必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): Deutsche Telekom AG

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackbotsspam
Feb 11 07:04:24 xxxxxxx0 sshd[6000]: Invalid user dap from 80.157.194.44 port 41668
Feb 11 07:04:24 xxxxxxx0 sshd[6000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.157.194.44
Feb 11 07:04:26 xxxxxxx0 sshd[6000]: Failed password for invalid user dap from 80.157.194.44 port 41668 ssh2
Feb 11 07:06:36 xxxxxxx0 sshd[6403]: Invalid user dap from 80.157.194.44 port 41330
Feb 11 07:06:36 xxxxxxx0 sshd[6403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.157.194.44

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=80.157.194.44
2020-02-11 20:23:53
attack
Feb  9 01:18:43 plusreed sshd[10395]: Invalid user ybh from 80.157.194.44
...
2020-02-09 14:36:00
相同子网IP讨论:
IP 类型 评论内容 时间
80.157.194.43 attack
Feb 24 22:28:02 wbs sshd\[2834\]: Invalid user john from 80.157.194.43
Feb 24 22:28:02 wbs sshd\[2834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.157.194.43
Feb 24 22:28:04 wbs sshd\[2834\]: Failed password for invalid user john from 80.157.194.43 port 60586 ssh2
Feb 24 22:37:10 wbs sshd\[3638\]: Invalid user bmx from 80.157.194.43
Feb 24 22:37:10 wbs sshd\[3638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.157.194.43
2020-02-25 19:53:34
80.157.194.45 attack
Feb 19 23:09:26 srv-ubuntu-dev3 sshd[108235]: Invalid user tomcat from 80.157.194.45
Feb 19 23:09:26 srv-ubuntu-dev3 sshd[108235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.157.194.45
Feb 19 23:09:26 srv-ubuntu-dev3 sshd[108235]: Invalid user tomcat from 80.157.194.45
Feb 19 23:09:28 srv-ubuntu-dev3 sshd[108235]: Failed password for invalid user tomcat from 80.157.194.45 port 59802 ssh2
Feb 19 23:12:27 srv-ubuntu-dev3 sshd[108483]: Invalid user cpanelrrdtool from 80.157.194.45
Feb 19 23:12:27 srv-ubuntu-dev3 sshd[108483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.157.194.45
Feb 19 23:12:27 srv-ubuntu-dev3 sshd[108483]: Invalid user cpanelrrdtool from 80.157.194.45
Feb 19 23:12:29 srv-ubuntu-dev3 sshd[108483]: Failed password for invalid user cpanelrrdtool from 80.157.194.45 port 32822 ssh2
Feb 19 23:15:33 srv-ubuntu-dev3 sshd[108724]: Invalid user zhcui from 80.157.194.45
...
2020-02-20 07:04:02
80.157.194.40 attack
$f2bV_matches
2020-02-18 20:29:19
80.157.194.40 attackbotsspam
Feb 14 23:26:10 sso sshd[16789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.157.194.40
Feb 14 23:26:13 sso sshd[16789]: Failed password for invalid user abuse from 80.157.194.40 port 56818 ssh2
...
2020-02-15 06:26:43
80.157.194.45 attackspambots
Feb 12 18:44:00 hpm sshd\[28020\]: Invalid user ruthy from 80.157.194.45
Feb 12 18:44:00 hpm sshd\[28020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.157.194.45
Feb 12 18:44:02 hpm sshd\[28020\]: Failed password for invalid user ruthy from 80.157.194.45 port 34904 ssh2
Feb 12 18:47:23 hpm sshd\[28370\]: Invalid user test123 from 80.157.194.45
Feb 12 18:47:23 hpm sshd\[28370\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.157.194.45
2020-02-13 19:12:25
80.157.194.41 attack
Feb 11 14:15:09 hpm sshd\[2051\]: Invalid user jonatan from 80.157.194.41
Feb 11 14:15:09 hpm sshd\[2051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.157.194.41
Feb 11 14:15:11 hpm sshd\[2051\]: Failed password for invalid user jonatan from 80.157.194.41 port 44096 ssh2
Feb 11 14:18:24 hpm sshd\[2459\]: Invalid user conservative from 80.157.194.41
Feb 11 14:18:24 hpm sshd\[2459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.157.194.41
2020-02-12 08:27:58
80.157.194.45 attackbotsspam
Feb 10 08:38:18 ws22vmsma01 sshd[9977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.157.194.45
Feb 10 08:38:20 ws22vmsma01 sshd[9977]: Failed password for invalid user aqk from 80.157.194.45 port 33666 ssh2
...
2020-02-10 20:48:04
80.157.194.43 attackspam
Feb  7 10:34:40 plusreed sshd[9451]: Invalid user rvb from 80.157.194.43
...
2020-02-07 23:40:40
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.157.194.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17501
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.157.194.44.			IN	A

;; AUTHORITY SECTION:
.			592	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020900 1800 900 604800 86400

;; Query time: 286 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 09 14:35:52 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 44.194.157.80.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 44.194.157.80.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
67.60.137.219 attackbotsspam
Sent Mail to target address hacked/leaked from Planet3DNow.de
2019-11-22 02:03:49
42.3.179.133 attack
Honeypot attack, port: 5555, PTR: 42-3-179-133.static.netvigator.com.
2019-11-22 01:56:21
117.5.185.232 attack
Autoban   117.5.185.232 AUTH/CONNECT
2019-11-22 01:51:11
138.97.65.4 attackbotsspam
2019-11-21T14:52:23.253169abusebot.cloudsearch.cf sshd\[31556\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138-97-65-4.westlink.net.br  user=root
2019-11-22 02:16:25
58.76.223.206 attackspambots
Nov 21 04:47:51 web1 sshd\[364\]: Invalid user ding from 58.76.223.206
Nov 21 04:47:51 web1 sshd\[364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.76.223.206
Nov 21 04:47:53 web1 sshd\[364\]: Failed password for invalid user ding from 58.76.223.206 port 60614 ssh2
Nov 21 04:52:06 web1 sshd\[755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.76.223.206  user=root
Nov 21 04:52:09 web1 sshd\[755\]: Failed password for root from 58.76.223.206 port 49686 ssh2
2019-11-22 02:21:39
188.166.226.209 attackspam
*Port Scan* detected from 188.166.226.209 (SG/Singapore/-). 4 hits in the last 30 seconds
2019-11-22 01:59:35
69.75.91.250 attackspambots
Nov 21 15:52:08 dev postfix/smtpd\[17318\]: warning: rrcs-69-75-91-250.west.biz.rr.com\[69.75.91.250\]: SASL LOGIN authentication failed: authentication failure
Nov 21 15:52:09 dev postfix/smtpd\[17318\]: warning: rrcs-69-75-91-250.west.biz.rr.com\[69.75.91.250\]: SASL LOGIN authentication failed: authentication failure
Nov 21 15:52:10 dev postfix/smtpd\[17318\]: warning: rrcs-69-75-91-250.west.biz.rr.com\[69.75.91.250\]: SASL LOGIN authentication failed: authentication failure
Nov 21 15:52:11 dev postfix/smtpd\[17318\]: warning: rrcs-69-75-91-250.west.biz.rr.com\[69.75.91.250\]: SASL LOGIN authentication failed: authentication failure
Nov 21 15:52:11 dev postfix/smtpd\[17318\]: warning: rrcs-69-75-91-250.west.biz.rr.com\[69.75.91.250\]: SASL LOGIN authentication failed: authentication failure
2019-11-22 02:20:33
37.49.230.14 attack
\[2019-11-21 12:55:23\] NOTICE\[2754\] chan_sip.c: Registration from '"6660" \' failed for '37.49.230.14:5197' - Wrong password
\[2019-11-21 12:55:23\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-21T12:55:23.922-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="6660",SessionID="0x7f26c4b17ed8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.14/5197",Challenge="434a3abf",ReceivedChallenge="434a3abf",ReceivedHash="4e4973f2a09ad00cf68e6d486eac39bc"
\[2019-11-21 12:56:21\] NOTICE\[2754\] chan_sip.c: Registration from '"7770" \' failed for '37.49.230.14:5157' - Wrong password
\[2019-11-21 12:56:21\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-21T12:56:21.599-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="7770",SessionID="0x7f26c40586f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/3
2019-11-22 02:16:08
58.210.96.156 attackbots
Nov 21 19:33:23 server sshd\[12321\]: Invalid user schierbaum from 58.210.96.156
Nov 21 19:33:23 server sshd\[12321\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.210.96.156 
Nov 21 19:33:25 server sshd\[12321\]: Failed password for invalid user schierbaum from 58.210.96.156 port 45039 ssh2
Nov 21 19:44:09 server sshd\[15211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.210.96.156  user=root
Nov 21 19:44:11 server sshd\[15211\]: Failed password for root from 58.210.96.156 port 45871 ssh2
...
2019-11-22 02:14:10
117.50.43.235 attack
Nov 21 23:22:15 gw1 sshd[19362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.43.235
Nov 21 23:22:17 gw1 sshd[19362]: Failed password for invalid user yoyo from 117.50.43.235 port 60618 ssh2
...
2019-11-22 02:22:42
129.226.129.191 attack
Nov 21 19:04:47 OPSO sshd\[544\]: Invalid user barraclough from 129.226.129.191 port 35042
Nov 21 19:04:47 OPSO sshd\[544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.129.191
Nov 21 19:04:50 OPSO sshd\[544\]: Failed password for invalid user barraclough from 129.226.129.191 port 35042 ssh2
Nov 21 19:08:55 OPSO sshd\[1325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.129.191  user=root
Nov 21 19:08:57 OPSO sshd\[1325\]: Failed password for root from 129.226.129.191 port 49454 ssh2
2019-11-22 02:17:40
178.128.255.8 attackspam
Nov 21 20:35:43 server sshd\[28853\]: Invalid user hirakazu from 178.128.255.8
Nov 21 20:35:43 server sshd\[28853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.255.8 
Nov 21 20:35:45 server sshd\[28853\]: Failed password for invalid user hirakazu from 178.128.255.8 port 38300 ssh2
Nov 21 20:43:59 server sshd\[31071\]: Invalid user nfs from 178.128.255.8
Nov 21 20:43:59 server sshd\[31071\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.255.8 
...
2019-11-22 01:51:57
111.167.206.22 attack
Honeypot attack, port: 23, PTR: dns22.online.tj.cn.
2019-11-22 01:46:36
155.94.254.105 attack
2019-11-21T17:57:57.295100abusebot-4.cloudsearch.cf sshd\[711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=155.94.254.105  user=root
2019-11-22 01:58:25
165.84.242.112 attackbots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/165.84.242.112/ 
 
 PH - 1H : (13)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : PH 
 NAME ASN : ASN55303 
 
 IP : 165.84.242.112 
 
 CIDR : 165.84.242.0/24 
 
 PREFIX COUNT : 310 
 
 UNIQUE IP COUNT : 84480 
 
 
 ATTACKS DETECTED ASN55303 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-11-21 15:52:15 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery
2019-11-22 02:18:14

最近上报的IP列表

14.186.164.22 43.255.239.48 36.227.58.148 136.55.161.35
36.229.64.83 118.172.228.173 13.83.40.11 122.51.25.34
189.41.80.199 58.8.152.8 112.111.150.243 23.95.84.50
200.76.203.169 175.145.89.233 171.249.236.181 125.163.208.246
112.197.98.152 187.178.27.19 187.178.23.231 92.103.210.13