必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbots
SSH login attempts with user root at 2020-02-05.
2020-02-06 17:11:43
相同子网IP讨论:
IP 类型 评论内容 时间
129.204.139.26 attack
2020-08-11T13:57:48.672400v22018076590370373 sshd[23784]: Failed password for root from 129.204.139.26 port 49286 ssh2
2020-08-11T14:02:08.106559v22018076590370373 sshd[12339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.139.26  user=root
2020-08-11T14:02:10.252449v22018076590370373 sshd[12339]: Failed password for root from 129.204.139.26 port 36622 ssh2
2020-08-11T14:06:21.826831v22018076590370373 sshd[1238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.139.26  user=root
2020-08-11T14:06:23.369992v22018076590370373 sshd[1238]: Failed password for root from 129.204.139.26 port 52172 ssh2
...
2020-08-12 03:04:26
129.204.139.26 attackbots
Invalid user emms from 129.204.139.26 port 58460
2020-07-28 06:43:51
129.204.139.26 attackbotsspam
Invalid user vdc from 129.204.139.26 port 54926
2020-07-26 15:01:40
129.204.139.26 attack
Jul 24 15:59:07 inter-technics sshd[20442]: Invalid user user from 129.204.139.26 port 37834
Jul 24 15:59:07 inter-technics sshd[20442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.139.26
Jul 24 15:59:07 inter-technics sshd[20442]: Invalid user user from 129.204.139.26 port 37834
Jul 24 15:59:10 inter-technics sshd[20442]: Failed password for invalid user user from 129.204.139.26 port 37834 ssh2
Jul 24 16:05:53 inter-technics sshd[20822]: Invalid user yhy from 129.204.139.26 port 52826
...
2020-07-25 03:19:04
129.204.139.26 attackbotsspam
Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-07-14 15:28:31
129.204.139.26 attackspam
Brute-force attempt banned
2020-07-01 06:27:32
129.204.139.26 attack
Jun 28 12:08:36 rush sshd[16756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.139.26
Jun 28 12:08:38 rush sshd[16756]: Failed password for invalid user fds from 129.204.139.26 port 34328 ssh2
Jun 28 12:12:24 rush sshd[16894]: Failed password for root from 129.204.139.26 port 49048 ssh2
...
2020-06-28 23:23:57
129.204.139.26 attackspam
Jun 28 08:02:45 minden010 sshd[16027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.139.26
Jun 28 08:02:48 minden010 sshd[16027]: Failed password for invalid user tv from 129.204.139.26 port 57412 ssh2
Jun 28 08:07:52 minden010 sshd[18347]: Failed password for root from 129.204.139.26 port 56312 ssh2
...
2020-06-28 14:26:41
129.204.139.26 attack
$f2bV_matches
2020-06-24 18:54:20
129.204.139.26 attackspambots
Jun  6 12:26:39 lnxmail61 sshd[32476]: Failed password for root from 129.204.139.26 port 44786 ssh2
Jun  6 12:29:25 lnxmail61 sshd[322]: Failed password for root from 129.204.139.26 port 46396 ssh2
2020-06-06 19:06:45
129.204.139.26 attackspambots
May 26 22:17:14 ArkNodeAT sshd\[8063\]: Invalid user newsetup from 129.204.139.26
May 26 22:17:14 ArkNodeAT sshd\[8063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.139.26
May 26 22:17:16 ArkNodeAT sshd\[8063\]: Failed password for invalid user newsetup from 129.204.139.26 port 49954 ssh2
2020-05-27 04:51:50
129.204.139.26 attackbotsspam
May 16 21:16:38 game-panel sshd[16250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.139.26
May 16 21:16:40 game-panel sshd[16250]: Failed password for invalid user gr from 129.204.139.26 port 50564 ssh2
May 16 21:19:06 game-panel sshd[16322]: Failed password for root from 129.204.139.26 port 51708 ssh2
2020-05-17 05:58:03
129.204.139.26 attackspam
May  2 14:00:10 ns382633 sshd\[404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.139.26  user=root
May  2 14:00:13 ns382633 sshd\[404\]: Failed password for root from 129.204.139.26 port 36658 ssh2
May  2 14:06:43 ns382633 sshd\[1552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.139.26  user=root
May  2 14:06:46 ns382633 sshd\[1552\]: Failed password for root from 129.204.139.26 port 34158 ssh2
May  2 14:11:10 ns382633 sshd\[2530\]: Invalid user asf from 129.204.139.26 port 52090
May  2 14:11:10 ns382633 sshd\[2530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.139.26
2020-05-03 00:23:46
129.204.139.26 attack
20 attempts against mh-ssh on cloud
2020-05-01 16:17:48
129.204.139.26 attack
Apr 15 08:42:32 powerpi2 sshd[15062]: Invalid user ed from 129.204.139.26 port 39550
Apr 15 08:42:34 powerpi2 sshd[15062]: Failed password for invalid user ed from 129.204.139.26 port 39550 ssh2
Apr 15 08:47:24 powerpi2 sshd[15274]: Invalid user toor from 129.204.139.26 port 33454
...
2020-04-15 17:44:39
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.204.139.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64530
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;129.204.139.2.			IN	A

;; AUTHORITY SECTION:
.			559	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020600 1800 900 604800 86400

;; Query time: 126 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 17:11:37 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 2.139.204.129.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.139.204.129.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
102.185.29.175 attackspambots
1592106343 - 06/14/2020 05:45:43 Host: 102.185.29.175/102.185.29.175 Port: 445 TCP Blocked
2020-06-14 19:56:06
177.10.252.242 attackspambots
Unauthorized connection attempt from IP address 177.10.252.242 on Port 445(SMB)
2020-06-14 20:00:33
79.137.2.105 attackspambots
Jun 14 10:01:08 ip-172-31-61-156 sshd[16550]: Invalid user testbed from 79.137.2.105
...
2020-06-14 19:41:08
171.244.36.122 attackspam
Jun 13 00:32:52 xxxxxxx5185820 sshd[11790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.36.122  user=r.r
Jun 13 00:32:54 xxxxxxx5185820 sshd[11790]: Failed password for r.r from 171.244.36.122 port 34884 ssh2
Jun 13 00:32:54 xxxxxxx5185820 sshd[11790]: Received disconnect from 171.244.36.122 port 34884:11: Bye Bye [preauth]
Jun 13 00:32:54 xxxxxxx5185820 sshd[11790]: Disconnected from 171.244.36.122 port 34884 [preauth]
Jun 13 00:44:24 xxxxxxx5185820 sshd[13338]: Invalid user naga from 171.244.36.122 port 46612
Jun 13 00:44:24 xxxxxxx5185820 sshd[13338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.36.122
Jun 13 00:44:26 xxxxxxx5185820 sshd[13338]: Failed password for invalid user naga from 171.244.36.122 port 46612 ssh2
Jun 13 00:44:27 xxxxxxx5185820 sshd[13338]: Received disconnect from 171.244.36.122 port 46612:11: Bye Bye [preauth]
Jun 13 00:44:27 xxxxxxx5185820 ss........
-------------------------------
2020-06-14 20:10:01
43.246.138.6 attackbotsspam
Unauthorized connection attempt from IP address 43.246.138.6 on Port 445(SMB)
2020-06-14 20:19:57
200.196.35.217 attack
Unauthorized IMAP connection attempt
2020-06-14 20:09:34
103.65.236.169 attackspam
$f2bV_matches
2020-06-14 20:04:05
104.248.164.123 attackbotsspam
Jun 14 10:38:39 Ubuntu-1404-trusty-64-minimal sshd\[23748\]: Invalid user admin from 104.248.164.123
Jun 14 10:38:39 Ubuntu-1404-trusty-64-minimal sshd\[23748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.164.123
Jun 14 10:38:41 Ubuntu-1404-trusty-64-minimal sshd\[23748\]: Failed password for invalid user admin from 104.248.164.123 port 38408 ssh2
Jun 14 10:44:20 Ubuntu-1404-trusty-64-minimal sshd\[26105\]: Invalid user russ from 104.248.164.123
Jun 14 10:44:20 Ubuntu-1404-trusty-64-minimal sshd\[26105\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.164.123
2020-06-14 19:47:17
2.85.251.186 attackspam
Attempted connection to port 81.
2020-06-14 20:17:31
178.67.194.115 attackspam
Unauthorized connection attempt from IP address 178.67.194.115 on Port 445(SMB)
2020-06-14 20:06:14
187.49.60.82 attackspam
20/6/14@02:25:34: FAIL: Alarm-Network address from=187.49.60.82
...
2020-06-14 19:45:41
186.206.157.34 attack
Jun 14 11:24:08 vmd26974 sshd[4912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.206.157.34
Jun 14 11:24:10 vmd26974 sshd[4912]: Failed password for invalid user vbox from 186.206.157.34 port 7562 ssh2
...
2020-06-14 20:02:46
94.97.127.87 attackbots
Unauthorized connection attempt from IP address 94.97.127.87 on Port 445(SMB)
2020-06-14 20:02:28
2.179.116.234 attackbots
Jun 14 05:45:37 debian-2gb-nbg1-2 kernel: \[14365051.410033\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=2.179.116.234 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=30227 DF PROTO=TCP SPT=23596 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0
2020-06-14 20:01:03
95.37.125.112 attack
Invalid user pi from 95.37.125.112 port 49342
2020-06-14 19:44:27

最近上报的IP列表

109.213.11.153 118.25.55.1 37.210.219.163 76.115.182.123
253.215.200.229 91.239.165.158 207.20.65.81 118.25.11.2
80.6.135.125 200.104.134.119 46.163.11.210 106.248.228.114
172.157.235.183 208.5.91.83 96.36.239.223 184.152.61.98
127.98.36.239 117.89.53.64 150.233.67.179 118.179.215.5