必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Guizhou Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Sep  6 07:28:17 root sshd[13730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140 
Sep  6 07:53:28 root sshd[996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140 
...
2020-09-07 01:07:23
attack
Sep  6 07:28:17 root sshd[13730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140 
Sep  6 07:53:28 root sshd[996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140 
...
2020-09-06 16:28:48
attackbotsspam
$f2bV_matches
2020-09-06 08:29:24
attackbotsspam
SSH Brute-Forcing (server1)
2020-08-22 20:13:09
attackspam
Aug 19 14:25:25 inter-technics sshd[3686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140  user=root
Aug 19 14:25:28 inter-technics sshd[3686]: Failed password for root from 222.85.139.140 port 62344 ssh2
Aug 19 14:31:03 inter-technics sshd[3959]: Invalid user tecnica from 222.85.139.140 port 17991
Aug 19 14:31:03 inter-technics sshd[3959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140
Aug 19 14:31:03 inter-technics sshd[3959]: Invalid user tecnica from 222.85.139.140 port 17991
Aug 19 14:31:05 inter-technics sshd[3959]: Failed password for invalid user tecnica from 222.85.139.140 port 17991 ssh2
...
2020-08-19 22:06:30
attackbots
Aug 19 09:34:08 serwer sshd\[3387\]: Invalid user user1 from 222.85.139.140 port 59695
Aug 19 09:34:08 serwer sshd\[3387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140
Aug 19 09:34:10 serwer sshd\[3387\]: Failed password for invalid user user1 from 222.85.139.140 port 59695 ssh2
...
2020-08-19 16:18:56
attackbots
Aug 11 07:17:55 *hidden* sshd[28535]: Failed password for *hidden* from 222.85.139.140 port 27607 ssh2 Aug 11 07:25:37 *hidden* sshd[29723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140 user=root Aug 11 07:25:39 *hidden* sshd[29723]: Failed password for *hidden* from 222.85.139.140 port 55382 ssh2
2020-08-11 15:04:42
attackspambots
Aug 10 10:58:28 host sshd[4122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140  user=root
Aug 10 10:58:30 host sshd[4122]: Failed password for root from 222.85.139.140 port 20062 ssh2
...
2020-08-10 19:22:30
attackbotsspam
2020-08-06T15:12:00.197459v22018076590370373 sshd[1728]: Failed password for root from 222.85.139.140 port 32384 ssh2
2020-08-06T15:16:21.727751v22018076590370373 sshd[25304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140  user=root
2020-08-06T15:16:24.117556v22018076590370373 sshd[25304]: Failed password for root from 222.85.139.140 port 47766 ssh2
2020-08-06T15:20:53.291548v22018076590370373 sshd[19241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140  user=root
2020-08-06T15:20:55.685408v22018076590370373 sshd[19241]: Failed password for root from 222.85.139.140 port 63095 ssh2
...
2020-08-07 02:49:26
attackspambots
IP blocked
2020-08-03 22:58:36
attackspam
Total attacks: 2
2020-07-26 14:11:11
attackspambots
2020-07-11T17:23:18.393033hostname sshd[79097]: Failed password for invalid user mac from 222.85.139.140 port 28552 ssh2
...
2020-07-12 03:30:55
attackbots
Lines containing failures of 222.85.139.140
Jul  6 05:42:47 shared01 sshd[9501]: Invalid user vicente from 222.85.139.140 port 28023
Jul  6 05:42:47 shared01 sshd[9501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140
Jul  6 05:42:49 shared01 sshd[9501]: Failed password for invalid user vicente from 222.85.139.140 port 28023 ssh2
Jul  6 05:42:49 shared01 sshd[9501]: Received disconnect from 222.85.139.140 port 28023:11: Bye Bye [preauth]
Jul  6 05:42:49 shared01 sshd[9501]: Disconnected from invalid user vicente 222.85.139.140 port 28023 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=222.85.139.140
2020-07-06 14:17:01
attack
DATE:2020-06-04 14:20:43, IP:222.85.139.140, PORT:ssh SSH brute force auth (docker-dc)
2020-06-04 21:45:23
attackspambots
"Unauthorized connection attempt on SSHD detected"
2020-05-24 20:23:52
attackspam
SSH Invalid Login
2020-05-09 18:57:35
相同子网IP讨论:
IP 类型 评论内容 时间
222.85.139.106 attackbotsspam
139/tcp 139/tcp
[2019-08-06]2pkt
2019-08-07 11:19:41
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 222.85.139.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17837
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;222.85.139.140.			IN	A

;; AUTHORITY SECTION:
.			411	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050900 1800 900 604800 86400

;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 09 18:57:28 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 140.139.85.222.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 140.139.85.222.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
131.108.60.30 attack
Unauthorized connection attempt detected from IP address 131.108.60.30 to port 11597
2020-04-22 02:21:28
125.124.193.237 attackbots
2020-04-21T19:51:00.566819vps773228.ovh.net sshd[21625]: Invalid user oracle from 125.124.193.237 port 42570
2020-04-21T19:51:00.584695vps773228.ovh.net sshd[21625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.193.237
2020-04-21T19:51:00.566819vps773228.ovh.net sshd[21625]: Invalid user oracle from 125.124.193.237 port 42570
2020-04-21T19:51:02.559039vps773228.ovh.net sshd[21625]: Failed password for invalid user oracle from 125.124.193.237 port 42570 ssh2
2020-04-21T19:54:55.347608vps773228.ovh.net sshd[21645]: Invalid user test from 125.124.193.237 port 52726
...
2020-04-22 02:24:17
217.182.186.224 attack
Invalid user diana from 217.182.186.224 port 9737
2020-04-22 01:56:09
118.25.182.177 attack
...
2020-04-22 02:29:10
122.227.75.14 attack
Invalid user solr from 122.227.75.14 port 34752
2020-04-22 02:25:18
209.141.55.11 attackbotsspam
Apr 21 16:39:22 nextcloud sshd\[16606\]: Invalid user oracle from 209.141.55.11
Apr 21 16:39:22 nextcloud sshd\[16603\]: Invalid user postgres from 209.141.55.11
Apr 21 16:39:22 nextcloud sshd\[16601\]: Invalid user test from 209.141.55.11
Apr 21 16:39:22 nextcloud sshd\[16602\]: Invalid user java from 209.141.55.11
Apr 21 16:39:22 nextcloud sshd\[16599\]: Invalid user user from 209.141.55.11
Apr 21 16:39:22 nextcloud sshd\[16605\]: Invalid user ec2-user from 209.141.55.11
Apr 21 16:39:22 nextcloud sshd\[16608\]: Invalid user vagrant from 209.141.55.11
2020-04-22 01:59:16
177.44.168.146 attack
Apr 21 18:24:54 ns381471 sshd[16212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.44.168.146
Apr 21 18:24:56 ns381471 sshd[16212]: Failed password for invalid user test from 177.44.168.146 port 49896 ssh2
2020-04-22 02:13:00
193.112.125.249 attackbots
Invalid user t from 193.112.125.249 port 55596
2020-04-22 02:04:51
203.130.242.68 attackspam
Apr 21 20:40:44 pkdns2 sshd\[50828\]: Invalid user rpcuser from 203.130.242.68Apr 21 20:40:46 pkdns2 sshd\[50828\]: Failed password for invalid user rpcuser from 203.130.242.68 port 40588 ssh2Apr 21 20:45:26 pkdns2 sshd\[51071\]: Invalid user ss from 203.130.242.68Apr 21 20:45:28 pkdns2 sshd\[51071\]: Failed password for invalid user ss from 203.130.242.68 port 47676 ssh2Apr 21 20:50:09 pkdns2 sshd\[51321\]: Invalid user postgres from 203.130.242.68Apr 21 20:50:11 pkdns2 sshd\[51321\]: Failed password for invalid user postgres from 203.130.242.68 port 54767 ssh2
...
2020-04-22 02:00:14
213.251.41.225 attackspambots
2020-04-21T17:27:50.817274librenms sshd[11893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.251.41.225  user=root
2020-04-21T17:27:52.536471librenms sshd[11893]: Failed password for root from 213.251.41.225 port 36048 ssh2
2020-04-21T17:33:34.141921librenms sshd[12414]: Invalid user ubuntu from 213.251.41.225 port 50996
...
2020-04-22 01:57:01
206.81.12.141 attackbotsspam
Apr 21 19:44:11 h2779839 sshd[18934]: Invalid user yh from 206.81.12.141 port 53160
Apr 21 19:44:11 h2779839 sshd[18934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.12.141
Apr 21 19:44:11 h2779839 sshd[18934]: Invalid user yh from 206.81.12.141 port 53160
Apr 21 19:44:13 h2779839 sshd[18934]: Failed password for invalid user yh from 206.81.12.141 port 53160 ssh2
Apr 21 19:47:58 h2779839 sshd[19003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.12.141  user=root
Apr 21 19:48:00 h2779839 sshd[19003]: Failed password for root from 206.81.12.141 port 39620 ssh2
Apr 21 19:51:45 h2779839 sshd[19050]: Invalid user admin from 206.81.12.141 port 54318
Apr 21 19:51:45 h2779839 sshd[19050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.12.141
Apr 21 19:51:45 h2779839 sshd[19050]: Invalid user admin from 206.81.12.141 port 54318
Apr 21 19:51:47 h277
...
2020-04-22 02:00:02
190.85.140.93 attackbots
Apr 21 19:29:31 pve1 sshd[928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.85.140.93 
Apr 21 19:29:33 pve1 sshd[928]: Failed password for invalid user tom from 190.85.140.93 port 14884 ssh2
...
2020-04-22 02:06:27
150.223.13.155 attackspam
Invalid user postgres from 150.223.13.155 port 56998
2020-04-22 02:19:30
175.139.201.205 attackspambots
Invalid user admin from 175.139.201.205 port 48382
2020-04-22 02:14:23
159.65.217.53 attackbots
Apr 21 16:42:15 *** sshd[20369]: Invalid user ci from 159.65.217.53
2020-04-22 02:17:47

最近上报的IP列表

14.236.21.107 118.35.184.185 36.37.123.5 185.234.228.40
61.0.172.181 189.135.227.123 45.162.32.226 178.185.33.137
112.74.186.78 36.75.238.66 1.53.236.13 45.117.98.219
106.13.34.131 14.166.228.217 1.55.251.182 114.35.242.211
188.128.63.130 114.143.231.194 36.68.25.242 179.57.157.159