必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.20.103.28
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15826
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.20.103.28.			IN	A

;; AUTHORITY SECTION:
.			210	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021801 1800 900 604800 86400

;; Query time: 175 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 03:28:57 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
Host 28.103.20.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 28.103.20.104.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
220.167.224.133 attackbotsspam
Lines containing failures of 220.167.224.133
Mar  9 04:29:21 shared12 sshd[14715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.167.224.133  user=r.r
Mar  9 04:29:23 shared12 sshd[14715]: Failed password for r.r from 220.167.224.133 port 59394 ssh2
Mar  9 04:29:23 shared12 sshd[14715]: Received disconnect from 220.167.224.133 port 59394:11: Bye Bye [preauth]
Mar  9 04:29:23 shared12 sshd[14715]: Disconnected from authenticating user r.r 220.167.224.133 port 59394 [preauth]
Mar  9 04:37:47 shared12 sshd[17590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.167.224.133  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=220.167.224.133
2020-03-09 19:51:55
42.185.192.197 attackspam
Excessive Port-Scanning
2020-03-09 19:56:26
180.244.233.107 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-09 20:07:38
90.142.52.244 attackbotsspam
Honeypot attack, port: 5555, PTR: c90-142-52-244.bredband.comhem.se.
2020-03-09 20:19:55
218.149.128.186 attack
Mar  9 13:12:58 ns381471 sshd[19908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.149.128.186
Mar  9 13:12:59 ns381471 sshd[19908]: Failed password for invalid user csgo from 218.149.128.186 port 43812 ssh2
2020-03-09 20:23:19
104.236.142.200 attackspam
Mar  9 11:45:52 *** sshd[976]: User root from 104.236.142.200 not allowed because not listed in AllowUsers
2020-03-09 20:01:14
5.144.128.211 attackbotsspam
Lines containing failures of 5.144.128.211
Mar  8 22:29:33 newdogma sshd[11941]: Invalid user nicolas from 5.144.128.211 port 53290
Mar  8 22:29:33 newdogma sshd[11941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.144.128.211 
Mar  8 22:29:35 newdogma sshd[11941]: Failed password for invalid user nicolas from 5.144.128.211 port 53290 ssh2
Mar  8 22:29:36 newdogma sshd[11941]: Received disconnect from 5.144.128.211 port 53290:11: Bye Bye [preauth]
Mar  8 22:29:36 newdogma sshd[11941]: Disconnected from invalid user nicolas 5.144.128.211 port 53290 [preauth]
Mar  8 22:35:24 newdogma sshd[12010]: Invalid user lasse from 5.144.128.211 port 47900
Mar  8 22:35:24 newdogma sshd[12010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.144.128.211 
Mar  8 22:35:27 newdogma sshd[12010]: Failed password for invalid user lasse from 5.144.128.211 port 47900 ssh2


........
-----------------------------------------------
https://www.bloc
2020-03-09 20:15:43
119.235.30.89 attackbots
(sshd) Failed SSH login from 119.235.30.89 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar  9 11:48:12 amsweb01 sshd[32358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.235.30.89  user=root
Mar  9 11:48:14 amsweb01 sshd[32358]: Failed password for root from 119.235.30.89 port 46050 ssh2
Mar  9 11:55:04 amsweb01 sshd[514]: User mysql from 119.235.30.89 not allowed because not listed in AllowUsers
Mar  9 11:55:04 amsweb01 sshd[514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.235.30.89  user=mysql
Mar  9 11:55:05 amsweb01 sshd[514]: Failed password for invalid user mysql from 119.235.30.89 port 33656 ssh2
2020-03-09 20:05:27
51.89.117.189 attackspambots
Brute-force attempt banned
2020-03-09 20:07:07
5.202.104.45 attack
Port probing on unauthorized port 5555
2020-03-09 20:03:37
36.85.221.233 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-09 20:02:56
104.199.216.0 attackbotsspam
[munged]::443 104.199.216.0 - - [09/Mar/2020:10:01:16 +0100] "POST /[munged]: HTTP/1.1" 200 6206 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 104.199.216.0 - - [09/Mar/2020:10:01:20 +0100] "POST /[munged]: HTTP/1.1" 200 6176 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 104.199.216.0 - - [09/Mar/2020:10:01:20 +0100] "POST /[munged]: HTTP/1.1" 200 6176 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-03-09 19:42:31
223.206.238.52 attack
Honeypot attack, port: 445, PTR: mx-ll-223.206.238-52.dynamic.3bb.in.th.
2020-03-09 20:10:22
66.249.73.130 attack
Automatic report - Banned IP Access
2020-03-09 20:23:00
101.71.51.192 attackbotsspam
Mar  9 08:15:31 server sshd\[4368\]: Failed password for root from 101.71.51.192 port 43109 ssh2
Mar  9 14:37:02 server sshd\[11643\]: Invalid user vsftpd from 101.71.51.192
Mar  9 14:37:02 server sshd\[11643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.71.51.192 
Mar  9 14:37:04 server sshd\[11643\]: Failed password for invalid user vsftpd from 101.71.51.192 port 46208 ssh2
Mar  9 14:51:37 server sshd\[14850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.71.51.192  user=root
...
2020-03-09 20:19:37

最近上报的IP列表

104.20.102.28 104.20.188.88 104.20.123.68 104.20.122.68
104.20.189.88 104.20.59.211 104.20.58.211 104.20.71.237
104.20.72.237 104.200.23.201 104.200.144.91 104.206.28.11
104.200.22.214 104.207.150.9 104.21.0.106 104.21.0.253
104.21.0.173 104.21.0.239 104.21.0.184 104.207.238.148