必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Ningxia Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspambots
Unauthorized connection attempt detected from IP address 106.45.1.16 to port 8082
2019-12-31 06:53:57
attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5412d670589feef6 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 05:23:17
相同子网IP讨论:
IP 类型 评论内容 时间
106.45.172.230 attackbots
Invalid user server from 106.45.172.230 port 16352
2020-08-28 01:38:18
106.45.1.234 attackbotsspam
Web Server Scan. RayID: 594576a0de09d38e, UA: Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729), Country: CN
2020-05-21 04:14:02
106.45.1.98 attackbotsspam
Scanning
2020-05-06 01:26:48
106.45.1.68 attackspambots
Unauthorized connection attempt detected from IP address 106.45.1.68 to port 8118 [J]
2020-03-02 18:44:45
106.45.1.241 attackspam
Unauthorized connection attempt detected from IP address 106.45.1.241 to port 80
2020-02-16 02:12:18
106.45.1.39 attack
The IP has triggered Cloudflare WAF. CF-Ray: 560547b4df36eae7 | WAF_Rule_ID: a75424b44a1e4f27881d03344a122815 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729) | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2020-02-06 04:50:32
106.45.1.141 attackspam
Unauthorized connection attempt detected from IP address 106.45.1.141 to port 80 [J]
2020-02-05 09:41:40
106.45.1.5 attackspambots
Unauthorized connection attempt detected from IP address 106.45.1.5 to port 8080 [J]
2020-01-31 22:37:30
106.45.10.142 attack
Unauthorized connection attempt detected from IP address 106.45.10.142 to port 23 [T]
2020-01-30 08:46:48
106.45.1.20 attackspambots
Unauthorized connection attempt detected from IP address 106.45.1.20 to port 3979 [T]
2020-01-29 17:45:05
106.45.1.241 attackbots
Unauthorized connection attempt detected from IP address 106.45.1.241 to port 808 [J]
2020-01-27 15:16:25
106.45.1.219 attackbotsspam
Unauthorized connection attempt detected from IP address 106.45.1.219 to port 8080 [T]
2020-01-27 14:48:32
106.45.1.102 attack
Unauthorized connection attempt detected from IP address 106.45.1.102 to port 8118 [J]
2020-01-22 08:36:39
106.45.1.37 attackbotsspam
Unauthorized connection attempt detected from IP address 106.45.1.37 to port 8123 [J]
2020-01-22 08:12:04
106.45.1.181 attackspambots
Unauthorized connection attempt detected from IP address 106.45.1.181 to port 80 [J]
2020-01-19 16:05:34
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.45.1.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3977
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.45.1.16.			IN	A

;; AUTHORITY SECTION:
.			365	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120701 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 08 05:31:14 CST 2019
;; MSG SIZE  rcvd: 115

HOST信息:
Host 16.1.45.106.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 16.1.45.106.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
106.54.106.194 attackbots
Oct 22 06:13:24 mxgate1 sshd[25046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.106.194  user=r.r
Oct 22 06:13:27 mxgate1 sshd[25046]: Failed password for r.r from 106.54.106.194 port 58216 ssh2
Oct 22 06:13:27 mxgate1 sshd[25046]: Received disconnect from 106.54.106.194 port 58216:11: Bye Bye [preauth]
Oct 22 06:13:27 mxgate1 sshd[25046]: Disconnected from 106.54.106.194 port 58216 [preauth]
Oct 22 06:26:25 mxgate1 sshd[25400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.106.194  user=r.r
Oct 22 06:26:27 mxgate1 sshd[25400]: Failed password for r.r from 106.54.106.194 port 36134 ssh2
Oct 22 06:26:27 mxgate1 sshd[25400]: Received disconnect from 106.54.106.194 port 36134:11: Bye Bye [preauth]
Oct 22 06:26:27 mxgate1 sshd[25400]: Disconnected from 106.54.106.194 port 36134 [preauth]
Oct 22 06:30:17 mxgate1 sshd[25491]: pam_unix(sshd:auth): authentication failure; lognam........
-------------------------------
2019-10-25 18:30:40
185.197.74.199 attackbots
Oct 25 10:25:49 legacy sshd[1608]: Failed password for root from 185.197.74.199 port 35742 ssh2
Oct 25 10:25:58 legacy sshd[1613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.197.74.199
Oct 25 10:26:00 legacy sshd[1613]: Failed password for invalid user support from 185.197.74.199 port 8920 ssh2
...
2019-10-25 18:38:45
80.82.64.73 attackbotsspam
Portscan or hack attempt detected by psad/fwsnort
2019-10-25 18:24:06
71.6.146.185 attackspambots
Automatic report - Banned IP Access
2019-10-25 18:53:07
222.170.63.27 attack
Oct 24 21:09:03 home sshd[12217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.170.63.27  user=root
Oct 24 21:09:05 home sshd[12217]: Failed password for root from 222.170.63.27 port 58236 ssh2
Oct 24 21:35:43 home sshd[12407]: Invalid user com from 222.170.63.27 port 63911
Oct 24 21:35:43 home sshd[12407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.170.63.27
Oct 24 21:35:43 home sshd[12407]: Invalid user com from 222.170.63.27 port 63911
Oct 24 21:35:45 home sshd[12407]: Failed password for invalid user com from 222.170.63.27 port 63911 ssh2
Oct 24 21:41:13 home sshd[12440]: Invalid user 0** from 222.170.63.27 port 13958
Oct 24 21:41:13 home sshd[12440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.170.63.27
Oct 24 21:41:13 home sshd[12440]: Invalid user 0** from 222.170.63.27 port 13958
Oct 24 21:41:15 home sshd[12440]: Failed password for invalid user 0** from 222.1
2019-10-25 18:20:26
113.125.119.83 attackspam
Oct 25 08:07:48 venus sshd\[2572\]: Invalid user evelin from 113.125.119.83 port 57932
Oct 25 08:07:48 venus sshd\[2572\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.125.119.83
Oct 25 08:07:49 venus sshd\[2572\]: Failed password for invalid user evelin from 113.125.119.83 port 57932 ssh2
...
2019-10-25 18:44:33
222.126.231.66 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/222.126.231.66/ 
 
 HK - 1H : (69)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : HK 
 NAME ASN : ASN37965 
 
 IP : 222.126.231.66 
 
 CIDR : 222.126.230.0/23 
 
 PREFIX COUNT : 74 
 
 UNIQUE IP COUNT : 30208 
 
 
 ATTACKS DETECTED ASN37965 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-10-25 05:47:12 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery
2019-10-25 18:52:25
177.52.26.8 attackbotsspam
Automatic report - Banned IP Access
2019-10-25 18:39:07
165.22.130.168 attackspam
Oct 21 06:49:43 nirvana postfix/smtpd[14164]: connect from unknown[165.22.130.168]
Oct 21 06:49:44 nirvana postfix/smtpd[14164]: warning: unknown[165.22.130.168]: SASL LOGIN authentication failed: authentication failure
Oct 21 06:49:44 nirvana postfix/smtpd[14164]: disconnect from unknown[165.22.130.168]
Oct 21 06:55:21 nirvana postfix/smtpd[21609]: connect from unknown[165.22.130.168]
Oct 21 06:55:22 nirvana postfix/smtpd[21609]: warning: unknown[165.22.130.168]: SASL LOGIN authentication failed: authentication failure
Oct 21 06:55:22 nirvana postfix/smtpd[21609]: disconnect from unknown[165.22.130.168]
Oct 21 06:56:35 nirvana postfix/smtpd[21609]: connect from unknown[165.22.130.168]
Oct 21 06:56:36 nirvana postfix/smtpd[21609]: warning: unknown[165.22.130.168]: SASL LOGIN authentication failed: authentication failure
Oct 21 06:56:36 nirvana postfix/smtpd[21609]: disconnect from unknown[165.22.130.168]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=165.22
2019-10-25 18:35:16
163.172.207.104 attackspam
\[2019-10-25 05:54:53\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-25T05:54:53.357-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="991011972592277524",SessionID="0x7fdf2c5fc4c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/58867",ACLName="no_extension_match"
\[2019-10-25 05:58:25\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-25T05:58:25.452-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="993011972592277524",SessionID="0x7fdf2c5fc4c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/64811",ACLName="no_extension_match"
\[2019-10-25 06:01:53\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-25T06:01:53.218-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="998011972592277524",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/50906",
2019-10-25 18:14:45
62.210.178.176 attackbots
2019-10-25T10:05:33.553360abusebot.cloudsearch.cf sshd\[4637\]: Invalid user apl from 62.210.178.176 port 33054
2019-10-25 18:23:53
187.189.125.125 attackspambots
port scan and connect, tcp 1433 (ms-sql-s)
2019-10-25 18:39:52
81.0.34.218 attack
2019-10-21 x@x
2019-10-21 15:31:32 unexpected disconnection while reading SMTP command from (static.218.34.0.81.ibercom.com) [81.0.34.218]:6886 I=[10.100.18.22]:25 (error: Connection reset by peer)
2019-10-21 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=81.0.34.218
2019-10-25 18:42:09
51.254.49.107 attackbots
10/25/2019-05:47:48.081678 51.254.49.107 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 52
2019-10-25 18:33:38
106.13.44.85 attackbotsspam
Oct 25 08:45:35 XXXXXX sshd[53329]: Invalid user ctrls from 106.13.44.85 port 51074
2019-10-25 18:48:30

最近上报的IP列表

182.138.163.174 175.184.165.205 175.184.164.177 175.152.29.218
196.139.160.148 186.212.86.212 174.63.20.105 252.78.137.120
171.12.10.222 150.255.11.32 125.59.139.78 124.235.138.89
124.235.138.23 124.160.236.187 124.90.51.201 124.88.112.179
123.191.136.153 123.163.114.113 123.163.114.5 123.144.23.41