222.201.139.62

基本信息:

城市(city): Guangzhou

省份(region): Guangdong

国家(country): China

运营商(isp): South China University of Technology Guangzhou University

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): University/College/School

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	$f2bV_matches	2020-07-06 14:47:18
attackspambots	Jun 21 03:57:22 ip-172-31-61-156 sshd[25683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.201.139.62 Jun 21 03:57:22 ip-172-31-61-156 sshd[25683]: Invalid user furukawa from 222.201.139.62 Jun 21 03:57:24 ip-172-31-61-156 sshd[25683]: Failed password for invalid user furukawa from 222.201.139.62 port 51144 ssh2 Jun 21 03:58:55 ip-172-31-61-156 sshd[25734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.201.139.62 user=root Jun 21 03:58:57 ip-172-31-61-156 sshd[25734]: Failed password for root from 222.201.139.62 port 60479 ssh2 ...	2020-06-21 12:46:23
attackbotsspam	2020-06-08T21:51:52.756439shield sshd\[21413\]: Invalid user ajut from 222.201.139.62 port 58019 2020-06-08T21:51:52.760169shield sshd\[21413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.201.139.62 2020-06-08T21:51:54.740856shield sshd\[21413\]: Failed password for invalid user ajut from 222.201.139.62 port 58019 ssh2 2020-06-08T21:53:59.401505shield sshd\[22381\]: Invalid user toni from 222.201.139.62 port 55069 2020-06-08T21:53:59.405225shield sshd\[22381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.201.139.62	2020-06-09 06:41:59

类型

评论内容

时间

attackbots

$f2bV_matches

2020-07-06 14:47:18

attackspambots

Jun 21 03:57:22 ip-172-31-61-156 sshd[25683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.201.139.62
Jun 21 03:57:22 ip-172-31-61-156 sshd[25683]: Invalid user furukawa from 222.201.139.62
Jun 21 03:57:24 ip-172-31-61-156 sshd[25683]: Failed password for invalid user furukawa from 222.201.139.62 port 51144 ssh2
Jun 21 03:58:55 ip-172-31-61-156 sshd[25734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.201.139.62  user=root
Jun 21 03:58:57 ip-172-31-61-156 sshd[25734]: Failed password for root from 222.201.139.62 port 60479 ssh2
...

2020-06-21 12:46:23

attackbotsspam

2020-06-08T21:51:52.756439shield sshd\[21413\]: Invalid user ajut from 222.201.139.62 port 58019
2020-06-08T21:51:52.760169shield sshd\[21413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.201.139.62
2020-06-08T21:51:54.740856shield sshd\[21413\]: Failed password for invalid user ajut from 222.201.139.62 port 58019 ssh2
2020-06-08T21:53:59.401505shield sshd\[22381\]: Invalid user toni from 222.201.139.62 port 55069
2020-06-08T21:53:59.405225shield sshd\[22381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.201.139.62

2020-06-09 06:41:59

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 222.201.139.62
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45835
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;222.201.139.62.			IN	A

;; AUTHORITY SECTION:
.			443	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060803 1800 900 604800 86400

;; Query time: 88 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 09 06:41:56 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 62.139.201.222.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 62.139.201.222.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
118.68.122.111	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-07-15 08:43:56
120.53.24.160	attackbotsspam	Failed password for invalid user nagios from 120.53.24.160 port 37962 ssh2	2020-07-15 08:42:17
190.42.17.42	attack	Jul 14 20:24:08 mellenthin postfix/smtpd[15429]: NOQUEUE: reject: RCPT from unknown[190.42.17.42]: 554 5.7.1 Service unavailable; Client host [190.42.17.42] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/190.42.17.42; from= to= proto=ESMTP helo=<[190.42.17.42]>	2020-07-15 08:40:40
1.197.137.162	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-07-15 08:40:19
208.113.192.17	attackspam	Brute-force general attack.	2020-07-15 08:37:04
149.56.12.88	attackbotsspam	300. On Jul 14 2020 experienced a Brute Force SSH login attempt -> 54 unique times by 149.56.12.88.	2020-07-15 08:21:07
211.155.95.246	attackspam	Jul 11 10:47:46 server sshd[26871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.155.95.246 Jul 11 10:47:48 server sshd[26871]: Failed password for invalid user admin from 211.155.95.246 port 38164 ssh2 Jul 11 10:56:19 server sshd[27256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.155.95.246 user=news Jul 11 10:56:21 server sshd[27256]: Failed password for invalid user news from 211.155.95.246 port 42322 ssh2	2020-07-15 08:32:27
213.200.15.205	attack	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-07-15 08:12:37
167.172.175.9	attackspambots	Jul 10 11:11:01 server sshd[10748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.175.9 Jul 10 11:11:03 server sshd[10748]: Failed password for invalid user protocol from 167.172.175.9 port 43674 ssh2 Jul 10 11:14:04 server sshd[10862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.175.9 Jul 10 11:14:06 server sshd[10862]: Failed password for invalid user aoife from 167.172.175.9 port 41324 ssh2	2020-07-15 08:34:22
182.61.136.3	attack	Jul 14 19:48:25 onepixel sshd[1266204]: Invalid user matt from 182.61.136.3 port 33042 Jul 14 19:48:25 onepixel sshd[1266204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.136.3 Jul 14 19:48:25 onepixel sshd[1266204]: Invalid user matt from 182.61.136.3 port 33042 Jul 14 19:48:27 onepixel sshd[1266204]: Failed password for invalid user matt from 182.61.136.3 port 33042 ssh2 Jul 14 19:50:08 onepixel sshd[1267132]: Invalid user giulio from 182.61.136.3 port 39008	2020-07-15 08:30:47
179.209.88.230	attackbots	Jun 28 07:41:15 server sshd[18301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.209.88.230 Jun 28 07:41:17 server sshd[18301]: Failed password for invalid user pan from 179.209.88.230 port 32861 ssh2 Jun 28 07:48:22 server sshd[18575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.209.88.230 Jun 28 07:48:24 server sshd[18575]: Failed password for invalid user alexis from 179.209.88.230 port 36624 ssh2	2020-07-15 08:13:11
165.22.54.171	attack	Jul 15 01:27:53 ajax sshd[11114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.54.171 Jul 15 01:27:55 ajax sshd[11114]: Failed password for invalid user ihor from 165.22.54.171 port 55992 ssh2	2020-07-15 08:33:36
113.141.64.69	attack	SMB Server BruteForce Attack	2020-07-15 08:29:10
113.173.114.138	attackbotsspam	Unauthorized IMAP connection attempt	2020-07-15 08:41:25
176.31.252.167	attackbots	Automated report (2020-07-15T08:27:09+08:00). Faked user agent detected.	2020-07-15 08:45:56

最近上报的IP列表

174.70.71.97	79.161.167.31	164.64.134.68	219.211.59.195
223.102.25.11	236.219.243.208	78.66.169.158	69.244.222.150
151.248.129.136	31.236.115.230	91.82.172.123	54.233.94.172
167.98.68.57	27.62.27.80	69.125.184.223	139.125.216.224
217.101.120.222	160.124.14.220	91.85.157.150	78.162.20.93