必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Italy

运营商(isp): Aruba S.p.A. - Cloud Services Farm

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
5x Failed Password
2020-04-21 03:43:09
attack
SSH Brute-Forcing (server1)
2020-04-18 07:11:22
attackbots
2020-04-10T12:06:43.250549abusebot-7.cloudsearch.cf sshd[6883]: Invalid user postgres from 80.211.139.159 port 34400
2020-04-10T12:06:43.255418abusebot-7.cloudsearch.cf sshd[6883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.159
2020-04-10T12:06:43.250549abusebot-7.cloudsearch.cf sshd[6883]: Invalid user postgres from 80.211.139.159 port 34400
2020-04-10T12:06:45.684566abusebot-7.cloudsearch.cf sshd[6883]: Failed password for invalid user postgres from 80.211.139.159 port 34400 ssh2
2020-04-10T12:11:28.678661abusebot-7.cloudsearch.cf sshd[7215]: Invalid user oracle from 80.211.139.159 port 51862
2020-04-10T12:11:28.683759abusebot-7.cloudsearch.cf sshd[7215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.159
2020-04-10T12:11:28.678661abusebot-7.cloudsearch.cf sshd[7215]: Invalid user oracle from 80.211.139.159 port 51862
2020-04-10T12:11:30.239557abusebot-7.cloudsearch.cf sshd[721
...
2020-04-10 20:52:51
attackbotsspam
Feb 26 04:14:31 ns381471 sshd[23787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.159
Feb 26 04:14:33 ns381471 sshd[23787]: Failed password for invalid user samba from 80.211.139.159 port 45690 ssh2
2020-02-26 11:22:34
attackspambots
SSH Brute-Forcing (server2)
2020-01-26 13:34:50
attack
SSH invalid-user multiple login try
2020-01-22 07:28:49
attackspam
Invalid user cirino from 80.211.139.159 port 53880
2020-01-04 04:20:15
attackbotsspam
Invalid user cirino from 80.211.139.159 port 53880
2019-12-31 17:34:59
attackbots
--- report ---
Dec 26 10:38:27 sshd: Connection from 80.211.139.159 port 52160
Dec 26 10:38:29 sshd: Invalid user srss from 80.211.139.159
Dec 26 10:38:31 sshd: Failed password for invalid user srss from 80.211.139.159 port 52160 ssh2
Dec 26 10:38:32 sshd: Received disconnect from 80.211.139.159: 11: Bye Bye [preauth]
2019-12-26 22:32:09
attackbots
Dec 25 15:54:08 amit sshd\[24717\]: Invalid user kzso from 80.211.139.159
Dec 25 15:54:08 amit sshd\[24717\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.159
Dec 25 15:54:10 amit sshd\[24717\]: Failed password for invalid user kzso from 80.211.139.159 port 44976 ssh2
...
2019-12-26 01:12:42
attackspambots
Dec 23 00:42:50 server sshd\[16293\]: Failed password for invalid user info from 80.211.139.159 port 48698 ssh2
Dec 23 18:54:03 server sshd\[22277\]: Invalid user guest from 80.211.139.159
Dec 23 18:54:03 server sshd\[22277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.159 
Dec 23 18:54:05 server sshd\[22277\]: Failed password for invalid user guest from 80.211.139.159 port 37082 ssh2
Dec 23 18:59:24 server sshd\[23533\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.159  user=root
...
2019-12-24 02:29:58
attackbots
Dec 12 22:31:35 wbs sshd\[21786\]: Invalid user renata from 80.211.139.159
Dec 12 22:31:35 wbs sshd\[21786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.159
Dec 12 22:31:38 wbs sshd\[21786\]: Failed password for invalid user renata from 80.211.139.159 port 52234 ssh2
Dec 12 22:37:24 wbs sshd\[22328\]: Invalid user test from 80.211.139.159
Dec 12 22:37:24 wbs sshd\[22328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.159
2019-12-13 16:52:09
attackbotsspam
Dec  7 09:49:29 TORMINT sshd\[23764\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.159  user=root
Dec  7 09:49:31 TORMINT sshd\[23764\]: Failed password for root from 80.211.139.159 port 58832 ssh2
Dec  7 09:54:59 TORMINT sshd\[24213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.159  user=root
...
2019-12-07 23:01:12
attackbots
Dec  7 11:19:29 ncomp sshd[5368]: Invalid user yoyo from 80.211.139.159
Dec  7 11:19:29 ncomp sshd[5368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.159
Dec  7 11:19:29 ncomp sshd[5368]: Invalid user yoyo from 80.211.139.159
Dec  7 11:19:31 ncomp sshd[5368]: Failed password for invalid user yoyo from 80.211.139.159 port 45590 ssh2
2019-12-07 19:32:30
attackbots
Dec  4 20:59:10 Ubuntu-1404-trusty-64-minimal sshd\[3766\]: Invalid user rivedal from 80.211.139.159
Dec  4 20:59:10 Ubuntu-1404-trusty-64-minimal sshd\[3766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.159
Dec  4 20:59:12 Ubuntu-1404-trusty-64-minimal sshd\[3766\]: Failed password for invalid user rivedal from 80.211.139.159 port 57690 ssh2
Dec  4 21:08:28 Ubuntu-1404-trusty-64-minimal sshd\[14172\]: Invalid user eley from 80.211.139.159
Dec  4 21:08:28 Ubuntu-1404-trusty-64-minimal sshd\[14172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.159
2019-12-05 06:37:16
attack
Dec  1 18:50:31 mout sshd[31442]: Invalid user yi from 80.211.139.159 port 57002
2019-12-02 01:58:03
attackbots
DATE:2019-07-29 19:39:57, IP:80.211.139.159, PORT:ssh brute force auth on SSH service (patata)
2019-07-30 05:05:09
attackspambots
Invalid user svn from 80.211.139.159 port 37356
2019-07-28 05:55:18
相同子网IP讨论:
IP 类型 评论内容 时间
80.211.139.7 attack
ssh brute force
2020-09-03 20:33:54
80.211.139.7 attackbotsspam
Sep  2 22:08:23 mail sshd\[61708\]: Invalid user yxu from 80.211.139.7
Sep  2 22:08:23 mail sshd\[61708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.7
...
2020-09-03 12:19:06
80.211.139.7 attackbotsspam
(sshd) Failed SSH login from 80.211.139.7 (IT/Italy/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  2 12:35:15 server4 sshd[19853]: Invalid user tzq from 80.211.139.7
Sep  2 12:35:15 server4 sshd[19853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.7 
Sep  2 12:35:18 server4 sshd[19853]: Failed password for invalid user tzq from 80.211.139.7 port 35404 ssh2
Sep  2 12:49:35 server4 sshd[27648]: Invalid user sofia from 80.211.139.7
Sep  2 12:49:35 server4 sshd[27648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.7
2020-09-03 04:37:40
80.211.139.7 attackspambots
(sshd) Failed SSH login from 80.211.139.7 (IT/Italy/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  2 12:35:15 server4 sshd[19853]: Invalid user tzq from 80.211.139.7
Sep  2 12:35:15 server4 sshd[19853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.7 
Sep  2 12:35:18 server4 sshd[19853]: Failed password for invalid user tzq from 80.211.139.7 port 35404 ssh2
Sep  2 12:49:35 server4 sshd[27648]: Invalid user sofia from 80.211.139.7
Sep  2 12:49:35 server4 sshd[27648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.7
2020-09-03 02:27:12
80.211.139.7 attackspambots
Invalid user monika from 80.211.139.7 port 46414
2020-08-29 06:24:04
80.211.139.7 attackbotsspam
SSH auth scanning - multiple failed logins
2020-08-22 07:03:08
80.211.139.7 attackbotsspam
Aug 20 05:59:37 h2646465 sshd[30955]: Invalid user ubuntu from 80.211.139.7
Aug 20 05:59:37 h2646465 sshd[30955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.7
Aug 20 05:59:37 h2646465 sshd[30955]: Invalid user ubuntu from 80.211.139.7
Aug 20 05:59:39 h2646465 sshd[30955]: Failed password for invalid user ubuntu from 80.211.139.7 port 56510 ssh2
Aug 20 06:08:46 h2646465 sshd[32562]: Invalid user mono from 80.211.139.7
Aug 20 06:08:46 h2646465 sshd[32562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.7
Aug 20 06:08:46 h2646465 sshd[32562]: Invalid user mono from 80.211.139.7
Aug 20 06:08:47 h2646465 sshd[32562]: Failed password for invalid user mono from 80.211.139.7 port 50650 ssh2
Aug 20 06:14:19 h2646465 sshd[785]: Invalid user ccf from 80.211.139.7
...
2020-08-20 13:58:52
80.211.139.7 attackbots
" "
2020-08-07 00:13:07
80.211.139.7 attack
2020-08-05T22:37:28.374570v22018076590370373 sshd[13209]: Failed password for root from 80.211.139.7 port 51026 ssh2
2020-08-05T22:38:47.418836v22018076590370373 sshd[8018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.7  user=root
2020-08-05T22:38:49.227399v22018076590370373 sshd[8018]: Failed password for root from 80.211.139.7 port 37466 ssh2
2020-08-05T22:40:04.174268v22018076590370373 sshd[991]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.7  user=root
2020-08-05T22:40:06.555429v22018076590370373 sshd[991]: Failed password for root from 80.211.139.7 port 52140 ssh2
...
2020-08-06 05:59:04
80.211.139.7 attackspambots
$f2bV_matches
2020-07-24 07:27:27
80.211.139.7 attackspambots
Jul 12 08:49:09 srv-ubuntu-dev3 sshd[109862]: Invalid user analytics from 80.211.139.7
Jul 12 08:49:09 srv-ubuntu-dev3 sshd[109862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.7
Jul 12 08:49:09 srv-ubuntu-dev3 sshd[109862]: Invalid user analytics from 80.211.139.7
Jul 12 08:49:11 srv-ubuntu-dev3 sshd[109862]: Failed password for invalid user analytics from 80.211.139.7 port 58928 ssh2
Jul 12 08:53:32 srv-ubuntu-dev3 sshd[110562]: Invalid user julio from 80.211.139.7
Jul 12 08:53:32 srv-ubuntu-dev3 sshd[110562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.7
Jul 12 08:53:32 srv-ubuntu-dev3 sshd[110562]: Invalid user julio from 80.211.139.7
Jul 12 08:53:34 srv-ubuntu-dev3 sshd[110562]: Failed password for invalid user julio from 80.211.139.7 port 57242 ssh2
Jul 12 08:57:46 srv-ubuntu-dev3 sshd[111211]: Invalid user hphk from 80.211.139.7
...
2020-07-12 16:05:35
80.211.139.7 attackbotsspam
$f2bV_matches
2020-07-11 21:58:19
80.211.139.7 attackspambots
Jul  7 22:09:42 db sshd[21332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.7 
Jul  7 22:09:43 db sshd[21332]: Failed password for invalid user simaqie from 80.211.139.7 port 41416 ssh2
Jul  7 22:14:40 db sshd[21576]: Invalid user cead from 80.211.139.7 port 40112
...
2020-07-08 04:40:57
80.211.139.7 attackbotsspam
Jul  5 21:44:17 vps sshd[980795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.7
Jul  5 21:44:19 vps sshd[980795]: Failed password for invalid user sekine from 80.211.139.7 port 44064 ssh2
Jul  5 21:48:38 vps sshd[1002810]: Invalid user lorna from 80.211.139.7 port 43244
Jul  5 21:48:38 vps sshd[1002810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.7
Jul  5 21:48:40 vps sshd[1002810]: Failed password for invalid user lorna from 80.211.139.7 port 43244 ssh2
...
2020-07-06 04:20:41
80.211.139.7 attackbotsspam
Jul  5 01:47:05 abendstille sshd\[6032\]: Invalid user preston from 80.211.139.7
Jul  5 01:47:05 abendstille sshd\[6032\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.7
Jul  5 01:47:07 abendstille sshd\[6032\]: Failed password for invalid user preston from 80.211.139.7 port 39804 ssh2
Jul  5 01:51:30 abendstille sshd\[10526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.139.7  user=root
Jul  5 01:51:33 abendstille sshd\[10526\]: Failed password for root from 80.211.139.7 port 37328 ssh2
...
2020-07-05 08:06:06
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.211.139.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9381
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.211.139.159.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072701 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jul 28 05:55:13 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
159.139.211.80.in-addr.arpa domain name pointer host159-139-211-80.serverdedicati.aruba.it.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
159.139.211.80.in-addr.arpa	name = host159-139-211-80.serverdedicati.aruba.it.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
149.56.13.111 attackbots
Jul 11 00:42:20 raspberrypi sshd[15100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.13.111 
Jul 11 00:42:23 raspberrypi sshd[15100]: Failed password for invalid user hungle from 149.56.13.111 port 57972 ssh2
...
2020-07-11 06:51:06
45.7.138.40 attackbotsspam
Jul 11 00:55:57 debian-2gb-nbg1-2 kernel: \[16680344.641116\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.7.138.40 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=30578 PROTO=TCP SPT=50491 DPT=8358 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-11 07:14:58
211.108.69.103 attack
Jul 11 00:04:12 abendstille sshd\[10843\]: Invalid user adm from 211.108.69.103
Jul 11 00:04:12 abendstille sshd\[10843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.108.69.103
Jul 11 00:04:14 abendstille sshd\[10843\]: Failed password for invalid user adm from 211.108.69.103 port 39968 ssh2
Jul 11 00:06:55 abendstille sshd\[13592\]: Invalid user cdimascio from 211.108.69.103
Jul 11 00:06:55 abendstille sshd\[13592\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.108.69.103
...
2020-07-11 07:00:28
118.25.124.182 attackbots
Invalid user travis from 118.25.124.182 port 57798
2020-07-11 07:11:55
76.14.188.193 attackspambots
Jul 10 21:14:26 localhost sshd[26578]: Invalid user admin from 76.14.188.193 port 53535
Jul 10 21:14:26 localhost sshd[26578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=76-14-188-193.wsac.wavecable.com
Jul 10 21:14:26 localhost sshd[26578]: Invalid user admin from 76.14.188.193 port 53535
Jul 10 21:14:28 localhost sshd[26578]: Failed password for invalid user admin from 76.14.188.193 port 53535 ssh2
Jul 10 21:14:30 localhost sshd[26591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=76-14-188-193.wsac.wavecable.com  user=root
Jul 10 21:14:31 localhost sshd[26591]: Failed password for root from 76.14.188.193 port 53725 ssh2
...
2020-07-11 07:12:59
188.166.159.127 attackbots
20 attempts against mh-ssh on train
2020-07-11 07:04:48
124.196.11.6 attackspam
Jul  8 13:58:17 sip sshd[23375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.196.11.6
Jul  8 13:58:19 sip sshd[23375]: Failed password for invalid user logger from 124.196.11.6 port 64477 ssh2
Jul  8 14:00:42 sip sshd[24229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.196.11.6
2020-07-11 06:51:34
61.93.201.198 attackspam
Invalid user mamoru from 61.93.201.198 port 42100
2020-07-11 07:16:28
122.51.231.218 attackbots
Jul  9 08:56:32 sip sshd[22781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.231.218
Jul  9 08:56:34 sip sshd[22781]: Failed password for invalid user john from 122.51.231.218 port 47300 ssh2
Jul  9 09:06:48 sip sshd[26646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.231.218
2020-07-11 07:01:45
54.240.48.65 attackspam
.
2020-07-11 07:09:08
37.59.55.14 attackspam
SSH Invalid Login
2020-07-11 07:22:01
212.70.149.3 attack
Jul 11 01:02:02 srv01 postfix/smtpd\[17070\]: warning: unknown\[212.70.149.3\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 11 01:02:22 srv01 postfix/smtpd\[28252\]: warning: unknown\[212.70.149.3\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 11 01:02:41 srv01 postfix/smtpd\[22300\]: warning: unknown\[212.70.149.3\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 11 01:03:06 srv01 postfix/smtpd\[28251\]: warning: unknown\[212.70.149.3\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 11 01:03:26 srv01 postfix/smtpd\[15347\]: warning: unknown\[212.70.149.3\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-07-11 07:04:31
117.89.128.252 attackspambots
Jul 10 23:04:21 server sshd[11360]: Failed password for invalid user sistemas from 117.89.128.252 port 58470 ssh2
Jul 10 23:09:30 server sshd[16650]: Failed password for invalid user kate from 117.89.128.252 port 41600 ssh2
Jul 10 23:14:29 server sshd[21553]: Failed password for invalid user anzui from 117.89.128.252 port 52958 ssh2
2020-07-11 07:16:08
124.93.160.82 attackbots
SSH Invalid Login
2020-07-11 06:49:31
62.133.150.101 attackbots
Attempts against non-existent wp-login
2020-07-11 06:56:22

最近上报的IP列表

45.76.208.225 249.178.204.177 40.73.87.132 35.221.83.225
187.189.232.198 185.175.93.51 171.7.57.247 165.22.225.59
103.114.191.45 116.107.191.1 240.100.72.30 103.125.191.84
103.119.66.121 94.178.146.208 90.74.128.212 81.165.86.44
37.114.153.91 212.48.93.248 187.1.81.155 157.48.28.155