必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): Guangdong

国家(country): China

运营商(isp): ChinaNet Guangdong Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspambots
3389BruteforceFW21
2019-11-10 08:41:21
相同子网IP讨论:
IP 类型 评论内容 时间
119.139.196.35 attack
Unauthorized connection attempt from IP address 119.139.196.35 on Port 445(SMB)
2020-08-09 20:46:39
119.139.196.20 attackbotsspam
May 12 22:34:33 h2040555 sshd[10425]: Invalid user buster from 119.139.196.20
May 12 22:34:33 h2040555 sshd[10425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.139.196.20 
May 12 22:34:35 h2040555 sshd[10425]: Failed password for invalid user buster from 119.139.196.20 port 46180 ssh2
May 12 22:34:35 h2040555 sshd[10425]: Received disconnect from 119.139.196.20: 11: Bye Bye [preauth]
May 12 22:45:09 h2040555 sshd[10583]: Invalid user fj from 119.139.196.20
May 12 22:45:09 h2040555 sshd[10583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.139.196.20 
May 12 22:45:11 h2040555 sshd[10583]: Failed password for invalid user fj from 119.139.196.20 port 38991 ssh2
May 12 22:45:11 h2040555 sshd[10583]: Received disconnect from 119.139.196.20: 11: Bye Bye [preauth]
May 12 22:50:18 h2040555 sshd[10594]: Invalid user ftpuser from 119.139.196.20
May 12 22:50:18 h2040555 sshd[10594]: pam_u........
-------------------------------
2020-05-14 07:32:25
119.139.196.143 attackbots
Lines containing failures of 119.139.196.143
Apr 15 14:05:09 shared11 sshd[5506]: Invalid user support from 119.139.196.143 port 49208
Apr 15 14:05:09 shared11 sshd[5506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.139.196.143
Apr 15 14:05:11 shared11 sshd[5506]: Failed password for invalid user support from 119.139.196.143 port 49208 ssh2
Apr 15 14:05:12 shared11 sshd[5506]: Received disconnect from 119.139.196.143 port 49208:11: Bye Bye [preauth]
Apr 15 14:05:12 shared11 sshd[5506]: Disconnected from invalid user support 119.139.196.143 port 49208 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=119.139.196.143
2020-04-16 03:15:42
119.139.196.79 attack
Apr  9 06:12:14 mailserver sshd\[5934\]: Invalid user panshan from 119.139.196.79
...
2020-04-09 20:15:40
119.139.196.99 attackspambots
Unauthorized connection attempt detected from IP address 119.139.196.99 to port 1433 [J]
2020-01-15 23:56:11
119.139.196.163 attackbotsspam
Unauthorized connection attempt from IP address 119.139.196.163 on Port 445(SMB)
2020-01-14 04:14:30
119.139.196.148 attackbotsspam
Fail2Ban Ban Triggered (2)
2020-01-13 15:02:41
119.139.196.67 attackbotsspam
Unauthorized connection attempt detected from IP address 119.139.196.67 to port 445
2020-01-02 19:19:16
119.139.196.223 attackbots
Aug 18 14:15:56 h2034429 sshd[9200]: Invalid user bess from 119.139.196.223
Aug 18 14:15:56 h2034429 sshd[9200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.139.196.223
Aug 18 14:15:58 h2034429 sshd[9200]: Failed password for invalid user bess from 119.139.196.223 port 38154 ssh2
Aug 18 14:15:58 h2034429 sshd[9200]: Received disconnect from 119.139.196.223 port 38154:11: Bye Bye [preauth]
Aug 18 14:15:58 h2034429 sshd[9200]: Disconnected from 119.139.196.223 port 38154 [preauth]
Aug 18 14:47:36 h2034429 sshd[9654]: Invalid user tzhang from 119.139.196.223
Aug 18 14:47:36 h2034429 sshd[9654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.139.196.223
Aug 18 14:47:38 h2034429 sshd[9654]: Failed password for invalid user tzhang from 119.139.196.223 port 33836 ssh2
Aug 18 14:47:38 h2034429 sshd[9654]: Received disconnect from 119.139.196.223 port 33836:11: Bye Bye [preauth]
Aug 18 1........
-------------------------------
2019-08-19 03:05:47
119.139.196.108 attack
Aug 14 19:53:58 vps647732 sshd[32675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.139.196.108
Aug 14 19:54:00 vps647732 sshd[32675]: Failed password for invalid user ricky from 119.139.196.108 port 39906 ssh2
...
2019-08-15 05:51:22
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.139.196.69
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62266
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;119.139.196.69.			IN	A

;; AUTHORITY SECTION:
.			263	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110901 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 10 08:41:17 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 69.196.139.119.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 69.196.139.119.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
202.77.105.50 attackbots
Port Scan
...
2020-10-08 20:26:33
218.92.0.145 attack
Oct  8 14:27:11 santamaria sshd\[28648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145  user=root
Oct  8 14:27:13 santamaria sshd\[28648\]: Failed password for root from 218.92.0.145 port 62702 ssh2
Oct  8 14:27:35 santamaria sshd\[28650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145  user=root
...
2020-10-08 20:44:14
104.248.141.235 attack
CMS (WordPress or Joomla) login attempt.
2020-10-08 20:14:25
116.100.7.212 attack
Unauthorized connection attempt detected from IP address 116.100.7.212 to port 23 [T]
2020-10-08 20:34:06
123.120.24.69 attackspam
Oct  8 10:08:01 *** sshd[32432]: User root from 123.120.24.69 not allowed because not listed in AllowUsers
2020-10-08 20:26:45
103.131.71.101 attackspambots
(mod_security) mod_security (id:210730) triggered by 103.131.71.101 (VN/Vietnam/bot-103-131-71-101.coccoc.com): 5 in the last 3600 secs
2020-10-08 20:40:47
107.173.248.119 attack
Attempt to register Bot detected /wp-login.php
2020-10-08 20:31:01
5.62.20.36 attack
(From mccloughry.belen@outlook.com) Are You interested in advertising that charges less than $49 every month and sends thousands of people who are ready to buy directly to your website? For details visit: http://www.buy-website-traffic.xyz
2020-10-08 20:23:05
218.92.0.249 attack
[MK-VM5] SSH login failed
2020-10-08 20:33:06
40.107.132.77 attackbots
phish
2020-10-08 20:14:06
167.250.127.235 attackbotsspam
(sshd) Failed SSH login from 167.250.127.235 (BR/Brazil/235.127.250.167.internetlive.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  8 01:48:48 server sshd[23451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.250.127.235  user=root
Oct  8 01:48:49 server sshd[23451]: Failed password for root from 167.250.127.235 port 52867 ssh2
Oct  8 01:57:21 server sshd[25627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.250.127.235  user=root
Oct  8 01:57:23 server sshd[25627]: Failed password for root from 167.250.127.235 port 60799 ssh2
Oct  8 02:00:44 server sshd[26572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.250.127.235  user=root
2020-10-08 20:37:13
129.226.170.141 attackbotsspam
2020-10-08T07:28:25.7053901495-001 sshd[57900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.170.141  user=root
2020-10-08T07:28:27.6085981495-001 sshd[57900]: Failed password for root from 129.226.170.141 port 43460 ssh2
2020-10-08T07:31:55.8372351495-001 sshd[58089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.170.141  user=root
2020-10-08T07:31:57.5699431495-001 sshd[58089]: Failed password for root from 129.226.170.141 port 43474 ssh2
2020-10-08T07:35:23.3685041495-001 sshd[58264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.170.141  user=root
2020-10-08T07:35:25.6578521495-001 sshd[58264]: Failed password for root from 129.226.170.141 port 43488 ssh2
...
2020-10-08 20:21:17
195.154.105.228 attackspam
Oct  8 01:22:30 pixelmemory sshd[3897021]: Failed password for root from 195.154.105.228 port 59952 ssh2
Oct  8 01:30:31 pixelmemory sshd[3907467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.105.228  user=root
Oct  8 01:30:33 pixelmemory sshd[3907467]: Failed password for root from 195.154.105.228 port 40212 ssh2
Oct  8 01:38:14 pixelmemory sshd[3917548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.105.228  user=root
Oct  8 01:38:16 pixelmemory sshd[3917548]: Failed password for root from 195.154.105.228 port 48710 ssh2
...
2020-10-08 20:22:19
218.92.0.247 attackbotsspam
Oct  8 08:44:46 NPSTNNYC01T sshd[22609]: Failed password for root from 218.92.0.247 port 55439 ssh2
Oct  8 08:44:50 NPSTNNYC01T sshd[22609]: Failed password for root from 218.92.0.247 port 55439 ssh2
Oct  8 08:44:54 NPSTNNYC01T sshd[22609]: Failed password for root from 218.92.0.247 port 55439 ssh2
Oct  8 08:44:57 NPSTNNYC01T sshd[22609]: Failed password for root from 218.92.0.247 port 55439 ssh2
...
2020-10-08 20:48:38
14.215.113.59 attack
Lines containing failures of 14.215.113.59
Oct  4 23:41:21 shared02 sshd[16931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.215.113.59  user=r.r
Oct  4 23:41:23 shared02 sshd[16931]: Failed password for r.r from 14.215.113.59 port 55560 ssh2
Oct  4 23:41:23 shared02 sshd[16931]: Received disconnect from 14.215.113.59 port 55560:11: Bye Bye [preauth]
Oct  4 23:41:23 shared02 sshd[16931]: Disconnected from authenticating user r.r 14.215.113.59 port 55560 [preauth]
Oct  4 23:58:24 shared02 sshd[22841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.215.113.59  user=r.r
Oct  4 23:58:26 shared02 sshd[22841]: Failed password for r.r from 14.215.113.59 port 37176 ssh2
Oct  4 23:58:26 shared02 sshd[22841]: Received disconnect from 14.215.113.59 port 37176:11: Bye Bye [preauth]
Oct  4 23:58:26 shared02 sshd[22841]: Disconnected from authenticating user r.r 14.215.113.59 port 37176 [preauth........
------------------------------
2020-10-08 20:25:35

最近上报的IP列表

159.89.139.41 107.161.91.56 46.123.243.11 42.61.60.78
179.6.197.218 115.236.162.162 119.2.50.170 113.111.53.204
213.87.224.40 35.233.26.59 46.161.70.131 82.58.120.27
103.215.218.19 90.84.45.38 60.168.86.224 113.25.163.155
82.81.234.195 50.116.99.88 165.231.248.92 71.29.180.92