必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Jiangsu Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Aug 13 20:12:20 server658 sshd[1200]: reveeclipse mapping checking getaddrinfo for 19.139.86.117.broad.nt.js.dynamic.163data.com.cn [117.86.139.19] failed - POSSIBLE BREAK-IN ATTEMPT!
Aug 13 20:12:20 server658 sshd[1200]: Invalid user usuario from 117.86.139.19
Aug 13 20:12:20 server658 sshd[1200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.86.139.19


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.86.139.19
2019-08-14 05:45:56
相同子网IP讨论:
IP 类型 评论内容 时间
117.86.139.235 attackbots
[portscan] Port scan
2020-04-25 13:35:09
117.86.139.9 attackbots
[portscan] Port scan
2020-02-09 14:37:46
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.86.139.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54656
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.86.139.19.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081301 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Aug 14 05:45:51 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
19.139.86.117.in-addr.arpa domain name pointer 19.139.86.117.broad.nt.js.dynamic.163data.com.cn.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
19.139.86.117.in-addr.arpa	name = 19.139.86.117.broad.nt.js.dynamic.163data.com.cn.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
112.96.169.200 attack
Triggered by Fail2Ban at Ares web server
2020-05-26 09:52:45
94.102.52.44 attack
May 26 04:04:28 ns3042688 courier-pop3d: LOGIN FAILED, user=postmaster@sikla-shop.eu, ip=\[::ffff:94.102.52.44\]
...
2020-05-26 10:11:53
35.239.78.81 attackspambots
$f2bV_matches
2020-05-26 09:53:45
51.77.212.179 attackbotsspam
May 26 01:17:59 ns382633 sshd\[18128\]: Invalid user susan from 51.77.212.179 port 37149
May 26 01:17:59 ns382633 sshd\[18128\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.212.179
May 26 01:18:02 ns382633 sshd\[18128\]: Failed password for invalid user susan from 51.77.212.179 port 37149 ssh2
May 26 01:26:46 ns382633 sshd\[19931\]: Invalid user karolina from 51.77.212.179 port 37680
May 26 01:26:46 ns382633 sshd\[19931\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.212.179
2020-05-26 09:44:54
36.77.57.83 attack
Automatic report - Port Scan Attack
2020-05-26 09:47:27
192.241.211.215 attack
May 26 03:12:18 home sshd[32734]: Failed password for root from 192.241.211.215 port 59238 ssh2
May 26 03:19:15 home sshd[865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.211.215
May 26 03:19:17 home sshd[865]: Failed password for invalid user rex from 192.241.211.215 port 33033 ssh2
...
2020-05-26 10:10:20
157.245.34.72 attackspam
pixelfritteuse.de 157.245.34.72 [26/May/2020:01:25:58 +0200] "POST /wp-login.php HTTP/1.1" 200 5983 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
pixelfritteuse.de 157.245.34.72 [26/May/2020:01:25:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4087 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-05-26 10:20:56
36.133.84.2 attack
May 21 03:10:46 localhost sshd[2272705]: Invalid user xwf from 36.133.84.2 port 36990
May 21 03:10:46 localhost sshd[2272705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.84.2 
May 21 03:10:46 localhost sshd[2272705]: Invalid user xwf from 36.133.84.2 port 36990
May 21 03:10:47 localhost sshd[2272705]: Failed password for invalid user xwf from 36.133.84.2 port 36990 ssh2
May 21 03:33:04 localhost sshd[2277342]: Invalid user qu from 36.133.84.2 port 44768
May 21 03:33:04 localhost sshd[2277342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.84.2 
May 21 03:33:04 localhost sshd[2277342]: Invalid user qu from 36.133.84.2 port 44768
May 21 03:33:06 localhost sshd[2277342]: Failed password for invalid user qu from 36.133.84.2 port 44768 ssh2
May 21 03:36:59 localhost sshd[2278400]: Invalid user pfe from 36.133.84.2 port 54978


........
-----------------------------------------------
https://www.blocklist.de/en/view
2020-05-26 09:45:17
45.178.22.174 attack
$f2bV_matches
2020-05-26 10:10:00
106.13.176.163 attackbots
2020-05-26T02:24:00.666894 sshd[21933]: Failed password for root from 106.13.176.163 port 58644 ssh2
2020-05-26T02:25:14.023390 sshd[22005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.176.163  user=root
2020-05-26T02:25:15.243566 sshd[22005]: Failed password for root from 106.13.176.163 port 47008 ssh2
2020-05-26T02:26:27.077052 sshd[22063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.176.163  user=root
2020-05-26T02:26:29.120510 sshd[22063]: Failed password for root from 106.13.176.163 port 35372 ssh2
...
2020-05-26 09:58:46
159.65.11.253 attackspam
Too many connections or unauthorized access detected from Arctic banned ip
2020-05-26 10:07:18
153.101.29.178 attackspam
2020-05-26T07:42:06.495672billing sshd[29950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.101.29.178  user=root
2020-05-26T07:42:08.332590billing sshd[29950]: Failed password for root from 153.101.29.178 port 47638 ssh2
2020-05-26T07:45:02.901654billing sshd[4108]: Invalid user manny from 153.101.29.178 port 57702
...
2020-05-26 09:46:04
77.42.88.12 attackspambots
port scan and connect, tcp 23 (telnet)
2020-05-26 10:06:35
222.186.173.142 attack
May 25 22:00:56 NPSTNNYC01T sshd[7877]: Failed password for root from 222.186.173.142 port 56992 ssh2
May 25 22:01:04 NPSTNNYC01T sshd[7877]: Failed password for root from 222.186.173.142 port 56992 ssh2
May 25 22:01:07 NPSTNNYC01T sshd[7877]: Failed password for root from 222.186.173.142 port 56992 ssh2
May 25 22:01:07 NPSTNNYC01T sshd[7877]: error: maximum authentication attempts exceeded for root from 222.186.173.142 port 56992 ssh2 [preauth]
...
2020-05-26 10:12:45
222.186.30.167 attack
May 25 21:03:51 debian sshd[21960]: Unable to negotiate with 222.186.30.167 port 29876: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
May 25 22:01:47 debian sshd[24705]: Unable to negotiate with 222.186.30.167 port 52819: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
...
2020-05-26 10:04:20

最近上报的IP列表

45.82.35.226 43.226.39.221 152.62.60.203 201.255.138.109
14.43.64.13 38.218.191.79 211.46.223.240 79.111.148.253
3.119.201.55 60.250.221.50 135.79.120.10 106.12.207.88
220.78.169.80 205.140.115.47 148.70.254.55 86.89.228.170
68.11.217.63 2.137.160.103 13.55.142.180 218.93.33.52