必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Shanghai

省份(region): Shanghai

国家(country): China

运营商(isp): Shanghai Blue Cloud Technology Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Jul 27 13:49:14 piServer sshd[18283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.130.93.119 
Jul 27 13:49:16 piServer sshd[18283]: Failed password for invalid user es_user from 52.130.93.119 port 1024 ssh2
Jul 27 13:51:08 piServer sshd[18467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.130.93.119 
...
2020-07-28 01:20:42
attackbots
Jul 12 11:06:01 ip-172-31-61-156 sshd[21180]: Invalid user lifuhong from 52.130.93.119
...
2020-07-12 19:16:52
attackbots
Jul  6 16:32:51 pkdns2 sshd\[14802\]: Invalid user teamspeak from 52.130.93.119Jul  6 16:32:53 pkdns2 sshd\[14802\]: Failed password for invalid user teamspeak from 52.130.93.119 port 1024 ssh2Jul  6 16:34:51 pkdns2 sshd\[14904\]: Invalid user lij from 52.130.93.119Jul  6 16:34:54 pkdns2 sshd\[14904\]: Failed password for invalid user lij from 52.130.93.119 port 1024 ssh2Jul  6 16:36:52 pkdns2 sshd\[15037\]: Invalid user oracle from 52.130.93.119Jul  6 16:36:54 pkdns2 sshd\[15037\]: Failed password for invalid user oracle from 52.130.93.119 port 1024 ssh2
...
2020-07-06 22:07:51
attack
2020-07-05T21:49:31.206592linuxbox-skyline sshd[628935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.130.93.119  user=root
2020-07-05T21:49:33.276140linuxbox-skyline sshd[628935]: Failed password for root from 52.130.93.119 port 1024 ssh2
...
2020-07-06 17:48:54
attack
Jul  5 15:56:52 pornomens sshd\[18623\]: Invalid user xwz from 52.130.93.119 port 1024
Jul  5 15:56:52 pornomens sshd\[18623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.130.93.119
Jul  5 15:56:53 pornomens sshd\[18623\]: Failed password for invalid user xwz from 52.130.93.119 port 1024 ssh2
...
2020-07-06 01:20:56
attack
detected by Fail2Ban
2020-06-29 16:07:20
attack
Jun 20 14:20:46 prox sshd[26103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.130.93.119 
Jun 20 14:20:48 prox sshd[26103]: Failed password for invalid user xd from 52.130.93.119 port 1024 ssh2
2020-06-20 20:40:37
attack
Jun 16 05:45:16 ns382633 sshd\[1874\]: Invalid user sha from 52.130.93.119 port 1024
Jun 16 05:45:16 ns382633 sshd\[1874\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.130.93.119
Jun 16 05:45:19 ns382633 sshd\[1874\]: Failed password for invalid user sha from 52.130.93.119 port 1024 ssh2
Jun 16 05:53:43 ns382633 sshd\[3121\]: Invalid user terrariaserver from 52.130.93.119 port 1024
Jun 16 05:53:43 ns382633 sshd\[3121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.130.93.119
2020-06-16 13:32:24
attackbots
Invalid user pns from 52.130.93.119 port 1024
2020-06-11 08:22:23
attack
frenzy
2020-06-01 02:26:51
attackbotsspam
SSH Brute-Forcing (server2)
2020-05-12 12:41:07
attackspambots
May  9 23:32:21 server sshd[54393]: Failed password for root from 52.130.93.119 port 1024 ssh2
May  9 23:37:02 server sshd[57962]: Failed password for invalid user vnc from 52.130.93.119 port 1024 ssh2
May  9 23:41:52 server sshd[61761]: Failed password for invalid user maxwell from 52.130.93.119 port 1024 ssh2
2020-05-10 06:02:34
attack
$f2bV_matches
2020-05-08 20:19:34
attackbots
SSH brute force
2020-05-04 08:11:01
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.130.93.119
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2699
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.130.93.119.			IN	A

;; AUTHORITY SECTION:
.			389	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050301 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 04 08:10:58 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 119.93.130.52.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 119.93.130.52.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
206.189.129.144 attackspambots
May  3 22:07:52 124388 sshd[10008]: Failed password for invalid user maria from 206.189.129.144 port 38146 ssh2
May  3 22:12:22 124388 sshd[10145]: Invalid user anjor from 206.189.129.144 port 50098
May  3 22:12:22 124388 sshd[10145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.129.144
May  3 22:12:22 124388 sshd[10145]: Invalid user anjor from 206.189.129.144 port 50098
May  3 22:12:24 124388 sshd[10145]: Failed password for invalid user anjor from 206.189.129.144 port 50098 ssh2
2020-05-04 06:37:34
45.142.195.6 attackspam
May  4 00:20:05 srv01 postfix/smtpd\[6538\]: warning: unknown\[45.142.195.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  4 00:20:19 srv01 postfix/smtpd\[6560\]: warning: unknown\[45.142.195.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  4 00:20:25 srv01 postfix/smtpd\[6538\]: warning: unknown\[45.142.195.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  4 00:20:31 srv01 postfix/smtpd\[6427\]: warning: unknown\[45.142.195.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  4 00:21:14 srv01 postfix/smtpd\[6538\]: warning: unknown\[45.142.195.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-05-04 06:21:19
213.217.0.130 attackspam
May  4 00:11:40 debian-2gb-nbg1-2 kernel: \[10802802.302331\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=213.217.0.130 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=23180 PROTO=TCP SPT=51144 DPT=45798 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-04 06:18:42
49.88.112.115 attackspambots
2020-05-04T07:42:52.189213vivaldi2.tree2.info sshd[31985]: refused connect from 49.88.112.115 (49.88.112.115)
2020-05-04T07:44:02.232114vivaldi2.tree2.info sshd[32011]: refused connect from 49.88.112.115 (49.88.112.115)
2020-05-04T07:45:11.396121vivaldi2.tree2.info sshd[32087]: refused connect from 49.88.112.115 (49.88.112.115)
2020-05-04T07:46:21.001975vivaldi2.tree2.info sshd[32127]: refused connect from 49.88.112.115 (49.88.112.115)
2020-05-04T07:47:28.467377vivaldi2.tree2.info sshd[32142]: refused connect from 49.88.112.115 (49.88.112.115)
...
2020-05-04 06:47:53
106.13.20.73 attack
May  3 23:10:39 web01 sshd[9828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.20.73 
May  3 23:10:41 web01 sshd[9828]: Failed password for invalid user panda from 106.13.20.73 port 45826 ssh2
...
2020-05-04 06:37:11
176.67.51.74 attackspambots
Automatic report - Port Scan Attack
2020-05-04 06:50:41
203.147.72.32 attack
Autoban   203.147.72.32 ABORTED AUTH
2020-05-04 06:32:42
185.50.149.26 attackspambots
May  4 00:10:09 web01.agentur-b-2.de postfix/smtpd[318324]: warning: unknown[185.50.149.26]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  4 00:10:09 web01.agentur-b-2.de postfix/smtpd[318324]: lost connection after AUTH from unknown[185.50.149.26]
May  4 00:10:17 web01.agentur-b-2.de postfix/smtpd[460110]: lost connection after AUTH from unknown[185.50.149.26]
May  4 00:10:28 web01.agentur-b-2.de postfix/smtpd[459386]: warning: unknown[185.50.149.26]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  4 00:10:28 web01.agentur-b-2.de postfix/smtpd[459386]: lost connection after AUTH from unknown[185.50.149.26]
2020-05-04 06:33:47
190.94.18.2 attack
2020-05-03T23:24:07.559255ns386461 sshd\[21558\]: Invalid user boon from 190.94.18.2 port 51208
2020-05-03T23:24:07.563869ns386461 sshd\[21558\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.94.18.2
2020-05-03T23:24:10.222085ns386461 sshd\[21558\]: Failed password for invalid user boon from 190.94.18.2 port 51208 ssh2
2020-05-03T23:29:57.650994ns386461 sshd\[26796\]: Invalid user emma from 190.94.18.2 port 54540
2020-05-03T23:29:57.655477ns386461 sshd\[26796\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.94.18.2
...
2020-05-04 06:17:11
176.194.111.39 attack
1588538303 - 05/03/2020 22:38:23 Host: 176.194.111.39/176.194.111.39 Port: 445 TCP Blocked
2020-05-04 06:33:14
200.57.109.97 attack
trying to access non-authorized port
2020-05-04 06:30:56
217.19.154.220 attack
Bruteforce detected by fail2ban
2020-05-04 06:28:06
222.186.173.180 attack
2020-05-04T00:47:34.672819ns386461 sshd\[32544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.180  user=root
2020-05-04T00:47:36.702498ns386461 sshd\[32544\]: Failed password for root from 222.186.173.180 port 12966 ssh2
2020-05-04T00:47:40.030479ns386461 sshd\[32544\]: Failed password for root from 222.186.173.180 port 12966 ssh2
2020-05-04T00:47:43.574483ns386461 sshd\[32544\]: Failed password for root from 222.186.173.180 port 12966 ssh2
2020-05-04T00:47:46.862469ns386461 sshd\[32544\]: Failed password for root from 222.186.173.180 port 12966 ssh2
...
2020-05-04 06:49:21
101.89.95.77 attack
May  4 00:40:25 markkoudstaal sshd[8044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.89.95.77
May  4 00:40:28 markkoudstaal sshd[8044]: Failed password for invalid user ellen from 101.89.95.77 port 56232 ssh2
May  4 00:44:14 markkoudstaal sshd[8836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.89.95.77
2020-05-04 06:53:12
128.199.171.81 attack
Tried sshing with brute force.
2020-05-04 06:26:38

最近上报的IP列表

46.72.242.164 165.22.58.93 32.25.43.75 72.186.46.51
71.121.39.167 125.32.181.76 117.134.18.220 168.138.144.172
178.124.200.113 142.11.246.199 190.96.148.148 88.11.179.208
54.162.214.214 37.128.114.228 194.149.95.211 67.214.252.107
185.45.193.242 109.248.24.24 111.193.20.106 197.126.25.28