必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): Hunan

国家(country): China

运营商(isp): CNC Group HuNan YueYang Network

主机名(hostname): unknown

机构(organization): CHINA UNICOM China169 Backbone

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackspam
Sep  1 23:57:21 MK-Soft-VM6 sshd\[21181\]: Invalid user bbj from 58.20.139.5 port 51060
Sep  1 23:57:21 MK-Soft-VM6 sshd\[21181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.5
Sep  1 23:57:23 MK-Soft-VM6 sshd\[21181\]: Failed password for invalid user bbj from 58.20.139.5 port 51060 ssh2
...
2019-09-02 08:33:50
attack
Aug 31 14:57:46 lnxmail61 sshd[21437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.5
2019-09-01 01:35:27
相同子网IP讨论:
IP 类型 评论内容 时间
58.20.139.26 attackspambots
Dec 23 10:34:23 lnxmysql61 sshd[25365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
2019-12-23 18:13:05
58.20.139.26 attackbotsspam
Dec  9 20:40:29 web1 sshd\[14176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26  user=root
Dec  9 20:40:31 web1 sshd\[14176\]: Failed password for root from 58.20.139.26 port 49469 ssh2
Dec  9 20:48:07 web1 sshd\[14973\]: Invalid user server from 58.20.139.26
Dec  9 20:48:07 web1 sshd\[14973\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
Dec  9 20:48:09 web1 sshd\[14973\]: Failed password for invalid user server from 58.20.139.26 port 47943 ssh2
2019-12-10 21:55:18
58.20.139.26 attackspam
Nov 19 13:49:29 vtv3 sshd[15315]: Failed password for backup from 58.20.139.26 port 50833 ssh2
Nov 19 13:54:26 vtv3 sshd[16690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26 
Nov 19 13:54:28 vtv3 sshd[16690]: Failed password for invalid user ccradio from 58.20.139.26 port 40286 ssh2
Nov 19 14:20:18 vtv3 sshd[23978]: Failed password for root from 58.20.139.26 port 43745 ssh2
Nov 19 14:25:50 vtv3 sshd[25400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26 
Nov 19 14:25:52 vtv3 sshd[25400]: Failed password for invalid user mysql from 58.20.139.26 port 33242 ssh2
Nov 19 15:00:50 vtv3 sshd[2366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26 
Nov 19 15:00:52 vtv3 sshd[2366]: Failed password for invalid user lucier from 58.20.139.26 port 55174 ssh2
Nov 19 15:06:37 vtv3 sshd[3855]: Failed password for www-data from 58.20.139.26 port 44720 ssh2
Nov 19 15:
2019-11-19 21:38:43
58.20.139.26 attack
Nov 16 20:24:03 areeb-Workstation sshd[12939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
Nov 16 20:24:06 areeb-Workstation sshd[12939]: Failed password for invalid user admin from 58.20.139.26 port 58510 ssh2
...
2019-11-16 23:11:58
58.20.139.26 attackspam
$f2bV_matches
2019-11-15 15:58:49
58.20.139.26 attack
Nov  9 17:08:30 Ubuntu-1404-trusty-64-minimal sshd\[7963\]: Invalid user user from 58.20.139.26
Nov  9 17:08:30 Ubuntu-1404-trusty-64-minimal sshd\[7963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
Nov  9 17:08:33 Ubuntu-1404-trusty-64-minimal sshd\[7963\]: Failed password for invalid user user from 58.20.139.26 port 50714 ssh2
Nov  9 17:16:14 Ubuntu-1404-trusty-64-minimal sshd\[15317\]: Invalid user user from 58.20.139.26
Nov  9 17:16:14 Ubuntu-1404-trusty-64-minimal sshd\[15317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
2019-11-10 04:10:34
58.20.139.26 attackbots
Nov  3 16:57:33 lnxded63 sshd[17877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
2019-11-04 03:01:22
58.20.139.31 attackspam
Fail2Ban Ban Triggered
2019-10-25 12:01:43
58.20.139.26 attack
Oct  9 06:10:35 legacy sshd[10902]: Failed password for root from 58.20.139.26 port 36264 ssh2
Oct  9 06:15:25 legacy sshd[11040]: Failed password for root from 58.20.139.26 port 52063 ssh2
...
2019-10-09 14:12:23
58.20.139.26 attack
Oct  4 22:49:39 lnxmysql61 sshd[23068]: Failed password for root from 58.20.139.26 port 51743 ssh2
Oct  4 22:49:39 lnxmysql61 sshd[23068]: Failed password for root from 58.20.139.26 port 51743 ssh2
2019-10-05 05:25:37
58.20.139.26 attackbots
Oct  4 15:30:04 areeb-Workstation sshd[6153]: Failed password for root from 58.20.139.26 port 55417 ssh2
...
2019-10-04 20:27:08
58.20.139.26 attack
Sep 28 14:58:19 vps647732 sshd[22727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
Sep 28 14:58:21 vps647732 sshd[22727]: Failed password for invalid user eq from 58.20.139.26 port 56036 ssh2
...
2019-09-28 21:02:18
58.20.139.26 attack
SSH-BruteForce
2019-07-31 12:23:27
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.20.139.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9601
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;58.20.139.5.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019083101 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Sep 01 01:35:07 CST 2019
;; MSG SIZE  rcvd: 115
HOST信息:
5.139.20.58.in-addr.arpa has no PTR record
NSLOOKUP信息:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 5.139.20.58.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
93.64.183.162 attackbots
bruteforce detected
2020-06-17 15:58:50
49.234.207.226 attackspambots
Jun 16 23:52:40 lanister sshd[12714]: Invalid user steam from 49.234.207.226
Jun 16 23:52:40 lanister sshd[12714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.207.226
Jun 16 23:52:40 lanister sshd[12714]: Invalid user steam from 49.234.207.226
Jun 16 23:52:42 lanister sshd[12714]: Failed password for invalid user steam from 49.234.207.226 port 51494 ssh2
2020-06-17 15:43:06
202.45.144.9 attack
Invalid user atendimento from 202.45.144.9 port 39083
2020-06-17 15:39:45
183.62.49.212 attackspam
Jun 17 09:27:39 eventyay sshd[32550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.62.49.212
Jun 17 09:27:42 eventyay sshd[32550]: Failed password for invalid user nas from 183.62.49.212 port 38106 ssh2
Jun 17 09:31:15 eventyay sshd[32638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.62.49.212
...
2020-06-17 15:54:15
116.236.251.214 attackspambots
Invalid user ts3ovh from 116.236.251.214 port 26868
2020-06-17 15:34:57
142.93.101.148 attackspam
Invalid user tomm from 142.93.101.148 port 37772
2020-06-17 15:35:38
176.31.162.82 attackbots
2020-06-17T05:58:16.859904mail.csmailer.org sshd[9583]: Invalid user alen from 176.31.162.82 port 46670
2020-06-17T05:58:16.863122mail.csmailer.org sshd[9583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.ip-176-31-162.eu
2020-06-17T05:58:16.859904mail.csmailer.org sshd[9583]: Invalid user alen from 176.31.162.82 port 46670
2020-06-17T05:58:19.355336mail.csmailer.org sshd[9583]: Failed password for invalid user alen from 176.31.162.82 port 46670 ssh2
2020-06-17T06:01:38.098290mail.csmailer.org sshd[10105]: Invalid user dummy from 176.31.162.82 port 47940
...
2020-06-17 15:24:42
51.89.136.104 attackbots
Jun 17 02:58:13 mx sshd[31208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.136.104
Jun 17 02:58:15 mx sshd[31208]: Failed password for invalid user aaliyah from 51.89.136.104 port 34026 ssh2
2020-06-17 15:37:26
185.143.72.34 attack
Jun 17 09:34:49 relay postfix/smtpd\[11348\]: warning: unknown\[185.143.72.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 17 09:35:08 relay postfix/smtpd\[11522\]: warning: unknown\[185.143.72.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 17 09:35:44 relay postfix/smtpd\[12804\]: warning: unknown\[185.143.72.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 17 09:36:04 relay postfix/smtpd\[11510\]: warning: unknown\[185.143.72.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 17 09:36:40 relay postfix/smtpd\[6988\]: warning: unknown\[185.143.72.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-06-17 15:37:06
45.143.220.253 attackspam
[2020-06-17 03:14:41] NOTICE[1273][C-00001b56] chan_sip.c: Call from '' (45.143.220.253:55947) to extension '9011441519470478' rejected because extension not found in context 'public'.
[2020-06-17 03:14:41] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-17T03:14:41.016-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441519470478",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.253/55947",ACLName="no_extension_match"
[2020-06-17 03:14:41] NOTICE[1273][C-00001b57] chan_sip.c: Call from '' (45.143.220.253:58893) to extension '011442037699492' rejected because extension not found in context 'public'.
[2020-06-17 03:14:41] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-17T03:14:41.523-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442037699492",SessionID="0x7f31c018ea98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4
...
2020-06-17 15:28:41
67.205.145.234 attackbots
Jun 17 09:19:48 localhost sshd\[10926\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.145.234  user=root
Jun 17 09:19:49 localhost sshd\[10926\]: Failed password for root from 67.205.145.234 port 48762 ssh2
Jun 17 09:22:53 localhost sshd\[11190\]: Invalid user bass from 67.205.145.234
Jun 17 09:22:53 localhost sshd\[11190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.145.234
Jun 17 09:22:55 localhost sshd\[11190\]: Failed password for invalid user bass from 67.205.145.234 port 48092 ssh2
...
2020-06-17 15:42:33
196.52.43.109 attackspambots
 TCP (SYN) 196.52.43.109:63386 -> port 139, len 44
2020-06-17 15:57:10
222.221.248.242 attackbotsspam
2020-06-17T06:53:12.562143vps751288.ovh.net sshd\[1398\]: Invalid user suporte from 222.221.248.242 port 37886
2020-06-17T06:53:12.569573vps751288.ovh.net sshd\[1398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.221.248.242
2020-06-17T06:53:14.106498vps751288.ovh.net sshd\[1398\]: Failed password for invalid user suporte from 222.221.248.242 port 37886 ssh2
2020-06-17T06:55:05.866082vps751288.ovh.net sshd\[1417\]: Invalid user am from 222.221.248.242 port 60510
2020-06-17T06:55:05.876780vps751288.ovh.net sshd\[1417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.221.248.242
2020-06-17 15:37:39
171.244.36.124 attackbots
Jun 17 07:12:05 ip-172-31-61-156 sshd[10686]: Failed password for root from 171.244.36.124 port 49554 ssh2
Jun 17 07:16:11 ip-172-31-61-156 sshd[10868]: Invalid user michael1 from 171.244.36.124
Jun 17 07:16:11 ip-172-31-61-156 sshd[10868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.36.124
Jun 17 07:16:11 ip-172-31-61-156 sshd[10868]: Invalid user michael1 from 171.244.36.124
Jun 17 07:16:13 ip-172-31-61-156 sshd[10868]: Failed password for invalid user michael1 from 171.244.36.124 port 50902 ssh2
...
2020-06-17 15:38:36
92.118.160.17 attackspambots
Unauthorized connection attempt detected from IP address 92.118.160.17 to port 80 [T]
2020-06-17 16:04:30

最近上报的IP列表

114.241.114.200 191.37.135.147 80.8.199.61 159.95.113.164
84.237.17.186 35.239.107.54 84.21.149.88 119.214.253.14
131.195.86.202 62.13.146.78 205.196.229.103 168.62.183.2
63.102.147.69 97.158.89.17 137.139.105.136 109.195.177.136
57.88.113.121 118.11.27.119 59.48.161.172 196.147.195.137