必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Automatic report - Port Scan
2020-02-26 10:24:14
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.214.117.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41378
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.214.117.1.			IN	A

;; AUTHORITY SECTION:
.			413	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022501 1800 900 604800 86400

;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 26 10:24:11 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 1.117.214.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 1.117.214.104.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
47.99.33.193 attackbots
47.99.33.193 - - [05/Aug/2020:04:51:24 +0100] "POST /wp-login.php HTTP/1.1" 200 1967 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
47.99.33.193 - - [05/Aug/2020:04:51:28 +0100] "POST /wp-login.php HTTP/1.1" 200 1951 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
47.99.33.193 - - [05/Aug/2020:04:51:33 +0100] "POST /wp-login.php HTTP/1.1" 200 1947 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-05 16:24:41
87.98.156.62 attackbots
[MK-VM3] SSH login failed
2020-08-05 16:12:50
181.209.159.166 attackbots
Aug  5 06:44:37 rancher-0 sshd[795960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.209.159.166  user=root
Aug  5 06:44:38 rancher-0 sshd[795960]: Failed password for root from 181.209.159.166 port 54766 ssh2
...
2020-08-05 16:50:42
12.39.252.171 attack
(smtpauth) Failed SMTP AUTH login from 12.39.252.171 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-08-05 08:21:18 login authenticator failed for (q5lk1kf) [12.39.252.171]: 535 Incorrect authentication data (set_id=esteghlal)
2020-08-05 16:45:38
123.206.62.112 attackbotsspam
2020-08-05T05:52:02+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)
2020-08-05 16:19:22
104.236.142.89 attack
Aug  5 09:03:22 hosting sshd[20928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.142.89  user=root
Aug  5 09:03:24 hosting sshd[20928]: Failed password for root from 104.236.142.89 port 47230 ssh2
...
2020-08-05 16:44:20
51.75.142.24 attackspambots
51.75.142.24 - - [05/Aug/2020:04:34:24 +0100] "POST /wp-login.php HTTP/1.1" 200 2459 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
51.75.142.24 - - [05/Aug/2020:04:34:24 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
51.75.142.24 - - [05/Aug/2020:04:52:06 +0100] "POST /wp-login.php HTTP/1.1" 200 2433 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-05 16:18:24
123.48.82.113 attackspam
SSH authentication failure x 6 reported by Fail2Ban
...
2020-08-05 16:37:20
218.92.0.220 attackbots
Connection to SSH Honeypot - Detected by HoneypotDB
2020-08-05 16:35:34
142.93.68.181 attack
Aug  5 08:41:06 melroy-server sshd[21643]: Failed password for root from 142.93.68.181 port 46584 ssh2
...
2020-08-05 16:36:56
114.67.106.137 attackbotsspam
Aug  5 05:35:39 roki-contabo sshd\[16227\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.106.137  user=root
Aug  5 05:35:42 roki-contabo sshd\[16227\]: Failed password for root from 114.67.106.137 port 34600 ssh2
Aug  5 05:46:33 roki-contabo sshd\[16666\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.106.137  user=root
Aug  5 05:46:35 roki-contabo sshd\[16666\]: Failed password for root from 114.67.106.137 port 40182 ssh2
Aug  5 05:51:30 roki-contabo sshd\[16825\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.106.137  user=root
...
2020-08-05 16:37:49
182.48.11.101 attackspambots
Automatic report - XMLRPC Attack
2020-08-05 16:22:28
141.98.9.137 attack
SSH Brute-Force attacks
2020-08-05 16:48:42
172.245.185.212 attack
Aug 5 05:45:25 *hidden* sshd[43675]: Failed password for *hidden* from 172.245.185.212 port 54054 ssh2 Aug 5 05:52:11 *hidden* sshd[46719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.245.185.212 user=root Aug 5 05:52:13 *hidden* sshd[46719]: Failed password for *hidden* from 172.245.185.212 port 38778 ssh2
2020-08-05 16:10:44
182.75.216.74 attack
Aug  5 06:56:38 nextcloud sshd\[6150\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.216.74  user=root
Aug  5 06:56:40 nextcloud sshd\[6150\]: Failed password for root from 182.75.216.74 port 26593 ssh2
Aug  5 06:59:35 nextcloud sshd\[8948\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.216.74  user=root
2020-08-05 16:48:14

最近上报的IP列表

121.35.103.28 69.94.144.21 14.116.222.207 144.48.6.42
117.144.7.142 14.176.60.244 212.34.233.6 84.220.66.65
143.202.136.51 115.76.45.10 1.22.180.14 54.240.14.183
185.2.4.27 142.93.232.102 27.72.96.202 176.228.174.147
242.36.51.79 183.237.191.186 74.208.59.62 14.237.96.157