必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Jiangsu Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Feb 29 00:36:50 server sshd\[8845\]: Invalid user tanwei from 114.220.75.30
Feb 29 00:36:50 server sshd\[8845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.220.75.30 
Feb 29 00:36:52 server sshd\[8845\]: Failed password for invalid user tanwei from 114.220.75.30 port 59216 ssh2
Feb 29 00:59:04 server sshd\[12763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.220.75.30  user=root
Feb 29 00:59:06 server sshd\[12763\]: Failed password for root from 114.220.75.30 port 39540 ssh2
...
2020-02-29 06:34:53
attackbotsspam
Feb 25 10:22:09 dev0-dcde-rnet sshd[32373]: Failed password for root from 114.220.75.30 port 50627 ssh2
Feb 25 10:34:08 dev0-dcde-rnet sshd[32500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.220.75.30
Feb 25 10:34:10 dev0-dcde-rnet sshd[32500]: Failed password for invalid user nitish from 114.220.75.30 port 35146 ssh2
2020-02-25 20:54:29
attackspambots
Feb 10 07:52:50 silence02 sshd[28530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.220.75.30
Feb 10 07:52:52 silence02 sshd[28530]: Failed password for invalid user yqv from 114.220.75.30 port 54428 ssh2
Feb 10 07:57:33 silence02 sshd[28855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.220.75.30
2020-02-10 15:53:33
attack
Feb  9 21:27:12 ovpn sshd\[18802\]: Invalid user osi from 114.220.75.30
Feb  9 21:27:12 ovpn sshd\[18802\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.220.75.30
Feb  9 21:27:14 ovpn sshd\[18802\]: Failed password for invalid user osi from 114.220.75.30 port 60700 ssh2
Feb  9 21:43:01 ovpn sshd\[22601\]: Invalid user zjc from 114.220.75.30
Feb  9 21:43:01 ovpn sshd\[22601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.220.75.30
2020-02-10 05:08:16
attackbotsspam
Dec 20 19:47:33 pi sshd\[8414\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.220.75.30  user=root
Dec 20 19:47:35 pi sshd\[8414\]: Failed password for root from 114.220.75.30 port 57595 ssh2
Dec 20 19:53:37 pi sshd\[8620\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.220.75.30  user=root
Dec 20 19:53:39 pi sshd\[8620\]: Failed password for root from 114.220.75.30 port 57315 ssh2
Dec 20 19:59:48 pi sshd\[8818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.220.75.30  user=root
...
2019-12-21 04:14:49
attackbots
Dec 11 13:58:52 localhost sshd\[17675\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.220.75.30  user=root
Dec 11 13:58:54 localhost sshd\[17675\]: Failed password for root from 114.220.75.30 port 52632 ssh2
Dec 11 14:08:17 localhost sshd\[19397\]: Invalid user pcap from 114.220.75.30 port 53753
2019-12-11 21:14:40
attackbots
Dec  8 07:15:28 nextcloud sshd\[18684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.220.75.30  user=root
Dec  8 07:15:30 nextcloud sshd\[18684\]: Failed password for root from 114.220.75.30 port 59577 ssh2
Dec  8 07:30:41 nextcloud sshd\[10518\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.220.75.30  user=root
...
2019-12-08 14:46:36
attackspam
Dec  7 09:35:08 MK-Soft-Root2 sshd[1664]: Failed password for root from 114.220.75.30 port 51840 ssh2
...
2019-12-07 17:01:09
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.220.75.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38482
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.220.75.30.			IN	A

;; AUTHORITY SECTION:
.			497	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120700 1800 900 604800 86400

;; Query time: 122 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 07 17:01:06 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 30.75.220.114.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 30.75.220.114.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
77.247.110.134 attackspam
5123/udp 5122/udp 5121/udp...
[2019-06-04/23]109pkt,42pt.(udp)
2019-06-24 21:32:32
125.161.138.102 attackbotsspam
Jun 24 12:59:26 *** sshd[22400]: reveeclipse mapping checking getaddrinfo for 102.subnet125-161-138.speedy.telkom.net.id [125.161.138.102] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 24 12:59:26 *** sshd[22400]: Invalid user 2 from 125.161.138.102
Jun 24 12:59:26 *** sshd[22400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.138.102
Jun 24 12:59:28 *** sshd[22400]: Failed password for invalid user 2 from 125.161.138.102 port 42626 ssh2
Jun 24 12:59:28 *** sshd[22400]: Received disconnect from 125.161.138.102: 11: Bye Bye [preauth]
Jun 24 13:03:57 *** sshd[22481]: reveeclipse mapping checking getaddrinfo for 102.subnet125-161-138.speedy.telkom.net.id [125.161.138.102] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 24 13:03:57 *** sshd[22481]: Invalid user terraria from 125.161.138.102
Jun 24 13:03:57 *** sshd[22481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.138.102


........
------------------------------------------
2019-06-24 21:48:39
41.84.131.10 attackspam
Jun 24 14:00:31 localhost sshd\[32292\]: Invalid user anu from 41.84.131.10 port 64854
Jun 24 14:00:31 localhost sshd\[32292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.84.131.10
...
2019-06-24 21:59:23
111.179.220.226 attackbotsspam
2019-06-24T09:10:09.079646mizuno.rwx.ovh sshd[9733]: Connection from 111.179.220.226 port 58102 on 78.46.61.178 port 22
2019-06-24T09:10:11.458187mizuno.rwx.ovh sshd[9733]: Invalid user admin from 111.179.220.226 port 58102
2019-06-24T09:10:11.465672mizuno.rwx.ovh sshd[9733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.179.220.226
2019-06-24T09:10:09.079646mizuno.rwx.ovh sshd[9733]: Connection from 111.179.220.226 port 58102 on 78.46.61.178 port 22
2019-06-24T09:10:11.458187mizuno.rwx.ovh sshd[9733]: Invalid user admin from 111.179.220.226 port 58102
2019-06-24T09:10:12.826148mizuno.rwx.ovh sshd[9733]: Failed password for invalid user admin from 111.179.220.226 port 58102 ssh2
...
2019-06-24 21:39:55
187.87.14.80 attackspambots
mail.log:Jun 18 20:50:41 mail postfix/smtpd[18011]: warning: unknown[187.87.14.80]: SASL PLAIN authentication failed: authentication failure
2019-06-24 21:42:04
185.176.27.26 attackspambots
24.06.2019 12:09:41 Connection to port 14496 blocked by firewall
2019-06-24 21:51:36
146.241.101.178 attackspam
LGS,WP GET /wp-login.php
2019-06-24 21:59:01
18.236.45.196 attackspambots
18.236.45.196 - - \[24/Jun/2019:13:59:39 +0200\] "GET /wp-login.php HTTP/1.1" 200 1130 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
18.236.45.196 - - \[24/Jun/2019:13:59:40 +0200\] "POST /wp-login.php HTTP/1.1" 200 1526 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
18.236.45.196 - - \[24/Jun/2019:14:08:04 +0200\] "GET /wp-login.php HTTP/1.1" 200 1256 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
18.236.45.196 - - \[24/Jun/2019:14:08:05 +0200\] "POST /wp-login.php HTTP/1.1" 200 1651 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
18.236.45.196 - - \[24/Jun/2019:14:08:06 +0200\] "GET /wp-login.php HTTP/1.1" 200 1256 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
18.236.45.196 - - \[24/Jun/2019:14:08:06 +0200\] "POST /wp-login.php HTTP/1.1" 200 1629 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\)
2019-06-24 22:19:54
71.6.147.254 attack
24.06.2019 13:35:31 Connection to port 554 blocked by firewall
2019-06-24 21:39:33
81.192.8.14 attackbots
20 attempts against mh-ssh on steel.magehost.pro
2019-06-24 21:38:30
94.176.76.188 attack
Unauthorised access (Jun 24) SRC=94.176.76.188 LEN=40 TTL=245 ID=49994 DF TCP DPT=23 WINDOW=14600 SYN 
Unauthorised access (Jun 24) SRC=94.176.76.188 LEN=40 TTL=245 ID=20303 DF TCP DPT=23 WINDOW=14600 SYN 
Unauthorised access (Jun 24) SRC=94.176.76.188 LEN=40 TTL=245 ID=32746 DF TCP DPT=23 WINDOW=14600 SYN 
Unauthorised access (Jun 24) SRC=94.176.76.188 LEN=40 TTL=245 ID=50053 DF TCP DPT=23 WINDOW=14600 SYN 
Unauthorised access (Jun 24) SRC=94.176.76.188 LEN=40 TTL=245 ID=44038 DF TCP DPT=23 WINDOW=14600 SYN
2019-06-24 21:55:43
92.118.37.84 attack
Jun 24 15:11:37 h2177944 kernel: \[2725849.059548\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.84 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=22532 PROTO=TCP SPT=41610 DPT=56013 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 24 15:14:35 h2177944 kernel: \[2726027.528163\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.84 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=1230 PROTO=TCP SPT=41610 DPT=29891 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 24 15:15:09 h2177944 kernel: \[2726061.578956\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.84 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=45709 PROTO=TCP SPT=41610 DPT=35802 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 24 15:15:15 h2177944 kernel: \[2726067.156846\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.84 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=45296 PROTO=TCP SPT=41610 DPT=31730 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 24 15:15:18 h2177944 kernel: \[2726070.126726\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.84 DST=85.214.117.9 L
2019-06-24 21:35:35
180.126.236.48 attack
Jun 24 13:52:19 HOST sshd[26364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.126.236.48  user=r.r
Jun 24 13:52:21 HOST sshd[26364]: Failed password for r.r from 180.126.236.48 port 42889 ssh2
Jun 24 13:52:23 HOST sshd[26364]: Failed password for r.r from 180.126.236.48 port 42889 ssh2
Jun 24 13:52:27 HOST sshd[26364]: Failed password for r.r from 180.126.236.48 port 42889 ssh2
Jun 24 13:52:29 HOST sshd[26364]: Failed password for r.r from 180.126.236.48 port 42889 ssh2
Jun 24 13:52:32 HOST sshd[26364]: Failed password for r.r from 180.126.236.48 port 42889 ssh2
Jun 24 13:52:34 HOST sshd[26364]: Failed password for r.r from 180.126.236.48 port 42889 ssh2
Jun 24 13:52:34 HOST sshd[26364]: Disconnecting: Too many authentication failures for r.r from 180.126.236.48 port 42889 ssh2 [preauth]
Jun 24 13:52:34 HOST sshd[26364]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.126.236.48  user=r.r........
-------------------------------
2019-06-24 22:19:18
58.251.161.139 attack
Jun 24 14:09:38 dev sshd\[21190\]: Invalid user michielan from 58.251.161.139 port 12728
Jun 24 14:09:38 dev sshd\[21190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.251.161.139
...
2019-06-24 21:53:48
50.31.14.160 attackspam
445/tcp 445/tcp 445/tcp...
[2019-04-27/06-24]10pkt,1pt.(tcp)
2019-06-24 21:26:35

最近上报的IP列表

103.95.173.42 19.209.228.123 163.172.7.215 43.41.225.15
230.27.63.2 43.10.99.185 206.53.179.61 179.222.178.33
149.226.117.169 40.148.44.105 181.165.174.11 162.158.184.135
31.163.181.186 228.134.4.82 253.25.183.221 179.73.217.94
89.39.145.28 55.11.206.145 141.66.149.47 179.118.109.23