必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.107.85.234
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14892
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;114.107.85.234.			IN	A

;; AUTHORITY SECTION:
.			457	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 16:14:41 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 234.85.107.114.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 234.85.107.114.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
64.145.79.187 attackspambots
\[2019-10-14 13:38:23\] SECURITY\[1882\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-14T13:38:23.364+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="314",SessionID="0x7fde90e824a8",LocalAddress="IPV4/UDP/204.8.216.89/5060",RemoteAddress="IPV4/UDP/64.145.79.187/64500",Challenge="4487a3eb",ReceivedChallenge="4487a3eb",ReceivedHash="d4118ca64c9296532a9155bc4a92b390"
\[2019-10-14 13:40:59\] SECURITY\[1882\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-14T13:40:59.355+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="315",SessionID="0x7fde90e270d8",LocalAddress="IPV4/UDP/204.8.216.89/5060",RemoteAddress="IPV4/UDP/64.145.79.187/49774",Challenge="15a41286",ReceivedChallenge="15a41286",ReceivedHash="068d9f69e2c7fe8da6c379872cbe0b48"
\[2019-10-14 13:42:36\] SECURITY\[1882\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-14T13:42:36.590+0200",Severity="Error",Service="SIP",EventVersion="2",Acco
...
2019-10-15 01:38:24
171.229.228.91 attackbots
scan z
2019-10-15 01:37:52
177.67.27.45 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 14-10-2019 15:45:21.
2019-10-15 01:37:38
81.22.45.51 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 78 - port: 8844 proto: TCP
2019-10-15 01:50:12
195.46.20.146 attack
Brute force attempt
2019-10-15 01:20:47
222.252.16.140 attack
Oct 14 01:58:57 web9 sshd\[3220\]: Invalid user P4ssw0rd@2019 from 222.252.16.140
Oct 14 01:58:57 web9 sshd\[3220\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.252.16.140
Oct 14 01:58:59 web9 sshd\[3220\]: Failed password for invalid user P4ssw0rd@2019 from 222.252.16.140 port 58584 ssh2
Oct 14 02:03:29 web9 sshd\[3841\]: Invalid user p4ssw0rd1 from 222.252.16.140
Oct 14 02:03:29 web9 sshd\[3841\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.252.16.140
2019-10-15 01:35:14
158.69.184.2 attackbotsspam
Oct 14 00:18:24 cumulus sshd[20451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.184.2  user=r.r
Oct 14 00:18:26 cumulus sshd[20451]: Failed password for r.r from 158.69.184.2 port 57088 ssh2
Oct 14 00:18:26 cumulus sshd[20451]: Received disconnect from 158.69.184.2 port 57088:11: Bye Bye [preauth]
Oct 14 00:18:26 cumulus sshd[20451]: Disconnected from 158.69.184.2 port 57088 [preauth]
Oct 14 00:34:13 cumulus sshd[21036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.184.2  user=r.r
Oct 14 00:34:15 cumulus sshd[21036]: Failed password for r.r from 158.69.184.2 port 49474 ssh2
Oct 14 00:34:15 cumulus sshd[21036]: Received disconnect from 158.69.184.2 port 49474:11: Bye Bye [preauth]
Oct 14 00:34:15 cumulus sshd[21036]: Disconnected from 158.69.184.2 port 49474 [preauth]
Oct 14 00:37:55 cumulus sshd[21207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ........
-------------------------------
2019-10-15 01:37:12
49.235.242.253 attackspam
Oct 14 12:28:23 localhost sshd\[18683\]: Invalid user comforts from 49.235.242.253 port 36030
Oct 14 12:28:23 localhost sshd\[18683\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.242.253
Oct 14 12:28:25 localhost sshd\[18683\]: Failed password for invalid user comforts from 49.235.242.253 port 36030 ssh2
...
2019-10-15 01:18:25
183.11.129.97 attackspam
Oct 14 17:16:09 www_kotimaassa_fi sshd[16607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.11.129.97
Oct 14 17:16:11 www_kotimaassa_fi sshd[16607]: Failed password for invalid user P4$$W0RD123 from 183.11.129.97 port 17427 ssh2
...
2019-10-15 01:17:36
185.70.107.209 attackbotsspam
Oct 14 19:30:10 relay postfix/smtpd\[1411\]: warning: unknown\[185.70.107.209\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 14 19:32:40 relay postfix/smtpd\[30678\]: warning: unknown\[185.70.107.209\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 14 19:35:08 relay postfix/smtpd\[27394\]: warning: unknown\[185.70.107.209\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 14 19:37:37 relay postfix/smtpd\[1411\]: warning: unknown\[185.70.107.209\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 14 19:40:06 relay postfix/smtpd\[27394\]: warning: unknown\[185.70.107.209\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2019-10-15 01:49:38
5.188.62.147 attackspambots
Malicious brute force vulnerability hacking attacks
2019-10-15 01:40:21
218.92.0.191 attackbots
Oct 14 19:37:25 dcd-gentoo sshd[12927]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups
Oct 14 19:37:28 dcd-gentoo sshd[12927]: error: PAM: Authentication failure for illegal user root from 218.92.0.191
Oct 14 19:37:25 dcd-gentoo sshd[12927]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups
Oct 14 19:37:28 dcd-gentoo sshd[12927]: error: PAM: Authentication failure for illegal user root from 218.92.0.191
Oct 14 19:37:25 dcd-gentoo sshd[12927]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups
Oct 14 19:37:28 dcd-gentoo sshd[12927]: error: PAM: Authentication failure for illegal user root from 218.92.0.191
Oct 14 19:37:28 dcd-gentoo sshd[12927]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 60279 ssh2
...
2019-10-15 01:42:32
89.36.217.142 attackbotsspam
Automatic report - Banned IP Access
2019-10-15 01:31:11
115.68.207.48 attackspambots
Lines containing failures of 115.68.207.48
Oct 14 12:15:56 mx-in-01 sshd[11231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.68.207.48  user=r.r
Oct 14 12:15:58 mx-in-01 sshd[11231]: Failed password for r.r from 115.68.207.48 port 60048 ssh2
Oct 14 12:15:59 mx-in-01 sshd[11231]: Received disconnect from 115.68.207.48 port 60048:11: Bye Bye [preauth]
Oct 14 12:15:59 mx-in-01 sshd[11231]: Disconnected from authenticating user r.r 115.68.207.48 port 60048 [preauth]
Oct 14 12:30:26 mx-in-01 sshd[12382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.68.207.48  user=r.r
Oct 14 12:30:28 mx-in-01 sshd[12382]: Failed password for r.r from 115.68.207.48 port 55370 ssh2
Oct 14 12:30:29 mx-in-01 sshd[12382]: Received disconnect from 115.68.207.48 port 55370:11: Bye Bye [preauth]
Oct 14 12:30:29 mx-in-01 sshd[12382]: Disconnected from authenticating user r.r 115.68.207.48 port 55370 [preauth........
------------------------------
2019-10-15 01:34:41
148.70.77.22 attack
Oct 14 13:39:49 ns381471 sshd[5790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.77.22
Oct 14 13:39:51 ns381471 sshd[5790]: Failed password for invalid user Azur from 148.70.77.22 port 40880 ssh2
Oct 14 13:45:27 ns381471 sshd[5962]: Failed password for root from 148.70.77.22 port 52394 ssh2
2019-10-15 01:50:25

最近上报的IP列表

114.107.77.213 114.106.173.27 114.107.95.41 114.108.29.20
114.110.23.154 114.108.219.59 114.118.3.60 114.112.103.185
114.119.133.220 114.119.136.190 114.119.136.245 114.108.128.174
114.108.236.106 114.119.139.134 114.119.139.167 114.119.135.253
114.134.25.189 114.134.26.131 114.135.55.130 114.139.49.153