必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbotsspam
Mar  8 02:15:35 ArkNodeAT sshd\[22085\]: Invalid user narciso from 128.199.142.148
Mar  8 02:15:35 ArkNodeAT sshd\[22085\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.148
Mar  8 02:15:37 ArkNodeAT sshd\[22085\]: Failed password for invalid user narciso from 128.199.142.148 port 39287 ssh2
2020-03-08 10:12:24
attackbots
SSH Brute Force
2020-03-08 03:02:36
attackspam
Feb 29 13:29:38 webhost01 sshd[14778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.148
Feb 29 13:29:41 webhost01 sshd[14778]: Failed password for invalid user discordbot from 128.199.142.148 port 37676 ssh2
...
2020-02-29 20:41:52
attackspam
Feb 13 04:45:37 web8 sshd\[32015\]: Invalid user cemergen from 128.199.142.148
Feb 13 04:45:37 web8 sshd\[32015\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.148
Feb 13 04:45:39 web8 sshd\[32015\]: Failed password for invalid user cemergen from 128.199.142.148 port 38512 ssh2
Feb 13 04:48:18 web8 sshd\[974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.148  user=root
Feb 13 04:48:20 web8 sshd\[974\]: Failed password for root from 128.199.142.148 port 50500 ssh2
2020-02-13 18:35:07
attackspambots
Feb 10 15:44:11 dedicated sshd[32363]: Invalid user mvc from 128.199.142.148 port 51570
2020-02-11 04:49:51
attackspam
2020-02-09T06:37:14.804528-07:00 suse-nuc sshd[15786]: Invalid user gsj from 128.199.142.148 port 35247
...
2020-02-09 22:14:46
attackbots
Feb  2 16:06:33 markkoudstaal sshd[31228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.148
Feb  2 16:06:35 markkoudstaal sshd[31228]: Failed password for invalid user test from 128.199.142.148 port 39071 ssh2
Feb  2 16:09:18 markkoudstaal sshd[31720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.148
2020-02-03 00:09:50
attackbots
Unauthorized connection attempt detected from IP address 128.199.142.148 to port 2220 [J]
2020-01-23 18:41:34
attackspam
leo_www
2020-01-10 18:43:52
attackspambots
IP blocked
2019-12-28 17:21:26
attackspam
Dec 27 20:23:59 zulu412 sshd\[20656\]: Invalid user http from 128.199.142.148 port 57402
Dec 27 20:23:59 zulu412 sshd\[20656\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.148
Dec 27 20:24:01 zulu412 sshd\[20656\]: Failed password for invalid user http from 128.199.142.148 port 57402 ssh2
...
2019-12-28 04:12:55
attackbotsspam
Dec 23 07:21:20 ns3042688 sshd\[13178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.148  user=root
Dec 23 07:21:22 ns3042688 sshd\[13178\]: Failed password for root from 128.199.142.148 port 57961 ssh2
Dec 23 07:27:35 ns3042688 sshd\[15952\]: Invalid user temp from 128.199.142.148
Dec 23 07:27:35 ns3042688 sshd\[15952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.148 
Dec 23 07:27:36 ns3042688 sshd\[15952\]: Failed password for invalid user temp from 128.199.142.148 port 32777 ssh2
...
2019-12-23 18:10:43
attackspam
Dec 23 00:51:16 heissa sshd\[8792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.148  user=mail
Dec 23 00:51:18 heissa sshd\[8792\]: Failed password for mail from 128.199.142.148 port 58388 ssh2
Dec 23 00:56:40 heissa sshd\[9628\]: Invalid user tamiyasu from 128.199.142.148 port 60265
Dec 23 00:56:40 heissa sshd\[9628\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.148
Dec 23 00:56:42 heissa sshd\[9628\]: Failed password for invalid user tamiyasu from 128.199.142.148 port 60265 ssh2
2019-12-23 08:41:04
attackspambots
Dec 20 19:36:23 legacy sshd[23638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.148
Dec 20 19:36:25 legacy sshd[23638]: Failed password for invalid user guest from 128.199.142.148 port 50398 ssh2
Dec 20 19:42:53 legacy sshd[23938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.148
...
2019-12-21 02:47:33
相同子网IP讨论:
IP 类型 评论内容 时间
128.199.142.0 attackspambots
Sep 12 16:16:37 serwer sshd\[3065\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.0  user=root
Sep 12 16:16:38 serwer sshd\[3065\]: Failed password for root from 128.199.142.0 port 36918 ssh2
Sep 12 16:25:32 serwer sshd\[3957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.0  user=root
...
2020-09-12 23:12:22
128.199.142.0 attackspambots
$f2bV_matches
2020-09-12 15:17:07
128.199.142.0 attack
SSH Invalid Login
2020-09-12 07:03:24
128.199.142.0 attack
(sshd) Failed SSH login from 128.199.142.0 (SG/Singapore/-): 5 in the last 3600 secs
2020-08-21 00:59:43
128.199.142.138 attackspam
Aug 15 07:06:35 piServer sshd[16442]: Failed password for root from 128.199.142.138 port 56860 ssh2
Aug 15 07:09:24 piServer sshd[16715]: Failed password for root from 128.199.142.138 port 54146 ssh2
...
2020-08-15 14:57:07
128.199.142.0 attack
Aug 14 22:59:53 jumpserver sshd[155239]: Failed password for root from 128.199.142.0 port 56510 ssh2
Aug 14 23:04:02 jumpserver sshd[155283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.0  user=root
Aug 14 23:04:05 jumpserver sshd[155283]: Failed password for root from 128.199.142.0 port 39556 ssh2
...
2020-08-15 07:49:09
128.199.142.138 attackbotsspam
Aug 14 16:26:15 vps sshd[1025149]: Failed password for invalid user Asdfg%TGB123 from 128.199.142.138 port 48686 ssh2
Aug 14 16:30:19 vps sshd[1046148]: Invalid user %username%qwert from 128.199.142.138 port 57634
Aug 14 16:30:19 vps sshd[1046148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.138
Aug 14 16:30:21 vps sshd[1046148]: Failed password for invalid user %username%qwert from 128.199.142.138 port 57634 ssh2
Aug 14 16:34:27 vps sshd[15694]: Invalid user qwert@123123 from 128.199.142.138 port 38322
...
2020-08-15 03:01:23
128.199.142.0 attackbots
2020-08-14T07:27:17.993455lavrinenko.info sshd[9049]: Failed password for root from 128.199.142.0 port 40734 ssh2
2020-08-14T07:28:35.008729lavrinenko.info sshd[9057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.0  user=root
2020-08-14T07:28:36.458512lavrinenko.info sshd[9057]: Failed password for root from 128.199.142.0 port 59172 ssh2
2020-08-14T07:29:53.718300lavrinenko.info sshd[9064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.0  user=root
2020-08-14T07:29:55.679886lavrinenko.info sshd[9064]: Failed password for root from 128.199.142.0 port 49378 ssh2
...
2020-08-14 14:06:02
128.199.142.138 attackspam
Aug 13 12:18:41 itv-usvr-01 sshd[7872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.138  user=root
Aug 13 12:18:43 itv-usvr-01 sshd[7872]: Failed password for root from 128.199.142.138 port 45424 ssh2
Aug 13 12:19:13 itv-usvr-01 sshd[7900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.138  user=root
Aug 13 12:19:15 itv-usvr-01 sshd[7900]: Failed password for root from 128.199.142.138 port 41368 ssh2
2020-08-13 13:27:42
128.199.142.138 attack
prod6
...
2020-08-11 01:11:48
128.199.142.138 attackbots
Jul 22 00:29:21 journals sshd\[92219\]: Invalid user sunny from 128.199.142.138
Jul 22 00:29:21 journals sshd\[92219\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.138
Jul 22 00:29:23 journals sshd\[92219\]: Failed password for invalid user sunny from 128.199.142.138 port 33938 ssh2
Jul 22 00:34:20 journals sshd\[92660\]: Invalid user arijit from 128.199.142.138
Jul 22 00:34:20 journals sshd\[92660\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.138
...
2020-07-22 05:51:14
128.199.142.0 attackbotsspam
Jul 17 14:07:19 master sshd[13017]: Failed password for invalid user postgres from 128.199.142.0 port 53320 ssh2
2020-07-18 00:33:10
128.199.142.0 attack
SSH login attempts.
2020-07-10 02:27:08
128.199.142.0 attackbots
2020-07-07T14:58:12.930016vps773228.ovh.net sshd[15365]: Invalid user hxlong from 128.199.142.0 port 35054
2020-07-07T14:58:12.940193vps773228.ovh.net sshd[15365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.0
2020-07-07T14:58:12.930016vps773228.ovh.net sshd[15365]: Invalid user hxlong from 128.199.142.0 port 35054
2020-07-07T14:58:14.703660vps773228.ovh.net sshd[15365]: Failed password for invalid user hxlong from 128.199.142.0 port 35054 ssh2
2020-07-07T15:00:59.579535vps773228.ovh.net sshd[15447]: Invalid user bryan from 128.199.142.0 port 48872
...
2020-07-08 04:08:11
128.199.142.138 attackspambots
SSH Brute Force
2020-07-05 21:14:58
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 128.199.142.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14600
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;128.199.142.148.		IN	A

;; AUTHORITY SECTION:
.			462	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122001 1800 900 604800 86400

;; Query time: 118 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 21 02:47:19 CST 2019
;; MSG SIZE  rcvd: 119
HOST信息:
Host 148.142.199.128.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 148.142.199.128.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
123.206.53.230 attack
Oct  7 05:21:08 ip-172-31-61-156 sshd[13967]: Failed password for root from 123.206.53.230 port 55890 ssh2
Oct  7 05:21:06 ip-172-31-61-156 sshd[13967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.53.230  user=root
Oct  7 05:21:08 ip-172-31-61-156 sshd[13967]: Failed password for root from 123.206.53.230 port 55890 ssh2
Oct  7 05:25:55 ip-172-31-61-156 sshd[14136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.53.230  user=root
Oct  7 05:25:57 ip-172-31-61-156 sshd[14136]: Failed password for root from 123.206.53.230 port 58518 ssh2
...
2020-10-07 13:42:58
27.122.12.247 attackbots
27.122.12.247 - - [06/Oct/2020:22:43:48 +0200] "GET /awstats.pl?lang=en&output=main HTTP/1.1" 404 280 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:59.0) Gecko/20100101 Firefox/59.0,gzip(gfe)"
2020-10-07 14:06:59
120.201.250.44 attackbotsspam
failed root login
2020-10-07 13:27:59
122.194.229.3 attackbotsspam
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-10-07T02:10:53Z and 2020-10-07T02:10:56Z
2020-10-07 13:55:57
112.237.37.151 attack
Telnetd brute force attack detected by fail2ban
2020-10-07 13:34:19
12.235.148.58 spam
There's no information
2020-10-07 13:49:19
1.160.93.170 attack
Failed password for invalid user root from 1.160.93.170 port 52958 ssh2
2020-10-07 13:38:41
51.68.196.163 attackbotsspam
Oct  7 05:24:00 fhem-rasp sshd[13504]: Failed password for root from 51.68.196.163 port 48382 ssh2
Oct  7 05:24:00 fhem-rasp sshd[13504]: Disconnected from authenticating user root 51.68.196.163 port 48382 [preauth]
...
2020-10-07 13:37:06
62.210.75.68 attack
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-10-07 13:43:25
182.61.169.153 attackspam
SSH login attempts.
2020-10-07 13:55:02
139.99.62.85 attackspam
xmlrpc attack
2020-10-07 13:58:46
37.99.255.2 attackbotsspam
Oct  6 22:43:54 ovpn sshd\[3576\]: Invalid user admin from 37.99.255.2
Oct  6 22:43:54 ovpn sshd\[3576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.99.255.2
Oct  6 22:43:56 ovpn sshd\[3576\]: Failed password for invalid user admin from 37.99.255.2 port 55483 ssh2
Oct  6 22:43:58 ovpn sshd\[3580\]: Invalid user admin from 37.99.255.2
Oct  6 22:43:58 ovpn sshd\[3580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.99.255.2
2020-10-07 13:54:16
117.50.34.6 attackbotsspam
$f2bV_matches
2020-10-07 13:56:26
112.85.42.110 attack
"Unauthorized connection attempt on SSHD detected"
2020-10-07 13:24:32
12.235.148.58 spam
There's no information
2020-10-07 13:49:12

最近上报的IP列表

36.65.230.150 31.173.85.76 31.135.47.176 70.157.132.59
223.204.240.166 222.252.53.224 27.64.192.64 23.82.29.57
216.38.8.179 211.181.237.54 202.57.41.246 201.178.215.173
200.123.25.196 60.15.229.166 200.59.189.124 86.134.102.120
193.161.13.137 122.213.111.0 183.246.102.181 191.250.157.72