必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Viettel Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspambots
Nov 22 23:42:20 mail postfix/smtpd[18999]: warning: unknown[117.1.116.57]: SASL PLAIN authentication failed: 
Nov 22 23:46:21 mail postfix/smtpd[18910]: warning: unknown[117.1.116.57]: SASL PLAIN authentication failed: 
Nov 22 23:49:25 mail postfix/smtpd[22263]: warning: unknown[117.1.116.57]: SASL PLAIN authentication failed:
2019-11-23 08:47:37
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.1.116.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17612
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.1.116.57.			IN	A

;; AUTHORITY SECTION:
.			585	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112201 1800 900 604800 86400

;; Query time: 574 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 23 08:47:34 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
57.116.1.117.in-addr.arpa domain name pointer localhost.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
57.116.1.117.in-addr.arpa	name = localhost.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
212.3.148.52 attackbots
[portscan] Port scan
2019-07-07 01:35:12
217.199.175.231 attackbots
Unauthorised access (Jul  6) SRC=217.199.175.231 LEN=40 TTL=245 ID=3689 TCP DPT=445 WINDOW=1024 SYN 
Unauthorised access (Jul  3) SRC=217.199.175.231 LEN=40 TTL=245 ID=48440 TCP DPT=445 WINDOW=1024 SYN 
Unauthorised access (Jul  1) SRC=217.199.175.231 LEN=40 TTL=245 ID=41933 TCP DPT=445 WINDOW=1024 SYN
2019-07-07 01:50:28
149.56.129.68 attack
Jul  6 15:27:55 rpi sshd[29366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.129.68 
Jul  6 15:27:56 rpi sshd[29366]: Failed password for invalid user famille from 149.56.129.68 port 41190 ssh2
2019-07-07 02:04:57
134.73.161.223 attack
Jul  4 17:22:57 sanyalnet-cloud-vps2 sshd[18799]: Connection from 134.73.161.223 port 39734 on 45.62.253.138 port 22
Jul  4 17:22:59 sanyalnet-cloud-vps2 sshd[18799]: Invalid user sai from 134.73.161.223 port 39734
Jul  4 17:22:59 sanyalnet-cloud-vps2 sshd[18799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.161.223
Jul  4 17:23:01 sanyalnet-cloud-vps2 sshd[18799]: Failed password for invalid user sai from 134.73.161.223 port 39734 ssh2
Jul  4 17:23:01 sanyalnet-cloud-vps2 sshd[18799]: Received disconnect from 134.73.161.223 port 39734:11: Bye Bye [preauth]
Jul  4 17:23:01 sanyalnet-cloud-vps2 sshd[18799]: Disconnected from 134.73.161.223 port 39734 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=134.73.161.223
2019-07-07 01:37:20
179.189.195.125 attack
SMTP-sasl brute force
...
2019-07-07 01:40:25
223.223.188.208 attackbotsspam
Jul  6 15:23:09 localhost sshd\[27561\]: Invalid user testuser from 223.223.188.208 port 32783
Jul  6 15:23:09 localhost sshd\[27561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.223.188.208
Jul  6 15:23:11 localhost sshd\[27561\]: Failed password for invalid user testuser from 223.223.188.208 port 32783 ssh2
Jul  6 15:29:28 localhost sshd\[27742\]: Invalid user flume from 223.223.188.208 port 53292
Jul  6 15:29:28 localhost sshd\[27742\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.223.188.208
...
2019-07-07 01:25:33
208.109.192.22 attack
can use network monitors on home networks/identify hackers easily/part of fonts blue direct Mac hacker duplication of the software/usually involved a hyphen - Host: and Ip: are in blue font/rest is black/hacking dev don't risk being caught by dev who developed software /GN55 LPE fake plates again/entertaining local alb female =fetch and stay slavery -cctv and RU circuit board tampering/Not RU -reverse method of hacking links/com.apple etc.micorsoft.com -com.microsoft - R reversed and joined to U capitals of course/includes any electronic devices/mobiles/this site is duplicated/text boxes set up -https://www.abuseipdb.com/report?ip=208.109.192.70
no need for ?======%%%&&&&&&$$$$$$$$########/GSTATIC. is 123
2019-07-07 01:52:40
94.176.76.65 attack
(Jul  6)  LEN=40 TTL=244 ID=36913 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  6)  LEN=40 TTL=244 ID=35288 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  6)  LEN=40 TTL=244 ID=32857 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  6)  LEN=40 TTL=244 ID=5552 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  6)  LEN=40 TTL=244 ID=38462 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  6)  LEN=40 TTL=244 ID=28410 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  6)  LEN=40 TTL=244 ID=26666 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  5)  LEN=40 TTL=244 ID=42603 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  5)  LEN=40 TTL=244 ID=32039 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  5)  LEN=40 TTL=244 ID=9115 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  5)  LEN=40 TTL=244 ID=40843 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  5)  LEN=40 TTL=244 ID=48509 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  5)  LEN=40 TTL=244 ID=32159 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  5)  LEN=40 TTL=244 ID=50359 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  5)  LEN=40 TTL=244 ID=41976 DF TCP DPT=23 WINDOW=14600 SY...
2019-07-07 01:59:35
134.73.161.222 attackbotsspam
Lines containing failures of 134.73.161.222
Jul  4 15:30:18 benjouille sshd[17714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.161.222  user=r.r
Jul  4 15:30:19 benjouille sshd[17714]: Failed password for r.r from 134.73.161.222 port 49792 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=134.73.161.222
2019-07-07 01:41:00
134.73.161.52 attackspam
Jul  4 18:30:39 sanyalnet-cloud-vps2 sshd[20812]: Connection from 134.73.161.52 port 59052 on 45.62.253.138 port 22
Jul  4 18:30:40 sanyalnet-cloud-vps2 sshd[20812]: Invalid user da from 134.73.161.52 port 59052
Jul  4 18:30:40 sanyalnet-cloud-vps2 sshd[20812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.161.52
Jul  4 18:30:42 sanyalnet-cloud-vps2 sshd[20812]: Failed password for invalid user da from 134.73.161.52 port 59052 ssh2
Jul  4 18:30:42 sanyalnet-cloud-vps2 sshd[20812]: Received disconnect from 134.73.161.52 port 59052:11: Bye Bye [preauth]
Jul  4 18:30:42 sanyalnet-cloud-vps2 sshd[20812]: Disconnected from 134.73.161.52 port 59052 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=134.73.161.52
2019-07-07 01:38:40
202.161.76.124 attackbotsspam
kp-sea2-01 recorded 2 login violations from 202.161.76.124 and was blocked at 2019-07-06 13:29:19. 202.161.76.124 has been blocked on 0 previous occasions. 202.161.76.124's first attempt was recorded at 2019-07-06 13:29:19
2019-07-07 01:33:43
183.131.82.99 attackspam
Jul  6 19:21:36 amit sshd\[28630\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.131.82.99  user=root
Jul  6 19:21:39 amit sshd\[28630\]: Failed password for root from 183.131.82.99 port 54880 ssh2
Jul  6 19:21:54 amit sshd\[28632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.131.82.99  user=root
...
2019-07-07 02:11:09
201.150.89.181 attackbots
SMTP-sasl brute force
...
2019-07-07 02:09:08
125.191.33.98 attackspam
Autoban   125.191.33.98 AUTH/CONNECT
2019-07-07 01:24:59
202.84.33.214 attackbots
Jul  6 20:21:20 vtv3 sshd\[6628\]: Invalid user nen from 202.84.33.214 port 45692
Jul  6 20:21:20 vtv3 sshd\[6628\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.84.33.214
Jul  6 20:21:22 vtv3 sshd\[6628\]: Failed password for invalid user nen from 202.84.33.214 port 45692 ssh2
Jul  6 20:30:30 vtv3 sshd\[11041\]: Invalid user compta from 202.84.33.214 port 37895
Jul  6 20:30:30 vtv3 sshd\[11041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.84.33.214
2019-07-07 01:48:58

最近上报的IP列表

106.56.245.111 31.168.211.1 113.110.47.33 36.65.110.196
114.223.163.51 113.81.29.231 183.209.114.177 121.23.223.65
116.66.239.146 189.212.118.5 111.73.243.184 192.185.145.100
123.148.202.2 182.247.61.99 37.26.64.32 208.102.75.158
182.240.52.159 141.223.163.2 182.105.1.53 200.107.236.165