必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Science & Technology Network

主机名(hostname): unknown

机构(organization): Computer Network Information Center

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackspambots
Sep  4 08:08:47 localhost sshd\[30962\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.145  user=root
Sep  4 08:08:49 localhost sshd\[30962\]: Failed password for root from 124.16.139.145 port 49266 ssh2
Sep  4 08:13:02 localhost sshd\[31501\]: Invalid user oracle from 124.16.139.145 port 56322
2019-09-04 16:48:19
attackbotsspam
Aug 26 15:33:03 ubuntu-2gb-nbg1-dc3-1 sshd[19657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.145
Aug 26 15:33:05 ubuntu-2gb-nbg1-dc3-1 sshd[19657]: Failed password for invalid user tads from 124.16.139.145 port 55422 ssh2
...
2019-08-27 04:11:19
attack
2019-08-15T11:53:10.477964abusebot-6.cloudsearch.cf sshd\[30280\]: Invalid user tam from 124.16.139.145 port 41650
2019-08-16 04:20:29
相同子网IP讨论:
IP 类型 评论内容 时间
124.16.139.244 attack
Dec 22 18:15:50 OPSO sshd\[10200\]: Invalid user mcserver from 124.16.139.244 port 37514
Dec 22 18:15:50 OPSO sshd\[10200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.244
Dec 22 18:15:52 OPSO sshd\[10200\]: Failed password for invalid user mcserver from 124.16.139.244 port 37514 ssh2
Dec 22 18:21:57 OPSO sshd\[11510\]: Invalid user hung from 124.16.139.244 port 38977
Dec 22 18:21:57 OPSO sshd\[11510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.244
2019-12-23 01:31:40
124.16.139.244 attack
Dec 21 07:29:53 MK-Soft-VM5 sshd[24720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.244 
Dec 21 07:29:55 MK-Soft-VM5 sshd[24720]: Failed password for invalid user nt from 124.16.139.244 port 45923 ssh2
...
2019-12-21 15:17:20
124.16.139.243 attackspambots
Dec 19 01:38:20 sd-53420 sshd\[17252\]: Invalid user guest from 124.16.139.243
Dec 19 01:38:20 sd-53420 sshd\[17252\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.243
Dec 19 01:38:22 sd-53420 sshd\[17252\]: Failed password for invalid user guest from 124.16.139.243 port 50298 ssh2
Dec 19 01:45:35 sd-53420 sshd\[19864\]: Invalid user home from 124.16.139.243
Dec 19 01:45:35 sd-53420 sshd\[19864\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.243
...
2019-12-19 09:00:33
124.16.139.244 attack
Dec 18 15:36:12 MK-Soft-VM6 sshd[831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.244 
Dec 18 15:36:14 MK-Soft-VM6 sshd[831]: Failed password for invalid user giter from 124.16.139.244 port 45181 ssh2
...
2019-12-19 00:31:59
124.16.139.243 attackspam
Dec 17 12:33:10 sachi sshd\[6929\]: Invalid user mostofi from 124.16.139.243
Dec 17 12:33:10 sachi sshd\[6929\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.243
Dec 17 12:33:12 sachi sshd\[6929\]: Failed password for invalid user mostofi from 124.16.139.243 port 40312 ssh2
Dec 17 12:39:38 sachi sshd\[7615\]: Invalid user cristal from 124.16.139.243
Dec 17 12:39:38 sachi sshd\[7615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.243
2019-12-18 06:53:51
124.16.139.243 attack
Dec 14 01:01:18 herz-der-gamer sshd[1307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.243  user=mysql
Dec 14 01:01:20 herz-der-gamer sshd[1307]: Failed password for mysql from 124.16.139.243 port 59428 ssh2
Dec 14 01:11:16 herz-der-gamer sshd[1491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.243  user=root
Dec 14 01:11:18 herz-der-gamer sshd[1491]: Failed password for root from 124.16.139.243 port 37106 ssh2
...
2019-12-14 09:06:24
124.16.139.244 attackspambots
$f2bV_matches
2019-12-12 06:22:05
124.16.139.243 attackspam
Invalid user wwwadmin from 124.16.139.243 port 39642
2019-12-11 22:44:29
124.16.139.243 attackbots
Dec  9 01:32:25 linuxvps sshd\[2942\]: Invalid user home from 124.16.139.243
Dec  9 01:32:25 linuxvps sshd\[2942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.243
Dec  9 01:32:28 linuxvps sshd\[2942\]: Failed password for invalid user home from 124.16.139.243 port 48282 ssh2
Dec  9 01:39:08 linuxvps sshd\[7427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.243  user=root
Dec  9 01:39:10 linuxvps sshd\[7427\]: Failed password for root from 124.16.139.243 port 42286 ssh2
2019-12-09 14:47:01
124.16.139.243 attackbotsspam
$f2bV_matches
2019-12-05 15:37:30
124.16.139.243 attack
Dec  5 00:55:14 plusreed sshd[7116]: Invalid user vvvvvvvv from 124.16.139.243
...
2019-12-05 13:59:02
124.16.139.243 attack
Automatic report - Banned IP Access
2019-11-05 19:36:42
124.16.139.243 attackspambots
Invalid user mongodb from 124.16.139.243 port 44377
2019-10-31 21:58:39
124.16.139.243 attack
Oct 29 15:03:02 server sshd\[18893\]: User root from 124.16.139.243 not allowed because listed in DenyUsers
Oct 29 15:03:02 server sshd\[18893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.243  user=root
Oct 29 15:03:04 server sshd\[18893\]: Failed password for invalid user root from 124.16.139.243 port 54674 ssh2
Oct 29 15:08:01 server sshd\[1226\]: User root from 124.16.139.243 not allowed because listed in DenyUsers
Oct 29 15:08:01 server sshd\[1226\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.243  user=root
2019-10-30 03:43:32
124.16.139.243 attackspam
2019-10-24T08:40:09.212488scmdmz1 sshd\[12977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.243  user=root
2019-10-24T08:40:10.688956scmdmz1 sshd\[12977\]: Failed password for root from 124.16.139.243 port 57888 ssh2
2019-10-24T08:44:30.849142scmdmz1 sshd\[13293\]: Invalid user lucasb from 124.16.139.243 port 47370
...
2019-10-24 14:48:21
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.16.139.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31130
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.16.139.145.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081502 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 16 04:20:22 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 145.139.16.124.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 145.139.16.124.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
104.244.78.63 attackspam
Jun 23 21:33:55 **** sshd[20617]: Did not receive identification string from 104.244.78.63 port 47332
2019-06-24 06:08:29
144.217.166.59 attackbotsspam
Jun 23 22:07:39 cvbmail sshd\[18822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.166.59  user=root
Jun 23 22:07:41 cvbmail sshd\[18822\]: Failed password for root from 144.217.166.59 port 59420 ssh2
Jun 23 22:07:49 cvbmail sshd\[18822\]: Failed password for root from 144.217.166.59 port 59420 ssh2
2019-06-24 06:05:13
77.75.77.95 attack
NAME : SEZNAM-CZ CIDR : 77.75.77.0/24 | STATUS : 200 ROBOT {Looking for resource vulnerabilities} DDoS Attack Czech Republic - block certain countries :) IP: 77.75.77.95  Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery https://help-dysk.pl
2019-06-24 05:54:14
207.180.206.65 attackbots
Lines containing failures of 207.180.206.65
Jun 23 20:17:21 siirappi sshd[21531]: Did not receive identification string from 207.180.206.65 port 39624
Jun 23 20:19:16 siirappi sshd[21534]: Invalid user ts3 from 207.180.206.65 port 54008
Jun 23 20:19:16 siirappi sshd[21534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.180.206.65
Jun 23 20:19:19 siirappi sshd[21534]: Failed password for invalid user ts3 from 207.180.206.65 port 54008 ssh2
Jun 23 20:19:19 siirappi sshd[21534]: Received disconnect from 207.180.206.65 port 54008:11: Normal Shutdown, Thank you for playing [preauth]
Jun 23 20:19:19 siirappi sshd[21534]: Disconnected from 207.180.206.65 port 54008 [preauth]
Jun 23 20:19:28 siirappi sshd[21536]: Invalid user ts3 from 207.180.206.65 port 52950
Jun 23 20:19:28 siirappi sshd[21536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.180.206.65


........
-----------------------------------------------
https://www.blo
2019-06-24 06:03:30
31.220.13.3 attack
Jun 23 20:13:36   TCP Attack: SRC=31.220.13.3 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=70  DF PROTO=TCP SPT=58232 DPT=993 WINDOW=29200 RES=0x00 SYN URGP=0
2019-06-24 06:01:04
106.13.70.29 attackspam
Jun 23 22:07:13 ncomp sshd[20169]: Invalid user jboss from 106.13.70.29
Jun 23 22:07:13 ncomp sshd[20169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.29
Jun 23 22:07:13 ncomp sshd[20169]: Invalid user jboss from 106.13.70.29
Jun 23 22:07:15 ncomp sshd[20169]: Failed password for invalid user jboss from 106.13.70.29 port 39184 ssh2
2019-06-24 06:18:02
185.154.128.50 attackspambots
Unauthorized connection attempt from IP address 185.154.128.50 on Port 445(SMB)
2019-06-24 05:45:16
171.61.40.176 attackbotsspam
2019-06-23 21:42:35 H=(ebyfoow.com) [171.61.40.176]:1034 I=[10.100.18.25]:25 sender verify fail for : Unrouteable address
2019-06-23 x@x
2019-06-23 21:42:36 unexpected disconnection while reading SMTP command from (ebyfoow.com) [171.61.40.176]:1034 I=[10.100.18.25]:25


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=171.61.40.176
2019-06-24 06:15:03
201.72.179.51 attackspambots
Jun 23 23:50:57 vmd17057 sshd\[19619\]: Invalid user sudo from 201.72.179.51 port 53464
Jun 23 23:50:57 vmd17057 sshd\[19619\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.72.179.51
Jun 23 23:50:58 vmd17057 sshd\[19619\]: Failed password for invalid user sudo from 201.72.179.51 port 53464 ssh2
...
2019-06-24 05:56:40
58.242.83.39 attackspambots
Jun 24 03:25:47 tanzim-HP-Z238-Microtower-Workstation sshd\[26907\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.39  user=root
Jun 24 03:25:49 tanzim-HP-Z238-Microtower-Workstation sshd\[26907\]: Failed password for root from 58.242.83.39 port 44128 ssh2
Jun 24 03:27:15 tanzim-HP-Z238-Microtower-Workstation sshd\[27180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.39  user=root
...
2019-06-24 06:20:23
91.229.143.178 attackspambots
Automatic report - Web App Attack
2019-06-24 06:16:17
122.114.77.204 attackbots
10 attempts against mh-pma-try-ban on lake.magehost.pro
2019-06-24 06:02:42
116.231.1.212 attack
Jun 23 18:06:33 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 116.231.1.212 port 50107 ssh2 (target: 158.69.100.145:22, password: anko)
Jun 23 18:06:33 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 116.231.1.212 port 50107 ssh2 (target: 158.69.100.145:22, password: welc0me)
Jun 23 18:06:34 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 116.231.1.212 port 50107 ssh2 (target: 158.69.100.145:22, password: waldo)
Jun 23 18:06:34 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 116.231.1.212 port 50107 ssh2 (target: 158.69.100.145:22, password: system)
Jun 23 18:06:35 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 116.231.1.212 port 50107 ssh2 (target: 158.69.100.145:22, password: Zte521)
Jun 23 18:06:35 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 116.231.1.212 port 50107 ssh2 (target: 158.69.100.145:22, password: 0000)
Jun 23 18:06:35 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 1........
------------------------------
2019-06-24 06:09:46
205.209.14.58 attackspam
Jun 23 13:38:32 rb06 sshd[22741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.209.14.58  user=mysql
Jun 23 13:38:34 rb06 sshd[22741]: Failed password for mysql from 205.209.14.58 port 57143 ssh2
Jun 23 13:38:34 rb06 sshd[22741]: Received disconnect from 205.209.14.58: 11: Bye Bye [preauth]
Jun 23 13:42:00 rb06 sshd[19022]: Failed password for invalid user appldev from 205.209.14.58 port 47021 ssh2
Jun 23 13:42:01 rb06 sshd[19022]: Received disconnect from 205.209.14.58: 11: Bye Bye [preauth]
Jun 23 13:43:20 rb06 sshd[22843]: Failed password for invalid user admin from 205.209.14.58 port 54150 ssh2
Jun 23 13:43:20 rb06 sshd[22843]: Received disconnect from 205.209.14.58: 11: Bye Bye [preauth]
Jun 23 13:44:33 rb06 sshd[26728]: Failed password for invalid user pms from 205.209.14.58 port 33047 ssh2
Jun 23 13:44:33 rb06 sshd[26728]: Received disconnect from 205.209.14.58: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.bl
2019-06-24 05:58:34
195.142.115.111 attackspambots
port scan and connect, tcp 5984 (couchdb)
2019-06-24 05:41:44

最近上报的IP列表

121.126.72.27 5.182.210.47 200.253.27.109 191.101.199.47
136.217.106.31 104.30.165.73 206.58.69.56 62.234.95.55
36.236.15.33 97.45.163.85 31.124.253.141 53.133.6.194
189.104.43.28 32.56.34.162 191.162.235.241 180.214.34.25
213.131.57.68 89.135.75.249 78.197.178.148 185.63.199.154