必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
unauthorized connection attempt
2020-02-16 17:21:38
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.138.134.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53927
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.138.134.101.		IN	A

;; AUTHORITY SECTION:
.			506	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021600 1800 900 604800 86400

;; Query time: 378 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 16 17:21:35 CST 2020
;; MSG SIZE  rcvd: 119
HOST信息:
Host 101.134.138.116.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 101.134.138.116.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
37.213.228.139 attackspam
12-6-2020 14:07:20	Unauthorized connection attempt (Brute-Force).
12-6-2020 14:07:20	Connection from IP address: 37.213.228.139 on port: 587


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=37.213.228.139
2020-06-12 22:17:26
161.35.125.159 attackspambots
Jun 11 06:36:17 ntop sshd[17183]: Invalid user nigga from 161.35.125.159 port 47166
Jun 11 06:36:17 ntop sshd[17183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.125.159 
Jun 11 06:36:18 ntop sshd[17183]: Failed password for invalid user nigga from 161.35.125.159 port 47166 ssh2
Jun 11 06:36:19 ntop sshd[17183]: Received disconnect from 161.35.125.159 port 47166:11: Bye Bye [preauth]
Jun 11 06:36:19 ntop sshd[17183]: Disconnected from invalid user nigga 161.35.125.159 port 47166 [preauth]
Jun 11 06:45:47 ntop sshd[18179]: Invalid user mjyang from 161.35.125.159 port 49076
Jun 11 06:45:47 ntop sshd[18179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.125.159 
Jun 11 06:45:49 ntop sshd[18179]: Failed password for invalid user mjyang from 161.35.125.159 port 49076 ssh2
Jun 11 06:45:51 ntop sshd[18179]: Received disconnect from 161.35.125.159 port 49076:11: Bye Bye [preauth]........
-------------------------------
2020-06-12 22:19:45
73.156.110.15 attackbots
port scan and connect, tcp 23 (telnet)
2020-06-12 22:09:31
103.200.23.81 attackspam
Jun 12 08:23:38 mail sshd\[42156\]: Invalid user test1 from 103.200.23.81
Jun 12 08:23:38 mail sshd\[42156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.200.23.81
...
2020-06-12 22:28:21
159.203.81.28 attackbotsspam
scans once in preceeding hours on the ports (in chronological order) 24302 resulting in total of 2 scans from 159.203.0.0/16 block.
2020-06-12 21:55:59
61.72.255.26 attackspambots
Jun 12 15:08:03 santamaria sshd\[24593\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.72.255.26  user=root
Jun 12 15:08:06 santamaria sshd\[24593\]: Failed password for root from 61.72.255.26 port 60296 ssh2
Jun 12 15:10:07 santamaria sshd\[24662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.72.255.26  user=root
...
2020-06-12 22:13:44
129.204.201.59 attackspambots
Unauthorized connection attempt detected from IP address 129.204.201.59 to port 1433
2020-06-12 21:59:16
78.30.204.223 attackbots
12-6-2020 14:07:18	Unauthorized connection attempt (Brute-Force).
12-6-2020 14:07:18	Connection from IP address: 78.30.204.223 on port: 465


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=78.30.204.223
2020-06-12 22:18:00
204.48.19.178 attack
Jun 12 15:08:47 * sshd[11059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.48.19.178
Jun 12 15:08:49 * sshd[11059]: Failed password for invalid user rachel from 204.48.19.178 port 46002 ssh2
2020-06-12 22:02:17
185.39.11.48 attackbots
Here more information about 185.39.11.48 
info: [Swhostnamezerland] 62355 Network Dedicated SAS 
Connected: 8 servere(s) 
Reason: ssh 
Portscan/portflood
Ports: 20,22,110,554,993,1433 
Services: ftp-data,rtsp,imaps,ms-sql-s,ssh,pop3 
servere: Europe/Moscow (UTC+3) 
Found at blocklist: blocklist.de, zen.spamhaus.org, spfbl.net, abuseIPDB.com
myIP:89.179.244.250 
 
[2020-06-12 02:13:19] (tcp) myIP:20 <- 185.39.11.48:51068
[2020-06-12 02:16:10] (tcp) myIP:20 <- 185.39.11.48:51068
[2020-06-12 02:53:44] (tcp) myIP:554 <- 185.39.11.48:51068
[2020-06-12 03:19:22] (tcp) myIP:993 <- 185.39.11.48:51068
[2020-06-12 03:24:59] (tcp) myIP:1433 <- 185.39.11.48:51068
[2020-06-12 03:50:07] (tcp) myIP:22 <- 185.39.11.48:51068
[2020-06-12 03:58:07] (tcp) myIP:22 <- 185.39.11.48:51068
[2020-06-12 09:12:02] (tcp) myIP:110 <- 185.39.11.48:51068


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=185.39.11.48
2020-06-12 22:28:08
85.171.52.251 attackspambots
Jun 12 14:02:52 vserver sshd\[421\]: Invalid user pany from 85.171.52.251Jun 12 14:02:54 vserver sshd\[421\]: Failed password for invalid user pany from 85.171.52.251 port 56468 ssh2Jun 12 14:07:42 vserver sshd\[474\]: Invalid user user from 85.171.52.251Jun 12 14:07:43 vserver sshd\[474\]: Failed password for invalid user user from 85.171.52.251 port 40276 ssh2
...
2020-06-12 21:55:22
186.251.0.28 attack
Jun 11 05:01:45 cloud sshd[14503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.251.0.28  user=r.r
Jun 11 05:01:47 cloud sshd[14503]: Failed password for r.r from 186.251.0.28 port 41660 ssh2
Jun 11 05:09:23 cloud sshd[15567]: Invalid user tatiana from 186.251.0.28 port 41056
Jun 11 05:09:23 cloud sshd[15567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.251.0.28

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=186.251.0.28
2020-06-12 22:04:54
205.252.40.193 attackspam
Jun 11 02:03:53 cumulus sshd[31621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.252.40.193  user=r.r
Jun 11 02:03:55 cumulus sshd[31621]: Failed password for r.r from 205.252.40.193 port 1089 ssh2
Jun 11 02:03:55 cumulus sshd[31621]: Received disconnect from 205.252.40.193 port 1089:11: Bye Bye [preauth]
Jun 11 02:03:55 cumulus sshd[31621]: Disconnected from 205.252.40.193 port 1089 [preauth]
Jun 11 02:13:26 cumulus sshd[32503]: Invalid user app from 205.252.40.193 port 60448
Jun 11 02:13:26 cumulus sshd[32503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.252.40.193
Jun 11 02:13:28 cumulus sshd[32503]: Failed password for invalid user app from 205.252.40.193 port 60448 ssh2
Jun 11 02:13:29 cumulus sshd[32503]: Received disconnect from 205.252.40.193 port 60448:11: Bye Bye [preauth]
Jun 11 02:13:29 cumulus sshd[32503]: Disconnected from 205.252.40.193 port 60448 [preauth]


........
--------------------------------
2020-06-12 22:22:21
37.49.224.106 attack
2020-06-12T14:07:17.142907 X postfix/smtpd[56020]: NOQUEUE: reject: RCPT from unknown[37.49.224.106]: 554 5.7.1 Service unavailable; Client host [37.49.224.106] blocked using zen.spamhaus.org; from= to= proto=ESMTP helo=
2020-06-12 22:19:14
120.92.212.238 attackspam
Jun 12 15:50:29 server sshd[18384]: Failed password for root from 120.92.212.238 port 46792 ssh2
Jun 12 15:54:01 server sshd[18567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.212.238
Jun 12 15:54:03 server sshd[18567]: Failed password for invalid user ali from 120.92.212.238 port 25552 ssh2
...
2020-06-12 22:04:37

最近上报的IP列表

120.89.78.221 176.119.124.148 142.4.107.72 119.93.51.104
112.197.235.159 104.208.90.248 60.4.217.164 6.235.173.8
176.119.117.157 119.42.109.147 115.135.57.5 73.80.85.228
42.82.239.15 41.190.45.144 213.112.73.148 196.202.80.150
188.136.210.216 181.208.35.186 180.246.151.99 78.186.211.100