必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): Amazon Data Services Singapore

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Oct 16 11:53:46 venus sshd\[9036\]: Invalid user rsync from 18.139.97.31 port 55610
Oct 16 11:53:46 venus sshd\[9036\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.139.97.31
Oct 16 11:53:48 venus sshd\[9036\]: Failed password for invalid user rsync from 18.139.97.31 port 55610 ssh2
...
2019-10-16 20:09:54
attackbots
(sshd) Failed SSH login from 18.139.97.31 (SG/Singapore/ec2-18-139-97-31.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 16 06:44:29 server2 sshd[14905]: Failed password for root from 18.139.97.31 port 39336 ssh2
Oct 16 06:56:06 server2 sshd[15162]: Invalid user dnsftp from 18.139.97.31 port 45314
Oct 16 06:56:08 server2 sshd[15162]: Failed password for invalid user dnsftp from 18.139.97.31 port 45314 ssh2
Oct 16 07:01:23 server2 sshd[15298]: Failed password for root from 18.139.97.31 port 57608 ssh2
Oct 16 07:06:14 server2 sshd[15387]: Invalid user dirmngr from 18.139.97.31 port 41718
2019-10-16 13:42:32
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.139.97.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19295
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;18.139.97.31.			IN	A

;; AUTHORITY SECTION:
.			590	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101501 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 16 13:42:26 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
31.97.139.18.in-addr.arpa domain name pointer ec2-18-139-97-31.ap-southeast-1.compute.amazonaws.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
31.97.139.18.in-addr.arpa	name = ec2-18-139-97-31.ap-southeast-1.compute.amazonaws.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
181.30.28.174 attackspam
Jun  4 16:02:54 PorscheCustomer sshd[22739]: Failed password for root from 181.30.28.174 port 55004 ssh2
Jun  4 16:07:33 PorscheCustomer sshd[22987]: Failed password for root from 181.30.28.174 port 44064 ssh2
...
2020-06-04 23:10:20
112.85.42.181 attackspam
Jun  4 17:11:37 santamaria sshd\[10376\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.181  user=root
Jun  4 17:11:39 santamaria sshd\[10376\]: Failed password for root from 112.85.42.181 port 40165 ssh2
Jun  4 17:11:53 santamaria sshd\[10376\]: Failed password for root from 112.85.42.181 port 40165 ssh2
...
2020-06-04 23:17:52
115.236.19.35 attack
Jun  4 15:06:34 root sshd[1790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.236.19.35  user=root
Jun  4 15:06:37 root sshd[1790]: Failed password for root from 115.236.19.35 port 2610 ssh2
...
2020-06-04 23:21:05
128.199.207.238 attack
Jun  4 15:54:58 root sshd[3078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.207.238  user=root
Jun  4 15:55:00 root sshd[3078]: Failed password for root from 128.199.207.238 port 36252 ssh2
...
2020-06-04 23:23:59
1.54.133.10 attackbotsspam
Jun  4 14:57:59 marvibiene sshd[39694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.54.133.10  user=root
Jun  4 14:58:01 marvibiene sshd[39694]: Failed password for root from 1.54.133.10 port 45852 ssh2
Jun  4 15:02:23 marvibiene sshd[39733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.54.133.10  user=root
Jun  4 15:02:26 marvibiene sshd[39733]: Failed password for root from 1.54.133.10 port 44978 ssh2
...
2020-06-04 23:18:57
171.246.171.165 attackspam
Port probing on unauthorized port 81
2020-06-04 22:56:19
180.166.141.58 attackbots
[H1.VM4] Blocked by UFW
2020-06-04 23:42:26
54.37.153.80 attack
Jun  4 15:29:55 vmd17057 sshd[4190]: Failed password for root from 54.37.153.80 port 38392 ssh2
...
2020-06-04 23:11:59
104.41.39.100 attackbotsspam
Jun  4 00:08:27 thostnamean sshd[25945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.41.39.100  user=r.r
Jun  4 00:08:29 thostnamean sshd[25945]: Failed password for r.r from 104.41.39.100 port 35618 ssh2
Jun  4 00:08:30 thostnamean sshd[25945]: Received disconnect from 104.41.39.100 port 35618:11: Bye Bye [preauth]
Jun  4 00:08:30 thostnamean sshd[25945]: Disconnected from authenticating user r.r 104.41.39.100 port 35618 [preauth]
Jun  4 00:18:28 thostnamean sshd[26384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.41.39.100  user=r.r
Jun  4 00:18:30 thostnamean sshd[26384]: Failed password for r.r from 104.41.39.100 port 47568 ssh2
Jun  4 00:18:32 thostnamean sshd[26384]: Received disconnect from 104.41.39.100 port 47568:11: Bye Bye [preauth]
Jun  4 00:18:32 thostnamean sshd[26384]: Disconnected from authenticating user r.r 104.41.39.100 port 47568 [preauth]
Jun  4 00:22:43 ........
-------------------------------
2020-06-04 23:16:35
62.122.156.79 attackspam
Jun  4 20:06:50 itv-usvr-01 sshd[3222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.122.156.79  user=root
Jun  4 20:06:53 itv-usvr-01 sshd[3222]: Failed password for root from 62.122.156.79 port 56914 ssh2
Jun  4 20:10:21 itv-usvr-01 sshd[3497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.122.156.79  user=root
Jun  4 20:10:23 itv-usvr-01 sshd[3497]: Failed password for root from 62.122.156.79 port 50832 ssh2
Jun  4 20:13:43 itv-usvr-01 sshd[3624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.122.156.79  user=root
Jun  4 20:13:45 itv-usvr-01 sshd[3624]: Failed password for root from 62.122.156.79 port 44748 ssh2
2020-06-04 23:11:42
61.141.221.236 attackspambots
Jun  3 11:06:52 host sshd[18969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.141.221.236  user=r.r
Jun  3 11:06:54 host sshd[18969]: Failed password for r.r from 61.141.221.236 port 39012 ssh2
Jun  3 11:06:54 host sshd[18969]: Received disconnect from 61.141.221.236: 11: Bye Bye [preauth]
Jun  3 11:09:44 host sshd[27955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.141.221.236  user=r.r
Jun  3 11:09:46 host sshd[27955]: Failed password for r.r from 61.141.221.236 port 40632 ssh2
Jun  3 11:09:47 host sshd[27955]: Received disconnect from 61.141.221.236: 11: Bye Bye [preauth]
Jun  3 11:11:27 host sshd[1318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.141.221.236  user=r.r
Jun  3 11:11:29 host sshd[1318]: Failed password for r.r from 61.141.221.236 port 33036 ssh2
Jun  3 11:11:30 host sshd[1318]: Received disconnect from 61.141.221.........
-------------------------------
2020-06-04 23:00:18
23.106.159.187 attackspam
Lines containing failures of 23.106.159.187
Jun  3 23:46:27 shared12 sshd[2410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.106.159.187  user=r.r
Jun  3 23:46:29 shared12 sshd[2410]: Failed password for r.r from 23.106.159.187 port 58367 ssh2
Jun  3 23:46:30 shared12 sshd[2410]: Received disconnect from 23.106.159.187 port 58367:11: Bye Bye [preauth]
Jun  3 23:46:30 shared12 sshd[2410]: Disconnected from authenticating user r.r 23.106.159.187 port 58367 [preauth]
Jun  4 00:00:58 shared12 sshd[7289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.106.159.187  user=r.r
Jun  4 00:01:01 shared12 sshd[7289]: Failed password for r.r from 23.106.159.187 port 39296 ssh2
Jun  4 00:01:01 shared12 sshd[7289]: Received disconnect from 23.106.159.187 port 39296:11: Bye Bye [preauth]
Jun  4 00:01:01 shared12 sshd[7289]: Disconnected from authenticating user r.r 23.106.159.187 port 39296 [preaut........
------------------------------
2020-06-04 23:13:26
152.32.109.98 attackbots
php WP PHPmyadamin ABUSE blocked for 12h
2020-06-04 23:01:07
122.228.19.80 attack
Jun  4 16:33:28 debian-2gb-nbg1-2 kernel: \[13539966.101122\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=122.228.19.80 DST=195.201.40.59 LEN=695 TOS=0x00 PREC=0x00 TTL=111 ID=54787 PROTO=UDP SPT=54692 DPT=3702 LEN=675
2020-06-04 23:08:58
117.86.12.0 attack
Blocked 117.86.12.0 For policy violation
2020-06-04 23:37:15

最近上报的IP列表

91.211.46.107 47.88.106.172 211.163.236.40 31.179.183.30
209.87.126.170 41.65.240.109 95.163.155.166 205.236.25.191
48.252.170.50 90.125.158.121 180.55.74.104 244.241.36.181
38.39.147.24 69.173.1.145 185.116.65.209 106.192.52.180
219.219.91.195 174.52.25.131 58.6.3.120 56.139.86.144