必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Zhengzhou

省份(region): Henan

国家(country): China

运营商(isp): China Mobile Communications Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Unauthorized connection attempt detected from IP address 117.159.5.113 to port 1433 [T]
2020-06-24 00:18:14
attackbotsspam
Port scan: Attack repeated for 24 hours
2020-05-04 19:08:31
attack
[portscan] tcp/1433 [MsSQL]
*(RWIN=1024)(04301449)
2020-05-01 00:13:36
attack
Unauthorized access or intrusion attempt detected from Thor banned IP
2020-04-25 17:04:11
attack
Unauthorized connection attempt detected from IP address 117.159.5.113 to port 1433 [T]
2020-03-25 18:28:17
attackbotsspam
Unauthorized connection attempt detected from IP address 117.159.5.113 to port 1433 [J]
2020-03-01 17:40:02
attack
ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic
2020-02-23 08:45:32
attack
Unauthorized connection attempt detected from IP address 117.159.5.113 to port 1433 [J]
2020-01-28 22:29:02
attack
Unauthorized connection attempt detected from IP address 117.159.5.113 to port 1433 [J]
2020-01-21 03:27:35
attackspambots
Unauthorized connection attempt detected from IP address 117.159.5.113 to port 1433 [T]
2020-01-20 06:54:33
attack
Unauthorized connection attempt detected from IP address 117.159.5.113 to port 1433 [J]
2020-01-06 17:04:16
attackspam
1433/tcp 1433/tcp 1433/tcp...
[2019-10-09/11-20]12pkt,1pt.(tcp)
2019-11-21 04:19:53
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.159.5.113
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49587
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.159.5.113.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112003 1800 900 604800 86400

;; Query time: 725 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 21 04:19:49 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 113.5.159.117.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 100.100.2.136, trying next server
;; Got SERVFAIL reply from 100.100.2.138, trying next server
Server:		100.100.2.138
Address:	100.100.2.138#53

** server can't find 113.5.159.117.in-addr.arpa: SERVFAIL

相关IP信息:
最新评论:
IP 类型 评论内容 时间
80.28.235.107 attackbotsspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-04-13 16:59:24
194.26.69.106 attackspam
Apr 13 10:45:59 debian-2gb-nbg1-2 kernel: \[9026554.590436\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.69.106 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x00 TTL=241 ID=30389 PROTO=TCP SPT=41330 DPT=7625 WINDOW=1024 RES=0x00 SYN URGP=0
2020-04-13 16:49:48
175.110.102.18 attack
Unauthorized connection attempt from IP address 175.110.102.18 on Port 445(SMB)
2020-04-13 16:59:01
202.124.193.215 attack
2020-04-13T08:44:03.034389shield sshd\[20608\]: Invalid user mysql from 202.124.193.215 port 35894
2020-04-13T08:44:03.037264shield sshd\[20608\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.124.193.215
2020-04-13T08:44:05.421292shield sshd\[20608\]: Failed password for invalid user mysql from 202.124.193.215 port 35894 ssh2
2020-04-13T08:45:58.833315shield sshd\[21113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.124.193.215  user=root
2020-04-13T08:46:01.673883shield sshd\[21113\]: Failed password for root from 202.124.193.215 port 60670 ssh2
2020-04-13 16:48:37
129.211.55.6 attack
Unauthorized access or intrusion attempt detected from Thor banned IP
2020-04-13 16:26:47
103.228.112.200 attackbotsspam
SQL Injection Attempts
2020-04-13 16:24:35
118.126.90.89 attackspambots
Apr 13 06:11:43 IngegnereFirenze sshd[22913]: User root from 118.126.90.89 not allowed because not listed in AllowUsers
...
2020-04-13 16:43:24
190.42.26.153 attackbotsspam
Unauthorized connection attempt detected from IP address 190.42.26.153 to port 5358
2020-04-13 16:23:23
194.26.69.106 attackbots
Apr 13 10:11:03 debian-2gb-nbg1-2 kernel: \[9024458.490833\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.69.106 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x00 TTL=241 ID=30549 PROTO=TCP SPT=41330 DPT=7599 WINDOW=1024 RES=0x00 SYN URGP=0
2020-04-13 16:39:59
2.134.177.190 attack
1586750019 - 04/13/2020 05:53:39 Host: 2.134.177.190/2.134.177.190 Port: 445 TCP Blocked
2020-04-13 16:39:29
157.245.95.16 attackbots
Apr 13 10:14:14 pve sshd[4726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.95.16 
Apr 13 10:14:16 pve sshd[4726]: Failed password for invalid user admin from 157.245.95.16 port 40020 ssh2
Apr 13 10:18:05 pve sshd[7700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.95.16
2020-04-13 16:26:11
222.186.52.139 attack
Apr 13 10:18:39 dcd-gentoo sshd[18055]: User root from 222.186.52.139 not allowed because none of user's groups are listed in AllowGroups
Apr 13 10:18:41 dcd-gentoo sshd[18055]: error: PAM: Authentication failure for illegal user root from 222.186.52.139
Apr 13 10:18:39 dcd-gentoo sshd[18055]: User root from 222.186.52.139 not allowed because none of user's groups are listed in AllowGroups
Apr 13 10:18:41 dcd-gentoo sshd[18055]: error: PAM: Authentication failure for illegal user root from 222.186.52.139
Apr 13 10:18:39 dcd-gentoo sshd[18055]: User root from 222.186.52.139 not allowed because none of user's groups are listed in AllowGroups
Apr 13 10:18:41 dcd-gentoo sshd[18055]: error: PAM: Authentication failure for illegal user root from 222.186.52.139
Apr 13 10:18:41 dcd-gentoo sshd[18055]: Failed keyboard-interactive/pam for invalid user root from 222.186.52.139 port 55814 ssh2
...
2020-04-13 16:19:52
175.147.172.17 attack
DATE:2020-04-13 05:53:52, IP:175.147.172.17, PORT:1433 MSSQL brute force auth on honeypot server (epe-honey1-hq)
2020-04-13 16:29:45
14.182.129.143 attackbotsspam
Unauthorized connection attempt from IP address 14.182.129.143 on Port 445(SMB)
2020-04-13 16:51:18
150.95.31.150 attack
$f2bV_matches
2020-04-13 16:57:51

最近上报的IP列表

44.250.205.37 92.45.192.235 122.68.156.167 173.26.53.179
73.111.184.191 218.102.219.207 89.227.243.140 106.39.232.160
198.140.181.17 85.159.212.250 191.85.176.45 114.226.15.243
47.98.9.167 83.30.148.204 103.113.158.176 92.248.217.138
185.72.227.94 175.89.59.86 124.204.66.26 97.216.207.83