必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Guizhou Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Sep  6 07:28:17 root sshd[13730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140 
Sep  6 07:53:28 root sshd[996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140 
...
2020-09-07 01:07:23
attack
Sep  6 07:28:17 root sshd[13730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140 
Sep  6 07:53:28 root sshd[996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140 
...
2020-09-06 16:28:48
attackbotsspam
$f2bV_matches
2020-09-06 08:29:24
attackbotsspam
SSH Brute-Forcing (server1)
2020-08-22 20:13:09
attackspam
Aug 19 14:25:25 inter-technics sshd[3686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140  user=root
Aug 19 14:25:28 inter-technics sshd[3686]: Failed password for root from 222.85.139.140 port 62344 ssh2
Aug 19 14:31:03 inter-technics sshd[3959]: Invalid user tecnica from 222.85.139.140 port 17991
Aug 19 14:31:03 inter-technics sshd[3959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140
Aug 19 14:31:03 inter-technics sshd[3959]: Invalid user tecnica from 222.85.139.140 port 17991
Aug 19 14:31:05 inter-technics sshd[3959]: Failed password for invalid user tecnica from 222.85.139.140 port 17991 ssh2
...
2020-08-19 22:06:30
attackbots
Aug 19 09:34:08 serwer sshd\[3387\]: Invalid user user1 from 222.85.139.140 port 59695
Aug 19 09:34:08 serwer sshd\[3387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140
Aug 19 09:34:10 serwer sshd\[3387\]: Failed password for invalid user user1 from 222.85.139.140 port 59695 ssh2
...
2020-08-19 16:18:56
attackbots
Aug 11 07:17:55 *hidden* sshd[28535]: Failed password for *hidden* from 222.85.139.140 port 27607 ssh2 Aug 11 07:25:37 *hidden* sshd[29723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140 user=root Aug 11 07:25:39 *hidden* sshd[29723]: Failed password for *hidden* from 222.85.139.140 port 55382 ssh2
2020-08-11 15:04:42
attackspambots
Aug 10 10:58:28 host sshd[4122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140  user=root
Aug 10 10:58:30 host sshd[4122]: Failed password for root from 222.85.139.140 port 20062 ssh2
...
2020-08-10 19:22:30
attackbotsspam
2020-08-06T15:12:00.197459v22018076590370373 sshd[1728]: Failed password for root from 222.85.139.140 port 32384 ssh2
2020-08-06T15:16:21.727751v22018076590370373 sshd[25304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140  user=root
2020-08-06T15:16:24.117556v22018076590370373 sshd[25304]: Failed password for root from 222.85.139.140 port 47766 ssh2
2020-08-06T15:20:53.291548v22018076590370373 sshd[19241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140  user=root
2020-08-06T15:20:55.685408v22018076590370373 sshd[19241]: Failed password for root from 222.85.139.140 port 63095 ssh2
...
2020-08-07 02:49:26
attackspambots
IP blocked
2020-08-03 22:58:36
attackspam
Total attacks: 2
2020-07-26 14:11:11
attackspambots
2020-07-11T17:23:18.393033hostname sshd[79097]: Failed password for invalid user mac from 222.85.139.140 port 28552 ssh2
...
2020-07-12 03:30:55
attackbots
Lines containing failures of 222.85.139.140
Jul  6 05:42:47 shared01 sshd[9501]: Invalid user vicente from 222.85.139.140 port 28023
Jul  6 05:42:47 shared01 sshd[9501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.85.139.140
Jul  6 05:42:49 shared01 sshd[9501]: Failed password for invalid user vicente from 222.85.139.140 port 28023 ssh2
Jul  6 05:42:49 shared01 sshd[9501]: Received disconnect from 222.85.139.140 port 28023:11: Bye Bye [preauth]
Jul  6 05:42:49 shared01 sshd[9501]: Disconnected from invalid user vicente 222.85.139.140 port 28023 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=222.85.139.140
2020-07-06 14:17:01
attack
DATE:2020-06-04 14:20:43, IP:222.85.139.140, PORT:ssh SSH brute force auth (docker-dc)
2020-06-04 21:45:23
attackspambots
"Unauthorized connection attempt on SSHD detected"
2020-05-24 20:23:52
attackspam
SSH Invalid Login
2020-05-09 18:57:35
相同子网IP讨论:
IP 类型 评论内容 时间
222.85.139.106 attackbotsspam
139/tcp 139/tcp
[2019-08-06]2pkt
2019-08-07 11:19:41
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 222.85.139.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17837
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;222.85.139.140.			IN	A

;; AUTHORITY SECTION:
.			411	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050900 1800 900 604800 86400

;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 09 18:57:28 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 140.139.85.222.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 140.139.85.222.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
182.254.161.202 attackbotsspam
Jun 28 11:17:01 firewall sshd[18670]: Failed password for root from 182.254.161.202 port 52124 ssh2
Jun 28 11:18:06 firewall sshd[18715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.254.161.202  user=root
Jun 28 11:18:08 firewall sshd[18715]: Failed password for root from 182.254.161.202 port 36710 ssh2
...
2020-06-28 23:19:37
92.63.196.28 attackbotsspam
ET CINS Active Threat Intelligence Poor Reputation IP group 84 - port: 25009 proto: TCP cat: Misc Attack
2020-06-28 23:05:26
202.175.46.170 attackbots
fail2ban -- 202.175.46.170
...
2020-06-28 23:41:49
190.32.21.250 attackspam
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-06-28 23:38:58
64.137.120.130 attackspambots
27,07-08/09 [bc04/m105] PostRequest-Spammer scoring: zurich
2020-06-28 23:20:29
181.45.110.99 attack
181.45.110.99 has been banned for [spam]
...
2020-06-28 23:17:54
102.176.81.99 attack
Jun 28 17:10:13 ns381471 sshd[13014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.176.81.99
Jun 28 17:10:15 ns381471 sshd[13014]: Failed password for invalid user user4 from 102.176.81.99 port 38886 ssh2
2020-06-28 23:12:03
104.223.197.142 attackbots
SSH Bruteforce Attempt (failed auth)
2020-06-28 23:34:56
31.167.150.226 attackspam
Bruteforce detected by fail2ban
2020-06-28 23:20:50
59.127.102.102 attackbotsspam
 TCP (SYN) 59.127.102.102:38700 -> port 23, len 44
2020-06-28 23:31:29
106.13.209.16 attackspam
Jun 28 15:49:59 meumeu sshd[31352]: Invalid user afp from 106.13.209.16 port 50332
Jun 28 15:49:59 meumeu sshd[31352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.209.16 
Jun 28 15:49:59 meumeu sshd[31352]: Invalid user afp from 106.13.209.16 port 50332
Jun 28 15:50:01 meumeu sshd[31352]: Failed password for invalid user afp from 106.13.209.16 port 50332 ssh2
Jun 28 15:52:38 meumeu sshd[31397]: Invalid user deamon from 106.13.209.16 port 51712
Jun 28 15:52:38 meumeu sshd[31397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.209.16 
Jun 28 15:52:38 meumeu sshd[31397]: Invalid user deamon from 106.13.209.16 port 51712
Jun 28 15:52:40 meumeu sshd[31397]: Failed password for invalid user deamon from 106.13.209.16 port 51712 ssh2
Jun 28 15:55:24 meumeu sshd[31468]: Invalid user pc from 106.13.209.16 port 53104
...
2020-06-28 23:04:52
121.15.139.2 attack
malicious Brute-Force reported by https://www.patrick-binder.de
...
2020-06-28 23:09:04
125.227.236.60 attackspam
Jun 28 14:06:49 gestao sshd[15953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.227.236.60 
Jun 28 14:06:52 gestao sshd[15953]: Failed password for invalid user hldmserver from 125.227.236.60 port 45100 ssh2
Jun 28 14:10:37 gestao sshd[16041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.227.236.60 
...
2020-06-28 23:31:11
182.180.128.132 attack
Fail2Ban - SSH Bruteforce Attempt
2020-06-28 23:17:23
222.186.175.217 attackbotsspam
Jun 28 17:32:27 pve1 sshd[19147]: Failed password for root from 222.186.175.217 port 21992 ssh2
Jun 28 17:32:32 pve1 sshd[19147]: Failed password for root from 222.186.175.217 port 21992 ssh2
...
2020-06-28 23:33:39

最近上报的IP列表

14.236.21.107 118.35.184.185 36.37.123.5 185.234.228.40
61.0.172.181 189.135.227.123 45.162.32.226 178.185.33.137
112.74.186.78 36.75.238.66 1.53.236.13 45.117.98.219
106.13.34.131 14.166.228.217 1.55.251.182 114.35.242.211
188.128.63.130 114.143.231.194 36.68.25.242 179.57.157.159