必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Service Center Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): University/College/School

用户上报:
类型 评论内容 时间
attackbots
2019-11-18T23:32:29.7797391240 sshd\[13781\]: Invalid user git from 124.42.99.11 port 51544
2019-11-18T23:32:29.7823481240 sshd\[13781\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.99.11
2019-11-18T23:32:31.9656991240 sshd\[13781\]: Failed password for invalid user git from 124.42.99.11 port 51544 ssh2
...
2019-11-19 06:43:29
attackspambots
Nov 16 09:09:04 pkdns2 sshd\[33936\]: Invalid user 123456 from 124.42.99.11Nov 16 09:09:06 pkdns2 sshd\[33936\]: Failed password for invalid user 123456 from 124.42.99.11 port 42458 ssh2Nov 16 09:13:50 pkdns2 sshd\[34146\]: Invalid user cloteal from 124.42.99.11Nov 16 09:13:52 pkdns2 sshd\[34146\]: Failed password for invalid user cloteal from 124.42.99.11 port 50260 ssh2Nov 16 09:18:41 pkdns2 sshd\[34366\]: Invalid user amaya123 from 124.42.99.11Nov 16 09:18:43 pkdns2 sshd\[34366\]: Failed password for invalid user amaya123 from 124.42.99.11 port 58046 ssh2
...
2019-11-16 20:27:03
attack
Nov  8 05:00:22 vtv3 sshd\[28317\]: Invalid user 0 from 124.42.99.11 port 58002
Nov  8 05:00:22 vtv3 sshd\[28317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.99.11
Nov  8 05:00:24 vtv3 sshd\[28317\]: Failed password for invalid user 0 from 124.42.99.11 port 58002 ssh2
Nov  8 05:05:00 vtv3 sshd\[30787\]: Invalid user fUWUqInet@ from 124.42.99.11 port 37312
Nov  8 05:05:00 vtv3 sshd\[30787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.99.11
Nov  8 05:18:12 vtv3 sshd\[6893\]: Invalid user Root12345! from 124.42.99.11 port 59938
Nov  8 05:18:12 vtv3 sshd\[6893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.99.11
Nov  8 05:18:14 vtv3 sshd\[6893\]: Failed password for invalid user Root12345! from 124.42.99.11 port 59938 ssh2
Nov  8 05:22:44 vtv3 sshd\[9825\]: Invalid user yaisp@520 from 124.42.99.11 port 39232
Nov  8 05:22:44 vtv3 sshd\[9825\]: pam_unix
2019-11-08 14:18:34
attack
Nov  3 20:29:08 webhost01 sshd[5260]: Failed password for root from 124.42.99.11 port 56070 ssh2
...
2019-11-03 21:57:35
attack
Nov  1 09:21:00 dev0-dcde-rnet sshd[22750]: Failed password for root from 124.42.99.11 port 40186 ssh2
Nov  1 09:26:48 dev0-dcde-rnet sshd[22757]: Failed password for root from 124.42.99.11 port 48190 ssh2
2019-11-01 19:35:31
attack
Oct 31 08:57:48 lnxmail61 sshd[22352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.99.11
Oct 31 08:57:48 lnxmail61 sshd[22352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.99.11
Oct 31 08:57:50 lnxmail61 sshd[22352]: Failed password for invalid user junior from 124.42.99.11 port 41052 ssh2
2019-10-31 16:11:19
attackspam
2019-10-18T11:49:45.617338ns525875 sshd\[23797\]: Invalid user alen from 124.42.99.11 port 43084
2019-10-18T11:49:45.623865ns525875 sshd\[23797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.99.11
2019-10-18T11:49:47.174678ns525875 sshd\[23797\]: Failed password for invalid user alen from 124.42.99.11 port 43084 ssh2
2019-10-18T11:54:25.877574ns525875 sshd\[29469\]: Invalid user admin from 124.42.99.11 port 50406
2019-10-18T11:54:25.883706ns525875 sshd\[29469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.99.11
2019-10-18T11:54:27.538683ns525875 sshd\[29469\]: Failed password for invalid user admin from 124.42.99.11 port 50406 ssh2
2019-10-18T11:59:05.739744ns525875 sshd\[2782\]: Invalid user beaver from 124.42.99.11 port 57730
2019-10-18T11:59:05.744048ns525875 sshd\[2782\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.99.11
2
...
2019-10-28 17:07:02
attackbotsspam
Oct 27 22:43:18 dedicated sshd[2609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.99.11  user=root
Oct 27 22:43:20 dedicated sshd[2609]: Failed password for root from 124.42.99.11 port 53230 ssh2
2019-10-28 06:57:40
attackspambots
Oct 24 06:51:21 server sshd\[17631\]: Invalid user admin from 124.42.99.11 port 55690
Oct 24 06:51:21 server sshd\[17631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.99.11
Oct 24 06:51:23 server sshd\[17631\]: Failed password for invalid user admin from 124.42.99.11 port 55690 ssh2
Oct 24 06:56:00 server sshd\[2323\]: Invalid user patrick from 124.42.99.11 port 34490
Oct 24 06:56:00 server sshd\[2323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.99.11
2019-10-24 12:05:00
attackspam
Oct 13 01:50:57 wbs sshd\[9156\]: Invalid user 123 from 124.42.99.11
Oct 13 01:50:57 wbs sshd\[9156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.99.11
Oct 13 01:50:59 wbs sshd\[9156\]: Failed password for invalid user 123 from 124.42.99.11 port 48412 ssh2
Oct 13 01:56:24 wbs sshd\[9599\]: Invalid user Sound2017 from 124.42.99.11
Oct 13 01:56:24 wbs sshd\[9599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.99.11
2019-10-13 20:29:31
attackspam
Oct 10 22:44:38 eventyay sshd[27582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.99.11
Oct 10 22:44:41 eventyay sshd[27582]: Failed password for invalid user 0oi98u from 124.42.99.11 port 51248 ssh2
Oct 10 22:49:23 eventyay sshd[27668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.99.11
...
2019-10-11 04:59:31
attackbots
Oct 10 20:09:01 mout sshd[4536]: Invalid user P@SSW0RD from 124.42.99.11 port 52352
2019-10-11 02:10:54
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.42.99.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3279
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.42.99.11.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072200 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 22 22:58:21 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
Host 11.99.42.124.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 11.99.42.124.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
222.186.169.194 attackspambots
2020-06-12T17:48:47.699198afi-git.jinr.ru sshd[8112]: Failed password for root from 222.186.169.194 port 34068 ssh2
2020-06-12T17:48:50.651798afi-git.jinr.ru sshd[8112]: Failed password for root from 222.186.169.194 port 34068 ssh2
2020-06-12T17:48:54.016152afi-git.jinr.ru sshd[8112]: Failed password for root from 222.186.169.194 port 34068 ssh2
2020-06-12T17:48:54.016317afi-git.jinr.ru sshd[8112]: error: maximum authentication attempts exceeded for root from 222.186.169.194 port 34068 ssh2 [preauth]
2020-06-12T17:48:54.016330afi-git.jinr.ru sshd[8112]: Disconnecting: Too many authentication failures [preauth]
...
2020-06-12 22:53:10
37.187.100.50 attackspam
Jun 12 14:06:25 amit sshd\[29479\]: Invalid user ubnt from 37.187.100.50
Jun 12 14:06:25 amit sshd\[29479\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.100.50
Jun 12 14:06:27 amit sshd\[29479\]: Failed password for invalid user ubnt from 37.187.100.50 port 33432 ssh2
...
2020-06-12 22:57:47
219.135.209.13 attackspambots
srv02 SSH BruteForce Attacks 22 ..
2020-06-12 22:27:15
209.85.166.193 attackbots
Spam from michael.ford@cuddle.ai
2020-06-12 22:53:39
51.254.205.6 attackspam
Jun 12 16:23:18 cosmoit sshd[22644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.205.6
2020-06-12 22:29:15
111.231.226.87 attackbotsspam
Jun 12 06:24:51 server1 sshd\[20278\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.226.87  user=root
Jun 12 06:24:53 server1 sshd\[20278\]: Failed password for root from 111.231.226.87 port 38386 ssh2
Jun 12 06:29:01 server1 sshd\[23443\]: Invalid user guest from 111.231.226.87
Jun 12 06:29:02 server1 sshd\[23443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.226.87 
Jun 12 06:29:04 server1 sshd\[23443\]: Failed password for invalid user guest from 111.231.226.87 port 56876 ssh2
...
2020-06-12 23:01:59
113.181.206.252 attackspambots
12-6-2020 14:06:47	Unauthorized connection attempt (Brute-Force).
12-6-2020 14:06:47	Connection from IP address: 113.181.206.252 on port: 587


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=113.181.206.252
2020-06-12 22:44:37
220.129.225.69 attackspam
1591963606 - 06/12/2020 14:06:46 Host: 220.129.225.69/220.129.225.69 Port: 445 TCP Blocked
2020-06-12 22:42:51
222.186.173.183 attackspambots
Jun 12 16:09:38 vps sshd[29431]: Failed password for root from 222.186.173.183 port 29946 ssh2
Jun 12 16:09:41 vps sshd[29431]: Failed password for root from 222.186.173.183 port 29946 ssh2
Jun 12 16:09:45 vps sshd[29431]: Failed password for root from 222.186.173.183 port 29946 ssh2
Jun 12 16:09:48 vps sshd[29431]: Failed password for root from 222.186.173.183 port 29946 ssh2
Jun 12 16:09:51 vps sshd[29431]: Failed password for root from 222.186.173.183 port 29946 ssh2
...
2020-06-12 22:24:15
14.161.44.158 attack
Dovecot Invalid User Login Attempt.
2020-06-12 22:31:36
60.220.187.113 attackbotsspam
Jun 12 08:13:14 server1 sshd\[9122\]: Failed password for root from 60.220.187.113 port 41519 ssh2
Jun 12 08:16:11 server1 sshd\[11341\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.220.187.113  user=root
Jun 12 08:16:13 server1 sshd\[11341\]: Failed password for root from 60.220.187.113 port 16926 ssh2
Jun 12 08:19:22 server1 sshd\[13666\]: Invalid user www from 60.220.187.113
Jun 12 08:19:22 server1 sshd\[13666\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.220.187.113 
...
2020-06-12 22:45:08
185.39.11.48 attackbots
Here more information about 185.39.11.48 
info: [Swhostnamezerland] 62355 Network Dedicated SAS 
Connected: 8 servere(s) 
Reason: ssh 
Portscan/portflood
Ports: 20,22,110,554,993,1433 
Services: ftp-data,rtsp,imaps,ms-sql-s,ssh,pop3 
servere: Europe/Moscow (UTC+3) 
Found at blocklist: blocklist.de, zen.spamhaus.org, spfbl.net, abuseIPDB.com
myIP:89.179.244.250 
 
[2020-06-12 02:13:19] (tcp) myIP:20 <- 185.39.11.48:51068
[2020-06-12 02:16:10] (tcp) myIP:20 <- 185.39.11.48:51068
[2020-06-12 02:53:44] (tcp) myIP:554 <- 185.39.11.48:51068
[2020-06-12 03:19:22] (tcp) myIP:993 <- 185.39.11.48:51068
[2020-06-12 03:24:59] (tcp) myIP:1433 <- 185.39.11.48:51068
[2020-06-12 03:50:07] (tcp) myIP:22 <- 185.39.11.48:51068
[2020-06-12 03:58:07] (tcp) myIP:22 <- 185.39.11.48:51068
[2020-06-12 09:12:02] (tcp) myIP:110 <- 185.39.11.48:51068


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=185.39.11.48
2020-06-12 22:28:08
103.253.42.59 attack
[2020-06-12 10:27:33] NOTICE[1273][C-0000026b] chan_sip.c: Call from '' (103.253.42.59:53466) to extension '900146462607642' rejected because extension not found in context 'public'.
[2020-06-12 10:27:33] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-12T10:27:33.795-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="900146462607642",SessionID="0x7f31c0334138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.253.42.59/53466",ACLName="no_extension_match"
[2020-06-12 10:28:44] NOTICE[1273][C-0000026c] chan_sip.c: Call from '' (103.253.42.59:49947) to extension '900246462607642' rejected because extension not found in context 'public'.
[2020-06-12 10:28:44] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-12T10:28:44.692-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="900246462607642",SessionID="0x7f31c0334138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/
...
2020-06-12 22:46:45
86.104.34.253 attack
Jun 11 20:10:34 our-server-hostname sshd[20528]: Invalid user admin from 86.104.34.253
Jun 11 20:10:34 our-server-hostname sshd[20528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.104.34.253 
Jun 11 20:10:37 our-server-hostname sshd[20528]: Failed password for invalid user admin from 86.104.34.253 port 39646 ssh2
Jun 11 20:24:02 our-server-hostname sshd[23660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.104.34.253  user=r.r
Jun 11 20:24:04 our-server-hostname sshd[23660]: Failed password for r.r from 86.104.34.253 port 55770 ssh2
Jun 11 20:26:23 our-server-hostname sshd[24093]: Invalid user vwalker from 86.104.34.253
Jun 11 20:26:23 our-server-hostname sshd[24093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.104.34.253 
Jun 11 20:26:26 our-server-hostname sshd[24093]: Failed password for invalid user vwalker from 86.104.34.253 por........
-------------------------------
2020-06-12 22:49:44
117.3.52.229 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-06-12 22:40:47

最近上报的IP列表

36.234.211.23 42.151.34.48 117.55.242.168 64.137.255.45
141.11.115.94 218.15.228.205 89.207.254.5 90.12.55.160
197.61.70.166 128.124.219.28 135.11.76.178 182.97.105.129
196.193.51.169 121.143.99.179 1.46.111.101 216.149.95.35
77.116.174.254 71.44.187.203 201.244.120.226 224.93.137.78