必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): Alibaba.com LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbotsspam
Jul 27 13:35:52 myhostname sshd[19591]: Invalid user user from 147.139.132.12
Jul 27 13:35:52 myhostname sshd[19591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.139.132.12
Jul 27 13:35:54 myhostname sshd[19591]: Failed password for invalid user user from 147.139.132.12 port 42814 ssh2
Jul 27 13:35:54 myhostname sshd[19591]: Received disconnect from 147.139.132.12 port 42814:11: Bye Bye [preauth]
Jul 27 13:35:54 myhostname sshd[19591]: Disconnected from 147.139.132.12 port 42814 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=147.139.132.12
2020-07-28 02:53:01
相同子网IP讨论:
IP 类型 评论内容 时间
147.139.132.238 attackspam
Invalid user sshvpn from 147.139.132.238 port 38648
2020-02-28 09:23:35
147.139.132.146 attackspambots
SSH login attempts brute force.
2020-02-24 03:14:59
147.139.132.146 attackbots
Feb  2 14:38:40 sd-53420 sshd\[23527\]: Invalid user support from 147.139.132.146
Feb  2 14:38:40 sd-53420 sshd\[23527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.139.132.146
Feb  2 14:38:42 sd-53420 sshd\[23527\]: Failed password for invalid user support from 147.139.132.146 port 36490 ssh2
Feb  2 14:41:21 sd-53420 sshd\[23941\]: Invalid user 1qaz@WSX from 147.139.132.146
Feb  2 14:41:21 sd-53420 sshd\[23941\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.139.132.146
...
2020-02-02 21:59:37
147.139.132.146 attack
Jan 21 09:55:36 v22018076590370373 sshd[22185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.139.132.146 
...
2020-02-02 00:28:29
147.139.132.146 attack
Unauthorized connection attempt detected from IP address 147.139.132.146 to port 2220 [J]
2020-01-21 20:22:04
147.139.132.146 attack
Jan 14 18:09:24 firewall sshd[16186]: Invalid user webadmin from 147.139.132.146
Jan 14 18:09:25 firewall sshd[16186]: Failed password for invalid user webadmin from 147.139.132.146 port 45546 ssh2
Jan 14 18:16:40 firewall sshd[16356]: Invalid user sapdb from 147.139.132.146
...
2020-01-15 06:14:31
147.139.132.146 attackbots
Jan  5 19:40:36 vps46666688 sshd[27454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.139.132.146
Jan  5 19:40:38 vps46666688 sshd[27454]: Failed password for invalid user sysadmin from 147.139.132.146 port 49658 ssh2
...
2020-01-06 07:01:17
147.139.132.146 attackbotsspam
Jan  1 23:39:49 server sshd[37817]: Failed password for invalid user pracownik from 147.139.132.146 port 38630 ssh2
Jan  1 23:46:22 server sshd[38176]: Failed password for invalid user oracle from 147.139.132.146 port 50114 ssh2
Jan  1 23:50:46 server sshd[38423]: Failed password for root from 147.139.132.146 port 51552 ssh2
2020-01-02 09:22:28
147.139.132.146 attack
$f2bV_matches
2019-12-30 05:44:38
147.139.132.146 attack
Dec 29 13:52:50 server sshd\[9298\]: Invalid user menashi from 147.139.132.146
Dec 29 13:52:50 server sshd\[9298\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.139.132.146 
Dec 29 13:52:53 server sshd\[9298\]: Failed password for invalid user menashi from 147.139.132.146 port 33044 ssh2
Dec 29 14:05:18 server sshd\[12226\]: Invalid user ach from 147.139.132.146
Dec 29 14:05:18 server sshd\[12226\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.139.132.146 
...
2019-12-29 22:41:10
147.139.132.146 attackspam
Dec  8 15:45:05 firewall sshd[22286]: Invalid user suer from 147.139.132.146
Dec  8 15:45:07 firewall sshd[22286]: Failed password for invalid user suer from 147.139.132.146 port 44958 ssh2
Dec  8 15:53:11 firewall sshd[22493]: Invalid user ftp from 147.139.132.146
...
2019-12-09 05:57:36
147.139.132.146 attackbots
Dec  6 06:30:31 eddieflores sshd\[13356\]: Invalid user Sporting2016 from 147.139.132.146
Dec  6 06:30:31 eddieflores sshd\[13356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.139.132.146
Dec  6 06:30:33 eddieflores sshd\[13356\]: Failed password for invalid user Sporting2016 from 147.139.132.146 port 45514 ssh2
Dec  6 06:39:51 eddieflores sshd\[14217\]: Invalid user test222 from 147.139.132.146
Dec  6 06:39:51 eddieflores sshd\[14217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.139.132.146
2019-12-07 01:25:45
147.139.132.146 attackspam
Invalid user jaquier from 147.139.132.146 port 57298
2019-11-29 21:19:06
147.139.132.146 attack
Nov 25 01:08:13 Aberdeen-m4-Access auth.info sshd[5160]: Invalid user samsudin from 147.139.132.146 port 34206
Nov 25 01:08:13 Aberdeen-m4-Access auth.info sshd[5160]: Failed password for invalid user samsudin from 147.139.132.146 port 34206 ssh2
Nov 25 01:08:13 Aberdeen-m4-Access auth.notice sshguard[12566]: Attack from "147.139.132.146" on service 100 whostnameh danger 10.
Nov 25 01:08:13 Aberdeen-m4-Access auth.notice sshguard[12566]: Attack from "147.139.132.146" on service 100 whostnameh danger 10.
Nov 25 01:08:13 Aberdeen-m4-Access auth.info sshd[5160]: Received disconnect from 147.139.132.146 port 34206:11: Bye Bye [preauth]
Nov 25 01:08:13 Aberdeen-m4-Access auth.info sshd[5160]: Disconnected from 147.139.132.146 port 34206 [preauth]
Nov 25 01:08:14 Aberdeen-m4-Access auth.notice sshguard[12566]: Attack from "147.139.132.146" on service 100 whostnameh danger 10.
Nov 25 01:08:14 Aberdeen-m4-Access auth.warn sshguard[12566]: Blocking "147.139.132.146/32" for 240 se........
------------------------------
2019-11-25 17:23:26
147.139.132.146 attackspam
Nov 20 08:23:46 web1 sshd\[14839\]: Invalid user odroid from 147.139.132.146
Nov 20 08:23:46 web1 sshd\[14839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.139.132.146
Nov 20 08:23:48 web1 sshd\[14839\]: Failed password for invalid user odroid from 147.139.132.146 port 54626 ssh2
Nov 20 08:30:34 web1 sshd\[15408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.139.132.146  user=root
Nov 20 08:30:36 web1 sshd\[15408\]: Failed password for root from 147.139.132.146 port 33688 ssh2
2019-11-21 06:34:45
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 147.139.132.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7682
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;147.139.132.12.			IN	A

;; AUTHORITY SECTION:
.			460	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072701 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 28 02:52:57 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 12.132.139.147.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 12.132.139.147.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
159.89.53.183 attackbots
(sshd) Failed SSH login from 159.89.53.183 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  6 08:19:26 optimus sshd[30495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.53.183  user=root
Oct  6 08:19:28 optimus sshd[30495]: Failed password for root from 159.89.53.183 port 58896 ssh2
Oct  6 08:35:51 optimus sshd[7243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.53.183  user=root
Oct  6 08:35:53 optimus sshd[7243]: Failed password for root from 159.89.53.183 port 47300 ssh2
Oct  6 08:41:25 optimus sshd[8990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.53.183  user=root
2020-10-06 23:22:43
45.55.52.145 attack
sshd: Failed password for .... from 45.55.52.145 port 12902 ssh2 (8 attempts)
2020-10-06 23:33:51
192.99.57.32 attack
(sshd) Failed SSH login from 192.99.57.32 (CA/Canada/32.ip-192-99-57.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  6 06:36:28 server sshd[18407]: Failed password for root from 192.99.57.32 port 43676 ssh2
Oct  6 06:50:55 server sshd[22256]: Failed password for root from 192.99.57.32 port 49842 ssh2
Oct  6 06:55:21 server sshd[23503]: Failed password for root from 192.99.57.32 port 57432 ssh2
Oct  6 06:59:43 server sshd[24635]: Failed password for root from 192.99.57.32 port 36790 ssh2
Oct  6 07:03:45 server sshd[25763]: Failed password for root from 192.99.57.32 port 44380 ssh2
2020-10-06 23:54:46
212.83.183.57 attackbots
Oct  6 16:41:08 santamaria sshd\[14954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.83.183.57  user=root
Oct  6 16:41:10 santamaria sshd\[14954\]: Failed password for root from 212.83.183.57 port 26973 ssh2
Oct  6 16:44:42 santamaria sshd\[14999\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.83.183.57  user=root
...
2020-10-06 23:23:19
122.51.186.86 attack
(sshd) Failed SSH login from 122.51.186.86 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  6 09:49:24 server sshd[4805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.186.86  user=root
Oct  6 09:49:26 server sshd[4805]: Failed password for root from 122.51.186.86 port 42920 ssh2
Oct  6 10:05:26 server sshd[8746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.186.86  user=root
Oct  6 10:05:28 server sshd[8746]: Failed password for root from 122.51.186.86 port 42444 ssh2
Oct  6 10:07:40 server sshd[9392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.186.86  user=root
2020-10-06 23:46:20
125.87.84.242 attackbotsspam
Oct  6 04:27:51 w sshd[24634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.84.242  user=r.r
Oct  6 04:27:53 w sshd[24634]: Failed password for r.r from 125.87.84.242 port 47995 ssh2
Oct  6 04:28:01 w sshd[24634]: Received disconnect from 125.87.84.242 port 47995:11: Bye Bye [preauth]
Oct  6 04:28:01 w sshd[24634]: Disconnected from 125.87.84.242 port 47995 [preauth]
Oct  6 04:33:34 w sshd[24657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.84.242  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=125.87.84.242
2020-10-06 23:24:29
112.21.188.235 attackbots
Oct  6 16:11:09 server sshd[27890]: Failed password for root from 112.21.188.235 port 37854 ssh2
Oct  6 16:13:52 server sshd[29231]: Failed password for root from 112.21.188.235 port 46100 ssh2
Oct  6 16:19:12 server sshd[32106]: Failed password for root from 112.21.188.235 port 34470 ssh2
2020-10-06 23:53:57
209.222.101.251 attackspam
$f2bV_matches
2020-10-06 23:16:13
50.66.177.24 attackspam
Oct  6 20:40:43 itv-usvr-02 sshd[11340]: Invalid user pi from 50.66.177.24 port 53842
Oct  6 20:40:43 itv-usvr-02 sshd[11338]: Invalid user pi from 50.66.177.24 port 53838
Oct  6 20:40:43 itv-usvr-02 sshd[11340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.66.177.24
Oct  6 20:40:43 itv-usvr-02 sshd[11340]: Invalid user pi from 50.66.177.24 port 53842
Oct  6 20:40:45 itv-usvr-02 sshd[11340]: Failed password for invalid user pi from 50.66.177.24 port 53842 ssh2
Oct  6 20:40:43 itv-usvr-02 sshd[11338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.66.177.24
Oct  6 20:40:43 itv-usvr-02 sshd[11338]: Invalid user pi from 50.66.177.24 port 53838
Oct  6 20:40:45 itv-usvr-02 sshd[11338]: Failed password for invalid user pi from 50.66.177.24 port 53838 ssh2
2020-10-06 23:49:50
210.16.188.59 attack
Oct  6 15:02:38 marvibiene sshd[18414]: Failed password for root from 210.16.188.59 port 50144 ssh2
Oct  6 15:09:55 marvibiene sshd[18889]: Failed password for root from 210.16.188.59 port 50368 ssh2
2020-10-06 23:11:06
58.209.197.206 attackspambots
$f2bV_matches
2020-10-06 23:47:30
190.202.34.34 attackbots
Port scan on 1 port(s): 445
2020-10-06 23:19:54
212.64.95.187 attackbots
Oct  6 15:06:13 jumpserver sshd[528998]: Failed password for root from 212.64.95.187 port 55372 ssh2
Oct  6 15:10:39 jumpserver sshd[529029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.95.187  user=root
Oct  6 15:10:42 jumpserver sshd[529029]: Failed password for root from 212.64.95.187 port 48734 ssh2
...
2020-10-06 23:23:32
45.148.10.15 attackspam
$f2bV_matches
2020-10-06 23:19:23
51.158.124.238 attackspam
Invalid user wt from 51.158.124.238 port 41322
2020-10-06 23:29:05

最近上报的IP列表

172.52.191.236 230.85.202.43 90.31.149.53 126.102.219.93
246.133.134.113 54.196.250.245 3.85.189.128 34.214.106.141
38.82.232.45 245.161.148.19 74.52.203.148 113.168.132.134
35.199.67.17 6.240.76.138 200.35.2.171 45.90.57.225
190.199.142.68 165.3.91.27 95.158.50.201 77.63.120.240