必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Mobile Communications Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspambots
"SSH brute force auth login attempt."
2020-01-23 18:11:16
attack
Unauthorized connection attempt detected from IP address 117.139.166.203 to port 2220 [J]
2020-01-18 23:38:03
attack
Unauthorized connection attempt detected from IP address 117.139.166.203 to port 2220 [J]
2020-01-18 03:03:31
attackspam
Dec 22 11:53:47 * sshd[21663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203
Dec 22 11:53:49 * sshd[21663]: Failed password for invalid user 123 from 117.139.166.203 port 14582 ssh2
2019-12-22 21:11:19
attackspam
Dec  7 18:23:44 linuxvps sshd\[30087\]: Invalid user boxuser from 117.139.166.203
Dec  7 18:23:44 linuxvps sshd\[30087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203
Dec  7 18:23:47 linuxvps sshd\[30087\]: Failed password for invalid user boxuser from 117.139.166.203 port 21076 ssh2
Dec  7 18:30:49 linuxvps sshd\[34121\]: Invalid user wwwid from 117.139.166.203
Dec  7 18:30:49 linuxvps sshd\[34121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203
2019-12-08 07:54:28
attackbots
2019-10-16T11:58:59.197453shield sshd\[16679\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203  user=root
2019-10-16T11:59:00.836490shield sshd\[16679\]: Failed password for root from 117.139.166.203 port 22926 ssh2
2019-10-16T12:03:48.022960shield sshd\[17299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203  user=root
2019-10-16T12:03:50.198985shield sshd\[17299\]: Failed password for root from 117.139.166.203 port 26286 ssh2
2019-10-16T12:08:43.359927shield sshd\[17600\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203  user=root
2019-10-16 22:35:44
attack
Oct  7 14:40:31 root sshd[25180]: Failed password for root from 117.139.166.203 port 61247 ssh2
Oct  7 14:45:22 root sshd[25263]: Failed password for root from 117.139.166.203 port 63504 ssh2
...
2019-10-08 03:28:38
attack
Sep 22 10:17:37 saschabauer sshd[29603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203
Sep 22 10:17:39 saschabauer sshd[29603]: Failed password for invalid user anni from 117.139.166.203 port 45357 ssh2
2019-09-22 16:42:24
attackspam
Sep 19 17:11:50 areeb-Workstation sshd[3123]: Failed password for root from 117.139.166.203 port 27526 ssh2
Sep 19 17:18:15 areeb-Workstation sshd[6358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203
...
2019-09-19 19:56:38
attackspam
Sep 18 00:10:07 areeb-Workstation sshd[10161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203
Sep 18 00:10:09 areeb-Workstation sshd[10161]: Failed password for invalid user hha from 117.139.166.203 port 59332 ssh2
...
2019-09-18 02:43:36
attack
Aug 18 21:55:55 dedicated sshd[11613]: Invalid user ftpuser1 from 117.139.166.203 port 62839
2019-08-19 04:07:53
attackspam
Aug  3 18:17:08 MK-Soft-Root2 sshd\[13895\]: Invalid user lwen from 117.139.166.203 port 40460
Aug  3 18:17:08 MK-Soft-Root2 sshd\[13895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203
Aug  3 18:17:10 MK-Soft-Root2 sshd\[13895\]: Failed password for invalid user lwen from 117.139.166.203 port 40460 ssh2
...
2019-08-04 01:53:38
attack
Jul 26 23:52:55 ks10 sshd[18484]: Failed password for root from 117.139.166.203 port 52627 ssh2
...
2019-07-27 08:56:53
attackspambots
Jul 17 20:03:27 dedicated sshd[22428]: Invalid user chu from 117.139.166.203 port 28733
2019-07-18 04:29:13
attackspam
Jul 17 12:29:55 dedicated sshd[16470]: Invalid user vnc from 117.139.166.203 port 15101
2019-07-17 18:52:51
attack
20 attempts against mh-ssh on wood.magehost.pro
2019-06-23 09:18:09
相同子网IP讨论:
IP 类型 评论内容 时间
117.139.166.27 attackbots
2020-08-29T08:14:57.320093paragon sshd[684023]: Invalid user mfm from 117.139.166.27 port 15497
2020-08-29T08:14:57.322637paragon sshd[684023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27
2020-08-29T08:14:57.320093paragon sshd[684023]: Invalid user mfm from 117.139.166.27 port 15497
2020-08-29T08:14:58.840575paragon sshd[684023]: Failed password for invalid user mfm from 117.139.166.27 port 15497 ssh2
2020-08-29T08:19:09.091273paragon sshd[684431]: Invalid user vna from 117.139.166.27 port 15498
...
2020-08-29 13:36:08
117.139.166.27 attackbots
SSH authentication failure x 6 reported by Fail2Ban
...
2020-08-17 19:25:48
117.139.166.27 attackspambots
frenzy
2020-08-15 13:13:30
117.139.166.27 attackspambots
Aug 11 03:40:48 ws26vmsma01 sshd[107035]: Failed password for root from 117.139.166.27 port 12928 ssh2
...
2020-08-11 17:38:25
117.139.166.27 attackbotsspam
2020-08-01T20:20:39.721396correo.[domain] sshd[1199]: Failed password for root from 117.139.166.27 port 12972 ssh2 2020-08-01T20:25:06.660781correo.[domain] sshd[2131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27 user=root 2020-08-01T20:25:08.800741correo.[domain] sshd[2131]: Failed password for root from 117.139.166.27 port 12973 ssh2 ...
2020-08-02 06:18:28
117.139.166.27 attackbotsspam
detected by Fail2Ban
2020-07-31 21:12:27
117.139.166.27 attack
Invalid user anna from 117.139.166.27 port 10573
2020-07-18 22:00:58
117.139.166.27 attack
Jul 15 20:54:44 nas sshd[4927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27 
Jul 15 20:54:46 nas sshd[4927]: Failed password for invalid user qiuhong from 117.139.166.27 port 9949 ssh2
Jul 15 21:02:12 nas sshd[5355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27 
...
2020-07-16 03:49:27
117.139.166.27 attackbots
Jul 12 05:56:26 mout sshd[32147]: Invalid user wdk from 117.139.166.27 port 11204
Jul 12 05:56:28 mout sshd[32147]: Failed password for invalid user wdk from 117.139.166.27 port 11204 ssh2
Jul 12 05:56:28 mout sshd[32147]: Disconnected from invalid user wdk 117.139.166.27 port 11204 [preauth]
2020-07-12 12:21:30
117.139.166.27 attackspambots
Invalid user pramod from 117.139.166.27 port 9906
2020-07-11 07:19:40
117.139.166.27 attackbots
$f2bV_matches
2020-06-30 02:49:09
117.139.166.27 attackspambots
Jun 22 21:28:35 mockhub sshd[10584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27
Jun 22 21:28:37 mockhub sshd[10584]: Failed password for invalid user monitor from 117.139.166.27 port 7515 ssh2
...
2020-06-23 13:26:28
117.139.166.27 attackspam
Jun 18 00:19:47 ny01 sshd[27029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27
Jun 18 00:19:49 ny01 sshd[27029]: Failed password for invalid user ftpuser from 117.139.166.27 port 6721 ssh2
Jun 18 00:23:15 ny01 sshd[27429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27
2020-06-18 12:33:18
117.139.166.27 attackbotsspam
Invalid user varkey from 117.139.166.27 port 5960
2020-05-30 13:03:06
117.139.166.27 attack
May 28 20:36:32 server sshd[8203]: Failed password for invalid user 72 from 117.139.166.27 port 5656 ssh2
May 28 21:07:59 server sshd[32679]: Failed password for root from 117.139.166.27 port 5663 ssh2
May 28 21:11:39 server sshd[35619]: Failed password for root from 117.139.166.27 port 5664 ssh2
2020-05-29 03:25:24
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.139.166.203
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6677
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.139.166.203.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062202 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jun 23 09:18:02 CST 2019
;; MSG SIZE  rcvd: 119
HOST信息:
203.166.139.117.in-addr.arpa has no PTR record
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 203.166.139.117.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
81.133.24.24 attackbotsspam
IMAP
2020-06-26 17:28:09
180.76.163.33 attack
Invalid user mbb from 180.76.163.33 port 53948
2020-06-26 17:41:46
68.183.104.88 attack
$f2bV_matches
2020-06-26 17:35:31
46.99.178.18 attackspambots
20/6/25@23:51:16: FAIL: Alarm-Network address from=46.99.178.18
...
2020-06-26 17:21:36
41.218.201.81 attack
Somehow authenticated one of our email accounts and sent several hundred spam messages. "From: CANADIAN PHARMACY"
2020-06-26 17:27:20
89.97.218.142 attackspambots
Invalid user hmj from 89.97.218.142 port 38856
2020-06-26 17:43:33
83.8.16.2 attack
Automatic report - Port Scan Attack
2020-06-26 17:09:54
195.158.26.238 attackspambots
Port scan denied
2020-06-26 17:09:32
113.193.243.35 attackbotsspam
2020-06-26T11:12:29.061326vps773228.ovh.net sshd[25675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.193.243.35  user=root
2020-06-26T11:12:30.576143vps773228.ovh.net sshd[25675]: Failed password for root from 113.193.243.35 port 11876 ssh2
2020-06-26T11:16:08.064113vps773228.ovh.net sshd[25727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.193.243.35  user=root
2020-06-26T11:16:09.975706vps773228.ovh.net sshd[25727]: Failed password for root from 113.193.243.35 port 2950 ssh2
2020-06-26T11:19:55.690510vps773228.ovh.net sshd[25793]: Invalid user kmk from 113.193.243.35 port 58560
...
2020-06-26 17:51:36
218.92.0.249 attackspambots
Jun 26 06:47:23 firewall sshd[19394]: Failed password for root from 218.92.0.249 port 51068 ssh2
Jun 26 06:47:26 firewall sshd[19394]: Failed password for root from 218.92.0.249 port 51068 ssh2
Jun 26 06:47:29 firewall sshd[19394]: Failed password for root from 218.92.0.249 port 51068 ssh2
...
2020-06-26 17:48:14
111.204.204.72 attackspambots
Invalid user bitbucket from 111.204.204.72 port 51989
2020-06-26 17:46:16
103.145.12.176 attackbotsspam
[2020-06-26 04:59:50] NOTICE[1273] chan_sip.c: Registration from '"520" ' failed for '103.145.12.176:5242' - Wrong password
[2020-06-26 04:59:50] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-26T04:59:50.855-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="520",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.176/5242",Challenge="6d0a4eba",ReceivedChallenge="6d0a4eba",ReceivedHash="7a5b53c61589cb42d9827304e71b93ac"
[2020-06-26 04:59:50] NOTICE[1273] chan_sip.c: Registration from '"520" ' failed for '103.145.12.176:5242' - Wrong password
[2020-06-26 04:59:50] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-26T04:59:50.997-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="520",SessionID="0x7f31c01a72a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.1
...
2020-06-26 17:21:15
142.93.204.221 attack
142.93.204.221 - - [26/Jun/2020:10:15:14 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.204.221 - - [26/Jun/2020:10:15:15 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.204.221 - - [26/Jun/2020:10:15:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-26 17:33:37
188.158.226.115 attackspam
port 23
2020-06-26 17:44:47
24.124.35.132 attack
Brute forcing email accounts
2020-06-26 17:26:09

最近上报的IP列表

61.58.60.240 191.53.254.123 23.238.25.12 131.100.209.139
68.183.94.110 179.146.241.44 188.226.151.23 165.227.63.207
123.130.226.231 31.171.1.86 91.228.198.113 81.219.66.154
117.175.105.92 103.249.52.5 91.107.18.249 184.83.227.254
183.196.178.167 183.152.69.171 167.160.127.88 220.172.80.206