必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): North Bergen

省份(region): New Jersey

国家(country): United States

运营商(isp): ServerStack Inc

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspam
"SSH brute force auth login attempt."
2020-01-23 19:08:20
attack
Unauthorized connection attempt detected from IP address 69.55.49.194 to port 2220 [J]
2020-01-06 06:18:39
attack
Jan  1 20:56:46 legacy sshd[14047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.194
Jan  1 20:56:48 legacy sshd[14047]: Failed password for invalid user xt from 69.55.49.194 port 58136 ssh2
Jan  1 20:58:00 legacy sshd[14071]: Failed password for root from 69.55.49.194 port 40952 ssh2
...
2020-01-02 05:18:30
attackspambots
Dec 30 20:27:26 web9 sshd\[29358\]: Invalid user meray from 69.55.49.194
Dec 30 20:27:26 web9 sshd\[29358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.194
Dec 30 20:27:28 web9 sshd\[29358\]: Failed password for invalid user meray from 69.55.49.194 port 53992 ssh2
Dec 30 20:29:50 web9 sshd\[29653\]: Invalid user ftp from 69.55.49.194
Dec 30 20:29:50 web9 sshd\[29653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.194
2019-12-31 14:52:18
attackspambots
Dec 26 18:32:51 marvibiene sshd[57693]: Invalid user howett from 69.55.49.194 port 45782
Dec 26 18:32:51 marvibiene sshd[57693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.194
Dec 26 18:32:51 marvibiene sshd[57693]: Invalid user howett from 69.55.49.194 port 45782
Dec 26 18:32:53 marvibiene sshd[57693]: Failed password for invalid user howett from 69.55.49.194 port 45782 ssh2
...
2019-12-27 05:37:48
attackspam
SSH brutforce
2019-12-21 19:34:17
attack
Invalid user pul from 69.55.49.194 port 57174
2019-12-18 21:05:31
attack
Invalid user pul from 69.55.49.194 port 57174
2019-12-18 04:17:33
attackspambots
DATE:2019-12-14 07:42:32,IP:69.55.49.194,MATCHES:10,PORT:ssh
2019-12-14 15:22:41
attack
Dec 10 21:58:21 hpm sshd\[14386\]: Invalid user bn from 69.55.49.194
Dec 10 21:58:21 hpm sshd\[14386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.194
Dec 10 21:58:24 hpm sshd\[14386\]: Failed password for invalid user bn from 69.55.49.194 port 52438 ssh2
Dec 10 22:03:44 hpm sshd\[14875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.194  user=root
Dec 10 22:03:46 hpm sshd\[14875\]: Failed password for root from 69.55.49.194 port 33308 ssh2
2019-12-11 16:05:29
attackbots
2019-12-08T00:31:33.186823shield sshd\[13942\]: Invalid user eddie from 69.55.49.194 port 53096
2019-12-08T00:31:33.191874shield sshd\[13942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.194
2019-12-08T00:31:34.545656shield sshd\[13942\]: Failed password for invalid user eddie from 69.55.49.194 port 53096 ssh2
2019-12-08T00:37:12.254496shield sshd\[15522\]: Invalid user test from 69.55.49.194 port 35716
2019-12-08T00:37:12.260212shield sshd\[15522\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.194
2019-12-08 08:52:22
attackspam
Dec  5 20:58:46 php1 sshd\[1897\]: Invalid user admin from 69.55.49.194
Dec  5 20:58:46 php1 sshd\[1897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.194
Dec  5 20:58:47 php1 sshd\[1897\]: Failed password for invalid user admin from 69.55.49.194 port 50578 ssh2
Dec  5 21:04:30 php1 sshd\[2423\]: Invalid user yoyo from 69.55.49.194
Dec  5 21:04:30 php1 sshd\[2423\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.194
2019-12-06 15:05:07
attackbots
Dec  5 07:34:06 sd-53420 sshd\[7055\]: Invalid user git from 69.55.49.194
Dec  5 07:34:06 sd-53420 sshd\[7055\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.194
Dec  5 07:34:08 sd-53420 sshd\[7055\]: Failed password for invalid user git from 69.55.49.194 port 56016 ssh2
Dec  5 07:39:29 sd-53420 sshd\[8116\]: Invalid user officetgmures from 69.55.49.194
Dec  5 07:39:29 sd-53420 sshd\[8116\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.194
...
2019-12-05 14:44:29
attackspambots
Dec  3 03:24:29 ny01 sshd[14379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.194
Dec  3 03:24:31 ny01 sshd[14379]: Failed password for invalid user mysql from 69.55.49.194 port 41508 ssh2
Dec  3 03:29:59 ny01 sshd[15471]: Failed password for root from 69.55.49.194 port 52902 ssh2
2019-12-03 16:52:13
attack
2019-12-02T10:55:45.213010  sshd[13929]: Invalid user antti from 69.55.49.194 port 49572
2019-12-02T10:55:45.228129  sshd[13929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.194
2019-12-02T10:55:45.213010  sshd[13929]: Invalid user antti from 69.55.49.194 port 49572
2019-12-02T10:55:47.916001  sshd[13929]: Failed password for invalid user antti from 69.55.49.194 port 49572 ssh2
2019-12-02T11:01:28.734380  sshd[14094]: Invalid user trinette from 69.55.49.194 port 33810
...
2019-12-02 18:40:55
attack
2019-11-20T06:32:09.549663abusebot-7.cloudsearch.cf sshd\[24580\]: Invalid user guillette from 69.55.49.194 port 56966
2019-11-20 14:50:44
attackbots
2019-11-20T05:29:08.142751abusebot-7.cloudsearch.cf sshd\[24410\]: Invalid user aydin from 69.55.49.194 port 33972
2019-11-20 13:55:35
attack
Nov 18 14:57:50 uapps sshd[20023]: User r.r from 69.55.49.194 not allowed because not listed in AllowUsers
Nov 18 14:57:50 uapps sshd[20023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.194  user=r.r
Nov 18 14:57:51 uapps sshd[20023]: Failed password for invalid user r.r from 69.55.49.194 port 34648 ssh2
Nov 18 14:57:52 uapps sshd[20023]: Received disconnect from 69.55.49.194: 11: Bye Bye [preauth]
Nov 18 15:14:12 uapps sshd[20187]: Failed password for invalid user home from 69.55.49.194 port 54974 ssh2
Nov 18 15:14:12 uapps sshd[20187]: Received disconnect from 69.55.49.194: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=69.55.49.194
2019-11-20 04:11:46
相同子网IP讨论:
IP 类型 评论内容 时间
69.55.49.187 attackbotsspam
69.55.49.187 (US/United States/-), 12 distributed sshd attacks on account [root] in the last 3600 secs
2020-10-13 04:18:42
69.55.49.187 attackspambots
Brute%20Force%20SSH
2020-10-12 19:56:59
69.55.49.187 attack
Oct 11 21:35:23 onepixel sshd[2293424]: Invalid user web from 69.55.49.187 port 55880
Oct 11 21:35:23 onepixel sshd[2293424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.187 
Oct 11 21:35:23 onepixel sshd[2293424]: Invalid user web from 69.55.49.187 port 55880
Oct 11 21:35:25 onepixel sshd[2293424]: Failed password for invalid user web from 69.55.49.187 port 55880 ssh2
Oct 11 21:38:51 onepixel sshd[2293978]: Invalid user deena from 69.55.49.187 port 33894
2020-10-12 05:47:27
69.55.49.187 attackbotsspam
Oct 11 15:19:42 ns392434 sshd[3986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.187  user=root
Oct 11 15:19:44 ns392434 sshd[3986]: Failed password for root from 69.55.49.187 port 40846 ssh2
Oct 11 15:25:10 ns392434 sshd[4076]: Invalid user buser from 69.55.49.187 port 39188
Oct 11 15:25:10 ns392434 sshd[4076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.187
Oct 11 15:25:10 ns392434 sshd[4076]: Invalid user buser from 69.55.49.187 port 39188
Oct 11 15:25:12 ns392434 sshd[4076]: Failed password for invalid user buser from 69.55.49.187 port 39188 ssh2
Oct 11 15:28:27 ns392434 sshd[4341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.187  user=root
Oct 11 15:28:29 ns392434 sshd[4341]: Failed password for root from 69.55.49.187 port 44842 ssh2
Oct 11 15:31:51 ns392434 sshd[4674]: Invalid user kurt from 69.55.49.187 port 50512
2020-10-11 21:54:19
69.55.49.187 attack
Oct 11 06:38:23 vpn01 sshd[8807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.187
Oct 11 06:38:25 vpn01 sshd[8807]: Failed password for invalid user git from 69.55.49.187 port 49832 ssh2
...
2020-10-11 13:51:18
69.55.49.187 attackbots
Oct 10 18:54:36 george sshd[23553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.187  user=mail
Oct 10 18:54:38 george sshd[23553]: Failed password for mail from 69.55.49.187 port 44360 ssh2
Oct 10 18:58:02 george sshd[25580]: Invalid user operator from 69.55.49.187 port 50332
Oct 10 18:58:02 george sshd[25580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.187 
Oct 10 18:58:04 george sshd[25580]: Failed password for invalid user operator from 69.55.49.187 port 50332 ssh2
...
2020-10-11 07:14:27
69.55.49.187 attackspam
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-10-07T14:44:21Z and 2020-10-07T14:52:20Z
2020-10-08 02:39:48
69.55.49.187 attackbots
$f2bV_matches
2020-10-07 18:53:22
69.55.49.187 attackbots
Sep 27 23:52:55 jane sshd[21947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.187 
Sep 27 23:52:57 jane sshd[21947]: Failed password for invalid user lin from 69.55.49.187 port 60540 ssh2
...
2020-09-28 05:58:54
69.55.49.187 attack
Sep 27 21:06:44 localhost sshd[60695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.187  user=mysql
Sep 27 21:06:46 localhost sshd[60695]: Failed password for mysql from 69.55.49.187 port 60668 ssh2
...
2020-09-27 22:20:26
69.55.49.187 attack
$f2bV_matches
2020-09-27 14:11:17
69.55.49.187 attackbotsspam
Invalid user tf2mgeserver from 69.55.49.187 port 41784
2020-09-21 02:09:41
69.55.49.187 attackbotsspam
Banned for a week because repeated abuses, for example SSH, but not only
2020-09-13 02:30:28
69.55.49.187 attackbots
...
2020-09-12 18:33:24
69.55.49.187 attack
Sep  9 09:45:04 abendstille sshd\[17923\]: Invalid user stephanie from 69.55.49.187
Sep  9 09:45:04 abendstille sshd\[17923\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.187
Sep  9 09:45:06 abendstille sshd\[17923\]: Failed password for invalid user stephanie from 69.55.49.187 port 55460 ssh2
Sep  9 09:48:43 abendstille sshd\[21094\]: Invalid user 12qw from 69.55.49.187
Sep  9 09:48:43 abendstille sshd\[21094\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.187
...
2020-09-09 22:04:40
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 69.55.49.194
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61420
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;69.55.49.194.			IN	A

;; AUTHORITY SECTION:
.			496	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111901 1800 900 604800 86400

;; Query time: 832 msec
;; SERVER: 183.60.82.98#53(183.60.82.98)
;; WHEN: Wed Nov 20 04:19:06 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:
Host 194.49.55.69.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 194.49.55.69.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
122.51.161.231 attack
Sep 25 01:21:44 dhoomketu sshd[3347667]: Failed password for invalid user hxeadm from 122.51.161.231 port 45852 ssh2
Sep 25 01:22:51 dhoomketu sshd[3347698]: Invalid user cloudera from 122.51.161.231 port 53120
Sep 25 01:22:51 dhoomketu sshd[3347698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.161.231 
Sep 25 01:22:51 dhoomketu sshd[3347698]: Invalid user cloudera from 122.51.161.231 port 53120
Sep 25 01:22:54 dhoomketu sshd[3347698]: Failed password for invalid user cloudera from 122.51.161.231 port 53120 ssh2
...
2020-09-25 08:54:19
79.137.39.102 attackbotsspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-09-25 09:04:05
37.134.65.23 attackbots
bruteforce detected
2020-09-25 08:58:47
13.82.92.111 attackspambots
Sep 24 19:04:40 ns3033917 sshd[32174]: Invalid user digitalinviter from 13.82.92.111 port 12821
Sep 24 19:04:42 ns3033917 sshd[32174]: Failed password for invalid user digitalinviter from 13.82.92.111 port 12821 ssh2
Sep 25 00:09:30 ns3033917 sshd[2708]: Invalid user scrapq from 13.82.92.111 port 58088
...
2020-09-25 09:04:36
106.52.20.112 attackbotsspam
SSH Invalid Login
2020-09-25 08:49:38
221.15.5.221 attackspam
" "
2020-09-25 08:57:58
165.22.89.96 attackspam
165.22.89.96 - - [25/Sep/2020:00:48:13 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
165.22.89.96 - - [25/Sep/2020:00:48:15 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
165.22.89.96 - - [25/Sep/2020:00:48:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-25 08:41:48
190.128.239.146 attack
SSH Invalid Login
2020-09-25 08:35:53
209.97.183.120 attack
2020-09-24 21:52:52,155 fail2ban.actions: WARNING [ssh] Ban 209.97.183.120
2020-09-25 08:56:30
14.56.180.103 attackbotsspam
Time:     Thu Sep 24 13:30:41 2020 +0000
IP:       14.56.180.103 (KR/South Korea/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 24 13:23:54 activeserver sshd[7557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.56.180.103  user=postgres
Sep 24 13:23:56 activeserver sshd[7557]: Failed password for postgres from 14.56.180.103 port 52324 ssh2
Sep 24 13:27:09 activeserver sshd[16123]: Invalid user user from 14.56.180.103 port 42758
Sep 24 13:27:12 activeserver sshd[16123]: Failed password for invalid user user from 14.56.180.103 port 42758 ssh2
Sep 24 13:30:36 activeserver sshd[27240]: Invalid user test from 14.56.180.103 port 33196
2020-09-25 08:34:05
152.136.101.207 attackspambots
Sep 24 14:11:47 Ubuntu-1404-trusty-64-minimal sshd\[30169\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.101.207  user=root
Sep 24 14:11:50 Ubuntu-1404-trusty-64-minimal sshd\[30169\]: Failed password for root from 152.136.101.207 port 51892 ssh2
Sep 25 01:43:29 Ubuntu-1404-trusty-64-minimal sshd\[27702\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.101.207  user=root
Sep 25 01:43:30 Ubuntu-1404-trusty-64-minimal sshd\[27702\]: Failed password for root from 152.136.101.207 port 51132 ssh2
Sep 25 02:27:01 Ubuntu-1404-trusty-64-minimal sshd\[20532\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.101.207  user=root
2020-09-25 08:59:38
115.236.67.42 attack
$f2bV_matches
2020-09-25 09:06:29
42.200.217.232 attackbots
Unauthorised access (Sep 24) SRC=42.200.217.232 LEN=52 TTL=114 ID=412 DF TCP DPT=445 WINDOW=8192 SYN
2020-09-25 08:40:51
13.71.16.51 attackbotsspam
Scanned 9 times in the last 24 hours on port 22
2020-09-25 08:37:13
122.51.95.90 attackbotsspam
$f2bV_matches
2020-09-25 08:54:38

最近上报的IP列表

121.35.13.99 41.38.97.181 36.85.210.12 223.90.92.209
54.201.130.65 68.194.127.138 24.156.165.15 182.153.7.94
152.81.78.34 47.75.97.160 90.66.47.141 125.135.31.38
83.162.196.192 185.211.239.140 56.232.119.72 173.122.187.109
56.102.151.179 82.62.198.33 157.118.180.220 12.244.239.154