必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Taichung

省份(region): Taichung City

国家(country): Taiwan, China

运营商(isp): Chunghwa Telecom Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Unauthorized connection attempt detected from IP address 114.41.104.134 to port 1433
2020-03-17 05:19:00
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.41.104.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25616
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.41.104.134.			IN	A

;; AUTHORITY SECTION:
.			477	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031601 1800 900 604800 86400

;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 17 05:18:56 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
134.104.41.114.in-addr.arpa domain name pointer 114-41-104-134.dynamic-ip.hinet.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
134.104.41.114.in-addr.arpa	name = 114-41-104-134.dynamic-ip.hinet.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
31.180.67.91 attackbots
2019-09-16 x@x
2019-09-16 x@x
2019-09-16 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=31.180.67.91
2019-09-16 21:23:27
112.112.153.100 attack
firewall-block, port(s): 22/tcp
2019-09-16 21:52:47
159.65.1.88 attackbotsspam
Sep 16 11:15:34 h2022099 sshd[20161]: Invalid user zhouh from 159.65.1.88
Sep 16 11:15:34 h2022099 sshd[20161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.1.88 
Sep 16 11:15:36 h2022099 sshd[20161]: Failed password for invalid user zhouh from 159.65.1.88 port 32874 ssh2
Sep 16 11:15:37 h2022099 sshd[20161]: Received disconnect from 159.65.1.88: 11: Bye Bye [preauth]
Sep 16 11:31:55 h2022099 sshd[22180]: Invalid user boyan from 159.65.1.88
Sep 16 11:31:55 h2022099 sshd[22180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.1.88 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=159.65.1.88
2019-09-16 21:56:21
106.12.78.199 attackbots
SSH authentication failure x 6 reported by Fail2Ban
...
2019-09-16 21:16:54
1.179.180.98 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2019-09-16 21:14:00
142.93.232.222 attack
Sep 16 13:26:48 web8 sshd\[2696\]: Invalid user xbot_premium123 from 142.93.232.222
Sep 16 13:26:48 web8 sshd\[2696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.222
Sep 16 13:26:50 web8 sshd\[2696\]: Failed password for invalid user xbot_premium123 from 142.93.232.222 port 46846 ssh2
Sep 16 13:31:22 web8 sshd\[4854\]: Invalid user pass from 142.93.232.222
Sep 16 13:31:22 web8 sshd\[4854\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.222
2019-09-16 21:47:48
187.65.244.220 attackspambots
Sep 16 02:08:21 hiderm sshd\[26153\]: Invalid user shu from 187.65.244.220
Sep 16 02:08:21 hiderm sshd\[26153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.65.244.220
Sep 16 02:08:23 hiderm sshd\[26153\]: Failed password for invalid user shu from 187.65.244.220 port 39010 ssh2
Sep 16 02:13:53 hiderm sshd\[26706\]: Invalid user alarie from 187.65.244.220
Sep 16 02:13:53 hiderm sshd\[26706\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.65.244.220
2019-09-16 21:55:47
49.235.88.104 attackspam
Sep 16 15:13:41 ns3110291 sshd\[20970\]: Invalid user vrinda from 49.235.88.104
Sep 16 15:13:41 ns3110291 sshd\[20970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.88.104 
Sep 16 15:13:43 ns3110291 sshd\[20970\]: Failed password for invalid user vrinda from 49.235.88.104 port 53174 ssh2
Sep 16 15:20:23 ns3110291 sshd\[21355\]: Invalid user sonya from 49.235.88.104
Sep 16 15:20:23 ns3110291 sshd\[21355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.88.104 
...
2019-09-16 21:36:40
218.150.220.230 attackspam
Sep 16 11:29:52 ArkNodeAT sshd\[6565\]: Invalid user valefor from 218.150.220.230
Sep 16 11:29:52 ArkNodeAT sshd\[6565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.150.220.230
Sep 16 11:29:54 ArkNodeAT sshd\[6565\]: Failed password for invalid user valefor from 218.150.220.230 port 60126 ssh2
2019-09-16 21:16:23
104.220.155.248 attack
Sep 16 09:19:02 xm3 sshd[2642]: Failed password for invalid user qs from 104.220.155.248 port 57164 ssh2
Sep 16 09:19:02 xm3 sshd[2642]: Received disconnect from 104.220.155.248: 11: Bye Bye [preauth]
Sep 16 09:27:46 xm3 sshd[22218]: Failed password for invalid user alma from 104.220.155.248 port 42042 ssh2
Sep 16 09:27:47 xm3 sshd[22218]: Received disconnect from 104.220.155.248: 11: Bye Bye [preauth]
Sep 16 09:32:04 xm3 sshd[31696]: Failed password for invalid user discoid from 104.220.155.248 port 57998 ssh2
Sep 16 09:32:04 xm3 sshd[31696]: Received disconnect from 104.220.155.248: 11: Bye Bye [preauth]
Sep 16 09:36:16 xm3 sshd[10535]: Failed password for invalid user applysyspub from 104.220.155.248 port 45720 ssh2
Sep 16 09:36:17 xm3 sshd[10535]: Received disconnect from 104.220.155.248: 11: Bye Bye [preauth]
Sep 16 09:40:33 xm3 sshd[20197]: Failed password for invalid user tam from 104.220.155.248 port 33444 ssh2
Sep 16 09:40:33 xm3 sshd[20197]: Received disconnec........
-------------------------------
2019-09-16 21:16:00
61.218.113.190 attackbotsspam
Unauthorised access (Sep 16) SRC=61.218.113.190 LEN=52 PREC=0x20 TTL=115 ID=4486 DF TCP DPT=445 WINDOW=8192 SYN
2019-09-16 21:26:29
87.245.163.250 attack
2019-09-16 03:05:05 H=(lss.it) [87.245.163.250]:59750 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/87.245.163.250)
2019-09-16 03:24:54 H=(luxurybusiness.it) [87.245.163.250]:53213 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/87.245.163.250)
2019-09-16 03:25:01 H=(liveboat.it) [87.245.163.250]:53433 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/87.245.163.250)
...
2019-09-16 21:01:01
106.122.170.176 attackspambots
2019-09-16T09:05:28.262519abusebot-3.cloudsearch.cf sshd\[26436\]: Invalid user admin from 106.122.170.176 port 55495
2019-09-16 21:28:40
61.125.131.40 attack
SMB Server BruteForce Attack
2019-09-16 21:21:34
103.86.49.102 attack
Sep 16 14:16:19 microserver sshd[57023]: Invalid user bertram from 103.86.49.102 port 52820
Sep 16 14:16:19 microserver sshd[57023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.86.49.102
Sep 16 14:16:22 microserver sshd[57023]: Failed password for invalid user bertram from 103.86.49.102 port 52820 ssh2
Sep 16 14:22:22 microserver sshd[57791]: Invalid user administrator from 103.86.49.102 port 39446
Sep 16 14:22:22 microserver sshd[57791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.86.49.102
Sep 16 14:33:44 microserver sshd[59197]: Invalid user matt from 103.86.49.102 port 40926
Sep 16 14:33:44 microserver sshd[59197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.86.49.102
Sep 16 14:33:46 microserver sshd[59197]: Failed password for invalid user matt from 103.86.49.102 port 40926 ssh2
Sep 16 14:39:41 microserver sshd[59924]: Invalid user trix from 103.86.49.102 port 55
2019-09-16 21:14:23

最近上报的IP列表

175.121.170.242 185.47.220.95 185.47.220.92 82.77.247.18
96.245.185.153 185.47.220.93 162.164.8.20 32.246.50.193
12.53.192.12 86.107.55.58 189.168.196.28 108.47.194.94
123.134.119.13 41.29.30.197 99.18.181.190 118.171.109.155
187.16.120.78 138.223.9.205 171.7.53.187 220.160.20.106