必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Vietnam

运营商(isp): Viettel Corporation

主机名(hostname): unknown

机构(organization): Viettel Group

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackbots
1577249791 - 12/25/2019 05:56:31 Host: 117.4.104.214/117.4.104.214 Port: 445 TCP Blocked
2019-12-25 14:09:35
相同子网IP讨论:
IP 类型 评论内容 时间
117.4.104.38 attack
20/3/27@03:17:23: FAIL: Alarm-Network address from=117.4.104.38
20/3/27@03:17:23: FAIL: Alarm-Network address from=117.4.104.38
...
2020-03-27 16:28:18
117.4.104.120 attack
Mar 25 04:52:48 serwer sshd\[15150\]: Invalid user www from 117.4.104.120 port 48368
Mar 25 04:52:48 serwer sshd\[15150\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.4.104.120
Mar 25 04:52:49 serwer sshd\[15150\]: Failed password for invalid user www from 117.4.104.120 port 48368 ssh2
...
2020-03-25 15:25:31
117.4.104.38 attackspam
Unauthorized connection attempt from IP address 117.4.104.38 on Port 445(SMB)
2020-03-09 18:00:00
117.4.104.159 attackspambots
Host Scan
2020-01-02 18:00:27
117.4.104.38 attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-18 08:18:42,020 INFO [amun_request_handler] PortScan Detected on Port: 445 (117.4.104.38)
2019-07-18 23:42:44
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.4.104.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60337
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.4.104.214.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019060100 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 01 21:47:45 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:
Host 214.104.4.117.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
*** Can't find 214.104.4.117.in-addr.arpa.: No answer

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
102.39.47.163 attackbotsspam
Lines containing failures of 102.39.47.163
Sep  2 10:10:05 omfg postfix/smtpd[17604]: connect from unknown[102.39.47.163]
Sep x@x
Sep  2 10:10:06 omfg postfix/smtpd[17604]: lost connection after DATA from unknown[102.39.47.163]
Sep  2 10:10:06 omfg postfix/smtpd[17604]: disconnect from unknown[102.39.47.163] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=102.39.47.163
2020-09-04 22:23:25
54.37.68.66 attackspambots
(sshd) Failed SSH login from 54.37.68.66 (FR/France/66.ip-54-37-68.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  4 08:09:24 server sshd[13971]: Invalid user monte from 54.37.68.66 port 57634
Sep  4 08:09:27 server sshd[13971]: Failed password for invalid user monte from 54.37.68.66 port 57634 ssh2
Sep  4 08:21:16 server sshd[17514]: Failed password for ftp from 54.37.68.66 port 60958 ssh2
Sep  4 08:26:01 server sshd[18893]: Failed password for root from 54.37.68.66 port 38122 ssh2
Sep  4 08:30:32 server sshd[20697]: Failed password for root from 54.37.68.66 port 43504 ssh2
2020-09-04 22:54:33
123.171.42.28 attackbotsspam
Lines containing failures of 123.171.42.28
Sep  2 04:12:33 newdogma sshd[22349]: Connection closed by 123.171.42.28 port 55930 [preauth]
Sep  2 04:14:17 newdogma sshd[22639]: Invalid user mysql from 123.171.42.28 port 47770
Sep  2 04:14:17 newdogma sshd[22639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.171.42.28 
Sep  2 04:14:19 newdogma sshd[22639]: Failed password for invalid user mysql from 123.171.42.28 port 47770 ssh2
Sep  2 04:14:21 newdogma sshd[22639]: Received disconnect from 123.171.42.28 port 47770:11: Bye Bye [preauth]
Sep  2 04:14:21 newdogma sshd[22639]: Disconnected from invalid user mysql 123.171.42.28 port 47770 [preauth]
Sep  2 04:16:08 newdogma sshd[23038]: Invalid user stack from 123.171.42.28 port 39616
Sep  2 04:16:08 newdogma sshd[23038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.171.42.28 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip
2020-09-04 23:01:41
46.229.168.161 attackbots
The IP has triggered Cloudflare WAF. CF-Ray: 5cccc2fddb99740d | WAF_Rule_ID: 4c344d8609cf47c88674e7c5f743a22c | WAF_Kind: firewall | CF_Action: drop | Country: US | CF_IPClass: unknown | Protocol: HTTP/1.1 | Method: GET | Host: www.wevg.org | User-Agent: Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html) | CF_DC: IAD. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2020-09-04 23:03:35
190.181.86.212 attackbots
Sep  3 11:48:39 mailman postfix/smtpd[14029]: warning: unknown[190.181.86.212]: SASL PLAIN authentication failed: authentication failure
2020-09-04 22:45:26
168.194.13.4 attack
Invalid user cherry from 168.194.13.4 port 54596
2020-09-04 22:56:56
222.186.169.194 attackbotsspam
Sep  4 16:37:03 minden010 sshd[13721]: Failed password for root from 222.186.169.194 port 44140 ssh2
Sep  4 16:37:06 minden010 sshd[13721]: Failed password for root from 222.186.169.194 port 44140 ssh2
Sep  4 16:37:09 minden010 sshd[13721]: Failed password for root from 222.186.169.194 port 44140 ssh2
Sep  4 16:37:13 minden010 sshd[13721]: Failed password for root from 222.186.169.194 port 44140 ssh2
...
2020-09-04 22:39:46
106.13.177.53 attackbotsspam
Invalid user postgres from 106.13.177.53 port 58920
2020-09-04 22:44:03
194.180.224.130 attackbotsspam
Sep  4 14:56:03 jumpserver sshd[227205]: Failed password for invalid user admin from 194.180.224.130 port 39898 ssh2
Sep  4 14:56:01 jumpserver sshd[227203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.180.224.130  user=root
Sep  4 14:56:04 jumpserver sshd[227203]: Failed password for root from 194.180.224.130 port 39888 ssh2
...
2020-09-04 22:56:30
104.244.75.153 attackspambots
Sep  4 16:50:01 neko-world sshd[15541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.75.153  user=root
Sep  4 16:50:03 neko-world sshd[15541]: Failed password for invalid user root from 104.244.75.153 port 41288 ssh2
2020-09-04 22:51:25
45.79.122.36 attackspam
Lines containing failures of 45.79.122.36
Sep  2 01:16:36 metroid sshd[31387]: Invalid user px from 45.79.122.36 port 33474
Sep  2 01:16:36 metroid sshd[31387]: Received disconnect from 45.79.122.36 port 33474:11: Bye Bye [preauth]
Sep  2 01:16:36 metroid sshd[31387]: Disconnected from invalid user px 45.79.122.36 port 33474 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.79.122.36
2020-09-04 23:05:15
185.220.101.200 attackbots
SSH brute-force attempt
2020-09-04 22:35:00
222.186.180.147 attackbots
Sep  4 16:41:18 server sshd[21616]: Failed none for root from 222.186.180.147 port 42060 ssh2
Sep  4 16:41:20 server sshd[21616]: Failed password for root from 222.186.180.147 port 42060 ssh2
Sep  4 16:41:25 server sshd[21616]: Failed password for root from 222.186.180.147 port 42060 ssh2
2020-09-04 22:42:12
45.95.168.157 attack
SSH Brute-Forcing (server1)
2020-09-04 22:33:47
185.220.102.253 attackspam
2020-09-04T14:48:46+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)
2020-09-04 22:49:13

最近上报的IP列表

47.25.91.76 92.45.107.234 222.158.142.60 221.146.150.200
12.197.36.12 90.219.96.246 41.190.91.187 204.119.149.200
199.27.236.243 85.163.24.20 8.55.143.89 182.108.17.106
241.168.146.100 210.10.250.155 114.33.221.41 235.137.255.9
107.161.225.71 116.118.112.238 100.133.241.193 187.45.193.221