必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Taiwan, Province of China

运营商(isp): Chunghwa Telecom Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackbots
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/114.40.145.107/ 
 TW - 1H : (314)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TW 
 NAME ASN : ASN3462 
 
 IP : 114.40.145.107 
 
 CIDR : 114.40.0.0/16 
 
 PREFIX COUNT : 390 
 
 UNIQUE IP COUNT : 12267520 
 
 
 WYKRYTE ATAKI Z ASN3462 :  
  1H - 9 
  3H - 61 
  6H - 94 
 12H - 157 
 24H - 301 
 
 DateTime : 2019-10-10 05:45:47 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-10 18:21:27
相同子网IP讨论:
IP 类型 评论内容 时间
114.40.145.225 attackbots
firewall-block, port(s): 23/tcp
2019-09-20 08:14:24
114.40.145.133 attack
scan z
2019-09-13 06:52:52
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.40.145.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14280
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.40.145.107.			IN	A

;; AUTHORITY SECTION:
.			403	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101000 1800 900 604800 86400

;; Query time: 263 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 10 18:21:24 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
107.145.40.114.in-addr.arpa domain name pointer 114-40-145-107.dynamic-ip.hinet.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
107.145.40.114.in-addr.arpa	name = 114-40-145-107.dynamic-ip.hinet.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
92.112.41.132 attackspambots
Telnetd brute force attack detected by fail2ban
2019-11-02 22:54:54
54.37.69.74 attackspambots
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.69.74  user=root
Failed password for root from 54.37.69.74 port 33982 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.69.74  user=root
Failed password for root from 54.37.69.74 port 45926 ssh2
Invalid user bishe from 54.37.69.74 port 57866
2019-11-02 22:55:13
129.158.73.231 attackspambots
Nov  2 14:40:31 server sshd\[8636\]: Invalid user webmail from 129.158.73.231
Nov  2 14:40:31 server sshd\[8636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=oc-129-158-73-231.compute.oraclecloud.com 
Nov  2 14:40:33 server sshd\[8636\]: Failed password for invalid user webmail from 129.158.73.231 port 61687 ssh2
Nov  2 14:56:42 server sshd\[12782\]: Invalid user hub from 129.158.73.231
Nov  2 14:56:42 server sshd\[12782\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=oc-129-158-73-231.compute.oraclecloud.com 
...
2019-11-02 22:21:01
106.15.198.21 attackspambots
PostgreSQL port 5432
2019-11-02 22:19:55
222.186.175.169 attack
Nov  2 15:45:48 MK-Soft-Root1 sshd[27917]: Failed password for root from 222.186.175.169 port 11652 ssh2
Nov  2 15:45:52 MK-Soft-Root1 sshd[27917]: Failed password for root from 222.186.175.169 port 11652 ssh2
...
2019-11-02 22:50:37
185.149.40.45 attackbots
Nov  2 13:28:26 [host] sshd[21099]: Invalid user P[at]55w0rd from 185.149.40.45
Nov  2 13:28:26 [host] sshd[21099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.149.40.45
Nov  2 13:28:27 [host] sshd[21099]: Failed password for invalid user P[at]55w0rd from 185.149.40.45 port 51600 ssh2
2019-11-02 23:01:02
198.50.197.221 attack
Nov  2 14:21:38 SilenceServices sshd[23352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.50.197.221
Nov  2 14:21:39 SilenceServices sshd[23352]: Failed password for invalid user dz from 198.50.197.221 port 24808 ssh2
Nov  2 14:25:13 SilenceServices sshd[25669]: Failed password for root from 198.50.197.221 port 62924 ssh2
2019-11-02 22:42:59
38.143.223.252 attackbots
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.143.223.252  user=root
Failed password for root from 38.143.223.252 port 43083 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.143.223.252  user=root
Failed password for root from 38.143.223.252 port 42532 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.143.223.252  user=news
2019-11-02 22:57:00
121.7.25.197 attackspam
PostgreSQL port 5432
2019-11-02 22:33:37
167.114.157.86 attackspambots
SSH bruteforce
2019-11-02 22:22:28
202.74.238.87 attackspam
/var/log/messages:Oct 31 01:13:17 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1572484397.296:114621): pid=12731 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=12732 suid=74 rport=55458 laddr=104.167.106.93 lport=22  exe="/usr/sbin/sshd" hostname=? addr=202.74.238.87 terminal=? res=success'
/var/log/messages:Oct 31 01:13:17 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1572484397.300:114622): pid=12731 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=12732 suid=74 rport=55458 laddr=104.167.106.93 lport=22  exe="/usr/sbin/sshd" hostname=? addr=202.74.238.87 terminal=? res=success'
/var/log/messages:Oct 31 01:13:18 sanyalnet-cloud-vps fail2ban.filter[1538]: INFO [sshd] Fou........
-------------------------------
2019-11-02 22:40:28
125.18.118.208 attack
(Nov  2)  LEN=52 TTL=114 ID=26094 DF TCP DPT=445 WINDOW=8192 SYN 
 (Nov  2)  LEN=52 TTL=116 ID=10501 DF TCP DPT=445 WINDOW=8192 SYN 
 (Nov  2)  LEN=52 TTL=116 ID=8406 DF TCP DPT=445 WINDOW=8192 SYN 
 (Nov  1)  LEN=52 TTL=117 ID=13282 DF TCP DPT=445 WINDOW=8192 SYN 
 (Nov  1)  LEN=52 TTL=117 ID=27502 DF TCP DPT=445 WINDOW=8192 SYN 
 (Nov  1)  LEN=52 TTL=117 ID=17564 DF TCP DPT=445 WINDOW=8192 SYN 
 (Nov  1)  LEN=52 TTL=115 ID=13118 DF TCP DPT=445 WINDOW=8192 SYN 
 (Oct 31)  LEN=52 TTL=117 ID=14540 DF TCP DPT=445 WINDOW=8192 SYN 
 (Oct 30)  LEN=52 TTL=114 ID=25592 DF TCP DPT=445 WINDOW=8192 SYN 
 (Oct 30)  LEN=52 TTL=117 ID=31931 DF TCP DPT=445 WINDOW=8192 SYN 
 (Oct 30)  LEN=52 TTL=117 ID=14626 DF TCP DPT=445 WINDOW=8192 SYN 
 (Oct 27)  LEN=52 TTL=116 ID=10962 DF TCP DPT=445 WINDOW=8192 SYN
2019-11-02 22:34:23
103.76.190.210 attackspambots
postfix (unknown user, SPF fail or relay access denied)
2019-11-02 22:22:04
51.15.53.162 attack
Nov  2 14:16:02 srv01 sshd[1901]: Invalid user arpit from 51.15.53.162
Nov  2 14:16:02 srv01 sshd[1901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.53.162
Nov  2 14:16:02 srv01 sshd[1901]: Invalid user arpit from 51.15.53.162
Nov  2 14:16:04 srv01 sshd[1901]: Failed password for invalid user arpit from 51.15.53.162 port 60634 ssh2
Nov  2 14:19:28 srv01 sshd[2067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.53.162  user=root
Nov  2 14:19:31 srv01 sshd[2067]: Failed password for root from 51.15.53.162 port 42784 ssh2
...
2019-11-02 23:04:43
183.64.62.173 attackbots
Nov  2 13:57:42 nextcloud sshd\[29449\]: Invalid user hallintomies from 183.64.62.173
Nov  2 13:57:42 nextcloud sshd\[29449\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.64.62.173
Nov  2 13:57:44 nextcloud sshd\[29449\]: Failed password for invalid user hallintomies from 183.64.62.173 port 33232 ssh2
...
2019-11-02 22:19:39

最近上报的IP列表

178.137.16.19 125.164.151.26 125.25.82.205 155.173.143.5
112.133.251.9 2.50.53.125 111.246.26.195 1.55.195.150
219.145.72.127 80.211.246.191 197.48.135.102 162.243.32.120
189.162.63.143 67.78.55.136 177.102.202.114 177.17.234.21
112.113.198.83 47.102.99.56 222.252.61.252 36.90.99.240