必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
1.20.221.210 attackbots
Unauthorized connection attempt from IP address 1.20.221.210 on Port 445(SMB)
2020-09-15 21:40:38
1.20.221.210 attackspambots
Unauthorized connection attempt from IP address 1.20.221.210 on Port 445(SMB)
2020-09-15 13:37:52
1.20.221.210 attackbots
Unauthorized connection attempt from IP address 1.20.221.210 on Port 445(SMB)
2020-09-15 05:50:15
1.20.221.249 attack
Unauthorized connection attempt detected from IP address 1.20.221.249 to port 445 [T]
2020-08-10 19:49:10
1.20.221.94 attackspam
Portscan or hack attempt detected by psad/fwsnort
2019-12-09 19:54:22
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.221.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54565
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.221.14.			IN	A

;; AUTHORITY SECTION:
.			177	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022400 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 20:51:02 CST 2022
;; MSG SIZE  rcvd: 104
HOST信息:
Host 14.221.20.1.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 14.221.20.1.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
54.39.138.251 attackspambots
Sep  9 14:49:06 web1 sshd\[19651\]: Invalid user ubuntu from 54.39.138.251
Sep  9 14:49:06 web1 sshd\[19651\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.138.251
Sep  9 14:49:08 web1 sshd\[19651\]: Failed password for invalid user ubuntu from 54.39.138.251 port 43506 ssh2
Sep  9 14:54:12 web1 sshd\[20168\]: Invalid user deploy from 54.39.138.251
Sep  9 14:54:12 web1 sshd\[20168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.138.251
2019-09-10 08:58:36
218.76.87.67 attack
F2B jail: sshd. Time: 2019-09-10 02:14:16, Reported by: VKReport
2019-09-10 08:25:31
2401:c100:1100:504:2000::5a attackbotsspam
xmlrpc attack
2019-09-10 08:45:09
149.129.52.191 attackspam
Sep  9 21:12:06 ws22vmsma01 sshd[100843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.129.52.191
Sep  9 21:12:07 ws22vmsma01 sshd[100843]: Failed password for invalid user deployer from 149.129.52.191 port 48546 ssh2
...
2019-09-10 08:41:54
178.62.215.66 attackspambots
Sep  9 20:22:16 Tower sshd[24800]: Connection from 178.62.215.66 port 39234 on 192.168.10.220 port 22
Sep  9 20:22:17 Tower sshd[24800]: Invalid user bserver from 178.62.215.66 port 39234
Sep  9 20:22:17 Tower sshd[24800]: error: Could not get shadow information for NOUSER
Sep  9 20:22:17 Tower sshd[24800]: Failed password for invalid user bserver from 178.62.215.66 port 39234 ssh2
Sep  9 20:22:17 Tower sshd[24800]: Received disconnect from 178.62.215.66 port 39234:11: Bye Bye [preauth]
Sep  9 20:22:17 Tower sshd[24800]: Disconnected from invalid user bserver 178.62.215.66 port 39234 [preauth]
2019-09-10 08:41:28
74.63.250.6 attackbotsspam
Sep 10 02:28:13 vps01 sshd[22152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.63.250.6
Sep 10 02:28:15 vps01 sshd[22152]: Failed password for invalid user user from 74.63.250.6 port 45818 ssh2
2019-09-10 08:33:09
218.197.16.152 attack
Sep  9 04:49:21 hpm sshd\[18413\]: Invalid user 1234567890 from 218.197.16.152
Sep  9 04:49:21 hpm sshd\[18413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.197.16.152
Sep  9 04:49:23 hpm sshd\[18413\]: Failed password for invalid user 1234567890 from 218.197.16.152 port 36013 ssh2
Sep  9 04:53:03 hpm sshd\[18723\]: Invalid user mysql1234 from 218.197.16.152
Sep  9 04:53:03 hpm sshd\[18723\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.197.16.152
2019-09-10 09:09:19
68.57.86.37 attackbotsspam
Sep 10 07:02:55 webhost01 sshd[9204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.57.86.37
Sep 10 07:02:56 webhost01 sshd[9204]: Failed password for invalid user fctrserver from 68.57.86.37 port 54056 ssh2
...
2019-09-10 09:02:36
75.109.200.227 attackbots
Sep  9 14:27:42 sachi sshd\[8931\]: Invalid user a from 75.109.200.227
Sep  9 14:27:42 sachi sshd\[8931\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=75-109-200-227.tyrmcmta02.com.dyn.suddenlink.net
Sep  9 14:27:44 sachi sshd\[8931\]: Failed password for invalid user a from 75.109.200.227 port 35732 ssh2
Sep  9 14:33:53 sachi sshd\[9453\]: Invalid user safeuser from 75.109.200.227
Sep  9 14:33:53 sachi sshd\[9453\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=75-109-200-227.tyrmcmta02.com.dyn.suddenlink.net
2019-09-10 08:37:13
185.176.27.102 attack
09/09/2019-19:44:15.187234 185.176.27.102 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-09-10 08:24:45
117.63.246.194 attackbots
Sep  9 20:54:45 *** sshd[1859877]: refused connect from 117.63.246.194 =
(117.63.246.194)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.63.246.194
2019-09-10 08:46:34
23.92.127.2 attackbotsspam
23.92.127.2 - - \[09/Sep/2019:18:43:11 +0000\] "GET /downloader/index.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" "-"23.92.127.2 - - \[09/Sep/2019:18:43:11 +0000\] "GET /dev/downloader/index.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" "-"23.92.127.2 - - \[09/Sep/2019:18:43:12 +0000\] "GET /downloader/index.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" "-"23.92.127.2 - - \[09/Sep/2019:18:43:12 +0000\] "GET /old/downloader/index.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" "-"23.92.127.2 - - \[09/Sep/2019:18:43:12 +0000\] "GET /downloader/index.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" "-"23.92.127.2 - - \[09/Sep/2019:18:43:12 +0000\] "GET /downloader/index.php HTTP/1.1" 404 27 "-" "Mozilla/5.
2019-09-10 08:36:40
139.59.105.141 attackbots
Sep  9 21:03:48 nextcloud sshd\[1058\]: Invalid user test from 139.59.105.141
Sep  9 21:03:48 nextcloud sshd\[1058\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.105.141
Sep  9 21:03:50 nextcloud sshd\[1058\]: Failed password for invalid user test from 139.59.105.141 port 54578 ssh2
...
2019-09-10 08:47:28
81.22.45.250 attack
09/09/2019-20:09:07.838737 81.22.45.250 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-09-10 08:40:03
80.82.78.87 attack
Blocked for port scanning.
Time: Mon Sep 9. 17:59:40 2019 +0200
IP: 80.82.78.87 (NL/Netherlands/-)

Sample of block hits:
Sep 9 17:55:56 vserv kernel: [17688457.827528] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=80.82.78.87 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=27814 PROTO=TCP SPT=44212 DPT=3393 WINDOW=1024 RES=0x00 SYN URGP=0
Sep 9 17:56:02 vserv kernel: [17688464.355150] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=80.82.78.87 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=55784 PROTO=TCP SPT=44212 DPT=3396 WINDOW=1024 RES=0x00 SYN URGP=0
Sep 9 17:56:18 vserv kernel: [17688480.291224] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=80.82.78.87 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=59198 PROTO=TCP SPT=44212 DPT=3384 WINDOW=1024 RES=0x00 SYN URGP=0
Sep 9 17:56:23 vserv kernel: [17688484.787144] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=80.82.78.87 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=13812 PROTO=TCP SPT=44577 DPT=3400 ....
2019-09-10 08:25:03

最近上报的IP列表

1.20.221.138 1.20.221.141 1.20.221.155 1.20.221.158
1.20.221.162 1.20.221.164 1.20.221.166 1.20.221.17
1.20.221.173 1.20.221.174 1.20.221.177 1.20.221.178
21.109.246.220 1.20.221.183 1.20.221.185 1.20.221.186
1.20.221.188 1.20.221.19 1.20.221.192 1.20.221.198