必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.71.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22363
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.21.71.48.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400

;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:50:04 CST 2022
;; MSG SIZE  rcvd: 105
HOST信息:
Host 48.71.21.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 48.71.21.104.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
24.234.169.237 attackbotsspam
$f2bV_matches
2020-10-06 14:03:42
112.85.42.112 attackspambots
DATE:2020-10-06 08:05:22,IP:112.85.42.112,MATCHES:10,PORT:ssh
2020-10-06 14:06:29
112.85.42.183 attackbots
Oct  6 06:26:41 sd-69548 sshd[4046369]: Unable to negotiate with 112.85.42.183 port 55804: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
Oct  6 07:22:12 sd-69548 sshd[4050530]: Unable to negotiate with 112.85.42.183 port 36280: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
...
2020-10-06 13:27:25
112.29.170.59 attackspambots
Oct  6 07:18:12 OPSO sshd\[1754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.29.170.59  user=root
Oct  6 07:18:13 OPSO sshd\[1754\]: Failed password for root from 112.29.170.59 port 57108 ssh2
Oct  6 07:22:48 OPSO sshd\[2921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.29.170.59  user=root
Oct  6 07:22:51 OPSO sshd\[2921\]: Failed password for root from 112.29.170.59 port 52646 ssh2
Oct  6 07:27:21 OPSO sshd\[3716\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.29.170.59  user=root
2020-10-06 13:39:44
220.186.186.123 attackspambots
Oct  5 21:30:02 django sshd[9101]: reveeclipse mapping checking getaddrinfo for 123.186.186.220.broad.wz.zj.dynamic.163data.com.cn [220.186.186.123] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct  5 21:30:02 django sshd[9101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.186.186.123  user=r.r
Oct  5 21:30:04 django sshd[9101]: Failed password for r.r from 220.186.186.123 port 53118 ssh2
Oct  5 21:30:04 django sshd[9104]: Received disconnect from 220.186.186.123: 11: Bye Bye
Oct  5 21:43:35 django sshd[10857]: reveeclipse mapping checking getaddrinfo for 123.186.186.220.broad.wz.zj.dynamic.163data.com.cn [220.186.186.123] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct  5 21:43:35 django sshd[10857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.186.186.123  user=r.r
Oct  5 21:43:37 django sshd[10857]: Failed password for r.r from 220.186.186.123 port 40636 ssh2
Oct  5 21:43:37 django sshd[1086........
-------------------------------
2020-10-06 14:04:08
173.166.207.129 attack
"Unauthorized connection attempt on SSHD detected"
2020-10-06 13:34:51
125.124.120.123 attackspam
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-10-06T00:10:21Z and 2020-10-06T00:17:34Z
2020-10-06 14:05:07
106.12.77.50 attack
Lines containing failures of 106.12.77.50
Oct  5 20:22:12 nextcloud sshd[6125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.77.50  user=r.r
Oct  5 20:22:15 nextcloud sshd[6125]: Failed password for r.r from 106.12.77.50 port 47310 ssh2
Oct  5 20:22:15 nextcloud sshd[6125]: Received disconnect from 106.12.77.50 port 47310:11: Bye Bye [preauth]
Oct  5 20:22:15 nextcloud sshd[6125]: Disconnected from authenticating user r.r 106.12.77.50 port 47310 [preauth]
Oct  5 20:37:31 nextcloud sshd[8209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.77.50  user=r.r
Oct  5 20:37:33 nextcloud sshd[8209]: Failed password for r.r from 106.12.77.50 port 53436 ssh2
Oct  5 20:37:33 nextcloud sshd[8209]: Received disconnect from 106.12.77.50 port 53436:11: Bye Bye [preauth]
Oct  5 20:37:33 nextcloud sshd[8209]: Disconnected from authenticating user r.r 106.12.77.50 port 53436 [preauth]
Oct  5 ........
------------------------------
2020-10-06 14:02:02
180.97.182.111 attackspam
2020-10-06T06:36:22.607912ks3355764 sshd[28378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.97.182.111  user=root
2020-10-06T06:36:24.711088ks3355764 sshd[28378]: Failed password for root from 180.97.182.111 port 56804 ssh2
...
2020-10-06 14:02:36
213.6.130.133 attackspambots
SSH login attempts.
2020-10-06 14:05:25
128.199.210.138 attack
128.199.210.138 - - [06/Oct/2020:04:36:00 +0100] "POST /wp-login.php HTTP/1.1" 200 2339 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
128.199.210.138 - - [06/Oct/2020:04:36:02 +0100] "POST /wp-login.php HTTP/1.1" 200 2311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
128.199.210.138 - - [06/Oct/2020:04:36:08 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-06 13:48:58
61.177.172.104 attack
Oct  5 20:04:32 php1 sshd\[7762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.104  user=root
Oct  5 20:04:34 php1 sshd\[7762\]: Failed password for root from 61.177.172.104 port 47778 ssh2
Oct  5 20:04:37 php1 sshd\[7762\]: Failed password for root from 61.177.172.104 port 47778 ssh2
Oct  5 20:04:40 php1 sshd\[7762\]: Failed password for root from 61.177.172.104 port 47778 ssh2
Oct  5 20:04:43 php1 sshd\[7762\]: Failed password for root from 61.177.172.104 port 47778 ssh2
2020-10-06 14:10:18
45.142.120.33 attack
Attempted Brute Force (dovecot)
2020-10-06 13:41:01
52.255.166.214 attackspam
Oct  6 05:15:35 hcbbdb sshd\[14733\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.255.166.214  user=root
Oct  6 05:15:38 hcbbdb sshd\[14733\]: Failed password for root from 52.255.166.214 port 45894 ssh2
Oct  6 05:19:36 hcbbdb sshd\[15138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.255.166.214  user=root
Oct  6 05:19:37 hcbbdb sshd\[15138\]: Failed password for root from 52.255.166.214 port 54498 ssh2
Oct  6 05:23:25 hcbbdb sshd\[15540\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.255.166.214  user=root
2020-10-06 13:26:15
141.98.9.35 attack
Oct  6 07:24:41 s2 sshd[11880]: Failed password for root from 141.98.9.35 port 37167 ssh2
Oct  6 07:25:05 s2 sshd[11925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.35 
Oct  6 07:25:07 s2 sshd[11925]: Failed password for invalid user admin from 141.98.9.35 port 46107 ssh2
2020-10-06 14:04:37

最近上报的IP列表

104.21.71.47 104.21.71.49 104.21.71.45 104.21.71.5
104.21.71.53 104.21.71.52 104.21.71.51 104.21.71.54
104.21.71.55 104.21.71.56 104.21.71.58 104.21.71.57
104.21.71.59 104.21.71.60 104.21.71.63 104.21.71.67
104.21.71.64 104.21.71.69 104.21.71.70 104.21.71.7