必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Brazil

运营商(isp): Telemar Norte Leste S.A.

主机名(hostname): unknown

机构(organization): Telemar Norte Leste S.A.

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspam
[ssh] SSH attack
2020-06-03 02:27:42
attackbotsspam
leo_www
2020-05-26 12:34:23
attackspam
2020-05-07T04:57:30.777826Z 15a31c0ac13f New connection: 200.149.231.50:58388 (172.17.0.5:2222) [session: 15a31c0ac13f]
2020-05-07T05:07:41.105426Z bfe3c9fffc24 New connection: 200.149.231.50:34272 (172.17.0.5:2222) [session: bfe3c9fffc24]
2020-05-07 16:02:38
attackspam
(sshd) Failed SSH login from 200.149.231.50 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 20 06:46:57 elude sshd[3973]: Invalid user zl from 200.149.231.50 port 49302
Apr 20 06:46:59 elude sshd[3973]: Failed password for invalid user zl from 200.149.231.50 port 49302 ssh2
Apr 20 06:54:50 elude sshd[5145]: Invalid user test2 from 200.149.231.50 port 37112
Apr 20 06:54:51 elude sshd[5145]: Failed password for invalid user test2 from 200.149.231.50 port 37112 ssh2
Apr 20 07:00:51 elude sshd[6091]: Invalid user re from 200.149.231.50 port 55110
2020-04-20 13:51:55
attack
(sshd) Failed SSH login from 200.149.231.50 (BR/Brazil/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 10 10:03:49 ubnt-55d23 sshd[25702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.149.231.50  user=root
Apr 10 10:03:52 ubnt-55d23 sshd[25702]: Failed password for root from 200.149.231.50 port 50140 ssh2
2020-04-10 16:44:02
attackbotsspam
Mar 31 23:27:25 sip sshd[21623]: Failed password for root from 200.149.231.50 port 54286 ssh2
Mar 31 23:29:09 sip sshd[22050]: Failed password for root from 200.149.231.50 port 45306 ssh2
2020-04-01 07:52:17
attackbots
Mar 17 08:32:48 php1 sshd\[8309\]: Invalid user jiayuanyang from 200.149.231.50
Mar 17 08:32:48 php1 sshd\[8309\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.149.231.50
Mar 17 08:32:50 php1 sshd\[8309\]: Failed password for invalid user jiayuanyang from 200.149.231.50 port 41296 ssh2
Mar 17 08:39:20 php1 sshd\[9129\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.149.231.50  user=root
Mar 17 08:39:22 php1 sshd\[9129\]: Failed password for root from 200.149.231.50 port 49436 ssh2
2020-03-18 05:08:57
attackspambots
Invalid user cron from 200.149.231.50 port 48594
2020-02-28 09:42:49
attackspambots
Feb 27 14:27:14 *** sshd[21806]: Invalid user xxx from 200.149.231.50
2020-02-27 23:09:39
attack
Automatic report - Banned IP Access
2020-02-14 21:03:24
attackbots
Unauthorized connection attempt detected from IP address 200.149.231.50 to port 2220 [J]
2020-02-06 21:06:45
attackbots
Unauthorized connection attempt detected from IP address 200.149.231.50 to port 2220 [J]
2020-01-30 02:13:13
attack
Unauthorized connection attempt detected from IP address 200.149.231.50 to port 2220 [J]
2020-01-16 20:15:38
attack
[Aegis] @ 2020-01-13 07:15:51  0000 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack
2020-01-13 14:49:33
attackspambots
Dec 20 15:52:56 icinga sshd[24394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.149.231.50
Dec 20 15:52:57 icinga sshd[24394]: Failed password for invalid user diem from 200.149.231.50 port 40726 ssh2
...
2019-12-21 01:24:41
attackbots
Invalid user guest from 200.149.231.50 port 58022
2019-12-20 04:21:07
attackspambots
2019-12-18T06:20:35.523371abusebot-7.cloudsearch.cf sshd\[13873\]: Invalid user webmaster from 200.149.231.50 port 41978
2019-12-18T06:20:35.529216abusebot-7.cloudsearch.cf sshd\[13873\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.149.231.50
2019-12-18T06:20:37.672847abusebot-7.cloudsearch.cf sshd\[13873\]: Failed password for invalid user webmaster from 200.149.231.50 port 41978 ssh2
2019-12-18T06:29:32.387681abusebot-7.cloudsearch.cf sshd\[13919\]: Invalid user admin from 200.149.231.50 port 45480
2019-12-18 16:02:34
attackbots
$f2bV_matches
2019-12-13 22:20:06
attackspambots
SSH Brute Force
2019-12-11 04:25:36
attackbots
Dec  4 18:58:03 h2177944 sshd\[22890\]: Invalid user vyse from 200.149.231.50 port 46926
Dec  4 18:58:03 h2177944 sshd\[22890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.149.231.50
Dec  4 18:58:05 h2177944 sshd\[22890\]: Failed password for invalid user vyse from 200.149.231.50 port 46926 ssh2
Dec  4 19:04:53 h2177944 sshd\[23539\]: Invalid user kaspon from 200.149.231.50 port 58146
...
2019-12-05 02:54:48
attackbots
Dec  3 08:33:29 wh01 sshd[30602]: Invalid user horst from 200.149.231.50 port 42022
Dec  3 08:33:29 wh01 sshd[30602]: Failed password for invalid user horst from 200.149.231.50 port 42022 ssh2
Dec  3 08:33:29 wh01 sshd[30602]: Received disconnect from 200.149.231.50 port 42022:11: Bye Bye [preauth]
Dec  3 08:33:29 wh01 sshd[30602]: Disconnected from 200.149.231.50 port 42022 [preauth]
Dec  3 08:41:33 wh01 sshd[31311]: Failed password for root from 200.149.231.50 port 38694 ssh2
Dec  3 09:02:01 wh01 sshd[441]: Invalid user brueck from 200.149.231.50 port 43838
Dec  3 09:02:01 wh01 sshd[441]: Failed password for invalid user brueck from 200.149.231.50 port 43838 ssh2
Dec  3 09:02:01 wh01 sshd[441]: Received disconnect from 200.149.231.50 port 43838:11: Bye Bye [preauth]
Dec  3 09:02:01 wh01 sshd[441]: Disconnected from 200.149.231.50 port 43838 [preauth]
Dec  3 09:08:52 wh01 sshd[1032]: Failed password for root from 200.149.231.50 port 54964 ssh2
Dec  3 09:08:52 wh01 sshd[1032]: Received
2019-12-03 19:32:01
attackbots
Nov 30 16:38:57 icinga sshd[29182]: Failed password for root from 200.149.231.50 port 44186 ssh2
...
2019-12-01 00:20:31
attackbotsspam
Nov 28 04:34:10 firewall sshd[28274]: Invalid user nfs from 200.149.231.50
Nov 28 04:34:12 firewall sshd[28274]: Failed password for invalid user nfs from 200.149.231.50 port 48054 ssh2
Nov 28 04:41:34 firewall sshd[28395]: Invalid user webmaster from 200.149.231.50
...
2019-11-28 16:32:27
attackspambots
frenzy
2019-11-26 20:22:05
attackbotsspam
Nov 23 20:21:51 hanapaa sshd\[22719\]: Invalid user dehlia from 200.149.231.50
Nov 23 20:21:51 hanapaa sshd\[22719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.149.231.50
Nov 23 20:21:53 hanapaa sshd\[22719\]: Failed password for invalid user dehlia from 200.149.231.50 port 47938 ssh2
Nov 23 20:29:50 hanapaa sshd\[23389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.149.231.50  user=root
Nov 23 20:29:51 hanapaa sshd\[23389\]: Failed password for root from 200.149.231.50 port 55526 ssh2
2019-11-24 14:47:49
attackspam
2019-11-09T16:48:10.296483shield sshd\[10737\]: Invalid user secapro from 200.149.231.50 port 51076
2019-11-09T16:48:10.300706shield sshd\[10737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.149.231.50
2019-11-09T16:48:12.094841shield sshd\[10737\]: Failed password for invalid user secapro from 200.149.231.50 port 51076 ssh2
2019-11-09T16:52:56.095569shield sshd\[11143\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.149.231.50  user=root
2019-11-09T16:52:58.818243shield sshd\[11143\]: Failed password for root from 200.149.231.50 port 59338 ssh2
2019-11-10 04:56:55
attack
Nov  5 05:54:40 ns41 sshd[8465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.149.231.50
2019-11-05 13:16:21
attack
Oct 28 06:04:19 v22018076622670303 sshd\[8865\]: Invalid user salman from 200.149.231.50 port 45556
Oct 28 06:04:19 v22018076622670303 sshd\[8865\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.149.231.50
Oct 28 06:04:20 v22018076622670303 sshd\[8865\]: Failed password for invalid user salman from 200.149.231.50 port 45556 ssh2
...
2019-10-28 15:11:11
attackbotsspam
Oct 21 05:53:30 *** sshd[31813]: Failed password for invalid user tmax from 200.149.231.50 port 43148 ssh2
2019-10-22 08:14:42
attackspambots
Oct 19 05:54:45 markkoudstaal sshd[21652]: Failed password for root from 200.149.231.50 port 51084 ssh2
Oct 19 06:00:50 markkoudstaal sshd[22200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.149.231.50
Oct 19 06:00:52 markkoudstaal sshd[22200]: Failed password for invalid user user from 200.149.231.50 port 34354 ssh2
2019-10-19 12:14:03
相同子网IP讨论:
IP 类型 评论内容 时间
200.149.231.74 attackspam
SMB Server BruteForce Attack
2019-09-03 19:26:31
200.149.231.74 attackbotsspam
Unauthorised access (Aug 14) SRC=200.149.231.74 LEN=40 TTL=236 ID=770 TCP DPT=445 WINDOW=1024 SYN
2019-08-14 15:30:36
200.149.231.74 attack
445/tcp 445/tcp 445/tcp...
[2019-05-30/07-29]19pkt,1pt.(tcp)
2019-07-30 15:37:35
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 200.149.231.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40215
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;200.149.231.50.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041300 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat Apr 13 23:34:22 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:
Host 50.231.149.200.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 50.231.149.200.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
46.209.68.20 attackspambots
20/5/31@23:48:03: FAIL: Alarm-Network address from=46.209.68.20
...
2020-06-01 17:19:05
106.13.230.219 attack
Jun  1 11:11:58 host sshd[16231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.230.219  user=root
Jun  1 11:12:00 host sshd[16231]: Failed password for root from 106.13.230.219 port 35684 ssh2
...
2020-06-01 17:21:39
220.132.122.20 attack
port 23
2020-06-01 17:33:20
195.231.3.21 attackspam
Jun  1 10:25:32 web01.agentur-b-2.de postfix/smtpd[562740]: warning: unknown[195.231.3.21]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  1 10:25:32 web01.agentur-b-2.de postfix/smtpd[562740]: lost connection after AUTH from unknown[195.231.3.21]
Jun  1 10:25:36 web01.agentur-b-2.de postfix/smtpd[560143]: warning: unknown[195.231.3.21]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  1 10:25:36 web01.agentur-b-2.de postfix/smtpd[560083]: warning: unknown[195.231.3.21]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  1 10:25:36 web01.agentur-b-2.de postfix/smtpd[562739]: warning: unknown[195.231.3.21]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-06-01 17:10:47
66.96.228.119 attack
Jun  1 12:26:30 lukav-desktop sshd\[31371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.96.228.119  user=root
Jun  1 12:26:32 lukav-desktop sshd\[31371\]: Failed password for root from 66.96.228.119 port 58100 ssh2
Jun  1 12:30:21 lukav-desktop sshd\[31403\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.96.228.119  user=root
Jun  1 12:30:23 lukav-desktop sshd\[31403\]: Failed password for root from 66.96.228.119 port 34848 ssh2
Jun  1 12:34:24 lukav-desktop sshd\[31462\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.96.228.119  user=root
2020-06-01 17:38:31
129.146.46.134 attack
Lines containing failures of 129.146.46.134 (max 1000)
Jun  1 03:26:25 UTC__SANYALnet-Labs__cac12 sshd[14041]: Connection from 129.146.46.134 port 38858 on 64.137.176.96 port 22
Jun  1 03:26:28 UTC__SANYALnet-Labs__cac12 sshd[14041]: User r.r from 129.146.46.134 not allowed because not listed in AllowUsers
Jun  1 03:26:28 UTC__SANYALnet-Labs__cac12 sshd[14041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.46.134  user=r.r
Jun  1 03:26:29 UTC__SANYALnet-Labs__cac12 sshd[14041]: Failed password for invalid user r.r from 129.146.46.134 port 38858 ssh2
Jun  1 03:26:30 UTC__SANYALnet-Labs__cac12 sshd[14041]: Received disconnect from 129.146.46.134 port 38858:11: Bye Bye [preauth]
Jun  1 03:26:30 UTC__SANYALnet-Labs__cac12 sshd[14041]: Disconnected from 129.146.46.134 port 38858 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=129.146.46.134
2020-06-01 17:27:51
157.56.12.194 attackbots
Jun  1 10:57:59 piServer sshd[20167]: Failed password for root from 157.56.12.194 port 34096 ssh2
Jun  1 11:01:44 piServer sshd[20476]: Failed password for root from 157.56.12.194 port 38792 ssh2
...
2020-06-01 17:15:58
139.59.188.207 attackbots
Jun  1 09:38:19 amit sshd\[23300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.188.207  user=root
Jun  1 09:38:20 amit sshd\[23300\]: Failed password for root from 139.59.188.207 port 47046 ssh2
Jun  1 09:41:42 amit sshd\[23403\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.188.207  user=root
...
2020-06-01 17:49:50
162.243.136.134 attackbots
7474/tcp 30977/tcp 2375/tcp...
[2020-04-29/06-01]25pkt,20pt.(tcp),2pt.(udp)
2020-06-01 17:34:49
123.21.232.192 attackspam
2020-06-0105:45:501jfbOR-0003zF-Gc\<=info@whatsup2013.chH=\(localhost\)[123.21.229.100]:47000P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3016id=2acd7b282308222ab6b305a94e3a100ca24d16@whatsup2013.chT="totony.flores9"fortony.flores9@yahoo.comwilliamg70@gmail.comrsayago60@gmail.com2020-06-0105:46:261jfbP6-00044N-Rc\<=info@whatsup2013.chH=\(localhost\)[113.172.165.239]:56435P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2980id=a58440131833e6eacd883e6d995ed4d8eb9a73ab@whatsup2013.chT="toalbertoperez67"foralbertoperez67@icloud.comdmt3@gmx.commikebrewer@497gmail.com2020-06-0105:46:371jfbPI-00046e-HD\<=info@whatsup2013.chH=\(localhost\)[123.21.232.192]:41139P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3035id=2af64013183319118d883e9275012b37218d97@whatsup2013.chT="tocristianponce"forcristianponce@hotmail.comjimmywint14@gmail.comaskew.terence@yahoo.com2020-06-0105:46:231jfbP4-00
2020-06-01 17:48:46
113.178.36.124 attack
20/5/31@23:47:28: FAIL: Alarm-Network address from=113.178.36.124
20/5/31@23:47:28: FAIL: Alarm-Network address from=113.178.36.124
...
2020-06-01 17:41:41
80.82.77.240 attack
 TCP (SYN) 80.82.77.240:64344 -> port 1433, len 40
2020-06-01 17:48:02
167.114.115.201 attackspambots
2020-06-01T07:21:28.953458+02:00  sshd[10597]: Failed password for root from 167.114.115.201 port 58570 ssh2
2020-06-01 17:25:10
5.196.83.26 attack
5.196.83.26 - - \[01/Jun/2020:03:50:14 +0200\] "POST /wp-login.php HTTP/1.1" 200 9886 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
5.196.83.26 - - \[01/Jun/2020:05:48:10 +0200\] "POST /wp-login.php HTTP/1.1" 200 9886 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2020-06-01 17:12:25
218.78.84.162 attack
2020-06-01 03:18:51,019 fail2ban.actions        [937]: NOTICE  [sshd] Ban 218.78.84.162
2020-06-01 03:55:02,717 fail2ban.actions        [937]: NOTICE  [sshd] Ban 218.78.84.162
2020-06-01 04:35:23,591 fail2ban.actions        [937]: NOTICE  [sshd] Ban 218.78.84.162
2020-06-01 05:11:35,651 fail2ban.actions        [937]: NOTICE  [sshd] Ban 218.78.84.162
2020-06-01 05:48:04,476 fail2ban.actions        [937]: NOTICE  [sshd] Ban 218.78.84.162
...
2020-06-01 17:17:00

最近上报的IP列表

46.246.65.136 129.191.18.17 162.244.80.45 190.240.32.61
223.98.184.203 200.241.37.82 149.28.151.133 147.135.210.125
118.163.77.151 200.116.173.38 188.166.150.79 200.187.171.111
185.171.89.137 160.120.138.213 117.82.48.146 104.248.69.142
159.65.225.184 50.250.145.131 89.28.162.70 202.6.235.26