必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
117.57.21.166 attackbots
Unauthorized connection attempt detected from IP address 117.57.21.166 to port 6656 [T]
2020-01-29 18:23:28
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.57.21.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39647
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;117.57.21.130.			IN	A

;; AUTHORITY SECTION:
.			596	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031101 1800 900 604800 86400

;; Query time: 81 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 12 03:46:54 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
Host 130.21.57.117.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 130.21.57.117.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
91.240.118.101 attackbotsspam
 TCP (SYN) 91.240.118.101:47101 -> port 4444, len 44
2020-09-08 12:42:48
193.35.51.21 attack
Sep  8 05:20:45 mail postfix/smtpd\[22774\]: warning: unknown\[193.35.51.21\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Sep  8 06:29:25 mail postfix/smtpd\[25456\]: warning: unknown\[193.35.51.21\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Sep  8 06:29:42 mail postfix/smtpd\[25713\]: warning: unknown\[193.35.51.21\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Sep  8 06:37:25 mail postfix/smtpd\[25713\]: warning: unknown\[193.35.51.21\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2020-09-08 12:38:08
161.35.100.118 attackspam
SSH Bruteforce attack
2020-09-08 12:41:22
106.51.80.198 attack
2020-09-07T20:43:59.7649351495-001 sshd[53765]: Invalid user bow from 106.51.80.198 port 44932
2020-09-07T20:44:01.3813731495-001 sshd[53765]: Failed password for invalid user bow from 106.51.80.198 port 44932 ssh2
2020-09-07T20:47:07.7704781495-001 sshd[53886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.80.198  user=root
2020-09-07T20:47:09.8603251495-001 sshd[53886]: Failed password for root from 106.51.80.198 port 34268 ssh2
2020-09-07T20:50:09.0169771495-001 sshd[53999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.80.198  user=root
2020-09-07T20:50:11.2868301495-001 sshd[53999]: Failed password for root from 106.51.80.198 port 51826 ssh2
...
2020-09-08 12:05:52
115.31.128.77 attack
Port Scan
...
2020-09-08 12:29:28
45.95.168.131 attackspam
Sep  8 05:25:30 vps333114 sshd[30954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.131  user=root
Sep  8 05:25:32 vps333114 sshd[30954]: Failed password for root from 45.95.168.131 port 46280 ssh2
...
2020-09-08 12:06:56
222.186.175.150 attack
Sep  8 06:28:03 markkoudstaal sshd[24145]: Failed password for root from 222.186.175.150 port 10446 ssh2
Sep  8 06:28:06 markkoudstaal sshd[24145]: Failed password for root from 222.186.175.150 port 10446 ssh2
Sep  8 06:28:10 markkoudstaal sshd[24145]: Failed password for root from 222.186.175.150 port 10446 ssh2
Sep  8 06:28:12 markkoudstaal sshd[24145]: Failed password for root from 222.186.175.150 port 10446 ssh2
...
2020-09-08 12:34:25
81.182.248.193 attack
(sshd) Failed SSH login from 81.182.248.193 (HU/Hungary/dsl51B6F8C1.fixip.t-online.hu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  7 15:13:08 server sshd[24404]: Invalid user huawei from 81.182.248.193 port 47762
Sep  7 15:13:10 server sshd[24404]: Failed password for invalid user huawei from 81.182.248.193 port 47762 ssh2
Sep  7 15:27:11 server sshd[28293]: Failed password for root from 81.182.248.193 port 46416 ssh2
Sep  7 15:37:23 server sshd[31267]: Failed password for root from 81.182.248.193 port 44224 ssh2
Sep  7 15:47:20 server sshd[10103]: Failed password for root from 81.182.248.193 port 42028 ssh2
2020-09-08 12:23:13
162.243.42.225 attackbotsspam
firewall-block, port(s): 3684/tcp
2020-09-08 12:31:05
81.183.221.50 attackspambots
20/9/7@13:36:08: FAIL: Alarm-Network address from=81.183.221.50
20/9/7@13:36:08: FAIL: Alarm-Network address from=81.183.221.50
...
2020-09-08 12:14:11
167.114.113.141 attackbotsspam
Ssh brute force
2020-09-08 12:40:10
186.216.68.183 attackbotsspam
Aug 30 07:47:56 mail.srvfarm.net postfix/smtps/smtpd[3605554]: warning: unknown[186.216.68.183]: SASL PLAIN authentication failed: 
Aug 30 07:47:57 mail.srvfarm.net postfix/smtps/smtpd[3605554]: lost connection after AUTH from unknown[186.216.68.183]
Aug 30 07:48:43 mail.srvfarm.net postfix/smtpd[3603899]: warning: unknown[186.216.68.183]: SASL PLAIN authentication failed: 
Aug 30 07:48:44 mail.srvfarm.net postfix/smtpd[3603899]: lost connection after AUTH from unknown[186.216.68.183]
Aug 30 07:51:40 mail.srvfarm.net postfix/smtps/smtpd[3603756]: warning: unknown[186.216.68.183]: SASL PLAIN authentication failed:
2020-09-08 12:32:47
49.232.55.161 attack
Sep  7 12:55:43 Host-KEWR-E sshd[227570]: User root from 49.232.55.161 not allowed because not listed in AllowUsers
...
2020-09-08 12:06:25
222.186.175.167 attackbotsspam
$f2bV_matches
2020-09-08 12:39:27
180.249.164.172 attackbotsspam
Lines containing failures of 180.249.164.172
Sep  7 12:19:45 *** sshd[126706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.249.164.172  user=r.r
Sep  7 12:19:47 *** sshd[126706]: Failed password for r.r from 180.249.164.172 port 18224 ssh2
Sep  7 12:19:47 *** sshd[126706]: Received disconnect from 180.249.164.172 port 18224:11: Bye Bye [preauth]
Sep  7 12:19:47 *** sshd[126706]: Disconnected from authenticating user r.r 180.249.164.172 port 18224 [preauth]
Sep  7 12:23:00 *** sshd[126821]: Invalid user n0b0dy from 180.249.164.172 port 16869
Sep  7 12:23:00 *** sshd[126821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.249.164.172
Sep  7 12:23:02 *** sshd[126821]: Failed password for invalid user n0b0dy from 180.249.164.172 port 16869 ssh2
Sep  7 12:23:02 *** sshd[126821]: Received disconnect from 180.249.164.172 port 16869:11: Bye Bye [preauth]
Sep  7 12:23:02 *** sshd[126821]:........
------------------------------
2020-09-08 12:20:44

最近上报的IP列表

117.57.21.13 117.57.21.132 117.57.21.134 117.57.21.137
117.57.21.140 117.57.21.142 117.57.21.144 117.57.21.15
117.57.21.150 117.57.21.153 117.57.21.155 117.57.21.157
117.57.21.16 117.57.21.163 117.57.21.164 117.57.21.171
117.57.21.176 117.57.21.179 117.57.21.18 117.57.21.180