必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Nigeria

运营商(isp): Airtel Networks Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspam
Unauthorized connection attempt from IP address 105.112.50.72 on Port 445(SMB)
2019-07-14 08:21:05
相同子网IP讨论:
IP 类型 评论内容 时间
105.112.50.115 attackbots
1598876879 - 08/31/2020 14:27:59 Host: 105.112.50.115/105.112.50.115 Port: 445 TCP Blocked
2020-09-01 04:56:48
105.112.50.44 attack
Unauthorized connection attempt from IP address 105.112.50.44 on Port 445(SMB)
2020-07-17 02:45:19
105.112.50.118 attackspam
20/7/4@08:12:45: FAIL: Alarm-Network address from=105.112.50.118
...
2020-07-04 22:12:15
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.112.50.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3235
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;105.112.50.72.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071301 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jul 14 08:21:00 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 72.50.112.105.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 72.50.112.105.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
62.48.211.160 attack
Spam Timestamp : 06-Aug-19 11:22 _ BlockList Provider  combined abuse _ (657)
2019-08-07 04:46:46
204.48.19.178 attackbotsspam
Invalid user eggdrop from 204.48.19.178 port 46108
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.48.19.178
Failed password for invalid user eggdrop from 204.48.19.178 port 46108 ssh2
Invalid user amos from 204.48.19.178 port 43084
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.48.19.178
2019-08-07 04:52:36
193.112.97.157 attackbotsspam
Automatic report - Banned IP Access
2019-08-07 05:04:17
61.19.242.135 attackspambots
Aug  6 13:58:06 yesfletchmain sshd\[29294\]: User root from 61.19.242.135 not allowed because not listed in AllowUsers
Aug  6 13:58:06 yesfletchmain sshd\[29294\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.19.242.135  user=root
Aug  6 13:58:08 yesfletchmain sshd\[29294\]: Failed password for invalid user root from 61.19.242.135 port 39646 ssh2
Aug  6 14:07:12 yesfletchmain sshd\[29486\]: Invalid user monitor from 61.19.242.135 port 47730
Aug  6 14:07:12 yesfletchmain sshd\[29486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.19.242.135
...
2019-08-07 04:58:39
209.94.191.212 attack
/var/log/apache/pucorp.org.log:209.94.191.212 - - [06/Aug/2019:18:51:29 +0800] "GET /robots.txt HTTP/1.1" 304 204 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; hxxp://mj12bot.com/)"
/var/log/apache/pucorp.org.log:209.94.191.212 - - [06/Aug/2019:18:51:31 +0800] "GET /index.php/component/k2/hostnameem/306-%C3%A7%E2%80%9C%C5%A0%C3%A9%C5%93%C5%BE%C3%A6%m3%B2%E2%80%B0%C3%A7%E2%80%94%E2%80%BA%C3%A6%E2%80%9A%m3%BC%C3%A5%m3%BF%m3%B5%C3%A6%m3%81%m3%A9%C3%A5%m3%B8%m3%AB%C3%A7%m3%B4%E2%80%A6%C3%A7%m3%B7%C5%A1%C3%A5%m3%A5%m3%B3 HTTP/1.1" 200 15071 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; hxxp://mj12bot.com/)"


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=209.94.191.212
2019-08-07 05:03:12
191.207.21.222 attackspambots
Aug  6 12:56:29 v32671 sshd[5568]: Address 191.207.21.222 maps to 191-207-21-222.user.vivozap.com.br, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Aug  6 12:56:31 v32671 sshd[5568]: Received disconnect from 191.207.21.222: 11: Bye Bye [preauth]
Aug  6 12:56:32 v32671 sshd[5570]: Address 191.207.21.222 maps to 191-207-21-222.user.vivozap.com.br, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Aug  6 12:56:33 v32671 sshd[5570]: Received disconnect from 191.207.21.222: 11: Bye Bye [preauth]
Aug  6 12:56:35 v32671 sshd[5572]: Address 191.207.21.222 maps to 191-207-21-222.user.vivozap.com.br, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Aug  6 12:56:35 v32671 sshd[5572]: Invalid user ubnt from 191.207.21.222
Aug  6 12:56:36 v32671 sshd[5572]: Received disconnect from 191.207.21.222: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=191.207.21.222
2019-08-07 05:13:36
137.74.119.50 attack
SSH Brute Force, server-1 sshd[29513]: Failed password for invalid user git from 137.74.119.50 port 57356 ssh2
2019-08-07 05:34:51
84.39.178.242 attackbots
Automatic report - Port Scan Attack
2019-08-07 04:48:29
49.88.112.70 attackbots
Aug  6 18:50:34 ip-172-31-1-72 sshd\[16696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.70  user=root
Aug  6 18:50:36 ip-172-31-1-72 sshd\[16696\]: Failed password for root from 49.88.112.70 port 33041 ssh2
Aug  6 18:52:37 ip-172-31-1-72 sshd\[16729\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.70  user=root
Aug  6 18:52:39 ip-172-31-1-72 sshd\[16729\]: Failed password for root from 49.88.112.70 port 31183 ssh2
Aug  6 18:55:25 ip-172-31-1-72 sshd\[16749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.70  user=root
2019-08-07 05:26:08
59.91.196.220 attackspambots
20 attempts against mh_ha-misbehave-ban on lake.magehost.pro
2019-08-07 05:23:10
114.109.153.28 attackbotsspam
" "
2019-08-07 05:07:50
107.170.72.59 attackbotsspam
10s of requests to none existent pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined
node-superagent/4.1.0
2019-08-07 05:15:24
180.126.171.100 attackbots
2019-08-06T12:47:45.896961ks3373544 sshd[24732]: Invalid user admin from 180.126.171.100 port 16867
2019-08-06T12:47:45.937360ks3373544 sshd[24732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.126.171.100
2019-08-06T12:47:48.222136ks3373544 sshd[24732]: Failed password for invalid user admin from 180.126.171.100 port 16867 ssh2
2019-08-06T12:47:51.364063ks3373544 sshd[24732]: Failed password for invalid user admin from 180.126.171.100 port 16867 ssh2
2019-08-06T12:47:54.012404ks3373544 sshd[24732]: Failed password for invalid user admin from 180.126.171.100 port 16867 ssh2

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=180.126.171.100
2019-08-07 04:46:23
142.93.151.152 attackspambots
Aug  6 17:06:31 yabzik sshd[29873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.151.152
Aug  6 17:06:34 yabzik sshd[29873]: Failed password for invalid user agnes from 142.93.151.152 port 52582 ssh2
Aug  6 17:10:54 yabzik sshd[31470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.151.152
2019-08-07 05:28:39
178.128.215.16 attackspam
Aug  6 21:36:49 tux-35-217 sshd\[14378\]: Invalid user user from 178.128.215.16 port 59578
Aug  6 21:36:49 tux-35-217 sshd\[14378\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.215.16
Aug  6 21:36:52 tux-35-217 sshd\[14378\]: Failed password for invalid user user from 178.128.215.16 port 59578 ssh2
Aug  6 21:41:42 tux-35-217 sshd\[14395\]: Invalid user sfarris from 178.128.215.16 port 53962
Aug  6 21:41:42 tux-35-217 sshd\[14395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.215.16
...
2019-08-07 05:33:41

最近上报的IP列表

36.70.197.33 189.188.110.20 112.133.229.92 113.237.201.181
94.156.175.31 198.176.48.192 128.234.198.30 45.249.108.46
3.82.161.203 217.79.1.158 180.247.24.26 13.74.254.46
146.27.25.165 112.253.41.163 164.182.36.20 160.21.41.176
41.80.175.171 71.23.95.157 144.217.166.26 122.54.99.79