必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): Beijing

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): Shenzhen Tencent Computer Systems Company Limited

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
212.129.138.198 attackspam
Nov 21 22:16:13 ms-srv sshd[53269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.138.198  user=nobody
Nov 21 22:16:15 ms-srv sshd[53269]: Failed password for invalid user nobody from 212.129.138.198 port 56501 ssh2
2020-03-09 04:11:53
212.129.138.198 attackspam
Nov 21 22:16:13 ms-srv sshd[53269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.138.198  user=nobody
Nov 21 22:16:15 ms-srv sshd[53269]: Failed password for invalid user nobody from 212.129.138.198 port 56501 ssh2
2020-02-15 23:44:33
212.129.138.198 attackbots
Dec 22 16:43:07 vps691689 sshd[26358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.138.198
Dec 22 16:43:09 vps691689 sshd[26358]: Failed password for invalid user salim from 212.129.138.198 port 43049 ssh2
Dec 22 16:49:34 vps691689 sshd[26550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.138.198
...
2019-12-23 02:51:59
212.129.138.198 attackspam
web-1 [ssh_2] SSH Attack
2019-12-21 02:44:24
212.129.138.198 attackbots
--- report ---
Dec 17 18:58:08 sshd: Connection from 212.129.138.198 port 35432
Dec 17 18:58:11 sshd: Failed password for root from 212.129.138.198 port 35432 ssh2
Dec 17 18:58:12 sshd: Received disconnect from 212.129.138.198: 11: Bye Bye [preauth]
2019-12-18 06:26:15
212.129.138.198 attackbotsspam
Dec 17 08:49:13 ny01 sshd[26073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.138.198
Dec 17 08:49:15 ny01 sshd[26073]: Failed password for invalid user server from 212.129.138.198 port 55663 ssh2
Dec 17 08:57:02 ny01 sshd[27254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.138.198
2019-12-17 22:08:05
212.129.138.67 attack
Dec  4 03:05:36 sachi sshd\[27060\]: Invalid user brasov from 212.129.138.67
Dec  4 03:05:36 sachi sshd\[27060\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.138.67
Dec  4 03:05:38 sachi sshd\[27060\]: Failed password for invalid user brasov from 212.129.138.67 port 41416 ssh2
Dec  4 03:13:47 sachi sshd\[27942\]: Invalid user corette from 212.129.138.67
Dec  4 03:13:47 sachi sshd\[27942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.138.67
2019-12-05 00:23:10
212.129.138.67 attack
$f2bV_matches
2019-12-04 06:00:40
212.129.138.67 attack
Nov 28 09:55:27 microserver sshd[57335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.138.67  user=root
Nov 28 09:55:29 microserver sshd[57335]: Failed password for root from 212.129.138.67 port 44214 ssh2
Nov 28 10:03:06 microserver sshd[58185]: Invalid user deboer from 212.129.138.67 port 54964
Nov 28 10:03:06 microserver sshd[58185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.138.67
Nov 28 10:03:08 microserver sshd[58185]: Failed password for invalid user deboer from 212.129.138.67 port 54964 ssh2
Nov 28 10:18:24 microserver sshd[60241]: Invalid user gronnesby from 212.129.138.67 port 48232
Nov 28 10:18:24 microserver sshd[60241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.138.67
Nov 28 10:18:27 microserver sshd[60241]: Failed password for invalid user gronnesby from 212.129.138.67 port 48232 ssh2
Nov 28 10:26:01 microserver sshd[61494]: Invalid user h
2019-11-28 17:57:08
212.129.138.67 attackbots
Nov 27 15:43:46 root sshd[8694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.138.67 
Nov 27 15:43:48 root sshd[8694]: Failed password for invalid user hoea from 212.129.138.67 port 51110 ssh2
Nov 27 15:52:35 root sshd[8837]: Failed password for backup from 212.129.138.67 port 34356 ssh2
...
2019-11-28 01:24:52
212.129.138.67 attack
Invalid user podolsky from 212.129.138.67 port 33684
2019-11-24 14:10:15
212.129.138.198 attackbotsspam
Nov 19 12:32:56 gw1 sshd[3127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.138.198
Nov 19 12:32:58 gw1 sshd[3127]: Failed password for invalid user knoebel from 212.129.138.198 port 54586 ssh2
...
2019-11-19 15:53:00
212.129.138.198 attack
2019-11-18T15:54:57.690607abusebot-2.cloudsearch.cf sshd\[22087\]: Invalid user maccarthy from 212.129.138.198 port 60336
2019-11-19 00:20:06
212.129.138.67 attack
SSH Brute Force, server-1 sshd[32541]: Failed password for invalid user guest from 212.129.138.67 port 48480 ssh2
2019-11-14 03:58:47
212.129.138.67 attackbotsspam
2019-11-10T05:44:13.622110  sshd[12399]: Invalid user freware from 212.129.138.67 port 39012
2019-11-10T05:44:13.635684  sshd[12399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.138.67
2019-11-10T05:44:13.622110  sshd[12399]: Invalid user freware from 212.129.138.67 port 39012
2019-11-10T05:44:15.836205  sshd[12399]: Failed password for invalid user freware from 212.129.138.67 port 39012 ssh2
2019-11-10T05:54:40.673306  sshd[12537]: Invalid user abcs from 212.129.138.67 port 52162
...
2019-11-10 13:20:01
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.129.138.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11181
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;212.129.138.140.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041200 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat Apr 13 00:44:09 +08 2019
;; MSG SIZE  rcvd: 119

HOST信息:
Host 140.138.129.212.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 140.138.129.212.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
157.230.153.75 attackspambots
Oct  9 20:07:49 eventyay sshd[3927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.153.75
Oct  9 20:07:51 eventyay sshd[3927]: Failed password for invalid user Isabel1@3 from 157.230.153.75 port 43717 ssh2
Oct  9 20:12:01 eventyay sshd[4358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.153.75
...
2019-10-10 02:15:50
193.32.163.123 attackbots
Oct  9 17:09:18 thevastnessof sshd[27408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.32.163.123
...
2019-10-10 02:44:58
49.68.74.21 attackbotsspam
Brute force SMTP login attempts.
2019-10-10 02:24:25
179.178.59.94 attackspambots
Unauthorized connection attempt from IP address 179.178.59.94 on Port 445(SMB)
2019-10-10 02:20:57
198.108.67.99 attack
firewall-block, port(s): 4482/tcp
2019-10-10 02:37:56
115.148.83.192 attackspambots
Unauthorised access (Oct  9) SRC=115.148.83.192 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=57309 TCP DPT=8080 WINDOW=13715 SYN 
Unauthorised access (Oct  9) SRC=115.148.83.192 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=43972 TCP DPT=8080 WINDOW=34244 SYN 
Unauthorised access (Oct  8) SRC=115.148.83.192 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=19206 TCP DPT=8080 WINDOW=34244 SYN 
Unauthorised access (Oct  8) SRC=115.148.83.192 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=49212 TCP DPT=8080 WINDOW=13715 SYN
2019-10-10 02:35:37
198.108.67.48 attackbotsspam
Connection by 198.108.67.48 on port: 13 got caught by honeypot at 10/9/2019 11:27:04 AM
2019-10-10 02:36:55
203.114.107.130 attackbots
Unauthorized connection attempt from IP address 203.114.107.130 on Port 445(SMB)
2019-10-10 02:13:23
113.163.156.241 attackspambots
Unauthorized connection attempt from IP address 113.163.156.241 on Port 445(SMB)
2019-10-10 02:16:19
5.55.120.54 attackbots
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/5.55.120.54/ 
 GR - 1H : (125)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : GR 
 NAME ASN : ASN3329 
 
 IP : 5.55.120.54 
 
 CIDR : 5.55.96.0/19 
 
 PREFIX COUNT : 167 
 
 UNIQUE IP COUNT : 788480 
 
 
 WYKRYTE ATAKI Z ASN3329 :  
  1H - 1 
  3H - 3 
  6H - 14 
 12H - 30 
 24H - 58 
 
 DateTime : 2019-10-09 13:30:41 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-10 02:32:39
201.209.195.224 attackbots
Unauthorized connection attempt from IP address 201.209.195.224 on Port 445(SMB)
2019-10-10 02:14:31
100.20.237.190 attackspambots
From: Zippy Loan - Personal Loan 
Subject: do you Need up to $15,000 by Tomorrow?
smtp.mailfrom=infoTcPyRxD5q@google.xqujdd--.us-west-2.compute.amazonaws.com
Return-Path: 
Received: from ebj3.a13.com (ec2-100-20-237-190.us-west-2.compute.amazonaws.com. [100.20.237.190])
2019-10-10 02:11:55
51.89.41.85 attackspam
10/09/2019-15:55:04.227108 51.89.41.85 Protocol: 17 ET SCAN Sipvicious Scan
2019-10-10 02:17:43
193.8.82.188 attackbots
Oct  4 07:54:10 keyhelp sshd[29831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.8.82.188  user=r.r
Oct  4 07:54:11 keyhelp sshd[29831]: Failed password for r.r from 193.8.82.188 port 58812 ssh2
Oct  4 07:54:12 keyhelp sshd[29831]: Received disconnect from 193.8.82.188 port 58812:11: Bye Bye [preauth]
Oct  4 07:54:12 keyhelp sshd[29831]: Disconnected from 193.8.82.188 port 58812 [preauth]
Oct  4 08:05:51 keyhelp sshd[370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.8.82.188  user=r.r
Oct  4 08:05:54 keyhelp sshd[370]: Failed password for r.r from 193.8.82.188 port 44272 ssh2
Oct  4 08:05:54 keyhelp sshd[370]: Received disconnect from 193.8.82.188 port 44272:11: Bye Bye [preauth]
Oct  4 08:05:54 keyhelp sshd[370]: Disconnected from 193.8.82.188 port 44272 [preauth]
Oct  4 08:10:16 keyhelp sshd[1351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh r........
-------------------------------
2019-10-10 02:43:30
222.186.31.145 attack
Oct  9 19:34:48 [HOSTNAME] sshd[24694]: User **removed** from 222.186.31.145 not allowed because not listed in AllowUsers
Oct  9 20:18:09 [HOSTNAME] sshd[25013]: User **removed** from 222.186.31.145 not allowed because not listed in AllowUsers
Oct  9 20:34:46 [HOSTNAME] sshd[25074]: User **removed** from 222.186.31.145 not allowed because not listed in AllowUsers
...
2019-10-10 02:39:59

最近上报的IP列表

119.55.121.74 113.195.74.83 82.64.29.249 80.178.145.232
124.13.180.162 119.27.175.249 113.160.172.198 49.84.230.103
197.47.202.236 178.33.85.143 120.211.24.5 121.17.22.174
111.10.19.16 87.98.251.172 45.56.70.42 115.114.125.146
36.77.236.200 113.176.123.45 60.168.60.217 54.242.79.118