必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): Anhui

国家(country): China

运营商(isp): Anhui Unicom

主机名(hostname): unknown

机构(organization): CHINA UNICOM China169 Backbone

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Jun 24 20:19:43 tanzim-HP-Z238-Microtower-Workstation sshd\[9216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.39  user=root
Jun 24 20:19:46 tanzim-HP-Z238-Microtower-Workstation sshd\[9216\]: Failed password for root from 58.242.83.39 port 15620 ssh2
Jun 24 20:23:49 tanzim-HP-Z238-Microtower-Workstation sshd\[9917\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.39  user=root
...
2019-06-24 23:18:53
attackbots
Jun 24 02:01:32 aat-srv002 sshd[2274]: Failed password for root from 58.242.83.39 port 59138 ssh2
Jun 24 02:04:51 aat-srv002 sshd[2329]: Failed password for root from 58.242.83.39 port 35757 ssh2
Jun 24 02:06:28 aat-srv002 sshd[2346]: Failed password for root from 58.242.83.39 port 51591 ssh2
...
2019-06-24 15:26:34
attackspambots
Jun 24 03:25:47 tanzim-HP-Z238-Microtower-Workstation sshd\[26907\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.39  user=root
Jun 24 03:25:49 tanzim-HP-Z238-Microtower-Workstation sshd\[26907\]: Failed password for root from 58.242.83.39 port 44128 ssh2
Jun 24 03:27:15 tanzim-HP-Z238-Microtower-Workstation sshd\[27180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.39  user=root
...
2019-06-24 06:20:23
attackspam
Jun 23 06:31:57 tanzim-HP-Z238-Microtower-Workstation sshd\[20222\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.39  user=root
Jun 23 06:31:59 tanzim-HP-Z238-Microtower-Workstation sshd\[20222\]: Failed password for root from 58.242.83.39 port 40910 ssh2
Jun 23 06:32:48 tanzim-HP-Z238-Microtower-Workstation sshd\[20387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.39  user=root
...
2019-06-23 09:02:55
attack
Jun 22 03:56:28 aat-srv002 sshd[4356]: Failed password for root from 58.242.83.39 port 12283 ssh2
Jun 22 03:58:24 aat-srv002 sshd[4392]: Failed password for root from 58.242.83.39 port 49116 ssh2
Jun 22 04:01:16 aat-srv002 sshd[4444]: Failed password for root from 58.242.83.39 port 47209 ssh2
...
2019-06-22 17:23:42
attackbotsspam
Jun 22 05:44:42 tanzim-HP-Z238-Microtower-Workstation sshd\[30092\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.39  user=root
Jun 22 05:44:44 tanzim-HP-Z238-Microtower-Workstation sshd\[30092\]: Failed password for root from 58.242.83.39 port 23563 ssh2
Jun 22 05:45:19 tanzim-HP-Z238-Microtower-Workstation sshd\[30213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.39  user=root
...
2019-06-22 08:29:51
相同子网IP讨论:
IP 类型 评论内容 时间
58.242.83.30 attackbotsspam
2019-06-26T03:00:42.125488test01.cajus.name sshd\[373\]: Failed password for root from 58.242.83.30 port 33353 ssh2
2019-06-26T03:14:57.385383test01.cajus.name sshd\[5345\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.30  user=root
2019-06-26T03:14:59.387103test01.cajus.name sshd\[5345\]: Failed password for root from 58.242.83.30 port 24101 ssh2
2019-06-26 09:29:46
58.242.83.31 attack
Failed password for root from 58.242.83.31 port 34838 ssh2
Failed password for root from 58.242.83.31 port 34838 ssh2
Failed password for root from 58.242.83.31 port 34838 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.31  user=root
Failed password for root from 58.242.83.31 port 56021 ssh2
2019-06-26 04:25:56
58.242.83.29 attack
Jun 25 21:04:51 core01 sshd\[3613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.29  user=root
Jun 25 21:04:53 core01 sshd\[3613\]: Failed password for root from 58.242.83.29 port 13304 ssh2
...
2019-06-26 03:20:35
58.242.83.32 attackspambots
Jun 25 11:09:26 s64-1 sshd[9882]: Failed password for root from 58.242.83.32 port 39584 ssh2
Jun 25 11:09:28 s64-1 sshd[9882]: Failed password for root from 58.242.83.32 port 39584 ssh2
Jun 25 11:09:30 s64-1 sshd[9882]: Failed password for root from 58.242.83.32 port 39584 ssh2
...
2019-06-25 18:29:16
58.242.83.35 attack
Jun 25 11:03:05 ubuntu-2gb-nbg1-dc3-1 sshd[5571]: Failed password for root from 58.242.83.35 port 29194 ssh2
Jun 25 11:03:20 ubuntu-2gb-nbg1-dc3-1 sshd[5571]: Failed password for root from 58.242.83.35 port 29194 ssh2
...
2019-06-25 17:08:45
58.242.83.28 attack
Jun 25 09:39:59 localhost sshd\[59060\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.28  user=root
Jun 25 09:40:00 localhost sshd\[59060\]: Failed password for root from 58.242.83.28 port 11264 ssh2
...
2019-06-25 16:48:44
58.242.83.36 attackbots
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.36  user=root
Failed password for root from 58.242.83.36 port 12844 ssh2
Failed password for root from 58.242.83.36 port 12844 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.36  user=root
Failed password for root from 58.242.83.36 port 23332 ssh2
2019-06-25 16:01:04
58.242.83.29 attackbotsspam
Jun 24 20:06:33 core01 sshd\[15231\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.29  user=root
Jun 24 20:06:35 core01 sshd\[15231\]: Failed password for root from 58.242.83.29 port 55062 ssh2
...
2019-06-25 02:14:20
58.242.83.30 attackspambots
Jun 24 12:27:12 itv-usvr-01 sshd[20765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.30  user=root
Jun 24 12:27:13 itv-usvr-01 sshd[20765]: Failed password for root from 58.242.83.30 port 49470 ssh2
2019-06-24 17:16:30
58.242.83.36 attackbotsspam
Jun 24 07:13:26 s1 sshd\[30421\]: User root from 58.242.83.36 not allowed because not listed in AllowUsers
Jun 24 07:13:28 s1 sshd\[30421\]: Failed password for invalid user root from 58.242.83.36 port 18425 ssh2
Jun 24 07:13:28 s1 sshd\[30421\]: Failed password for invalid user root from 58.242.83.36 port 18425 ssh2
Jun 24 07:13:28 s1 sshd\[30421\]: Failed password for invalid user root from 58.242.83.36 port 18425 ssh2
Jun 24 07:16:03 s1 sshd\[31283\]: User root from 58.242.83.36 not allowed because not listed in AllowUsers
Jun 24 07:16:04 s1 sshd\[31283\]: Failed password for invalid user root from 58.242.83.36 port 38647 ssh2
...
2019-06-24 16:22:14
58.242.83.30 attackspambots
2019-06-24T04:50:06.440137test01.cajus.name sshd\[17553\]: Failed password for root from 58.242.83.30 port 34434 ssh2
2019-06-24T05:00:39.834846test01.cajus.name sshd\[4099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.30  user=root
2019-06-24T05:00:41.380663test01.cajus.name sshd\[4099\]: Failed password for root from 58.242.83.30 port 24396 ssh2
2019-06-24 11:04:47
58.242.83.29 attackspambots
Jun 24 04:13:14 core01 sshd\[13697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.29  user=root
Jun 24 04:13:16 core01 sshd\[13697\]: Failed password for root from 58.242.83.29 port 37457 ssh2
...
2019-06-24 10:24:14
58.242.83.36 attackbotsspam
Jun 23 19:39:39 aat-srv002 sshd[17128]: Failed password for root from 58.242.83.36 port 32612 ssh2
Jun 23 19:42:12 aat-srv002 sshd[17179]: Failed password for root from 58.242.83.36 port 48844 ssh2
Jun 23 19:42:58 aat-srv002 sshd[17190]: Failed password for root from 58.242.83.36 port 21947 ssh2
...
2019-06-24 08:51:14
58.242.83.28 attack
Jun 23 20:03:52 marvibiene sshd[32628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.28  user=root
Jun 23 20:03:54 marvibiene sshd[32628]: Failed password for root from 58.242.83.28 port 38378 ssh2
Jun 23 20:03:56 marvibiene sshd[32628]: Failed password for root from 58.242.83.28 port 38378 ssh2
Jun 23 20:03:52 marvibiene sshd[32628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.28  user=root
Jun 23 20:03:54 marvibiene sshd[32628]: Failed password for root from 58.242.83.28 port 38378 ssh2
Jun 23 20:03:56 marvibiene sshd[32628]: Failed password for root from 58.242.83.28 port 38378 ssh2
...
2019-06-24 07:25:56
58.242.83.28 attackspambots
Jun 23 16:03:39 marvibiene sshd[30545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.28  user=root
Jun 23 16:03:41 marvibiene sshd[30545]: Failed password for root from 58.242.83.28 port 46930 ssh2
Jun 23 16:03:43 marvibiene sshd[30545]: Failed password for root from 58.242.83.28 port 46930 ssh2
Jun 23 16:03:39 marvibiene sshd[30545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.28  user=root
Jun 23 16:03:41 marvibiene sshd[30545]: Failed password for root from 58.242.83.28 port 46930 ssh2
Jun 23 16:03:43 marvibiene sshd[30545]: Failed password for root from 58.242.83.28 port 46930 ssh2
...
2019-06-24 02:57:10
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.242.83.39
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52546
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;58.242.83.39.			IN	A

;; AUTHORITY SECTION:
.			2395	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040601 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Apr 07 13:09:48 +08 2019
;; MSG SIZE  rcvd: 116

HOST信息:
Host 39.83.242.58.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 39.83.242.58.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
60.13.6.101 attackbots
Web Server Scan. RayID: 59287d90d861ed3f, UA: Mozilla/5.051975669 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36, Country: CN
2020-05-21 04:23:50
103.126.172.6 attackspambots
May 20 20:48:19 ns392434 sshd[31295]: Invalid user muo from 103.126.172.6 port 59282
May 20 20:48:19 ns392434 sshd[31295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.126.172.6
May 20 20:48:19 ns392434 sshd[31295]: Invalid user muo from 103.126.172.6 port 59282
May 20 20:48:21 ns392434 sshd[31295]: Failed password for invalid user muo from 103.126.172.6 port 59282 ssh2
May 20 20:57:27 ns392434 sshd[31436]: Invalid user agl from 103.126.172.6 port 60988
May 20 20:57:27 ns392434 sshd[31436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.126.172.6
May 20 20:57:27 ns392434 sshd[31436]: Invalid user agl from 103.126.172.6 port 60988
May 20 20:57:28 ns392434 sshd[31436]: Failed password for invalid user agl from 103.126.172.6 port 60988 ssh2
May 20 21:01:32 ns392434 sshd[31591]: Invalid user kfd from 103.126.172.6 port 38454
2020-05-21 04:14:24
112.66.97.253 attackbotsspam
Web Server Scan. RayID: 593404aeac290540, UA: Mozilla/4.066686748 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1), Country: CN
2020-05-21 04:12:06
27.184.93.53 attackspambots
Web Server Scan. RayID: 58d60051af7be7dd, UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36, Country: CN
2020-05-21 04:30:04
172.98.67.23 attackspam
Nil
2020-05-21 04:40:59
112.112.246.55 attackbotsspam
Web Server Scan. RayID: 5916019b9f56d3a2, UA: python-requests/2.21.0, Country: CN
2020-05-21 04:11:06
113.128.105.21 attackspambots
Web Server Scan. RayID: 593b33f6fcf2e50e, UA: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36, Country: CN
2020-05-21 04:09:02
106.54.139.117 attack
Failed password for root from 106.54.139.117 port 42670 ssh2
2020-05-21 04:36:49
94.102.51.28 attackspam
Port scan: Attack repeated for 24 hours
2020-05-21 04:15:36
94.23.103.195 attack
(mod_security) mod_security (id:210492) triggered by 94.23.103.195 (BE/Belgium/-): 5 in the last 3600 secs
2020-05-21 04:45:10
113.57.114.171 attackspambots
Web Server Scan. RayID: 592a49a14e85ed7b, UA: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50, Country: CN
2020-05-21 04:09:50
83.240.61.181 attackbotsspam
SmallBizIT.US 1 packets to tcp(8291)
2020-05-21 04:21:12
77.70.96.195 attack
May 21 03:11:45 webhost01 sshd[10706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.70.96.195
May 21 03:11:47 webhost01 sshd[10706]: Failed password for invalid user wty from 77.70.96.195 port 57538 ssh2
...
2020-05-21 04:23:19
87.120.136.168 attack
SmallBizIT.US 1 packets to tcp(23)
2020-05-21 04:20:25
142.93.154.174 attack
May 20 15:16:42 Tower sshd[41227]: Connection from 142.93.154.174 port 41750 on 192.168.10.220 port 22 rdomain ""
May 20 15:16:45 Tower sshd[41227]: Invalid user ozv from 142.93.154.174 port 41750
May 20 15:16:45 Tower sshd[41227]: error: Could not get shadow information for NOUSER
May 20 15:16:45 Tower sshd[41227]: Failed password for invalid user ozv from 142.93.154.174 port 41750 ssh2
May 20 15:16:45 Tower sshd[41227]: Received disconnect from 142.93.154.174 port 41750:11: Bye Bye [preauth]
May 20 15:16:45 Tower sshd[41227]: Disconnected from invalid user ozv 142.93.154.174 port 41750 [preauth]
2020-05-21 04:44:42

最近上报的IP列表

140.143.194.124 78.85.19.176 201.190.130.208 41.233.50.150
182.74.109.114 201.180.128.187 103.213.250.14 36.91.162.42
104.130.11.28 59.15.234.78 162.105.183.242 41.254.7.51
41.58.157.149 124.218.94.195 118.24.0.225 14.161.33.130
54.36.124.52 190.147.230.53 151.80.61.103 46.101.216.16