61.177.139.2 - IPInfo

基本信息:

城市(city): unknown

省份(region): Jiangsu

国家(country): China

运营商(isp): ChinaNet Jiangsu Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	SSH login attempts with user root.	2019-11-30 04:49:12

相同子网IP讨论:

IP	类型	评论内容	时间
61.177.139.213	attackspambots	Dec 6 00:18:04 server sshd\[3360\]: Invalid user ftpuser from 61.177.139.213 Dec 6 00:18:04 server sshd\[3360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.139.213 Dec 6 00:18:06 server sshd\[3360\]: Failed password for invalid user ftpuser from 61.177.139.213 port 2086 ssh2 Dec 6 00:39:37 server sshd\[9176\]: Invalid user test1 from 61.177.139.213 Dec 6 00:39:37 server sshd\[9176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.139.213 ...	2019-12-06 07:24:04

类型

评论内容

时间

61.177.139.213

attackspambots

Dec  6 00:18:04 server sshd\[3360\]: Invalid user ftpuser from 61.177.139.213
Dec  6 00:18:04 server sshd\[3360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.139.213 
Dec  6 00:18:06 server sshd\[3360\]: Failed password for invalid user ftpuser from 61.177.139.213 port 2086 ssh2
Dec  6 00:39:37 server sshd\[9176\]: Invalid user test1 from 61.177.139.213
Dec  6 00:39:37 server sshd\[9176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.139.213 
...

2019-12-06 07:24:04

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 61.177.139.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48141
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;61.177.139.2.			IN	A

;; AUTHORITY SECTION:
.			516	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112901 1800 900 604800 86400

;; Query time: 366 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 30 04:49:09 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 2.139.177.61.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.139.177.61.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
80.17.244.2	attack	Mar 29 21:27:17 santamaria sshd\[3162\]: Invalid user jw from 80.17.244.2 Mar 29 21:27:17 santamaria sshd\[3162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.17.244.2 Mar 29 21:27:19 santamaria sshd\[3162\]: Failed password for invalid user jw from 80.17.244.2 port 60064 ssh2 ...	2020-03-30 04:01:40
23.95.231.224	attack	Mar 29 22:53:43 www sshd\[192421\]: Invalid user wdn from 23.95.231.224 Mar 29 22:53:43 www sshd\[192421\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.95.231.224 Mar 29 22:53:45 www sshd\[192421\]: Failed password for invalid user wdn from 23.95.231.224 port 40100 ssh2 ...	2020-03-30 04:12:07
158.69.204.172	attack	(sshd) Failed SSH login from 158.69.204.172 (CA/Canada/172.ip-158-69-204.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 29 22:54:14 srv sshd[3295]: Invalid user long from 158.69.204.172 port 40356 Mar 29 22:54:16 srv sshd[3295]: Failed password for invalid user long from 158.69.204.172 port 40356 ssh2 Mar 29 23:00:44 srv sshd[4014]: Invalid user lmt from 158.69.204.172 port 50372 Mar 29 23:00:46 srv sshd[4014]: Failed password for invalid user lmt from 158.69.204.172 port 50372 ssh2 Mar 29 23:05:12 srv sshd[4633]: Invalid user debian from 158.69.204.172 port 34262	2020-03-30 04:30:56
77.233.4.133	attackspambots	Mar 29 15:28:44 Tower sshd[10918]: Connection from 77.233.4.133 port 50987 on 192.168.10.220 port 22 rdomain "" Mar 29 15:28:45 Tower sshd[10918]: Invalid user llu from 77.233.4.133 port 50987 Mar 29 15:28:45 Tower sshd[10918]: error: Could not get shadow information for NOUSER Mar 29 15:28:45 Tower sshd[10918]: Failed password for invalid user llu from 77.233.4.133 port 50987 ssh2 Mar 29 15:28:46 Tower sshd[10918]: Received disconnect from 77.233.4.133 port 50987:11: Bye Bye [preauth] Mar 29 15:28:46 Tower sshd[10918]: Disconnected from invalid user llu 77.233.4.133 port 50987 [preauth]	2020-03-30 04:18:52
89.248.160.178	attackspambots	03/29/2020-15:00:02.866472 89.248.160.178 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-03-30 04:23:27
128.199.154.137	attackspam	Mar 29 15:04:11 lanister sshd[5116]: Invalid user ltc from 128.199.154.137 Mar 29 15:04:11 lanister sshd[5116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.154.137 Mar 29 15:04:11 lanister sshd[5116]: Invalid user ltc from 128.199.154.137 Mar 29 15:04:13 lanister sshd[5116]: Failed password for invalid user ltc from 128.199.154.137 port 48350 ssh2	2020-03-30 04:13:24
123.11.215.35	attackspambots	Mar 29 14:41:31 exim[16273]: [1\50] 1jIXFn-0004ET-Qe H=(gmail.com) [123.11.215.35] F= rejected after DATA: This message scored 13.5 spam points.	2020-03-30 04:23:13
140.143.57.159	attackspambots	Mar 29 20:11:54 tuxlinux sshd[23547]: Invalid user qdz from 140.143.57.159 port 46900 Mar 29 20:11:54 tuxlinux sshd[23547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.57.159 Mar 29 20:11:54 tuxlinux sshd[23547]: Invalid user qdz from 140.143.57.159 port 46900 Mar 29 20:11:54 tuxlinux sshd[23547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.57.159 Mar 29 20:11:54 tuxlinux sshd[23547]: Invalid user qdz from 140.143.57.159 port 46900 Mar 29 20:11:54 tuxlinux sshd[23547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.57.159 Mar 29 20:11:56 tuxlinux sshd[23547]: Failed password for invalid user qdz from 140.143.57.159 port 46900 ssh2 ...	2020-03-30 04:27:41
37.105.214.110	attackspambots	Mar 29 22:16:02 host01 sshd[14414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.105.214.110 Mar 29 22:16:05 host01 sshd[14414]: Failed password for invalid user dy from 37.105.214.110 port 46470 ssh2 Mar 29 22:19:57 host01 sshd[15122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.105.214.110 ...	2020-03-30 04:32:30
148.66.135.69	attackspambots	148.66.135.69 - - [29/Mar/2020:19:24:21 +0200] "POST /wp-login.php HTTP/1.1" 200 3686 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.135.69 - - [29/Mar/2020:19:24:24 +0200] "POST /wp-login.php HTTP/1.1" 200 3663 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-03-30 04:00:24
198.245.49.37	attackspam	Mar 29 13:33:41 XXXXXX sshd[52442]: Invalid user ekw from 198.245.49.37 port 49840	2020-03-30 04:19:09
194.150.68.145	attackbotsspam	k+ssh-bruteforce	2020-03-30 04:14:40
51.38.131.254	attackbots	Mar 29 15:46:35 NPSTNNYC01T sshd[13083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.131.254 Mar 29 15:46:36 NPSTNNYC01T sshd[13083]: Failed password for invalid user mpc from 51.38.131.254 port 45054 ssh2 Mar 29 15:51:00 NPSTNNYC01T sshd[13360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.131.254 ...	2020-03-30 04:02:02
114.67.179.121	attack	Mar 29 15:13:59 [host] sshd[15625]: Invalid user u Mar 29 15:13:59 [host] sshd[15625]: pam_unix(sshd: Mar 29 15:14:01 [host] sshd[15625]: Failed passwor	2020-03-30 04:19:35
91.106.195.180	attackbots	Invalid user wpyan from 91.106.195.180 port 35626	2020-03-30 04:33:56

最近上报的IP列表

61.239.233.21	60.172.95.1	46.31.200.91	59.45.237.1
175.84.83.224	59.35.20.1	76.187.4.230	58.254.132.2
58.56.140.6	193.64.35.165	104.223.155.173	62.94.151.211
216.50.149.246	119.26.233.198	69.127.54.133	54.38.195.1
61.245.92.186	143.88.190.188	54.38.81.1	181.187.179.164