2 23:52:54 server sshd[50890]: User postgres from 159.65.84.164 not allowed because not listed in AllowUsers
Jan  2 23:52:56 server sshd[50890]: Failed password for invalid user postgres from 159.65.84.164 port 55284 ssh2
Jan  3 00:05:11 server sshd[53455]: Failed password for invalid user ubuntu from 159.65.84.164 port 47986 ssh2
2020-01-03 09:20:49
49.235.35.12 attackspambots
Brute-force attempt banned
2020-01-03 13:26:15
51.91.212.79 attack
Port scan: Attack repeated for 24 hours
2020-01-03 09:22:04
222.186.175.167 attackbotsspam
Jan  3 06:19:32 host sshd[32240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167  user=root
Jan  3 06:19:34 host sshd[32240]: Failed password for root from 222.186.175.167 port 24590 ssh2
...
2020-01-03 13:22:12
192.168.1.3 attackbotsspam
There is a pub g player constantly making new profiles and hacking the game.
2020-01-03 09:24:01
42.159.132.238 attackspam
Jan  3 05:54:55 pornomens sshd\[28292\]: Invalid user cth from 42.159.132.238 port 51958
Jan  3 05:54:55 pornomens sshd\[28292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.132.238
Jan  3 05:54:58 pornomens sshd\[28292\]: Failed password for invalid user cth from 42.159.132.238 port 51958 ssh2
...
2020-01-03 13:13:10
5.196.217.176 attackbots
Jan  3 02:13:03 relay postfix/smtpd\[20505\]: warning: unknown\[5.196.217.176\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jan  3 02:17:03 relay postfix/smtpd\[20583\]: warning: unknown\[5.196.217.176\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jan  3 02:21:04 relay postfix/smtpd\[27847\]: warning: unknown\[5.196.217.176\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jan  3 02:25:04 relay postfix/smtpd\[31827\]: warning: unknown\[5.196.217.176\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jan  3 02:29:03 relay postfix/smtpd\[31872\]: warning: unknown\[5.196.217.176\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-01-03 09:32:58
111.40.160.218 attack
Jan  3 04:51:22 zeus sshd[11247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.40.160.218 
Jan  3 04:51:24 zeus sshd[11247]: Failed password for invalid user xxx from 111.40.160.218 port 40643 ssh2
Jan  3 04:55:15 zeus sshd[11355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.40.160.218 
Jan  3 04:55:17 zeus sshd[11355]: Failed password for invalid user urser from 111.40.160.218 port 51920 ssh2
2020-01-03 13:01:17

最近上报的IP列表

96.191.147.18 55.103.66.222 104.115.29.177 140.153.36.57
110.117.98.169 85.228.105.207 159.228.207.250 74.83.217.112
219.77.75.78 185.82.254.203 92.217.10.36 121.180.155.107
119.195.206.96 213.144.161.4 220.238.100.5 72.10.76.8
152.88.116.241 168.41.199.99 176.42.152.166 112.119.33.185