必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): Heinrich-Heine-Universitaet Duesseldorf

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): University/College/School

用户上报:
类型 评论内容 时间
attackbots
2020-09-07T20:10:23.746610ns386461 sshd\[19371\]: Invalid user admin from 134.99.4.139 port 46680
2020-09-07T20:10:23.761232ns386461 sshd\[19371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.99.4.139
2020-09-07T20:10:25.536512ns386461 sshd\[19428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.99.4.139  user=root
2020-09-07T20:10:25.642586ns386461 sshd\[19371\]: Failed password for invalid user admin from 134.99.4.139 port 46680 ssh2
2020-09-07T20:10:27.358523ns386461 sshd\[19428\]: Failed password for root from 134.99.4.139 port 46894 ssh2
...
2020-09-08 03:14:31
attackspambots
$f2bV_matches
2020-09-07 18:44:04
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.99.4.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58178
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.99.4.139.			IN	A

;; AUTHORITY SECTION:
.			563	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020090700 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 07 18:43:57 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
Host 139.4.99.134.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.4.99.134.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
129.211.117.47 attack
Oct 31 12:23:38 vtv3 sshd\[11640\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.117.47  user=root
Oct 31 12:23:39 vtv3 sshd\[11640\]: Failed password for root from 129.211.117.47 port 60495 ssh2
Oct 31 12:31:33 vtv3 sshd\[16115\]: Invalid user solen from 129.211.117.47 port 35957
Oct 31 12:31:33 vtv3 sshd\[16115\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.117.47
Oct 31 12:31:35 vtv3 sshd\[16115\]: Failed password for invalid user solen from 129.211.117.47 port 35957 ssh2
Oct 31 12:44:09 vtv3 sshd\[22413\]: Invalid user ak from 129.211.117.47 port 37541
Oct 31 12:44:09 vtv3 sshd\[22413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.117.47
Oct 31 12:44:12 vtv3 sshd\[22413\]: Failed password for invalid user ak from 129.211.117.47 port 37541 ssh2
Oct 31 12:48:24 vtv3 sshd\[24602\]: Invalid user ef from 129.211.117.47 port 56897
Oct 31 12:48:24 vtv
2019-10-31 23:06:16
207.154.247.249 attackspam
xmlrpc attack
2019-10-31 23:10:56
203.113.119.226 attackbotsspam
Automatic report - XMLRPC Attack
2019-10-31 22:56:42
182.16.115.130 attackspam
Oct 31 18:07:53 hosting sshd[3410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.115.130  user=root
Oct 31 18:07:55 hosting sshd[3410]: Failed password for root from 182.16.115.130 port 42586 ssh2
...
2019-10-31 23:18:27
111.230.227.17 attack
Oct 31 15:15:11 minden010 sshd[30014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.227.17
Oct 31 15:15:13 minden010 sshd[30014]: Failed password for invalid user 12345 from 111.230.227.17 port 55483 ssh2
Oct 31 15:20:49 minden010 sshd[1643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.227.17
...
2019-10-31 23:00:15
222.186.175.154 attackspambots
Oct 30 03:44:17 mail sshd[4760]: Failed password for root from 222.186.175.154 port 43772 ssh2
Oct 30 03:44:22 mail sshd[4760]: Failed password for root from 222.186.175.154 port 43772 ssh2
Oct 30 03:44:29 mail sshd[4760]: Failed password for root from 222.186.175.154 port 43772 ssh2
Oct 30 03:44:36 mail sshd[4760]: Failed password for root from 222.186.175.154 port 43772 ssh2
2019-10-31 23:05:13
170.79.82.51 attack
Automatic report - Port Scan Attack
2019-10-31 22:44:48
112.215.141.101 attackbotsspam
2019-10-31T14:42:09.876690abusebot-4.cloudsearch.cf sshd\[4984\]: Invalid user laurice from 112.215.141.101 port 34920
2019-10-31 23:07:02
59.152.254.50 attackbotsspam
Unauthorised access (Oct 31) SRC=59.152.254.50 LEN=48 TTL=112 ID=6966 DF TCP DPT=1433 WINDOW=8192 SYN
2019-10-31 23:15:16
218.92.0.203 attackbots
2019-10-31T14:49:01.433489abusebot-8.cloudsearch.cf sshd\[30097\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.203  user=root
2019-10-31 23:03:22
198.108.67.35 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-10-31 23:06:41
46.161.27.59 attack
RDP Bruteforce
2019-10-31 23:13:51
142.112.115.160 attackbots
Oct 31 04:44:00 php1 sshd\[32079\]: Invalid user login from 142.112.115.160
Oct 31 04:44:00 php1 sshd\[32079\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ipagstaticip-f6ffd4e0-f46a-b142-b2ad-b6c2b58e2418.sdsl.bell.ca
Oct 31 04:44:02 php1 sshd\[32079\]: Failed password for invalid user login from 142.112.115.160 port 56201 ssh2
Oct 31 04:48:16 php1 sshd\[32581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ipagstaticip-f6ffd4e0-f46a-b142-b2ad-b6c2b58e2418.sdsl.bell.ca  user=root
Oct 31 04:48:18 php1 sshd\[32581\]: Failed password for root from 142.112.115.160 port 47625 ssh2
2019-10-31 23:16:38
141.135.239.180 attack
Oct 31 15:51:25 meumeu sshd[31833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.135.239.180 
Oct 31 15:51:27 meumeu sshd[31833]: Failed password for invalid user redis from 141.135.239.180 port 46758 ssh2
Oct 31 15:56:09 meumeu sshd[32534]: Failed password for root from 141.135.239.180 port 58152 ssh2
...
2019-10-31 23:07:48
213.6.239.134 attack
Oct 27 15:52:07 mxgate1 postfix/postscreen[15578]: CONNECT from [213.6.239.134]:39183 to [176.31.12.44]:25
Oct 27 15:52:07 mxgate1 postfix/dnsblog[15583]: addr 213.6.239.134 listed by domain zen.spamhaus.org as 127.0.0.4
Oct 27 15:52:07 mxgate1 postfix/dnsblog[15583]: addr 213.6.239.134 listed by domain zen.spamhaus.org as 127.0.0.3
Oct 27 15:52:07 mxgate1 postfix/dnsblog[15579]: addr 213.6.239.134 listed by domain cbl.abuseat.org as 127.0.0.2
Oct 27 15:52:07 mxgate1 postfix/dnsblog[15581]: addr 213.6.239.134 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Oct 27 15:52:07 mxgate1 postfix/postscreen[15578]: PREGREET 23 after 0.33 from [213.6.239.134]:39183: EHLO logosproducts.hostname

Oct 27 15:52:07 mxgate1 postfix/postscreen[15578]: DNSBL rank 4 for [213.6.239.134]:39183
Oct x@x
Oct 27 15:52:08 mxgate1 postfix/postscreen[15578]: HANGUP after 0.89 from [213.6.239.134]:39183 in tests after SMTP handshake
Oct 27 15:52:08 mxgate1 postfix/postscreen[15578]: DISCONNECT [2........
-------------------------------
2019-10-31 22:43:18

最近上报的IP列表

5.124.68.109 113.196.236.9 191.208.15.70 192.127.102.81
239.79.197.254 212.230.18.153 192.122.202.5 45.55.41.113
178.128.165.11 171.236.155.243 119.152.159.108 165.22.101.43
60.137.41.244 123.206.23.158 27.72.98.32 213.243.95.30
58.56.56.174 43.227.157.152 212.34.243.234 8.55.86.72