必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Shanghai Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackbotsspam
Trying to (more than 3 packets) bruteforce (not open) Samba/Microsoft-DS port 445
2019-06-30 07:36:13
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.80.216.162
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36992
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.80.216.162.			IN	A

;; AUTHORITY SECTION:
.			2708	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062901 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jun 30 07:36:06 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 162.216.80.114.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 162.216.80.114.in-addr.arpa: SERVFAIL

相关IP信息:
最新评论:
IP 类型 评论内容 时间
80.82.77.139 attack
11.07.2019 10:02:51 Connection to port 5001 blocked by firewall
2019-07-11 18:17:00
119.40.103.142 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-11 02:09:11,804 INFO [amun_request_handler] PortScan Detected on Port: 445 (119.40.103.142)
2019-07-11 17:39:54
203.218.36.136 attackbotsspam
" "
2019-07-11 17:54:56
182.93.48.19 attackspam
Jul 10 01:05:02 shared05 sshd[16481]: Invalid user redmine from 182.93.48.19
Jul 10 01:05:02 shared05 sshd[16481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.93.48.19
Jul 10 01:05:04 shared05 sshd[16481]: Failed password for invalid user redmine from 182.93.48.19 port 36636 ssh2
Jul 10 01:05:04 shared05 sshd[16481]: Received disconnect from 182.93.48.19 port 36636:11: Bye Bye [preauth]
Jul 10 01:05:04 shared05 sshd[16481]: Disconnected from 182.93.48.19 port 36636 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=182.93.48.19
2019-07-11 18:05:51
42.113.173.155 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-11 02:49:26,773 INFO [shellcode_manager] (42.113.173.155) no match, writing hexdump (06cb1cdc794ded1faa9f8ed0bf4f6df0 :10711) - SMB (Unknown)
2019-07-11 17:38:42
175.161.59.56 attackbotsspam
Caught in portsentry honeypot
2019-07-11 18:28:19
206.189.197.48 attackspam
Jul 11 12:01:29 MK-Soft-Root1 sshd\[30645\]: Invalid user jboss from 206.189.197.48 port 40344
Jul 11 12:01:29 MK-Soft-Root1 sshd\[30645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.197.48
Jul 11 12:01:31 MK-Soft-Root1 sshd\[30645\]: Failed password for invalid user jboss from 206.189.197.48 port 40344 ssh2
...
2019-07-11 18:19:55
202.137.120.37 attack
37215/tcp
[2019-07-11]1pkt
2019-07-11 18:34:32
151.80.162.216 attackspam
Jul 11 10:12:21  postfix/smtpd: warning: unknown[151.80.162.216]: SASL LOGIN authentication failed
2019-07-11 18:25:32
143.215.172.81 attackbotsspam
Port scan on 1 port(s): 53
2019-07-11 18:06:28
110.159.155.237 attackbots
Jul  8 09:31:07 mail01 postfix/postscreen[9860]: CONNECT from [110.159.155.237]:41108 to [94.130.181.95]:25
Jul  8 09:31:07 mail01 postfix/dnsblog[9863]: addr 110.159.155.237 listed by domain zen.spamhaus.org as 127.0.0.3
Jul  8 09:31:07 mail01 postfix/dnsblog[9863]: addr 110.159.155.237 listed by domain zen.spamhaus.org as 127.0.0.11
Jul  8 09:31:07 mail01 postfix/dnsblog[9863]: addr 110.159.155.237 listed by domain zen.spamhaus.org as 127.0.0.4
Jul  8 09:31:07 mail01 postfix/dnsblog[9862]: addr 110.159.155.237 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jul  8 09:31:07 mail01 postfix/dnsblog[9861]: addr 110.159.155.237 listed by domain bl.blocklist.de as 127.0.0.9
Jul  8 09:31:07 mail01 postfix/postscreen[9860]: PREGREET 40 after 0.63 from [110.159.155.237]:41108: EHLO 241.155.159.110.tm-hsbb.tm.net.my

Jul  8 09:31:07 mail01 postfix/postscreen[9860]: DNSBL rank 5 for [110.159.155.237]:41108
Jul x@x
Jul  8 09:31:09 mail01 postfix/postscreen[9860]: HANGUP after 1........
-------------------------------
2019-07-11 17:56:41
83.15.183.138 attackbots
Jul 11 06:23:01 legacy sshd[28574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.15.183.138
Jul 11 06:23:02 legacy sshd[28574]: Failed password for invalid user stack from 83.15.183.138 port 15557 ssh2
Jul 11 06:26:31 legacy sshd[28724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.15.183.138
...
2019-07-11 18:16:38
107.170.196.241 attack
31201/tcp 23481/tcp 623/udp...
[2019-05-12/07-10]51pkt,45pt.(tcp),2pt.(udp)
2019-07-11 17:48:47
77.247.110.203 attackbotsspam
CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2019-07-11 18:08:23
120.35.189.180 attackspam
Jul  9 12:52:27 rigel postfix/smtpd[18475]: warning: hostname 180.189.35.120.broad.zz.fj.dynamic.163data.com.cn does not resolve to address 120.35.189.180: Name or service not known
Jul  9 12:52:27 rigel postfix/smtpd[18475]: connect from unknown[120.35.189.180]
Jul  9 12:52:28 rigel postfix/smtpd[18154]: warning: hostname 180.189.35.120.broad.zz.fj.dynamic.163data.com.cn does not resolve to address 120.35.189.180: Name or service not known
Jul  9 12:52:28 rigel postfix/smtpd[18154]: connect from unknown[120.35.189.180]
Jul  9 12:52:28 rigel postfix/smtpd[18475]: lost connection after CONNECT from unknown[120.35.189.180]
Jul  9 12:52:28 rigel postfix/smtpd[18475]: disconnect from unknown[120.35.189.180]
Jul  9 12:52:32 rigel postfix/smtpd[18154]: warning: unknown[120.35.189.180]: SASL LOGIN authentication failed: authentication failure
Jul  9 12:52:33 rigel postfix/smtpd[18154]: lost connection after AUTH from unknown[120.35.189.180]
Jul  9 12:52:33 rigel postfix/smtpd[........
-------------------------------
2019-07-11 18:38:55

最近上报的IP列表

168.228.148.167 106.52.104.231 95.64.77.154 14.173.5.58
187.109.59.1 207.46.13.21 180.244.102.126 170.233.174.53
84.51.44.2 159.147.244.112 119.202.103.151 106.12.208.27
219.92.0.57 106.2.124.185 191.53.118.144 87.36.49.151
186.156.177.115 83.134.147.29 22.113.23.201 6.164.57.122