必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): Hunan

国家(country): China

运营商(isp): CNC Group HuNan YueYang Network

主机名(hostname): unknown

机构(organization): CHINA UNICOM China169 Backbone

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackspam
Sep  1 23:57:21 MK-Soft-VM6 sshd\[21181\]: Invalid user bbj from 58.20.139.5 port 51060
Sep  1 23:57:21 MK-Soft-VM6 sshd\[21181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.5
Sep  1 23:57:23 MK-Soft-VM6 sshd\[21181\]: Failed password for invalid user bbj from 58.20.139.5 port 51060 ssh2
...
2019-09-02 08:33:50
attack
Aug 31 14:57:46 lnxmail61 sshd[21437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.5
2019-09-01 01:35:27
相同子网IP讨论:
IP 类型 评论内容 时间
58.20.139.26 attackspambots
Dec 23 10:34:23 lnxmysql61 sshd[25365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
2019-12-23 18:13:05
58.20.139.26 attackbotsspam
Dec  9 20:40:29 web1 sshd\[14176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26  user=root
Dec  9 20:40:31 web1 sshd\[14176\]: Failed password for root from 58.20.139.26 port 49469 ssh2
Dec  9 20:48:07 web1 sshd\[14973\]: Invalid user server from 58.20.139.26
Dec  9 20:48:07 web1 sshd\[14973\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
Dec  9 20:48:09 web1 sshd\[14973\]: Failed password for invalid user server from 58.20.139.26 port 47943 ssh2
2019-12-10 21:55:18
58.20.139.26 attackspam
Nov 19 13:49:29 vtv3 sshd[15315]: Failed password for backup from 58.20.139.26 port 50833 ssh2
Nov 19 13:54:26 vtv3 sshd[16690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26 
Nov 19 13:54:28 vtv3 sshd[16690]: Failed password for invalid user ccradio from 58.20.139.26 port 40286 ssh2
Nov 19 14:20:18 vtv3 sshd[23978]: Failed password for root from 58.20.139.26 port 43745 ssh2
Nov 19 14:25:50 vtv3 sshd[25400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26 
Nov 19 14:25:52 vtv3 sshd[25400]: Failed password for invalid user mysql from 58.20.139.26 port 33242 ssh2
Nov 19 15:00:50 vtv3 sshd[2366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26 
Nov 19 15:00:52 vtv3 sshd[2366]: Failed password for invalid user lucier from 58.20.139.26 port 55174 ssh2
Nov 19 15:06:37 vtv3 sshd[3855]: Failed password for www-data from 58.20.139.26 port 44720 ssh2
Nov 19 15:
2019-11-19 21:38:43
58.20.139.26 attack
Nov 16 20:24:03 areeb-Workstation sshd[12939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
Nov 16 20:24:06 areeb-Workstation sshd[12939]: Failed password for invalid user admin from 58.20.139.26 port 58510 ssh2
...
2019-11-16 23:11:58
58.20.139.26 attackspam
$f2bV_matches
2019-11-15 15:58:49
58.20.139.26 attack
Nov  9 17:08:30 Ubuntu-1404-trusty-64-minimal sshd\[7963\]: Invalid user user from 58.20.139.26
Nov  9 17:08:30 Ubuntu-1404-trusty-64-minimal sshd\[7963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
Nov  9 17:08:33 Ubuntu-1404-trusty-64-minimal sshd\[7963\]: Failed password for invalid user user from 58.20.139.26 port 50714 ssh2
Nov  9 17:16:14 Ubuntu-1404-trusty-64-minimal sshd\[15317\]: Invalid user user from 58.20.139.26
Nov  9 17:16:14 Ubuntu-1404-trusty-64-minimal sshd\[15317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
2019-11-10 04:10:34
58.20.139.26 attackbots
Nov  3 16:57:33 lnxded63 sshd[17877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
2019-11-04 03:01:22
58.20.139.31 attackspam
Fail2Ban Ban Triggered
2019-10-25 12:01:43
58.20.139.26 attack
Oct  9 06:10:35 legacy sshd[10902]: Failed password for root from 58.20.139.26 port 36264 ssh2
Oct  9 06:15:25 legacy sshd[11040]: Failed password for root from 58.20.139.26 port 52063 ssh2
...
2019-10-09 14:12:23
58.20.139.26 attack
Oct  4 22:49:39 lnxmysql61 sshd[23068]: Failed password for root from 58.20.139.26 port 51743 ssh2
Oct  4 22:49:39 lnxmysql61 sshd[23068]: Failed password for root from 58.20.139.26 port 51743 ssh2
2019-10-05 05:25:37
58.20.139.26 attackbots
Oct  4 15:30:04 areeb-Workstation sshd[6153]: Failed password for root from 58.20.139.26 port 55417 ssh2
...
2019-10-04 20:27:08
58.20.139.26 attack
Sep 28 14:58:19 vps647732 sshd[22727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
Sep 28 14:58:21 vps647732 sshd[22727]: Failed password for invalid user eq from 58.20.139.26 port 56036 ssh2
...
2019-09-28 21:02:18
58.20.139.26 attack
SSH-BruteForce
2019-07-31 12:23:27
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.20.139.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9601
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;58.20.139.5.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019083101 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Sep 01 01:35:07 CST 2019
;; MSG SIZE  rcvd: 115
HOST信息:
5.139.20.58.in-addr.arpa has no PTR record
NSLOOKUP信息:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 5.139.20.58.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
128.199.184.127 attackbotsspam
Oct 25 18:25:57 hanapaa sshd\[17911\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.184.127  user=root
Oct 25 18:25:59 hanapaa sshd\[17911\]: Failed password for root from 128.199.184.127 port 56360 ssh2
Oct 25 18:30:34 hanapaa sshd\[18220\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.184.127  user=root
Oct 25 18:30:37 hanapaa sshd\[18220\]: Failed password for root from 128.199.184.127 port 38232 ssh2
Oct 25 18:35:20 hanapaa sshd\[18587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.184.127  user=root
2019-10-26 12:35:33
210.227.113.18 attackbotsspam
Oct 25 22:50:22 server sshd\[14711\]: Failed password for invalid user vomaske from 210.227.113.18 port 49228 ssh2
Oct 26 07:02:52 server sshd\[2197\]: Invalid user lue from 210.227.113.18
Oct 26 07:02:52 server sshd\[2197\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.227.113.18 
Oct 26 07:02:53 server sshd\[2197\]: Failed password for invalid user lue from 210.227.113.18 port 57412 ssh2
Oct 26 07:15:09 server sshd\[6637\]: Invalid user teamspeak from 210.227.113.18
Oct 26 07:15:09 server sshd\[6637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.227.113.18 
...
2019-10-26 12:16:51
165.227.53.38 attack
Oct 26 06:54:10 www5 sshd\[30406\]: Invalid user am from 165.227.53.38
Oct 26 06:54:10 www5 sshd\[30406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.53.38
Oct 26 06:54:12 www5 sshd\[30406\]: Failed password for invalid user am from 165.227.53.38 port 40146 ssh2
...
2019-10-26 12:25:11
187.167.195.131 attack
Automatic report - Port Scan Attack
2019-10-26 12:00:02
134.175.48.207 attack
Oct 25 18:08:43 wbs sshd\[10573\]: Invalid user df457 from 134.175.48.207
Oct 25 18:08:43 wbs sshd\[10573\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.48.207
Oct 25 18:08:44 wbs sshd\[10573\]: Failed password for invalid user df457 from 134.175.48.207 port 51504 ssh2
Oct 25 18:13:51 wbs sshd\[11105\]: Invalid user usrobotics from 134.175.48.207
Oct 25 18:13:51 wbs sshd\[11105\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.48.207
2019-10-26 12:32:23
40.77.191.113 attack
Calling not existent HTTP content (400 or 404).
2019-10-26 12:20:46
84.1.150.12 attackbotsspam
Oct 26 05:54:49 v22018076622670303 sshd\[23137\]: Invalid user xq from 84.1.150.12 port 58880
Oct 26 05:54:49 v22018076622670303 sshd\[23137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.1.150.12
Oct 26 05:54:51 v22018076622670303 sshd\[23137\]: Failed password for invalid user xq from 84.1.150.12 port 58880 ssh2
...
2019-10-26 12:06:40
106.13.114.26 attackspam
Oct 26 06:34:49 server sshd\[27937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.26  user=root
Oct 26 06:34:51 server sshd\[27937\]: Failed password for root from 106.13.114.26 port 46874 ssh2
Oct 26 06:39:24 server sshd\[28915\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.26  user=root
Oct 26 06:39:26 server sshd\[28915\]: Failed password for root from 106.13.114.26 port 38316 ssh2
Oct 26 06:54:55 server sshd\[32182\]: Invalid user servidor from 106.13.114.26
...
2019-10-26 12:02:25
218.246.5.115 attackbotsspam
2019-10-25T23:09:48.278974abusebot-2.cloudsearch.cf sshd\[20052\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.246.5.115  user=root
2019-10-26 08:24:28
172.81.248.249 attackbotsspam
Oct 26 05:50:34 vps691689 sshd[2232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.248.249
Oct 26 05:50:36 vps691689 sshd[2232]: Failed password for invalid user sa445566 from 172.81.248.249 port 36004 ssh2
...
2019-10-26 12:06:05
103.15.62.69 attack
Oct 25 17:48:46 hanapaa sshd\[14925\]: Invalid user 123 from 103.15.62.69
Oct 25 17:48:46 hanapaa sshd\[14925\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.15.62.69
Oct 25 17:48:48 hanapaa sshd\[14925\]: Failed password for invalid user 123 from 103.15.62.69 port 38684 ssh2
Oct 25 17:54:51 hanapaa sshd\[15398\]: Invalid user nagiosnagios from 103.15.62.69
Oct 25 17:54:51 hanapaa sshd\[15398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.15.62.69
2019-10-26 12:06:19
112.175.120.232 attackspam
slow and persistent scanner
2019-10-26 12:33:55
80.241.221.145 attack
Oct 25 17:56:29 eddieflores sshd\[7019\]: Invalid user wolfie from 80.241.221.145
Oct 25 17:56:29 eddieflores sshd\[7019\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi291045.contaboserver.net
Oct 25 17:56:32 eddieflores sshd\[7019\]: Failed password for invalid user wolfie from 80.241.221.145 port 51964 ssh2
Oct 25 18:00:36 eddieflores sshd\[7325\]: Invalid user molly97 from 80.241.221.145
Oct 25 18:00:36 eddieflores sshd\[7325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi291045.contaboserver.net
2019-10-26 12:05:10
189.7.25.34 attackbots
Automatic report - Banned IP Access
2019-10-26 12:20:17
157.7.184.19 attack
WordPress login Brute force / Web App Attack on client site.
2019-10-26 12:33:36

最近上报的IP列表

114.241.114.200 191.37.135.147 80.8.199.61 159.95.113.164
84.237.17.186 35.239.107.54 84.21.149.88 119.214.253.14
131.195.86.202 62.13.146.78 205.196.229.103 168.62.183.2
63.102.147.69 97.158.89.17 137.139.105.136 109.195.177.136
57.88.113.121 118.11.27.119 59.48.161.172 196.147.195.137