必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): Hunan

国家(country): China

运营商(isp): CNC Group HuNan YueYang Network

主机名(hostname): unknown

机构(organization): CHINA UNICOM China169 Backbone

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackspam
Sep  1 23:57:21 MK-Soft-VM6 sshd\[21181\]: Invalid user bbj from 58.20.139.5 port 51060
Sep  1 23:57:21 MK-Soft-VM6 sshd\[21181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.5
Sep  1 23:57:23 MK-Soft-VM6 sshd\[21181\]: Failed password for invalid user bbj from 58.20.139.5 port 51060 ssh2
...
2019-09-02 08:33:50
attack
Aug 31 14:57:46 lnxmail61 sshd[21437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.5
2019-09-01 01:35:27
相同子网IP讨论:
IP 类型 评论内容 时间
58.20.139.26 attackspambots
Dec 23 10:34:23 lnxmysql61 sshd[25365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
2019-12-23 18:13:05
58.20.139.26 attackbotsspam
Dec  9 20:40:29 web1 sshd\[14176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26  user=root
Dec  9 20:40:31 web1 sshd\[14176\]: Failed password for root from 58.20.139.26 port 49469 ssh2
Dec  9 20:48:07 web1 sshd\[14973\]: Invalid user server from 58.20.139.26
Dec  9 20:48:07 web1 sshd\[14973\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
Dec  9 20:48:09 web1 sshd\[14973\]: Failed password for invalid user server from 58.20.139.26 port 47943 ssh2
2019-12-10 21:55:18
58.20.139.26 attackspam
Nov 19 13:49:29 vtv3 sshd[15315]: Failed password for backup from 58.20.139.26 port 50833 ssh2
Nov 19 13:54:26 vtv3 sshd[16690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26 
Nov 19 13:54:28 vtv3 sshd[16690]: Failed password for invalid user ccradio from 58.20.139.26 port 40286 ssh2
Nov 19 14:20:18 vtv3 sshd[23978]: Failed password for root from 58.20.139.26 port 43745 ssh2
Nov 19 14:25:50 vtv3 sshd[25400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26 
Nov 19 14:25:52 vtv3 sshd[25400]: Failed password for invalid user mysql from 58.20.139.26 port 33242 ssh2
Nov 19 15:00:50 vtv3 sshd[2366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26 
Nov 19 15:00:52 vtv3 sshd[2366]: Failed password for invalid user lucier from 58.20.139.26 port 55174 ssh2
Nov 19 15:06:37 vtv3 sshd[3855]: Failed password for www-data from 58.20.139.26 port 44720 ssh2
Nov 19 15:
2019-11-19 21:38:43
58.20.139.26 attack
Nov 16 20:24:03 areeb-Workstation sshd[12939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
Nov 16 20:24:06 areeb-Workstation sshd[12939]: Failed password for invalid user admin from 58.20.139.26 port 58510 ssh2
...
2019-11-16 23:11:58
58.20.139.26 attackspam
$f2bV_matches
2019-11-15 15:58:49
58.20.139.26 attack
Nov  9 17:08:30 Ubuntu-1404-trusty-64-minimal sshd\[7963\]: Invalid user user from 58.20.139.26
Nov  9 17:08:30 Ubuntu-1404-trusty-64-minimal sshd\[7963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
Nov  9 17:08:33 Ubuntu-1404-trusty-64-minimal sshd\[7963\]: Failed password for invalid user user from 58.20.139.26 port 50714 ssh2
Nov  9 17:16:14 Ubuntu-1404-trusty-64-minimal sshd\[15317\]: Invalid user user from 58.20.139.26
Nov  9 17:16:14 Ubuntu-1404-trusty-64-minimal sshd\[15317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
2019-11-10 04:10:34
58.20.139.26 attackbots
Nov  3 16:57:33 lnxded63 sshd[17877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
2019-11-04 03:01:22
58.20.139.31 attackspam
Fail2Ban Ban Triggered
2019-10-25 12:01:43
58.20.139.26 attack
Oct  9 06:10:35 legacy sshd[10902]: Failed password for root from 58.20.139.26 port 36264 ssh2
Oct  9 06:15:25 legacy sshd[11040]: Failed password for root from 58.20.139.26 port 52063 ssh2
...
2019-10-09 14:12:23
58.20.139.26 attack
Oct  4 22:49:39 lnxmysql61 sshd[23068]: Failed password for root from 58.20.139.26 port 51743 ssh2
Oct  4 22:49:39 lnxmysql61 sshd[23068]: Failed password for root from 58.20.139.26 port 51743 ssh2
2019-10-05 05:25:37
58.20.139.26 attackbots
Oct  4 15:30:04 areeb-Workstation sshd[6153]: Failed password for root from 58.20.139.26 port 55417 ssh2
...
2019-10-04 20:27:08
58.20.139.26 attack
Sep 28 14:58:19 vps647732 sshd[22727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.20.139.26
Sep 28 14:58:21 vps647732 sshd[22727]: Failed password for invalid user eq from 58.20.139.26 port 56036 ssh2
...
2019-09-28 21:02:18
58.20.139.26 attack
SSH-BruteForce
2019-07-31 12:23:27
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.20.139.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9601
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;58.20.139.5.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019083101 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Sep 01 01:35:07 CST 2019
;; MSG SIZE  rcvd: 115
HOST信息:
5.139.20.58.in-addr.arpa has no PTR record
NSLOOKUP信息:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 5.139.20.58.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
128.199.107.252 attackspam
Sep 22 07:02:55 mout sshd[6849]: Invalid user rack from 128.199.107.252 port 43624
2019-09-22 14:40:56
45.124.86.65 attackbotsspam
Sep 22 08:40:14 core sshd[14134]: Invalid user tom from 45.124.86.65 port 57686
Sep 22 08:40:16 core sshd[14134]: Failed password for invalid user tom from 45.124.86.65 port 57686 ssh2
...
2019-09-22 15:11:34
222.186.42.117 attackbots
Sep 21 20:36:43 web1 sshd\[2748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.117  user=root
Sep 21 20:36:45 web1 sshd\[2748\]: Failed password for root from 222.186.42.117 port 58676 ssh2
Sep 21 20:43:35 web1 sshd\[3448\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.117  user=root
Sep 21 20:43:37 web1 sshd\[3448\]: Failed password for root from 222.186.42.117 port 26406 ssh2
Sep 21 20:43:39 web1 sshd\[3448\]: Failed password for root from 222.186.42.117 port 26406 ssh2
2019-09-22 14:44:42
202.51.74.226 attack
Sep 21 20:27:46 hpm sshd\[21196\]: Invalid user apagar from 202.51.74.226
Sep 21 20:27:46 hpm sshd\[21196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.51.74.226
Sep 21 20:27:48 hpm sshd\[21196\]: Failed password for invalid user apagar from 202.51.74.226 port 52075 ssh2
Sep 21 20:32:54 hpm sshd\[21602\]: Invalid user msilva from 202.51.74.226
Sep 21 20:32:54 hpm sshd\[21602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.51.74.226
2019-09-22 14:46:11
119.63.133.86 attackbotsspam
Sep 22 07:12:34 www_kotimaassa_fi sshd[1706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.63.133.86
Sep 22 07:12:36 www_kotimaassa_fi sshd[1706]: Failed password for invalid user admin from 119.63.133.86 port 40613 ssh2
...
2019-09-22 15:22:08
172.105.78.192 attackspambots
Automatic report - Port Scan Attack
2019-09-22 14:48:54
58.254.132.41 attackspam
2019-09-22T06:33:37.060805abusebot-4.cloudsearch.cf sshd\[20965\]: Invalid user cj from 58.254.132.41 port 57890
2019-09-22 14:43:22
187.188.183.27 attack
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/187.188.183.27/ 
 MX - 1H : (29)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : MX 
 NAME ASN : ASN22884 
 
 IP : 187.188.183.27 
 
 CIDR : 187.188.183.0/24 
 
 PREFIX COUNT : 640 
 
 UNIQUE IP COUNT : 261120 
 
 
 WYKRYTE ATAKI Z ASN22884 :  
  1H - 1 
  3H - 1 
  6H - 2 
 12H - 2 
 24H - 4 
 
 INFO : SERVER - ABB - Looking for resource vulnerabilities Detected and Blocked by ADMIN  - data recovery
2019-09-22 14:47:35
85.113.210.58 attack
$f2bV_matches
2019-09-22 15:12:24
81.33.250.243 attackbotsspam
Sep 22 03:08:32 xtremcommunity sshd\[351710\]: Invalid user minho from 81.33.250.243 port 45625
Sep 22 03:08:32 xtremcommunity sshd\[351710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.33.250.243
Sep 22 03:08:34 xtremcommunity sshd\[351710\]: Failed password for invalid user minho from 81.33.250.243 port 45625 ssh2
Sep 22 03:12:51 xtremcommunity sshd\[351878\]: Invalid user sx from 81.33.250.243 port 38454
Sep 22 03:12:51 xtremcommunity sshd\[351878\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.33.250.243
...
2019-09-22 15:28:33
192.3.207.74 attackspam
\[2019-09-22 02:27:10\] SECURITY\[2283\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-22T02:27:10.437-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="330048422069042",SessionID="0x7fcd8c04d2f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/192.3.207.74/57288",ACLName="no_extension_match"
\[2019-09-22 02:29:25\] SECURITY\[2283\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-22T02:29:25.160-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="1501148422069043",SessionID="0x7fcd8c1e6268",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/192.3.207.74/63476",ACLName="no_extension_match"
\[2019-09-22 02:33:00\] SECURITY\[2283\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-22T02:33:00.711-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="340048422069042",SessionID="0x7fcd8c04d2f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/192.3.207.74/56208",ACLName="no_exten
2019-09-22 14:46:28
51.68.192.106 attackspam
$f2bV_matches
2019-09-22 15:30:55
85.165.101.141 attackbotsspam
19/9/21@23:54:34: FAIL: IoT-Telnet address from=85.165.101.141
...
2019-09-22 14:42:19
211.169.249.156 attack
Sep 22 06:41:30 game-panel sshd[17937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.169.249.156
Sep 22 06:41:32 game-panel sshd[17937]: Failed password for invalid user aw from 211.169.249.156 port 46414 ssh2
Sep 22 06:46:39 game-panel sshd[18113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.169.249.156
2019-09-22 15:06:37
222.186.175.8 attackspambots
Sep 22 09:05:10 cp sshd[6931]: Failed password for root from 222.186.175.8 port 19200 ssh2
Sep 22 09:05:10 cp sshd[6931]: Failed password for root from 222.186.175.8 port 19200 ssh2
Sep 22 09:05:14 cp sshd[6931]: Failed password for root from 222.186.175.8 port 19200 ssh2
2019-09-22 15:13:42

最近上报的IP列表

114.241.114.200 191.37.135.147 80.8.199.61 159.95.113.164
84.237.17.186 35.239.107.54 84.21.149.88 119.214.253.14
131.195.86.202 62.13.146.78 205.196.229.103 168.62.183.2
63.102.147.69 97.158.89.17 137.139.105.136 109.195.177.136
57.88.113.121 118.11.27.119 59.48.161.172 196.147.195.137