必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Kenya

运营商(isp): Internet Solutions Kenya

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Invalid user faridah from 165.90.21.49 port 27988
2019-08-01 02:42:44
attack
Jul 29 09:38:00 debian sshd\[9482\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.90.21.49  user=root
Jul 29 09:38:02 debian sshd\[9482\]: Failed password for root from 165.90.21.49 port 55341 ssh2
...
2019-07-29 16:49:32
attackbotsspam
Jul 26 19:47:06 MK-Soft-VM3 sshd\[28053\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.90.21.49  user=root
Jul 26 19:47:09 MK-Soft-VM3 sshd\[28053\]: Failed password for root from 165.90.21.49 port 4720 ssh2
Jul 26 19:53:14 MK-Soft-VM3 sshd\[28396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.90.21.49  user=root
...
2019-07-27 04:05:41
attackbots
Jul 22 05:14:24 ArkNodeAT sshd\[14012\]: Invalid user backup2 from 165.90.21.49
Jul 22 05:14:24 ArkNodeAT sshd\[14012\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.90.21.49
Jul 22 05:14:26 ArkNodeAT sshd\[14012\]: Failed password for invalid user backup2 from 165.90.21.49 port 31739 ssh2
2019-07-22 11:27:48
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 165.90.21.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23731
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;165.90.21.49.			IN	A

;; AUTHORITY SECTION:
.			2708	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072101 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 22 11:27:42 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
Host 49.21.90.165.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 49.21.90.165.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
189.135.188.234 attack
Lines containing failures of 189.135.188.234
Jun  4 05:39:07 nextcloud sshd[28053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.135.188.234  user=r.r
Jun  4 05:39:09 nextcloud sshd[28053]: Failed password for r.r from 189.135.188.234 port 47334 ssh2
Jun  4 05:39:09 nextcloud sshd[28053]: Received disconnect from 189.135.188.234 port 47334:11: Bye Bye [preauth]
Jun  4 05:39:09 nextcloud sshd[28053]: Disconnected from authenticating user r.r 189.135.188.234 port 47334 [preauth]
Jun  4 05:46:54 nextcloud sshd[28931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.135.188.234  user=r.r
Jun  4 05:46:55 nextcloud sshd[28931]: Failed password for r.r from 189.135.188.234 port 53880 ssh2
Jun  4 05:46:56 nextcloud sshd[28931]: Received disconnect from 189.135.188.234 port 53880:11: Bye Bye [preauth]
Jun  4 05:46:56 nextcloud sshd[28931]: Disconnected from authenticating user r.r 189.135.1........
------------------------------
2020-06-05 05:35:14
167.99.137.75 attackbotsspam
(sshd) Failed SSH login from 167.99.137.75 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun  4 22:12:19 elude sshd[29127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.137.75  user=root
Jun  4 22:12:21 elude sshd[29127]: Failed password for root from 167.99.137.75 port 56430 ssh2
Jun  4 22:22:26 elude sshd[30712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.137.75  user=root
Jun  4 22:22:29 elude sshd[30712]: Failed password for root from 167.99.137.75 port 51236 ssh2
Jun  4 22:25:25 elude sshd[31155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.137.75  user=root
2020-06-05 05:39:22
159.65.231.3 attackspambots
Fail2Ban Ban Triggered
2020-06-05 05:42:19
35.224.121.138 attack
Jun  4 22:20:26 server sshd[45691]: Failed password for root from 35.224.121.138 port 51318 ssh2
Jun  4 22:25:13 server sshd[49454]: Failed password for root from 35.224.121.138 port 39944 ssh2
Jun  4 22:28:41 server sshd[52212]: Failed password for root from 35.224.121.138 port 43764 ssh2
2020-06-05 05:09:40
61.141.221.236 attackspam
2020-06-04T20:55:27.302354ionos.janbro.de sshd[44968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.141.221.236  user=root
2020-06-04T20:55:29.095633ionos.janbro.de sshd[44968]: Failed password for root from 61.141.221.236 port 56272 ssh2
2020-06-04T20:58:50.653096ionos.janbro.de sshd[44993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.141.221.236  user=root
2020-06-04T20:58:52.606733ionos.janbro.de sshd[44993]: Failed password for root from 61.141.221.236 port 46316 ssh2
2020-06-04T21:02:14.348585ionos.janbro.de sshd[45019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.141.221.236  user=root
2020-06-04T21:02:15.992154ionos.janbro.de sshd[45019]: Failed password for root from 61.141.221.236 port 36358 ssh2
2020-06-04T21:05:35.580263ionos.janbro.de sshd[45031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61
...
2020-06-05 05:38:10
106.12.89.154 attackspam
failed root login
2020-06-05 05:03:12
206.189.210.235 attack
Jun  4 15:21:35 server1 sshd\[21164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.210.235  user=root
Jun  4 15:21:36 server1 sshd\[21164\]: Failed password for root from 206.189.210.235 port 51904 ssh2
Jun  4 15:24:56 server1 sshd\[21986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.210.235  user=root
Jun  4 15:24:58 server1 sshd\[21986\]: Failed password for root from 206.189.210.235 port 47214 ssh2
Jun  4 15:28:18 server1 sshd\[22912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.210.235  user=root
...
2020-06-05 05:34:44
222.186.30.57 attack
Jun  4 23:02:40 abendstille sshd\[24291\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.57  user=root
Jun  4 23:02:42 abendstille sshd\[24291\]: Failed password for root from 222.186.30.57 port 32985 ssh2
Jun  4 23:02:48 abendstille sshd\[24334\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.57  user=root
Jun  4 23:02:50 abendstille sshd\[24334\]: Failed password for root from 222.186.30.57 port 59594 ssh2
Jun  4 23:02:52 abendstille sshd\[24334\]: Failed password for root from 222.186.30.57 port 59594 ssh2
...
2020-06-05 05:15:30
222.186.15.115 attackspambots
Blocked by jail recidive
2020-06-05 05:05:59
180.168.212.6 attack
(sshd) Failed SSH login from 180.168.212.6 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun  5 00:00:34 s1 sshd[15043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.212.6  user=root
Jun  5 00:00:36 s1 sshd[15043]: Failed password for root from 180.168.212.6 port 53150 ssh2
Jun  5 00:03:50 s1 sshd[15186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.212.6  user=root
Jun  5 00:03:52 s1 sshd[15186]: Failed password for root from 180.168.212.6 port 51506 ssh2
Jun  5 00:07:30 s1 sshd[15550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.212.6  user=root
2020-06-05 05:32:52
124.248.48.105 attackspambots
Jun  4 20:17:29 localhost sshd[1368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.248.48.105  user=root
Jun  4 20:17:30 localhost sshd[1368]: Failed password for root from 124.248.48.105 port 33400 ssh2
Jun  4 20:20:36 localhost sshd[1667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.248.48.105  user=root
Jun  4 20:20:39 localhost sshd[1667]: Failed password for root from 124.248.48.105 port 54590 ssh2
Jun  4 20:23:44 localhost sshd[1966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.248.48.105  user=root
Jun  4 20:23:45 localhost sshd[1966]: Failed password for root from 124.248.48.105 port 47528 ssh2
...
2020-06-05 05:09:16
222.186.42.136 attackspambots
Jun  4 23:08:45 vps sshd[517204]: Failed password for root from 222.186.42.136 port 45612 ssh2
Jun  4 23:08:47 vps sshd[517204]: Failed password for root from 222.186.42.136 port 45612 ssh2
Jun  4 23:08:57 vps sshd[518131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.136  user=root
Jun  4 23:08:59 vps sshd[518131]: Failed password for root from 222.186.42.136 port 26569 ssh2
Jun  4 23:09:01 vps sshd[518131]: Failed password for root from 222.186.42.136 port 26569 ssh2
...
2020-06-05 05:17:28
167.114.203.73 attack
(sshd) Failed SSH login from 167.114.203.73 (CA/Canada/ip73.ip-167-114-203.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun  4 22:13:44 amsweb01 sshd[21769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.203.73  user=root
Jun  4 22:13:46 amsweb01 sshd[21769]: Failed password for root from 167.114.203.73 port 57094 ssh2
Jun  4 22:20:41 amsweb01 sshd[23599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.203.73  user=root
Jun  4 22:20:44 amsweb01 sshd[23599]: Failed password for root from 167.114.203.73 port 43190 ssh2
Jun  4 22:23:23 amsweb01 sshd[24276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.203.73  user=root
2020-06-05 05:28:18
5.253.86.207 attackbots
ssh intrusion attempt
2020-06-05 05:30:08
106.12.99.204 attackspam
Jun  4 17:17:07 ny01 sshd[15121]: Failed password for root from 106.12.99.204 port 53944 ssh2
Jun  4 17:20:51 ny01 sshd[15614]: Failed password for root from 106.12.99.204 port 48986 ssh2
2020-06-05 05:33:21

最近上报的IP列表

132.145.204.58 81.14.209.234 5.202.93.155 41.41.14.210
185.171.233.141 131.221.185.114 114.47.168.140 95.38.79.52
103.92.153.69 177.130.9.212 156.197.180.218 204.216.66.36
122.176.95.125 102.206.105.80 80.245.201.221 180.202.26.11
186.41.88.29 85.96.192.156 201.136.64.20 201.250.159.208