必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Feb 18 23:13:16 server sshd\[30525\]: Invalid user www from 128.199.55.13
Feb 18 23:13:16 server sshd\[30525\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13 
Feb 18 23:13:18 server sshd\[30525\]: Failed password for invalid user www from 128.199.55.13 port 35579 ssh2
Feb 18 23:20:18 server sshd\[32045\]: Invalid user user1 from 128.199.55.13
Feb 18 23:20:18 server sshd\[32045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13 
...
2020-02-19 05:00:00
attackbots
3x Failed Password
2020-01-20 17:27:20
attackbotsspam
Unauthorized connection attempt detected from IP address 128.199.55.13 to port 2220 [J]
2020-01-17 04:12:15
attack
Jan  9 03:59:06 eddieflores sshd\[13767\]: Invalid user test_user from 128.199.55.13
Jan  9 03:59:06 eddieflores sshd\[13767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Jan  9 03:59:08 eddieflores sshd\[13767\]: Failed password for invalid user test_user from 128.199.55.13 port 43130 ssh2
Jan  9 04:01:04 eddieflores sshd\[13935\]: Invalid user ubnt from 128.199.55.13
Jan  9 04:01:04 eddieflores sshd\[13935\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
2020-01-10 00:03:50
attackbots
Jan  9 00:51:42 [host] sshd[23971]: Invalid user um from 128.199.55.13
Jan  9 00:51:42 [host] sshd[23971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Jan  9 00:51:43 [host] sshd[23971]: Failed password for invalid user um from 128.199.55.13 port 57992 ssh2
2020-01-09 08:10:18
attackspambots
Unauthorized connection attempt detected from IP address 128.199.55.13 to port 2220 [J]
2020-01-07 22:05:42
attackspam
Dec 31 05:54:34 vps691689 sshd[8880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Dec 31 05:54:36 vps691689 sshd[8880]: Failed password for invalid user popsvr from 128.199.55.13 port 51393 ssh2
...
2019-12-31 13:21:52
attack
Dec 26 03:19:17 plusreed sshd[25800]: Invalid user blavia from 128.199.55.13
Dec 26 03:19:17 plusreed sshd[25800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Dec 26 03:19:17 plusreed sshd[25800]: Invalid user blavia from 128.199.55.13
Dec 26 03:19:19 plusreed sshd[25800]: Failed password for invalid user blavia from 128.199.55.13 port 52857 ssh2
Dec 26 03:25:52 plusreed sshd[27467]: Invalid user applmgr from 128.199.55.13
...
2019-12-26 16:29:55
attackbotsspam
Fail2Ban - SSH Bruteforce Attempt
2019-12-21 03:20:09
attack
Invalid user guest from 128.199.55.13 port 41506
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Failed password for invalid user guest from 128.199.55.13 port 41506 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
Failed password for root from 128.199.55.13 port 45665 ssh2
2019-12-12 17:37:41
attackbots
Invalid user home from 128.199.55.13 port 39011
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Failed password for invalid user home from 128.199.55.13 port 39011 ssh2
Invalid user dimitris from 128.199.55.13 port 44190
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
2019-12-05 13:20:33
attack
Dec  1 04:24:18 vibhu-HP-Z238-Microtower-Workstation sshd\[20432\]: Invalid user sinnwell from 128.199.55.13
Dec  1 04:24:18 vibhu-HP-Z238-Microtower-Workstation sshd\[20432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Dec  1 04:24:21 vibhu-HP-Z238-Microtower-Workstation sshd\[20432\]: Failed password for invalid user sinnwell from 128.199.55.13 port 52979 ssh2
Dec  1 04:27:27 vibhu-HP-Z238-Microtower-Workstation sshd\[20625\]: Invalid user palmiste from 128.199.55.13
Dec  1 04:27:27 vibhu-HP-Z238-Microtower-Workstation sshd\[20625\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
...
2019-12-01 07:05:19
attackbotsspam
Nov 28 10:49:50 vps691689 sshd[11826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Nov 28 10:49:53 vps691689 sshd[11826]: Failed password for invalid user giorgis from 128.199.55.13 port 56217 ssh2
...
2019-11-28 20:39:14
attackbotsspam
Oct 30 10:33:03 odroid64 sshd\[28168\]: Invalid user test from 128.199.55.13
Oct 30 10:33:03 odroid64 sshd\[28168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
...
2019-11-21 18:47:46
attack
SSH invalid-user multiple login attempts
2019-11-19 08:02:38
attackbotsspam
<6 unauthorized SSH connections
2019-11-17 18:34:39
attackspam
$f2bV_matches
2019-11-16 05:38:57
attackbotsspam
Nov 14 20:58:20 web1 sshd\[27745\]: Invalid user lisa from 128.199.55.13
Nov 14 20:58:20 web1 sshd\[27745\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Nov 14 20:58:22 web1 sshd\[27745\]: Failed password for invalid user lisa from 128.199.55.13 port 48679 ssh2
Nov 14 21:02:26 web1 sshd\[28067\]: Invalid user navy from 128.199.55.13
Nov 14 21:02:26 web1 sshd\[28067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
2019-11-15 15:17:39
attackbots
ssh failed login
2019-11-11 18:51:06
attack
Nov  6 14:53:06 plusreed sshd[6649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
Nov  6 14:53:08 plusreed sshd[6649]: Failed password for root from 128.199.55.13 port 58106 ssh2
...
2019-11-07 03:55:37
attackbotsspam
Oct 31 13:48:45 php1 sshd\[8262\]: Invalid user ajersch from 128.199.55.13
Oct 31 13:48:45 php1 sshd\[8262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Oct 31 13:48:48 php1 sshd\[8262\]: Failed password for invalid user ajersch from 128.199.55.13 port 46886 ssh2
Oct 31 13:52:56 php1 sshd\[8718\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
Oct 31 13:52:58 php1 sshd\[8718\]: Failed password for root from 128.199.55.13 port 37586 ssh2
2019-11-01 08:02:26
attackbotsspam
Oct 27 11:40:07 vmanager6029 sshd\[25770\]: Invalid user At123\~ from 128.199.55.13 port 33227
Oct 27 11:40:07 vmanager6029 sshd\[25770\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Oct 27 11:40:10 vmanager6029 sshd\[25770\]: Failed password for invalid user At123\~ from 128.199.55.13 port 33227 ssh2
2019-10-27 19:13:24
attack
Oct 26 06:50:00 www5 sshd\[29617\]: Invalid user 123!@\# from 128.199.55.13
Oct 26 06:50:00 www5 sshd\[29617\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Oct 26 06:50:02 www5 sshd\[29617\]: Failed password for invalid user 123!@\# from 128.199.55.13 port 43183 ssh2
...
2019-10-26 15:03:14
attack
2019-10-25T01:56:52.525438suse-nuc sshd[23255]: Invalid user student from 128.199.55.13 port 45828
...
2019-10-25 19:40:14
attackbots
$f2bV_matches
2019-10-20 17:50:25
attackspambots
Oct 18 17:40:27 TORMINT sshd\[14754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
Oct 18 17:40:29 TORMINT sshd\[14754\]: Failed password for root from 128.199.55.13 port 48132 ssh2
Oct 18 17:44:52 TORMINT sshd\[14871\]: Invalid user bb from 128.199.55.13
Oct 18 17:44:52 TORMINT sshd\[14871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
...
2019-10-19 07:15:33
attackbots
Oct 14 06:25:57 fv15 sshd[13398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=r.r
Oct 14 06:25:59 fv15 sshd[13398]: Failed password for r.r from 128.199.55.13 port 37028 ssh2
Oct 14 06:25:59 fv15 sshd[13398]: Received disconnect from 128.199.55.13: 11: Bye Bye [preauth]
Oct 14 06:30:10 fv15 sshd[8352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=r.r
Oct 14 06:30:12 fv15 sshd[8352]: Failed password for r.r from 128.199.55.13 port 56858 ssh2
Oct 14 06:30:12 fv15 sshd[8352]: Received disconnect from 128.199.55.13: 11: Bye Bye [preauth]
Oct 14 06:34:19 fv15 sshd[3165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=r.r
Oct 14 06:34:22 fv15 sshd[3165]:
.... truncated .... 

Oct 14 06:25:57 fv15 sshd[13398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= r........
-------------------------------
2019-10-14 23:57:33
attackspam
2019-10-11T04:20:41.404502mizuno.rwx.ovh sshd[408488]: Connection from 128.199.55.13 port 56018 on 78.46.61.178 port 22
2019-10-11T04:20:41.501833mizuno.rwx.ovh sshd[408488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
2019-10-11T04:20:43.054842mizuno.rwx.ovh sshd[408488]: Failed password for root from 128.199.55.13 port 56018 ssh2
2019-10-11T04:36:48.809024mizuno.rwx.ovh sshd[410561]: Connection from 128.199.55.13 port 50860 on 78.46.61.178 port 22
2019-10-11T04:36:50.974637mizuno.rwx.ovh sshd[410561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
2019-10-11T04:36:53.219547mizuno.rwx.ovh sshd[410561]: Failed password for root from 128.199.55.13 port 50860 ssh2
...
2019-10-11 19:34:41
attackspambots
2019-10-04T22:51:23.248819shield sshd\[9364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
2019-10-04T22:51:25.094456shield sshd\[9364\]: Failed password for root from 128.199.55.13 port 58171 ssh2
2019-10-04T22:55:29.035931shield sshd\[9991\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
2019-10-04T22:55:31.319233shield sshd\[9991\]: Failed password for root from 128.199.55.13 port 49101 ssh2
2019-10-04T22:59:25.592045shield sshd\[10811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
2019-10-05 07:08:27
attackspam
Sep 29 17:50:32 wbs sshd\[14338\]: Invalid user test from 128.199.55.13
Sep 29 17:50:32 wbs sshd\[14338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Sep 29 17:50:34 wbs sshd\[14338\]: Failed password for invalid user test from 128.199.55.13 port 57104 ssh2
Sep 29 17:54:45 wbs sshd\[14726\]: Invalid user ha from 128.199.55.13
Sep 29 17:54:45 wbs sshd\[14726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
2019-09-30 16:20:20
相同子网IP讨论:
IP 类型 评论内容 时间
128.199.55.17 attack
fire
2019-11-17 00:59:55
128.199.55.17 attackspam
Invalid user fake from 128.199.55.17 port 48918
2019-06-21 20:49:45
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 128.199.55.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41367
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;128.199.55.13.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081801 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 19 10:59:07 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 13.55.199.128.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 13.55.199.128.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
92.222.89.7 attackspam
2019-11-05T20:08:42.4254431240 sshd\[26629\]: Invalid user teamspeak2 from 92.222.89.7 port 44058
2019-11-05T20:08:42.4280151240 sshd\[26629\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.89.7
2019-11-05T20:08:44.5947191240 sshd\[26629\]: Failed password for invalid user teamspeak2 from 92.222.89.7 port 44058 ssh2
...
2019-11-06 06:00:56
171.252.192.237 attackbotsspam
Unauthorized connection attempt from IP address 171.252.192.237 on Port 445(SMB)
2019-11-06 06:10:37
122.160.138.253 attackspambots
Nov  5 16:25:15 TORMINT sshd\[31166\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.160.138.253  user=root
Nov  5 16:25:17 TORMINT sshd\[31166\]: Failed password for root from 122.160.138.253 port 50978 ssh2
Nov  5 16:29:56 TORMINT sshd\[31383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.160.138.253  user=root
...
2019-11-06 06:05:46
31.171.108.113 attackspambots
Nov  5 17:13:28 pl3server sshd[19777]: Did not receive identification string from 31.171.108.113
Nov  5 17:16:59 pl3server sshd[22630]: Did not receive identification string from 31.171.108.113
Nov  5 17:18:32 pl3server sshd[23610]: Connection closed by 31.171.108.113 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=31.171.108.113
2019-11-06 05:44:26
188.163.50.119 attack
Unauthorized connection attempt from IP address 188.163.50.119 on Port 445(SMB)
2019-11-06 06:11:41
178.33.179.106 attack
Autoban   178.33.179.106 AUTH/CONNECT
2019-11-06 05:36:29
95.67.159.238 attackbotsspam
Attempt to attack host OS, exploiting network vulnerabilities, on 05-11-2019 14:30:30.
2019-11-06 06:14:06
96.28.160.214 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 05-11-2019 14:30:31.
2019-11-06 06:13:01
159.203.81.129 attackbots
159.203.81.129 was recorded 63 times by 2 hosts attempting to connect to the following ports: 8088. Incident counter (4h, 24h, all-time): 63, 264, 264
2019-11-06 05:39:37
27.72.29.131 attackspam
Unauthorized connection attempt from IP address 27.72.29.131 on Port 445(SMB)
2019-11-06 06:04:49
14.189.39.247 attack
Unauthorized connection attempt from IP address 14.189.39.247 on Port 445(SMB)
2019-11-06 06:01:24
1.6.55.17 attackbots
Unauthorized connection attempt from IP address 1.6.55.17 on Port 445(SMB)
2019-11-06 06:00:01
190.52.178.212 attack
Nov  5 20:57:37 MK-Soft-VM5 sshd[9424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.52.178.212 
Nov  5 20:57:39 MK-Soft-VM5 sshd[9424]: Failed password for invalid user zabbix from 190.52.178.212 port 39996 ssh2
...
2019-11-06 05:38:08
196.27.127.61 attack
Nov  5 15:25:52 srv01 sshd[31301]: Invalid user iz from 196.27.127.61
Nov  5 15:25:52 srv01 sshd[31301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.27.127.61
Nov  5 15:25:52 srv01 sshd[31301]: Invalid user iz from 196.27.127.61
Nov  5 15:25:54 srv01 sshd[31301]: Failed password for invalid user iz from 196.27.127.61 port 46496 ssh2
Nov  5 15:30:31 srv01 sshd[31489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.27.127.61  user=root
Nov  5 15:30:34 srv01 sshd[31489]: Failed password for root from 196.27.127.61 port 34306 ssh2
...
2019-11-06 06:05:12
61.74.118.139 attackspambots
Nov  5 22:41:28 vps01 sshd[23354]: Failed password for root from 61.74.118.139 port 44226 ssh2
2019-11-06 05:50:08

最近上报的IP列表

142.152.155.141 184.179.216.156 141.216.205.190 188.188.112.6
60.28.63.85 189.91.239.181 103.208.20.118 125.116.210.239
109.162.39.131 111.224.121.244 46.146.233.117 134.209.161.147
71.44.166.170 59.27.118.163 73.10.180.160 59.127.189.160
140.207.114.222 45.114.9.237 16.225.94.186 194.34.53.151