必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbotsspam
Mar  8 06:19:02 srv01 sshd[23258]: Invalid user sunlei from 94.191.50.139 port 35434
Mar  8 06:19:02 srv01 sshd[23258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.139
Mar  8 06:19:02 srv01 sshd[23258]: Invalid user sunlei from 94.191.50.139 port 35434
Mar  8 06:19:04 srv01 sshd[23258]: Failed password for invalid user sunlei from 94.191.50.139 port 35434 ssh2
Mar  8 06:24:18 srv01 sshd[23712]: Invalid user kpdev from 94.191.50.139 port 37920
...
2020-03-08 18:03:07
attackspambots
$f2bV_matches
2020-03-07 08:50:22
attack
Mar  3 15:22:59 server sshd[866374]: Failed password for invalid user orgiast from 94.191.50.139 port 42134 ssh2
Mar  3 15:31:39 server sshd[869047]: Failed password for invalid user student2 from 94.191.50.139 port 56842 ssh2
Mar  3 15:40:33 server sshd[871421]: Failed password for invalid user production from 94.191.50.139 port 43320 ssh2
2020-03-04 02:58:34
attackbots
sshd jail - ssh hack attempt
2020-02-19 05:19:25
attackspambots
Feb 14 18:49:39 sachi sshd\[19171\]: Invalid user samsud from 94.191.50.139
Feb 14 18:49:39 sachi sshd\[19171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.139
Feb 14 18:49:40 sachi sshd\[19171\]: Failed password for invalid user samsud from 94.191.50.139 port 43776 ssh2
Feb 14 18:53:35 sachi sshd\[19541\]: Invalid user teamspeak3 from 94.191.50.139
Feb 14 18:53:35 sachi sshd\[19541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.139
2020-02-15 15:13:03
相同子网IP讨论:
IP 类型 评论内容 时间
94.191.50.151 attackbotsspam
Apr 14 10:30:54 contabo sshd[25162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.151
Apr 14 10:30:57 contabo sshd[25162]: Failed password for invalid user svn from 94.191.50.151 port 48838 ssh2
Apr 14 10:34:28 contabo sshd[25301]: Invalid user remc3001 from 94.191.50.151 port 57806
Apr 14 10:34:28 contabo sshd[25301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.151
Apr 14 10:34:30 contabo sshd[25301]: Failed password for invalid user remc3001 from 94.191.50.151 port 57806 ssh2
...
2020-04-14 16:41:21
94.191.50.57 attack
2020-04-14T08:09:58.457454librenms sshd[24203]: Failed password for invalid user administrator from 94.191.50.57 port 43744 ssh2
2020-04-14T08:17:46.434662librenms sshd[25089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.57  user=root
2020-04-14T08:17:48.437961librenms sshd[25089]: Failed password for root from 94.191.50.57 port 38636 ssh2
...
2020-04-14 15:28:25
94.191.50.57 attackspam
Apr  2 21:44:37 124388 sshd[17104]: Failed password for root from 94.191.50.57 port 56096 ssh2
Apr  2 21:47:34 124388 sshd[17242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.57  user=root
Apr  2 21:47:37 124388 sshd[17242]: Failed password for root from 94.191.50.57 port 56520 ssh2
Apr  2 21:50:38 124388 sshd[17258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.57  user=root
Apr  2 21:50:41 124388 sshd[17258]: Failed password for root from 94.191.50.57 port 56956 ssh2
2020-04-03 07:43:05
94.191.50.151 attack
SSH brute-force attempt
2020-03-28 20:41:03
94.191.50.151 attack
Mar 23 01:20:10 localhost sshd\[9293\]: Invalid user jc2 from 94.191.50.151 port 36050
Mar 23 01:20:10 localhost sshd\[9293\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.151
Mar 23 01:20:12 localhost sshd\[9293\]: Failed password for invalid user jc2 from 94.191.50.151 port 36050 ssh2
2020-03-23 08:32:19
94.191.50.165 attack
Mar 21 22:14:45 server1 sshd\[17967\]: Failed password for invalid user yd from 94.191.50.165 port 50494 ssh2
Mar 21 22:18:17 server1 sshd\[18992\]: Invalid user dominic from 94.191.50.165
Mar 21 22:18:17 server1 sshd\[18992\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.165 
Mar 21 22:18:19 server1 sshd\[18992\]: Failed password for invalid user dominic from 94.191.50.165 port 37646 ssh2
Mar 21 22:21:50 server1 sshd\[20022\]: Invalid user hsqldb from 94.191.50.165
...
2020-03-22 13:04:48
94.191.50.165 attackbots
SSH login attempts @ 2020-03-10 00:14:40
2020-03-22 02:45:11
94.191.50.165 attack
Feb 29 00:03:55 silence02 sshd[27798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.165
Feb 29 00:03:57 silence02 sshd[27798]: Failed password for invalid user des from 94.191.50.165 port 43288 ssh2
Feb 29 00:08:15 silence02 sshd[29990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.165
2020-02-29 07:16:20
94.191.50.151 attackbots
2020-02-26T21:50:18.031411homeassistant sshd[31129]: Invalid user tu from 94.191.50.151 port 43450
2020-02-26T21:50:18.038422homeassistant sshd[31129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.151
...
2020-02-27 06:42:42
94.191.50.151 attackspam
Invalid user dev from 94.191.50.151 port 59562
2020-02-18 07:31:12
94.191.50.151 attack
Feb 16 20:28:02 firewall sshd[23926]: Invalid user tester from 94.191.50.151
Feb 16 20:28:04 firewall sshd[23926]: Failed password for invalid user tester from 94.191.50.151 port 44608 ssh2
Feb 16 20:31:46 firewall sshd[24119]: Invalid user test from 94.191.50.151
...
2020-02-17 07:39:37
94.191.50.165 attack
Oct 24 18:25:11 odroid64 sshd\[10572\]: Invalid user jeremy from 94.191.50.165
Oct 24 18:25:11 odroid64 sshd\[10572\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.165
...
2020-01-16 06:09:56
94.191.50.57 attack
Jan  2 07:50:38 server sshd\[20089\]: Failed password for invalid user jasmyn from 94.191.50.57 port 47732 ssh2
Jan  2 21:17:52 server sshd\[21613\]: Invalid user so360 from 94.191.50.57
Jan  2 21:17:52 server sshd\[21613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.57 
Jan  2 21:17:54 server sshd\[21613\]: Failed password for invalid user so360 from 94.191.50.57 port 60302 ssh2
Jan  2 21:33:06 server sshd\[25031\]: Invalid user lzk from 94.191.50.57
Jan  2 21:33:06 server sshd\[25031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.57 
...
2020-01-03 05:29:29
94.191.50.51 attackspambots
no
2019-12-31 15:43:15
94.191.50.57 attackspambots
Dec 10 06:48:14 hcbbdb sshd\[11248\]: Invalid user bendiksen from 94.191.50.57
Dec 10 06:48:14 hcbbdb sshd\[11248\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.57
Dec 10 06:48:16 hcbbdb sshd\[11248\]: Failed password for invalid user bendiksen from 94.191.50.57 port 46014 ssh2
Dec 10 06:55:48 hcbbdb sshd\[12068\]: Invalid user dixie from 94.191.50.57
Dec 10 06:55:48 hcbbdb sshd\[12068\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.57
2019-12-10 15:16:05
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.191.50.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38118
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.191.50.139.			IN	A

;; AUTHORITY SECTION:
.			355	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021500 1800 900 604800 86400

;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 15:12:56 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 139.50.191.94.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.50.191.94.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
51.158.114.246 attackbots
Oct 20 12:31:26 dev0-dcde-rnet sshd[12061]: Failed password for root from 51.158.114.246 port 48072 ssh2
Oct 20 12:35:21 dev0-dcde-rnet sshd[12188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.114.246
Oct 20 12:35:24 dev0-dcde-rnet sshd[12188]: Failed password for invalid user administrator from 51.158.114.246 port 59244 ssh2
2019-10-20 19:49:11
81.120.65.55 attack
Malicious/Probing: /2016/wp-login.php
2019-10-20 19:52:49
182.253.222.197 attackbotsspam
Oct 19 08:19:09 mailserver sshd[21103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.253.222.197  user=r.r
Oct 19 08:19:11 mailserver sshd[21103]: Failed password for r.r from 182.253.222.197 port 59516 ssh2
Oct 19 08:19:11 mailserver sshd[21103]: Received disconnect from 182.253.222.197 port 59516:11: Bye Bye [preauth]
Oct 19 08:19:11 mailserver sshd[21103]: Disconnected from 182.253.222.197 port 59516 [preauth]
Oct 19 08:23:37 mailserver sshd[21360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.253.222.197  user=r.r
Oct 19 08:23:38 mailserver sshd[21360]: Failed password for r.r from 182.253.222.197 port 57050 ssh2
Oct 19 08:23:38 mailserver sshd[21360]: Received disconnect from 182.253.222.197 port 57050:11: Bye Bye [preauth]
Oct 19 08:23:38 mailserver sshd[21360]: Disconnected from 182.253.222.197 port 57050 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html
2019-10-20 20:13:00
220.76.205.178 attackspambots
2019-10-03T07:13:13.618921suse-nuc sshd[23862]: Invalid user siriusadmin from 220.76.205.178 port 59414
...
2019-10-20 19:53:27
121.157.82.194 attack
2019-10-20T12:05:55.862197abusebot-5.cloudsearch.cf sshd\[20206\]: Invalid user robert from 121.157.82.194 port 35588
2019-10-20 20:15:37
180.97.80.55 attack
fail2ban
2019-10-20 20:20:39
175.213.185.129 attackspambots
Automatic report - Banned IP Access
2019-10-20 20:04:04
68.183.85.75 attackbotsspam
Oct 20 09:05:40 firewall sshd[31886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.85.75
Oct 20 09:05:40 firewall sshd[31886]: Invalid user 12345 from 68.183.85.75
Oct 20 09:05:43 firewall sshd[31886]: Failed password for invalid user 12345 from 68.183.85.75 port 45252 ssh2
...
2019-10-20 20:23:59
46.4.107.145 attackspam
Automated report (2019-10-20T12:05:41+00:00). Scraper detected at this address.
2019-10-20 20:26:44
116.111.212.176 attack
Oct 20 10:44:12 lcl-usvr-02 sshd[31459]: Invalid user super from 116.111.212.176 port 52371
Oct 20 10:44:12 lcl-usvr-02 sshd[31459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.111.212.176
Oct 20 10:44:12 lcl-usvr-02 sshd[31459]: Invalid user super from 116.111.212.176 port 52371
Oct 20 10:44:14 lcl-usvr-02 sshd[31459]: Failed password for invalid user super from 116.111.212.176 port 52371 ssh2
Oct 20 10:44:12 lcl-usvr-02 sshd[31459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.111.212.176
Oct 20 10:44:12 lcl-usvr-02 sshd[31459]: Invalid user super from 116.111.212.176 port 52371
Oct 20 10:44:14 lcl-usvr-02 sshd[31459]: Failed password for invalid user super from 116.111.212.176 port 52371 ssh2
Oct 20 10:44:14 lcl-usvr-02 sshd[31459]: error: Received disconnect from 116.111.212.176 port 52371:3: com.jcraft.jsch.JSchException: Auth fail [preauth]
...
2019-10-20 20:08:56
5.14.169.92 attackbotsspam
Automatic report - Port Scan Attack
2019-10-20 20:13:45
145.239.23.8 attack
Oct 19 06:46:33 shadeyouvpn sshd[12209]: Failed password for r.r from 145.239.23.8 port 49876 ssh2
Oct 19 06:46:33 shadeyouvpn sshd[12209]: Received disconnect from 145.239.23.8: 11: Bye Bye [preauth]
Oct 19 06:50:58 shadeyouvpn sshd[15837]: Failed password for r.r from 145.239.23.8 port 47238 ssh2
Oct 19 06:50:58 shadeyouvpn sshd[15837]: Received disconnect from 145.239.23.8: 11: Bye Bye [preauth]
Oct 19 06:55:02 shadeyouvpn sshd[19056]: Failed password for r.r from 145.239.23.8 port 39224 ssh2
Oct 19 06:55:02 shadeyouvpn sshd[19056]: Received disconnect from 145.239.23.8: 11: Bye Bye [preauth]
Oct 19 06:59:10 shadeyouvpn sshd[22083]: Invalid user haldaemon from 145.239.23.8
Oct 19 06:59:12 shadeyouvpn sshd[22083]: Failed password for invalid user haldaemon from 145.239.23.8 port 59840 ssh2
Oct 19 06:59:12 shadeyouvpn sshd[22083]: Received disconnect from 145.239.23.8: 11: Bye Bye [preauth]
Oct 19 07:03:07 shadeyouvpn sshd[24498]: Invalid user test2 from 145.239.23.8
O........
-------------------------------
2019-10-20 20:18:58
185.40.12.110 attackspam
slow and persistent scanner
2019-10-20 20:07:33
68.183.127.93 attack
Oct 20 13:55:23 h2812830 sshd[3736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.127.93  user=root
Oct 20 13:55:25 h2812830 sshd[3736]: Failed password for root from 68.183.127.93 port 40040 ssh2
Oct 20 14:05:51 h2812830 sshd[3924]: Invalid user 123 from 68.183.127.93 port 60582
Oct 20 14:05:51 h2812830 sshd[3924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.127.93
Oct 20 14:05:51 h2812830 sshd[3924]: Invalid user 123 from 68.183.127.93 port 60582
Oct 20 14:05:53 h2812830 sshd[3924]: Failed password for invalid user 123 from 68.183.127.93 port 60582 ssh2
...
2019-10-20 20:17:12
182.16.167.222 attackbotsspam
Oct 19 06:55:43 vzhost sshd[29518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.167.222  user=r.r
Oct 19 06:55:45 vzhost sshd[29518]: Failed password for r.r from 182.16.167.222 port 61076 ssh2
Oct 19 07:00:28 vzhost sshd[30670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.167.222  user=r.r
Oct 19 07:00:30 vzhost sshd[30670]: Failed password for r.r from 182.16.167.222 port 23330 ssh2
Oct 19 07:05:19 vzhost sshd[31918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.167.222  user=r.r
Oct 19 07:05:21 vzhost sshd[31918]: Failed password for r.r from 182.16.167.222 port 42084 ssh2
Oct 19 07:09:53 vzhost sshd[638]: Invalid user aleksander from 182.16.167.222
Oct 19 07:09:53 vzhost sshd[638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.167.222 
Oct 19 07:09:54 vzhost sshd[638]:........
-------------------------------
2019-10-20 20:10:49

最近上报的IP列表

111.253.202.224 104.148.49.136 117.6.129.84 111.253.200.136
45.148.10.92 111.253.199.234 27.79.207.170 167.153.33.225
111.253.195.182 182.78.153.118 117.197.109.190 111.253.186.114
118.70.13.114 79.131.92.32 111.253.184.206 103.58.66.219
177.40.67.31 177.23.214.90 111.253.182.195 111.253.182.164