必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 115.221.214.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59097
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;115.221.214.94.			IN	A

;; AUTHORITY SECTION:
.			387	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031400 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 14 23:07:00 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 94.214.221.115.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 94.214.221.115.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
192.228.100.253 attackbotsspam
[portscan] tcp/22 [SSH]
in blocklist.de:'listed [ssh]'
in spfbl.net:'listed'
*(RWIN=65535)(10301052)
2019-10-30 18:32:36
1.186.45.250 attackbotsspam
2019-10-28 07:53:10,216 fail2ban.actions        \[1516\]: NOTICE  \[sshd\] Ban 1.186.45.250
2019-10-28 08:25:47,185 fail2ban.actions        \[1516\]: NOTICE  \[sshd\] Ban 1.186.45.250
2019-10-28 08:58:40,463 fail2ban.actions        \[1516\]: NOTICE  \[sshd\] Ban 1.186.45.250
2019-10-28 09:31:47,021 fail2ban.actions        \[1516\]: NOTICE  \[sshd\] Ban 1.186.45.250
2019-10-28 10:05:16,388 fail2ban.actions        \[1516\]: NOTICE  \[sshd\] Ban 1.186.45.250
...
2019-10-30 18:21:46
178.69.233.129 attackspambots
Chat Spam
2019-10-30 18:29:47
114.5.221.142 attackbots
[Wed Oct 30 10:48:27.264476 2019] [:error] [pid 7559:tid 140145034290944] [client 114.5.221.142:6521] [client 114.5.221.142] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "118"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 503 found within RESPONSE_STATUS: 503"] [severity "ERROR"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/peta-instrumentasi"] [unique_id "XbkIC48ZrE8Gf@6lZT6dTQAAAAE"], referer: https://karangploso.jatim.bmkg.go.id/
...
2019-10-30 18:28:28
180.250.115.98 attack
Oct 30 10:07:08 serwer sshd\[4659\]: User apache from 180.250.115.98 not allowed because not listed in AllowUsers
Oct 30 10:07:08 serwer sshd\[4659\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.115.98  user=apache
Oct 30 10:07:10 serwer sshd\[4659\]: Failed password for invalid user apache from 180.250.115.98 port 51466 ssh2
...
2019-10-30 18:58:22
189.46.214.5 attackspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/189.46.214.5/ 
 
 BR - 1H : (415)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : BR 
 NAME ASN : ASN27699 
 
 IP : 189.46.214.5 
 
 CIDR : 189.46.0.0/16 
 
 PREFIX COUNT : 267 
 
 UNIQUE IP COUNT : 6569728 
 
 
 ATTACKS DETECTED ASN27699 :  
  1H - 7 
  3H - 27 
  6H - 45 
 12H - 106 
 24H - 202 
 
 DateTime : 2019-10-30 04:47:50 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery
2019-10-30 18:48:32
190.175.174.134 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/190.175.174.134/ 
 
 AR - 1H : (36)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : AR 
 NAME ASN : ASN22927 
 
 IP : 190.175.174.134 
 
 CIDR : 190.174.0.0/15 
 
 PREFIX COUNT : 244 
 
 UNIQUE IP COUNT : 4001024 
 
 
 ATTACKS DETECTED ASN22927 :  
  1H - 1 
  3H - 2 
  6H - 5 
 12H - 9 
 24H - 17 
 
 DateTime : 2019-10-30 04:47:42 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-30 18:53:48
3.85.43.139 attackspam
Oct 30 11:29:11 srv01 sshd[11530]: Invalid user roo from 3.85.43.139
Oct 30 11:29:11 srv01 sshd[11530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-3-85-43-139.compute-1.amazonaws.com
Oct 30 11:29:11 srv01 sshd[11530]: Invalid user roo from 3.85.43.139
Oct 30 11:29:13 srv01 sshd[11530]: Failed password for invalid user roo from 3.85.43.139 port 46930 ssh2
Oct 30 11:33:01 srv01 sshd[11670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-3-85-43-139.compute-1.amazonaws.com  user=root
Oct 30 11:33:03 srv01 sshd[11670]: Failed password for root from 3.85.43.139 port 60374 ssh2
...
2019-10-30 18:33:52
91.121.67.107 attack
Oct 30 11:16:02 legacy sshd[570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.67.107
Oct 30 11:16:04 legacy sshd[570]: Failed password for invalid user shriram from 91.121.67.107 port 36390 ssh2
Oct 30 11:19:42 legacy sshd[667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.67.107
...
2019-10-30 18:30:29
83.7.17.140 attack
SSH bruteforce (Triggered fail2ban)
2019-10-30 18:31:09
103.14.99.241 attackspam
Lines containing failures of 103.14.99.241
Oct 29 10:51:14 smtp-out sshd[31824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.14.99.241  user=r.r
Oct 29 10:51:16 smtp-out sshd[31824]: Failed password for r.r from 103.14.99.241 port 50016 ssh2
Oct 29 10:51:18 smtp-out sshd[31824]: Received disconnect from 103.14.99.241 port 50016:11: Bye Bye [preauth]
Oct 29 10:51:18 smtp-out sshd[31824]: Disconnected from authenticating user r.r 103.14.99.241 port 50016 [preauth]
Oct 29 11:01:24 smtp-out sshd[32176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.14.99.241  user=r.r
Oct 29 11:01:26 smtp-out sshd[32176]: Failed password for r.r from 103.14.99.241 port 56840 ssh2
Oct 29 11:01:26 smtp-out sshd[32176]: Received disconnect from 103.14.99.241 port 56840:11: Bye Bye [preauth]
Oct 29 11:01:26 smtp-out sshd[32176]: Disconnected from authenticating user r.r 103.14.99.241 port 56840 [preauth........
------------------------------
2019-10-30 18:25:12
129.211.10.228 attack
Oct 30 06:37:49 firewall sshd[15833]: Invalid user fengyi from 129.211.10.228
Oct 30 06:37:51 firewall sshd[15833]: Failed password for invalid user fengyi from 129.211.10.228 port 2794 ssh2
Oct 30 06:41:35 firewall sshd[15889]: Invalid user root123 from 129.211.10.228
...
2019-10-30 18:41:00
193.31.24.113 attackbotsspam
10/30/2019-11:15:08.297145 193.31.24.113 Protocol: 6 SURICATA SMTP tls rejected
2019-10-30 18:20:36
51.254.131.137 attack
Oct 30 07:01:15 server sshd\[11709\]: Invalid user gt56yhju7 from 51.254.131.137 port 40474
Oct 30 07:01:15 server sshd\[11709\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.131.137
Oct 30 07:01:17 server sshd\[11709\]: Failed password for invalid user gt56yhju7 from 51.254.131.137 port 40474 ssh2
Oct 30 07:05:15 server sshd\[17153\]: Invalid user yxp0902651 from 51.254.131.137 port 51224
Oct 30 07:05:15 server sshd\[17153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.131.137
2019-10-30 18:40:32
113.31.102.157 attack
Oct 30 07:35:59 vps01 sshd[20488]: Failed password for root from 113.31.102.157 port 44688 ssh2
2019-10-30 18:41:44

最近上报的IP列表

115.221.214.93 115.221.215.136 115.221.215.253 115.221.233.17
115.221.240.102 115.221.240.125 115.221.241.201 115.221.242.143
115.221.242.192 115.221.243.189 115.221.244.48 115.221.245.210
115.221.245.245 115.221.246.147 115.221.246.251 115.221.247.209
115.221.247.84 115.223.128.128 115.223.134.9 115.223.139.221