必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Jiangsu Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspam
SSH invalid-user multiple login try
2019-09-28 01:59:41
attack
Sep 16 10:20:47 reporting5 sshd[2925]: Invalid user admin from 49.83.139.112
Sep 16 10:20:47 reporting5 sshd[2925]: Failed password for invalid user admin from 49.83.139.112 port 25557 ssh2
Sep 16 10:20:49 reporting5 sshd[2925]: Failed password for invalid user admin from 49.83.139.112 port 25557 ssh2
Sep 16 10:20:51 reporting5 sshd[2925]: Failed password for invalid user admin from 49.83.139.112 port 25557 ssh2
Sep 16 10:20:53 reporting5 sshd[2925]: Failed password for invalid user admin from 49.83.139.112 port 25557 ssh2
Sep 16 10:20:55 reporting5 sshd[2925]: Failed password for invalid user admin from 49.83.139.112 port 25557 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=49.83.139.112
2019-09-16 20:09:21
相同子网IP讨论:
IP 类型 评论内容 时间
49.83.139.162 attack
Aug  7 05:53:21 ns41 sshd[6340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.139.162
Aug  7 05:53:23 ns41 sshd[6340]: Failed password for invalid user admin from 49.83.139.162 port 61975 ssh2
Aug  7 05:53:57 ns41 sshd[6362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.139.162
2020-08-07 15:51:52
49.83.139.48 attack
SSH break in attempt
...
2020-08-06 03:24:55
49.83.139.23 attackspambots
Probing for vulnerable services
2020-07-17 18:52:44
49.83.139.131 attackbotsspam
suspicious action Sun, 08 Mar 2020 18:32:25 -0300
2020-03-09 06:59:21
49.83.139.237 attackbots
suspicious action Sun, 08 Mar 2020 18:32:32 -0300
2020-03-09 06:57:42
49.83.139.122 attackbots
22/tcp
[2019-09-20]1pkt
2019-09-20 15:26:34
49.83.139.209 attackspam
2019-09-19T12:46:03.219238lon01.zurich-datacenter.net sshd\[27712\]: Invalid user admin from 49.83.139.209 port 10423
2019-09-19T12:46:03.225034lon01.zurich-datacenter.net sshd\[27712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.139.209
2019-09-19T12:46:05.305874lon01.zurich-datacenter.net sshd\[27712\]: Failed password for invalid user admin from 49.83.139.209 port 10423 ssh2
2019-09-19T12:46:07.250218lon01.zurich-datacenter.net sshd\[27712\]: Failed password for invalid user admin from 49.83.139.209 port 10423 ssh2
2019-09-19T12:46:09.128241lon01.zurich-datacenter.net sshd\[27712\]: Failed password for invalid user admin from 49.83.139.209 port 10423 ssh2
...
2019-09-20 03:24:11
49.83.139.196 attackbotsspam
SSH Brute Force
2019-09-20 01:01:33
49.83.139.122 attack
Sep 14 02:13:12 wildwolf ssh-honeypotd[26164]: Failed password for supervisor from 49.83.139.122 port 39344 ssh2 (target: 158.69.100.133:22, password: supervisor)
Sep 14 02:13:14 wildwolf ssh-honeypotd[26164]: Failed password for supervisor from 49.83.139.122 port 39344 ssh2 (target: 158.69.100.133:22, password: supervisor)
Sep 14 02:13:16 wildwolf ssh-honeypotd[26164]: Failed password for supervisor from 49.83.139.122 port 39344 ssh2 (target: 158.69.100.133:22, password: supervisor)
Sep 14 02:13:18 wildwolf ssh-honeypotd[26164]: Failed password for supervisor from 49.83.139.122 port 39344 ssh2 (target: 158.69.100.133:22, password: supervisor)
Sep 14 02:13:20 wildwolf ssh-honeypotd[26164]: Failed password for supervisor from 49.83.139.122 port 39344 ssh2 (target: 158.69.100.133:22, password: supervisor)
Sep 14 02:13:22 wildwolf ssh-honeypotd[26164]: Failed password for supervisor from 49.83.139.122 port 39344 ssh2 (target: 158.69.100.133:22, password: supervisor)
Sep 14 ........
------------------------------
2019-09-16 11:21:30
49.83.139.237 attack
Fail2Ban Ban Triggered
2019-09-09 08:30:48
49.83.139.113 attackbotsspam
Port Scan: TCP/22
2019-09-03 02:15:22
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.83.139.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56370
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.83.139.112.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091600 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Sep 16 20:09:11 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 112.139.83.49.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 112.139.83.49.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
202.29.33.245 attack
May 13 17:03:30 buvik sshd[29926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.33.245
May 13 17:03:33 buvik sshd[29926]: Failed password for invalid user admin from 202.29.33.245 port 36460 ssh2
May 13 17:07:59 buvik sshd[30445]: Invalid user youtrack from 202.29.33.245
...
2020-05-14 02:16:18
187.17.166.155 attackspam
May 13 14:12:36 mail.srvfarm.net postfix/smtps/smtpd[553680]: warning: unknown[187.17.166.155]: SASL PLAIN authentication failed: 
May 13 14:12:36 mail.srvfarm.net postfix/smtps/smtpd[553680]: lost connection after AUTH from unknown[187.17.166.155]
May 13 14:13:10 mail.srvfarm.net postfix/smtps/smtpd[553589]: warning: unknown[187.17.166.155]: SASL PLAIN authentication failed: 
May 13 14:13:10 mail.srvfarm.net postfix/smtps/smtpd[553589]: lost connection after AUTH from unknown[187.17.166.155]
May 13 14:15:54 mail.srvfarm.net postfix/smtps/smtpd[553714]: warning: unknown[187.17.166.155]: SASL PLAIN authentication failed:
2020-05-14 02:43:28
194.126.183.171 attack
May 13 14:12:45 mail.srvfarm.net postfix/smtpd[540848]: NOQUEUE: reject: RCPT from unknown[194.126.183.171]: 554 5.7.1 Service unavailable; Client host [194.126.183.171] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?194.126.183.171; from= to= proto=ESMTP helo=
May 13 14:12:45 mail.srvfarm.net postfix/smtpd[540848]: NOQUEUE: reject: RCPT from unknown[194.126.183.171]: 554 5.7.1 Service unavailable; Client host [194.126.183.171] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?194.126.183.171; from= to= proto=ESMTP helo=
May 13 14:12:46 mail.srvfarm.net postfix/smtpd[540848]: NOQUEUE: reject: RCPT from unknown[194.126.183.171]: 554 5.7.1 Service unavailable; Client host [194.126.183.171] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?194.126.183.171; from=
2020-05-14 02:40:44
103.124.136.230 attackspambots
May 13 14:11:37 mail.srvfarm.net postfix/smtps/smtpd[553700]: warning: unknown[103.124.136.230]: SASL PLAIN authentication failed: 
May 13 14:11:37 mail.srvfarm.net postfix/smtps/smtpd[553700]: lost connection after AUTH from unknown[103.124.136.230]
May 13 14:17:34 mail.srvfarm.net postfix/smtps/smtpd[553681]: warning: unknown[103.124.136.230]: SASL PLAIN authentication failed: 
May 13 14:17:35 mail.srvfarm.net postfix/smtps/smtpd[553681]: lost connection after AUTH from unknown[103.124.136.230]
May 13 14:18:20 mail.srvfarm.net postfix/smtps/smtpd[553700]: warning: unknown[103.124.136.230]: SASL PLAIN authentication failed:
2020-05-14 02:50:55
159.65.155.229 attack
SSH brute-force: detected 33 distinct usernames within a 24-hour window.
2020-05-14 02:33:31
202.43.167.234 attackbotsspam
May 13 19:57:45 buvik sshd[22456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.43.167.234
May 13 19:57:47 buvik sshd[22456]: Failed password for invalid user deploy from 202.43.167.234 port 34146 ssh2
May 13 20:00:37 buvik sshd[23360]: Invalid user user from 202.43.167.234
...
2020-05-14 02:21:32
218.92.0.165 attackbotsspam
May 13 20:01:54 ns381471 sshd[17407]: Failed password for root from 218.92.0.165 port 1346 ssh2
May 13 20:02:07 ns381471 sshd[17407]: error: maximum authentication attempts exceeded for root from 218.92.0.165 port 1346 ssh2 [preauth]
2020-05-14 02:18:24
14.175.142.130 attackbots
Automatic report - Port Scan Attack
2020-05-14 02:12:20
139.155.39.22 attackspam
May 13 09:19:27 ny01 sshd[4707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.39.22
May 13 09:19:29 ny01 sshd[4707]: Failed password for invalid user deploy from 139.155.39.22 port 59864 ssh2
May 13 09:23:45 ny01 sshd[5188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.39.22
2020-05-14 02:10:23
91.121.49.238 attackspam
May 13 17:49:53 lukav-desktop sshd\[14198\]: Invalid user osm from 91.121.49.238
May 13 17:49:53 lukav-desktop sshd\[14198\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.49.238
May 13 17:49:55 lukav-desktop sshd\[14198\]: Failed password for invalid user osm from 91.121.49.238 port 56260 ssh2
May 13 17:53:19 lukav-desktop sshd\[14253\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.49.238  user=root
May 13 17:53:22 lukav-desktop sshd\[14253\]: Failed password for root from 91.121.49.238 port 56478 ssh2
2020-05-14 02:26:15
106.75.141.202 attackspam
May 13 16:08:45 legacy sshd[6791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.202
May 13 16:08:47 legacy sshd[6791]: Failed password for invalid user webpy from 106.75.141.202 port 48130 ssh2
May 13 16:12:16 legacy sshd[6926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.202
...
2020-05-14 02:34:37
5.187.0.216 attackbotsspam
May 13 20:11:18 buvik sshd[24897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.187.0.216
May 13 20:11:20 buvik sshd[24897]: Failed password for invalid user hadoop from 5.187.0.216 port 36074 ssh2
May 13 20:15:25 buvik sshd[25499]: Invalid user postgres from 5.187.0.216
...
2020-05-14 02:27:24
117.103.2.114 attackspambots
May 13 16:45:16 vmd48417 sshd[21276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.103.2.114
2020-05-14 02:12:35
187.49.133.220 attackspam
2020-05-13 05:22:38 server sshd[60300]: Failed password for invalid user root from 187.49.133.220 port 33575 ssh2
2020-05-14 02:31:18
191.53.248.21 attackspam
May 13 14:12:08 mail.srvfarm.net postfix/smtpd[553612]: warning: unknown[191.53.248.21]: SASL PLAIN authentication failed: 
May 13 14:12:08 mail.srvfarm.net postfix/smtpd[553612]: lost connection after AUTH from unknown[191.53.248.21]
May 13 14:19:21 mail.srvfarm.net postfix/smtpd[552881]: warning: unknown[191.53.248.21]: SASL PLAIN authentication failed: 
May 13 14:19:21 mail.srvfarm.net postfix/smtpd[552881]: lost connection after AUTH from unknown[191.53.248.21]
May 13 14:19:44 mail.srvfarm.net postfix/smtpd[555886]: warning: unknown[191.53.248.21]: SASL PLAIN authentication failed:
2020-05-14 02:41:46

最近上报的IP列表

80.255.12.233 85.248.42.101 14.227.189.112 92.52.23.241
183.26.199.81 91.236.239.139 192.166.153.122 50.126.209.105
208.157.116.103 69.161.7.28 177.125.154.193 140.0.81.137
222.137.159.196 94.39.228.244 143.201.14.46 165.225.116.82
116.4.97.155 58.84.23.140 204.16.240.53 159.203.193.250