必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Unauthorized connection attempt detected from IP address 140.143.140.142 to port 22 [T]
2020-01-09 03:01:06
相同子网IP讨论:
IP 类型 评论内容 时间
140.143.140.242 attackspam
May  7 21:02:42 hosting sshd[30698]: Invalid user xpm from 140.143.140.242 port 43654
...
2020-05-08 03:19:47
140.143.140.242 attackbotsspam
Tried sshing with brute force.
2020-04-23 00:57:34
140.143.140.242 attack
Invalid user ubuntu from 140.143.140.242 port 60730
2020-04-22 00:56:17
140.143.140.242 attack
Brute force attempt
2020-04-19 04:47:12
140.143.140.242 attackbotsspam
k+ssh-bruteforce
2020-04-16 07:37:32
140.143.140.242 attack
SSH bruteforce
2020-04-02 15:12:25
140.143.140.242 attackbots
Mar 29 20:17:15 rotator sshd\[23263\]: Invalid user jwy from 140.143.140.242Mar 29 20:17:18 rotator sshd\[23263\]: Failed password for invalid user jwy from 140.143.140.242 port 50596 ssh2Mar 29 20:22:06 rotator sshd\[24052\]: Invalid user gny from 140.143.140.242Mar 29 20:22:08 rotator sshd\[24052\]: Failed password for invalid user gny from 140.143.140.242 port 50204 ssh2Mar 29 20:27:00 rotator sshd\[24831\]: Invalid user iqh from 140.143.140.242Mar 29 20:27:03 rotator sshd\[24831\]: Failed password for invalid user iqh from 140.143.140.242 port 49822 ssh2
...
2020-03-30 02:29:32
140.143.140.242 attackbots
Mar 26 05:49:09 lukav-desktop sshd\[32714\]: Invalid user qucheng from 140.143.140.242
Mar 26 05:49:09 lukav-desktop sshd\[32714\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.140.242
Mar 26 05:49:11 lukav-desktop sshd\[32714\]: Failed password for invalid user qucheng from 140.143.140.242 port 40040 ssh2
Mar 26 05:51:49 lukav-desktop sshd\[308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.140.242  user=mail
Mar 26 05:51:51 lukav-desktop sshd\[308\]: Failed password for mail from 140.143.140.242 port 44868 ssh2
2020-03-26 15:18:35
140.143.140.242 attackspambots
Feb 23 06:47:05 dedicated sshd[21991]: Invalid user diana from 140.143.140.242 port 52302
2020-02-23 13:55:28
140.143.140.242 attackbots
5x Failed Password
2020-02-21 16:21:36
140.143.140.242 attack
Feb 14 09:36:05 markkoudstaal sshd[6831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.140.242
Feb 14 09:36:07 markkoudstaal sshd[6831]: Failed password for invalid user geotail from 140.143.140.242 port 35194 ssh2
Feb 14 09:39:13 markkoudstaal sshd[7375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.140.242
2020-02-14 21:45:05
140.143.140.242 attackspam
" "
2020-02-07 02:38:08
140.143.140.139 attack
Aug 22 23:06:44 localhost sshd\[5348\]: Invalid user george from 140.143.140.139 port 60320
Aug 22 23:06:44 localhost sshd\[5348\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.140.139
Aug 22 23:06:46 localhost sshd\[5348\]: Failed password for invalid user george from 140.143.140.139 port 60320 ssh2
2019-08-23 07:07:44
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.143.140.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63955
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;140.143.140.142.		IN	A

;; AUTHORITY SECTION:
.			572	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010801 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 09 03:01:03 CST 2020
;; MSG SIZE  rcvd: 119
HOST信息:
Host 142.140.143.140.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.140.143.140.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
182.61.21.197 attack
Jun 25 16:31:16 ns41 sshd[26407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.21.197
Jun 25 16:31:16 ns41 sshd[26407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.21.197
2019-06-25 23:52:10
117.82.251.159 attackbotsspam
2019-06-25T08:47:35.463662mail01 postfix/smtpd[18463]: warning: unknown[117.82.251.159]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-06-25T08:47:49.492347mail01 postfix/smtpd[24374]: warning: unknown[117.82.251.159]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-06-25T08:48:08.352985mail01 postfix/smtpd[20865]: warning: unknown[117.82.251.159]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-06-26 00:19:26
123.207.95.223 attack
SMB Server BruteForce Attack
2019-06-26 00:42:53
14.174.174.27 attack
Unauthorized connection attempt from IP address 14.174.174.27 on Port 445(SMB)
2019-06-26 00:44:41
103.61.37.14 attackspam
Jun 25 16:30:23 ncomp sshd[31477]: Invalid user texdir from 103.61.37.14
Jun 25 16:30:23 ncomp sshd[31477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.61.37.14
Jun 25 16:30:23 ncomp sshd[31477]: Invalid user texdir from 103.61.37.14
Jun 25 16:30:25 ncomp sshd[31477]: Failed password for invalid user texdir from 103.61.37.14 port 34817 ssh2
2019-06-26 00:36:30
157.230.128.181 attackbots
Jun 25 08:48:20 [host] sshd[22535]: Invalid user samba from 157.230.128.181
Jun 25 08:48:20 [host] sshd[22535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.128.181
Jun 25 08:48:21 [host] sshd[22535]: Failed password for invalid user samba from 157.230.128.181 port 44296 ssh2
2019-06-26 00:06:05
94.242.58.98 attack
Jun 24 23:08:54 shadeyouvpn sshd[29914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.242.58.98  user=bin
Jun 24 23:08:56 shadeyouvpn sshd[29914]: Failed password for bin from 94.242.58.98 port 37882 ssh2
Jun 24 23:08:56 shadeyouvpn sshd[29914]: Received disconnect from 94.242.58.98: 11: Bye Bye [preauth]
Jun 24 23:21:15 shadeyouvpn sshd[4850]: Invalid user wrapper from 94.242.58.98
Jun 24 23:21:15 shadeyouvpn sshd[4850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.242.58.98 
Jun 24 23:21:18 shadeyouvpn sshd[4850]: Failed password for invalid user wrapper from 94.242.58.98 port 48428 ssh2
Jun 24 23:21:18 shadeyouvpn sshd[4850]: Received disconnect from 94.242.58.98: 11: Bye Bye [preauth]
Jun 24 23:22:55 shadeyouvpn sshd[5883]: Invalid user cuan from 94.242.58.98
Jun 24 23:22:55 shadeyouvpn sshd[5883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh rus........
-------------------------------
2019-06-26 00:46:36
23.254.19.98 attackspam
bad bot
2019-06-26 00:18:25
177.87.8.101 attackbots
Unauthorized connection attempt from IP address 177.87.8.101 on Port 445(SMB)
2019-06-25 23:58:25
67.205.131.152 attackbots
fail2ban honeypot
2019-06-26 00:19:00
125.23.144.138 attackbots
Unauthorised access (Jun 25) SRC=125.23.144.138 LEN=52 TTL=120 ID=21585 DF TCP DPT=445 WINDOW=8192 SYN
2019-06-25 23:56:46
185.85.207.78 attackspam
C1,WP GET /wp-login.php
2019-06-26 00:47:09
5.188.62.5 attackbots
IP: 5.188.62.5
ASN: AS44050 Petersburg Internet Network ltd.
Port: World Wide Web HTTP 80
Found in one or more Blacklists
Date: 25/06/2019 9:38:44 AM UTC
2019-06-25 23:55:28
176.59.108.245 attackbotsspam
php WP PHPmyadamin ABUSE blocked for 12h
2019-06-26 00:25:03
119.93.111.169 attack
Unauthorized connection attempt from IP address 119.93.111.169 on Port 445(SMB)
2019-06-26 00:22:48

最近上报的IP列表

106.87.89.102 58.48.254.22 49.146.34.169 112.17.23.44
42.118.71.225 42.117.213.52 42.115.134.119 42.112.100.238
34.77.175.140 27.3.134.91 14.215.91.82 1.180.72.186
1.53.26.70 222.208.0.96 222.93.6.149 221.125.157.177
218.65.109.2 218.10.28.58 126.135.36.182 204.2.146.221