必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Capital Online Data Service HK Co Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbots
Jun 13 07:21:27 pi sshd[5897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.52.106.199 
Jun 13 07:21:28 pi sshd[5897]: Failed password for invalid user gengjiao from 164.52.106.199 port 38634 ssh2
2020-07-24 05:50:35
attack
Jun 26 15:51:50 jumpserver sshd[227423]: Invalid user gian from 164.52.106.199 port 58612
Jun 26 15:51:51 jumpserver sshd[227423]: Failed password for invalid user gian from 164.52.106.199 port 58612 ssh2
Jun 26 15:55:47 jumpserver sshd[227471]: Invalid user martin from 164.52.106.199 port 44600
...
2020-06-27 00:10:31
attack
Jun 19 23:57:20 [host] sshd[23037]: pam_unix(sshd:
Jun 19 23:57:22 [host] sshd[23037]: Failed passwor
Jun 20 00:00:08 [host] sshd[23365]: Invalid user s
Jun 20 00:00:08 [host] sshd[23365]: pam_unix(sshd:
2020-06-20 06:23:59
attackbotsspam
Jun 16 20:56:12 OPSO sshd\[16481\]: Invalid user amber from 164.52.106.199 port 42978
Jun 16 20:56:12 OPSO sshd\[16481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.52.106.199
Jun 16 20:56:14 OPSO sshd\[16481\]: Failed password for invalid user amber from 164.52.106.199 port 42978 ssh2
Jun 16 21:00:07 OPSO sshd\[17350\]: Invalid user media from 164.52.106.199 port 58594
Jun 16 21:00:07 OPSO sshd\[17350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.52.106.199
2020-06-17 03:13:11
attackbots
Brute-Force,SSH
2020-05-29 19:19:08
attackspambots
sshd jail - ssh hack attempt
2020-05-28 13:48:34
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.52.106.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51750
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;164.52.106.199.			IN	A

;; AUTHORITY SECTION:
.			511	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052800 1800 900 604800 86400

;; Query time: 175 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 28 13:48:29 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 199.106.52.164.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 199.106.52.164.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
54.37.162.36 attackspam
$f2bV_matches
2020-09-04 05:35:19
222.186.173.142 attackspambots
Sep  3 23:16:48 pve1 sshd[5965]: Failed password for root from 222.186.173.142 port 61436 ssh2
Sep  3 23:16:53 pve1 sshd[5965]: Failed password for root from 222.186.173.142 port 61436 ssh2
...
2020-09-04 05:22:12
222.186.173.238 attackbotsspam
Sep  3 21:23:35 rush sshd[22596]: Failed password for root from 222.186.173.238 port 43166 ssh2
Sep  3 21:23:49 rush sshd[22596]: Failed password for root from 222.186.173.238 port 43166 ssh2
Sep  3 21:23:49 rush sshd[22596]: error: maximum authentication attempts exceeded for root from 222.186.173.238 port 43166 ssh2 [preauth]
...
2020-09-04 05:27:33
201.209.143.220 attack
1599151790 - 09/03/2020 18:49:50 Host: 201.209.143.220/201.209.143.220 Port: 445 TCP Blocked
2020-09-04 05:40:37
222.186.175.150 attackbotsspam
Sep  3 18:01:23 vps46666688 sshd[17714]: Failed password for root from 222.186.175.150 port 28690 ssh2
Sep  3 18:01:35 vps46666688 sshd[17714]: error: maximum authentication attempts exceeded for root from 222.186.175.150 port 28690 ssh2 [preauth]
...
2020-09-04 05:09:30
192.241.220.50 attackspambots
Icarus honeypot on github
2020-09-04 05:15:30
171.25.193.25 attackbotsspam
Sep  3 22:57:27 master sshd[65926]: Invalid user admin from 171.25.193.25 port 55966
Sep  3 22:57:28 master sshd[65929]: Invalid user admin from 171.25.193.25 port 56368
...
2020-09-04 05:30:47
62.176.115.154 attackbots
firewall-block, port(s): 445/tcp
2020-09-04 05:30:09
162.247.74.200 attack
Sep  3 21:46:30 srv-ubuntu-dev3 sshd[34028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.74.200  user=root
Sep  3 21:46:32 srv-ubuntu-dev3 sshd[34028]: Failed password for root from 162.247.74.200 port 47814 ssh2
Sep  3 21:46:34 srv-ubuntu-dev3 sshd[34028]: Failed password for root from 162.247.74.200 port 47814 ssh2
Sep  3 21:46:30 srv-ubuntu-dev3 sshd[34028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.74.200  user=root
Sep  3 21:46:32 srv-ubuntu-dev3 sshd[34028]: Failed password for root from 162.247.74.200 port 47814 ssh2
Sep  3 21:46:34 srv-ubuntu-dev3 sshd[34028]: Failed password for root from 162.247.74.200 port 47814 ssh2
Sep  3 21:46:30 srv-ubuntu-dev3 sshd[34028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.74.200  user=root
Sep  3 21:46:32 srv-ubuntu-dev3 sshd[34028]: Failed password for root from 162.247.74.200 port 4781
...
2020-09-04 05:13:40
217.182.192.217 attack
Sep 3 23:08:11 *hidden* sshd[21093]: Failed password for *hidden* from 217.182.192.217 port 42070 ssh2 Sep 3 23:08:14 *hidden* sshd[21093]: Failed password for *hidden* from 217.182.192.217 port 42070 ssh2 Sep 3 23:08:17 *hidden* sshd[21093]: Failed password for *hidden* from 217.182.192.217 port 42070 ssh2
2020-09-04 05:33:23
51.195.7.14 attack
[2020-09-03 17:23:19] NOTICE[1194] chan_sip.c: Registration from '' failed for '51.195.7.14:53321' - Wrong password
[2020-09-03 17:23:19] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-03T17:23:19.647-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5760",SessionID="0x7f2ddc0e4da8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.195.7.14/53321",Challenge="67c2a751",ReceivedChallenge="67c2a751",ReceivedHash="51f289abbee5fe1df95c27a0afbacea0"
[2020-09-03 17:23:33] NOTICE[1194] chan_sip.c: Registration from '' failed for '51.195.7.14:61058' - Wrong password
[2020-09-03 17:23:33] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-03T17:23:33.560-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5765",SessionID="0x7f2ddc0bf9a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.195.7.14/61058",
...
2020-09-04 05:38:26
73.6.227.20 attackbots
Sep  3 20:14:19 buvik sshd[9124]: Invalid user pi from 73.6.227.20
Sep  3 20:14:19 buvik sshd[9123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.6.227.20
Sep  3 20:14:21 buvik sshd[9123]: Failed password for invalid user pi from 73.6.227.20 port 42310 ssh2
...
2020-09-04 05:21:44
51.178.50.20 attackbots
2020-09-03T14:43:17.7470221495-001 sshd[1164]: Failed password for invalid user yxu from 51.178.50.20 port 34352 ssh2
2020-09-03T14:46:50.7152811495-001 sshd[1341]: Invalid user gmodserver from 51.178.50.20 port 39574
2020-09-03T14:46:50.7187001495-001 sshd[1341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.ip-51-178-50.eu
2020-09-03T14:46:50.7152811495-001 sshd[1341]: Invalid user gmodserver from 51.178.50.20 port 39574
2020-09-03T14:46:52.6435361495-001 sshd[1341]: Failed password for invalid user gmodserver from 51.178.50.20 port 39574 ssh2
2020-09-03T14:50:12.3693321495-001 sshd[1499]: Invalid user ten from 51.178.50.20 port 44804
...
2020-09-04 05:31:24
120.14.17.78 attackbots
/%23
2020-09-04 05:32:35
49.255.93.10 attackbotsspam
SSH bruteforce
2020-09-04 05:35:59

最近上报的IP列表

83.219.133.190 17.103.155.249 187.190.246.249 32.143.138.100
196.236.240.164 150.24.49.186 74.200.6.147 156.30.47.101
45.114.59.87 254.222.136.64 181.11.193.217 198.139.122.30
170.68.160.115 194.81.70.28 3.105.254.33 120.74.156.21
218.227.3.16 194.37.128.172 121.124.76.74 156.115.250.155