必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Anqing

省份(region): Anhui

国家(country): China

运营商(isp): ChinaNet Anhui Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Unauthorized connection attempt detected from IP address 114.99.0.140 to port 6656 [T]
2020-01-27 04:32:38
相同子网IP讨论:
IP 类型 评论内容 时间
114.99.0.204 attackbots
MAIL: User Login Brute Force Attempt
2020-03-12 06:36:16
114.99.0.62 attackbots
Lines containing failures of 114.99.0.62


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=114.99.0.62
2020-02-26 10:31:16
114.99.0.3 attack
Unauthorized connection attempt detected from IP address 114.99.0.3 to port 6656 [T]
2020-01-30 14:48:32
114.99.0.120 attackbots
Brute force attempt
2020-01-11 05:46:41
114.99.0.30 attack
Brute force attempt
2020-01-10 07:21:34
114.99.0.221 attackspambots
Nov  9 01:05:41 eola postfix/smtpd[31453]: connect from unknown[114.99.0.221]
Nov  9 01:05:41 eola postfix/smtpd[31453]: NOQUEUE: reject: RCPT from unknown[114.99.0.221]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=<36hp89k>
Nov  9 01:05:41 eola postfix/smtpd[31453]: disconnect from unknown[114.99.0.221] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4
Nov  9 01:05:42 eola postfix/smtpd[31453]: connect from unknown[114.99.0.221]
Nov  9 01:05:43 eola postfix/smtpd[31453]: lost connection after AUTH from unknown[114.99.0.221]
Nov  9 01:05:43 eola postfix/smtpd[31453]: disconnect from unknown[114.99.0.221] ehlo=1 auth=0/1 commands=1/2
Nov  9 01:05:43 eola postfix/smtpd[31453]: connect from unknown[114.99.0.221]
Nov  9 01:05:44 eola postfix/smtpd[31453]: lost connection after AUTH from unknown[114.99.0.221]
Nov  9 01:05:44 eola postfix/smtpd[31453]: disconnect from unknown[114.99.0.221] ehlo=1 auth=0/1 commands=1/2
Nov  9 01:05:44 eola........
-------------------------------
2019-11-09 17:59:40
114.99.0.39 attackbotsspam
Oct  1 04:33:59 mxgate1 postfix/postscreen[15902]: CONNECT from [114.99.0.39]:51190 to [176.31.12.44]:25
Oct  1 04:33:59 mxgate1 postfix/dnsblog[15906]: addr 114.99.0.39 listed by domain zen.spamhaus.org as 127.0.0.11
Oct  1 04:33:59 mxgate1 postfix/dnsblog[15906]: addr 114.99.0.39 listed by domain zen.spamhaus.org as 127.0.0.4
Oct  1 04:33:59 mxgate1 postfix/dnsblog[15904]: addr 114.99.0.39 listed by domain b.barracudacentral.org as 127.0.0.2
Oct  1 04:34:00 mxgate1 postfix/dnsblog[15907]: addr 114.99.0.39 listed by domain cbl.abuseat.org as 127.0.0.2
Oct  1 04:34:05 mxgate1 postfix/postscreen[15902]: DNSBL rank 4 for [114.99.0.39]:51190
Oct x@x
Oct  1 04:34:06 mxgate1 postfix/postscreen[15902]: DISCONNECT [114.99.0.39]:51190


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=114.99.0.39
2019-10-04 14:58:59
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.99.0.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47656
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.99.0.140.			IN	A

;; AUTHORITY SECTION:
.			449	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012601 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 04:32:35 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
Host 140.0.99.114.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 140.0.99.114.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
139.59.4.200 attack
WordPress login Brute force / Web App Attack on client site.
2020-02-24 17:07:21
159.89.181.213 attack
>30 unauthorized SSH connections
2020-02-24 16:49:50
37.49.230.30 attackbotsspam
[2020-02-24 03:21:23] NOTICE[1148] chan_sip.c: Registration from '' failed for '37.49.230.30:57320' - Wrong password
[2020-02-24 03:21:23] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-24T03:21:23.109-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="59133",SessionID="0x7fd82cb725a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.30/57320",Challenge="32faf1aa",ReceivedChallenge="32faf1aa",ReceivedHash="1d95edde43bb124d3b68d57837f70db0"
[2020-02-24 03:24:14] NOTICE[1148] chan_sip.c: Registration from '' failed for '37.49.230.30:63449' - Wrong password
[2020-02-24 03:24:14] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-24T03:24:14.173-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="4224444",SessionID="0x7fd82c4c0778",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.30/63449",Challe
...
2020-02-24 16:30:46
185.199.10.71 attackspambots
suspicious action Mon, 24 Feb 2020 01:52:12 -0300
2020-02-24 16:31:59
92.118.37.86 attack
Feb 24 08:40:12 h2177944 kernel: \[5727815.195098\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.86 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=39437 PROTO=TCP SPT=49501 DPT=1000 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb 24 08:40:12 h2177944 kernel: \[5727815.195110\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.86 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=39437 PROTO=TCP SPT=49501 DPT=1000 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb 24 08:42:12 h2177944 kernel: \[5727935.091601\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.86 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=21971 PROTO=TCP SPT=49501 DPT=20001 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb 24 08:42:12 h2177944 kernel: \[5727935.091616\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.86 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=21971 PROTO=TCP SPT=49501 DPT=20001 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb 24 09:19:08 h2177944 kernel: \[5730151.411592\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.86 DST=85.214.117.9 LE
2020-02-24 16:39:41
125.67.237.247 attackspam
Unauthorised access (Feb 24) SRC=125.67.237.247 LEN=40 TTL=242 ID=53279 TCP DPT=1433 WINDOW=1024 SYN
2020-02-24 16:51:32
203.0.104.179 attack
suspicious action Mon, 24 Feb 2020 01:50:44 -0300
2020-02-24 17:03:38
62.173.149.167 attackspam
Unauthorised access (Feb 24) SRC=62.173.149.167 LEN=40 TTL=249 ID=46969 TCP DPT=23 WINDOW=1024 SYN 
Unauthorised access (Feb 24) SRC=62.173.149.167 LEN=40 TTL=249 ID=8601 TCP DPT=21 WINDOW=1024 SYN
2020-02-24 16:59:25
120.29.66.237 attackbots
20/2/23@23:51:59: FAIL: Alarm-Network address from=120.29.66.237
20/2/23@23:52:00: FAIL: Alarm-Network address from=120.29.66.237
...
2020-02-24 16:36:52
98.143.144.6 attack
(imapd) Failed IMAP login from 98.143.144.6 (US/United States/98.143.144.6.static.quadranet.com): 1 in the last 3600 secs
2020-02-24 16:46:24
182.53.168.67 attackbots
1582519931 - 02/24/2020 05:52:11 Host: 182.53.168.67/182.53.168.67 Port: 445 TCP Blocked
2020-02-24 16:32:25
185.184.79.2 attackbotsspam
unauthorized connection attempt
2020-02-24 16:44:03
185.220.101.30 attackbotsspam
02/24/2020-08:35:06.829990 185.220.101.30 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 31
2020-02-24 16:56:18
80.88.11.208 attack
Received: from phprdptltask (smtp5.property24.com [80.88.11.208])
property24.com.ph
microsoft.com
2020-02-24 16:58:25
104.131.116.155 attackspambots
WordPress wp-login brute force :: 104.131.116.155 0.084 - [24/Feb/2020:04:51:07  0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 1806 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1"
2020-02-24 16:53:07

最近上报的IP列表

111.197.210.113 68.199.105.193 110.87.221.109 2.98.16.27
106.122.169.247 122.157.68.24 209.152.36.152 153.121.144.234
74.168.166.70 84.13.204.83 197.53.170.151 134.219.61.48
128.122.167.219 5.180.61.53 61.138.222.57 122.36.143.159
195.162.116.49 60.189.155.224 177.126.96.72 60.185.36.183