必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Taiwan, Province of China

运营商(isp): Taiwan Academic Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): University/College/School

用户上报:
类型 评论内容 时间
attack
2019-11-02T08:23:54.221980abusebot-5.cloudsearch.cf sshd\[22220\]: Invalid user Radio2017 from 140.114.85.52 port 56048
2019-11-02 18:06:46
attackbots
Oct 31 15:40:00 ip-172-31-62-245 sshd\[15018\]: Invalid user sensivity from 140.114.85.52\
Oct 31 15:40:02 ip-172-31-62-245 sshd\[15018\]: Failed password for invalid user sensivity from 140.114.85.52 port 51224 ssh2\
Oct 31 15:44:34 ip-172-31-62-245 sshd\[15030\]: Invalid user test from 140.114.85.52\
Oct 31 15:44:37 ip-172-31-62-245 sshd\[15030\]: Failed password for invalid user test from 140.114.85.52 port 34204 ssh2\
Oct 31 15:49:11 ip-172-31-62-245 sshd\[15070\]: Failed password for root from 140.114.85.52 port 45422 ssh2\
2019-11-01 01:44:39
attack
$f2bV_matches
2019-10-29 04:30:15
attack
Oct 28 15:08:54 vpn01 sshd[1870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.114.85.52
Oct 28 15:08:57 vpn01 sshd[1870]: Failed password for invalid user 12 from 140.114.85.52 port 33470 ssh2
...
2019-10-28 23:05:57
attackspambots
$f2bV_matches
2019-10-24 13:06:59
相同子网IP讨论:
IP 类型 评论内容 时间
140.114.85.215 attackbotsspam
Oct  7 18:29:25 ncomp sshd[5130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.114.85.215  user=root
Oct  7 18:29:26 ncomp sshd[5130]: Failed password for root from 140.114.85.215 port 49206 ssh2
Oct  7 18:40:51 ncomp sshd[5335]: Invalid user 123 from 140.114.85.215
2019-10-08 02:37:14
140.114.85.215 attackspambots
Oct  2 04:19:36 hcbbdb sshd\[8785\]: Invalid user oracle from 140.114.85.215
Oct  2 04:19:36 hcbbdb sshd\[8785\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=tifa.cs.nthu.edu.tw
Oct  2 04:19:37 hcbbdb sshd\[8785\]: Failed password for invalid user oracle from 140.114.85.215 port 42206 ssh2
Oct  2 04:24:33 hcbbdb sshd\[9304\]: Invalid user cao from 140.114.85.215
Oct  2 04:24:33 hcbbdb sshd\[9304\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=tifa.cs.nthu.edu.tw
2019-10-02 19:24:13
140.114.85.215 attack
Oct  2 00:50:23 hcbbdb sshd\[17352\]: Invalid user user from 140.114.85.215
Oct  2 00:50:23 hcbbdb sshd\[17352\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=tifa.cs.nthu.edu.tw
Oct  2 00:50:26 hcbbdb sshd\[17352\]: Failed password for invalid user user from 140.114.85.215 port 48912 ssh2
Oct  2 00:55:10 hcbbdb sshd\[17894\]: Invalid user user5 from 140.114.85.215
Oct  2 00:55:10 hcbbdb sshd\[17894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=tifa.cs.nthu.edu.tw
2019-10-02 09:03:18
140.114.85.215 attackspam
Sep 29 11:41:59 hcbb sshd\[16202\]: Invalid user smbtest from 140.114.85.215
Sep 29 11:41:59 hcbb sshd\[16202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=tifa.cs.nthu.edu.tw
Sep 29 11:42:02 hcbb sshd\[16202\]: Failed password for invalid user smbtest from 140.114.85.215 port 58494 ssh2
Sep 29 11:46:35 hcbb sshd\[16576\]: Invalid user admin from 140.114.85.215
Sep 29 11:46:35 hcbb sshd\[16576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=tifa.cs.nthu.edu.tw
2019-09-30 05:54:39
140.114.85.215 attack
Sep 28 05:54:14 srv206 sshd[1980]: Invalid user Ionutz from 140.114.85.215
...
2019-09-28 13:53:53
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.114.85.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51920
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;140.114.85.52.			IN	A

;; AUTHORITY SECTION:
.			410	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102301 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 24 13:06:56 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
52.85.114.140.in-addr.arpa domain name pointer speech.cs.nthu.edu.tw.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
52.85.114.140.in-addr.arpa	name = speech.cs.nthu.edu.tw.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
222.186.42.7 attackbots
02/15/2020-18:09:53.787731 222.186.42.7 Protocol: 6 ET SCAN Potential SSH Scan
2020-02-16 07:10:18
136.144.209.93 attack
scan z
2020-02-16 06:50:14
143.255.184.67 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-16 06:42:04
93.42.117.137 attack
Feb 15 23:20:08 MK-Soft-VM6 sshd[13458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.42.117.137 
Feb 15 23:20:10 MK-Soft-VM6 sshd[13458]: Failed password for invalid user support from 93.42.117.137 port 51689 ssh2
...
2020-02-16 07:16:23
132.232.35.22 attack
Feb 15 23:19:44 MK-Soft-VM3 sshd[5747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.35.22 
Feb 15 23:19:46 MK-Soft-VM3 sshd[5747]: Failed password for invalid user dalva1 from 132.232.35.22 port 40966 ssh2
...
2020-02-16 07:11:58
123.25.49.60 attackbots
Feb 15 23:20:49 grey postfix/smtpd\[29314\]: NOQUEUE: reject: RCPT from unknown\[123.25.49.60\]: 554 5.7.1 Service unavailable\; Client host \[123.25.49.60\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[123.25.49.60\]\; from=\ to=\ proto=ESMTP helo=\
...
2020-02-16 06:43:23
168.121.177.135 attackbots
Unauthorized connection attempt detected from IP address 168.121.177.135 to port 445
2020-02-16 07:04:38
128.68.198.8 attackspambots
TCP Port Scanning
2020-02-16 06:54:20
104.152.52.38 attackspam
Attempts against Pop3/IMAP
2020-02-16 06:38:38
143.255.127.23 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-16 07:05:29
170.247.242.171 attackspambots
Unauthorised access (Feb 16) SRC=170.247.242.171 LEN=40 TTL=41 ID=47045 TCP DPT=23 WINDOW=52240 SYN
2020-02-16 06:51:41
61.177.172.128 attackspambots
Feb 15 23:36:48 MK-Soft-Root2 sshd[30425]: Failed password for root from 61.177.172.128 port 24881 ssh2
Feb 15 23:36:53 MK-Soft-Root2 sshd[30425]: Failed password for root from 61.177.172.128 port 24881 ssh2
...
2020-02-16 06:42:41
34.94.117.159 attackspambots
/xmlrpc.php
2020-02-16 06:34:33
69.229.6.43 attack
Feb 15 23:58:19 dedicated sshd[6054]: Invalid user maria from 69.229.6.43 port 51584
2020-02-16 07:02:21
68.183.154.78 attack
Lines containing failures of 68.183.154.78
Feb 15 23:15:11 own sshd[31336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.154.78  user=r.r
Feb 15 23:15:13 own sshd[31336]: Failed password for r.r from 68.183.154.78 port 34662 ssh2
Feb 15 23:15:13 own sshd[31336]: Received disconnect from 68.183.154.78 port 34662:11: Bye Bye [preauth]
Feb 15 23:15:13 own sshd[31336]: Disconnected from authenticating user r.r 68.183.154.78 port 34662 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=68.183.154.78
2020-02-16 06:35:33

最近上报的IP列表

168.160.242.156 217.21.178.36 213.141.153.218 104.131.81.54
132.148.104.7 121.235.195.161 103.78.137.54 84.241.30.4
184.168.152.112 154.126.176.25 220.133.155.30 23.224.141.254
118.39.77.194 75.187.173.52 115.42.122.163 198.255.60.146
203.217.145.203 185.234.216.212 103.52.217.65 106.53.6.244