必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
117.94.21.34 attackspambots
srvr2: (mod_security) mod_security (id:920350) triggered by 117.94.21.34 (CN/-/-): 1 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/22 14:13:27 [error] 861202#0: *905407 [client 117.94.21.34] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host'  [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/phpmyadmin/"] [unique_id "159809840790.964652"] [ref "o0,11v155,11"], client: 117.94.21.34, [redacted] request: "GET /phpmyadmin/ HTTP/1.1" [redacted]
2020-08-22 23:22:18
117.94.217.40 attackspambots
Honeypot attack, port: 5555, PTR: PTR record not found
2020-03-31 00:10:38
117.94.213.87 attackbots
Unauthorized connection attempt detected from IP address 117.94.213.87 to port 6656 [T]
2020-01-30 18:29:04
117.94.215.171 attackbotsspam
Unauthorized connection attempt detected from IP address 117.94.215.171 to port 6656 [T]
2020-01-30 17:27:02
117.94.213.93 attack
Unauthorized connection attempt detected from IP address 117.94.213.93 to port 6656 [T]
2020-01-30 16:59:00
117.94.215.167 attack
Unauthorized connection attempt detected from IP address 117.94.215.167 to port 6656 [T]
2020-01-30 14:44:07
117.94.215.170 attackspam
Unauthorized connection attempt detected from IP address 117.94.215.170 to port 6656 [T]
2020-01-30 14:16:03
117.94.214.121 attack
Unauthorized connection attempt detected from IP address 117.94.214.121 to port 6656 [T]
2020-01-29 19:26:59
117.94.215.164 attack
Unauthorized connection attempt detected from IP address 117.94.215.164 to port 6656 [T]
2020-01-29 19:03:36
117.94.214.235 attack
Unauthorized connection attempt detected from IP address 117.94.214.235 to port 6656 [T]
2020-01-29 17:02:22
117.94.214.64 attackbots
Unauthorized connection attempt detected from IP address 117.94.214.64 to port 6656 [T]
2020-01-27 06:16:18
117.94.214.152 attackbotsspam
Unauthorized connection attempt detected from IP address 117.94.214.152 to port 6656 [T]
2020-01-27 05:55:39
117.94.218.211 attackspam
Lines containing failures of 117.94.218.211
Nov  2 04:13:54 *** sshd[74751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.94.218.211  user=r.r
Nov  2 04:13:55 *** sshd[74751]: Failed password for r.r from 117.94.218.211 port 1486 ssh2
Nov  2 04:14:01 *** sshd[74751]: message repeated 3 serveres: [ Failed password for r.r from 117.94.218.211 port 1486 ssh2]
Nov  2 04:14:03 *** sshd[74751]: Failed password for r.r from 117.94.218.211 port 1486 ssh2
Nov  2 04:14:03 *** sshd[74751]: Connection reset by authenticating user r.r 117.94.218.211 port 1486 [preauth]
Nov  2 04:14:03 *** sshd[74751]: PAM 4 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.94.218.211  user=r.r
Nov  2 04:14:05 *** sshd[74760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.94.218.211  user=r.r
Nov  2 04:14:06 *** sshd[74760]: Failed password for r.r from 117.94.218.211 port 2305 ssh2
........
------------------------------
2019-11-02 13:58:36
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.94.21.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31863
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;117.94.21.2.			IN	A

;; AUTHORITY SECTION:
.			528	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 100 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 23:22:39 CST 2022
;; MSG SIZE  rcvd: 104
HOST信息:
Host 2.21.94.117.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.21.94.117.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
187.207.233.60 attack
Aug 24 11:43:23 lcdev sshd\[24440\]: Invalid user sarah from 187.207.233.60
Aug 24 11:43:23 lcdev sshd\[24440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.207.233.60
Aug 24 11:43:25 lcdev sshd\[24440\]: Failed password for invalid user sarah from 187.207.233.60 port 33428 ssh2
Aug 24 11:47:51 lcdev sshd\[24803\]: Invalid user bigdiawusr from 187.207.233.60
Aug 24 11:47:51 lcdev sshd\[24803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.207.233.60
2019-08-25 06:02:36
61.181.15.75 attackspambots
Aug 25 00:47:40 taivassalofi sshd[32715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.181.15.75
Aug 25 00:47:42 taivassalofi sshd[32715]: Failed password for invalid user bent from 61.181.15.75 port 52766 ssh2
...
2019-08-25 06:09:59
104.248.120.196 attack
Aug 24 23:59:49 legacy sshd[10881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.120.196
Aug 24 23:59:51 legacy sshd[10881]: Failed password for invalid user scanner from 104.248.120.196 port 57564 ssh2
Aug 25 00:03:50 legacy sshd[10944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.120.196
...
2019-08-25 06:18:06
51.75.142.177 attackspambots
Aug 24 23:47:59 localhost sshd\[9633\]: Invalid user timemachine from 51.75.142.177 port 60330
Aug 24 23:47:59 localhost sshd\[9633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.142.177
Aug 24 23:48:01 localhost sshd\[9633\]: Failed password for invalid user timemachine from 51.75.142.177 port 60330 ssh2
2019-08-25 05:55:15
134.73.76.164 attack
Postfix RBL failed
2019-08-25 06:14:01
189.38.173.209 attackspambots
Aug 24 21:38:41 www sshd\[126615\]: Invalid user sk from 189.38.173.209
Aug 24 21:38:41 www sshd\[126615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.38.173.209
Aug 24 21:38:42 www sshd\[126615\]: Failed password for invalid user sk from 189.38.173.209 port 54236 ssh2
...
2019-08-25 05:34:57
192.144.186.77 attack
Aug 24 04:04:23 web1 sshd\[28478\]: Invalid user compnf from 192.144.186.77
Aug 24 04:04:23 web1 sshd\[28478\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.186.77
Aug 24 04:04:25 web1 sshd\[28478\]: Failed password for invalid user compnf from 192.144.186.77 port 45126 ssh2
Aug 24 04:09:05 web1 sshd\[28933\]: Invalid user harley from 192.144.186.77
Aug 24 04:09:05 web1 sshd\[28933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.186.77
2019-08-25 05:32:41
222.186.15.160 attack
Aug 24 11:20:11 debian sshd[19040]: Unable to negotiate with 222.186.15.160 port 23796: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Aug 24 17:48:48 debian sshd[5871]: Unable to negotiate with 222.186.15.160 port 33426: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
...
2019-08-25 05:55:46
157.230.178.211 attackbotsspam
Aug 24 13:59:24 vtv3 sshd\[29580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.178.211  user=root
Aug 24 13:59:26 vtv3 sshd\[29580\]: Failed password for root from 157.230.178.211 port 42492 ssh2
Aug 24 14:03:10 vtv3 sshd\[31676\]: Invalid user rosco from 157.230.178.211 port 59782
Aug 24 14:03:10 vtv3 sshd\[31676\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.178.211
Aug 24 14:03:12 vtv3 sshd\[31676\]: Failed password for invalid user rosco from 157.230.178.211 port 59782 ssh2
Aug 24 14:14:22 vtv3 sshd\[4832\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.178.211  user=root
Aug 24 14:14:24 vtv3 sshd\[4832\]: Failed password for root from 157.230.178.211 port 55200 ssh2
Aug 24 14:18:16 vtv3 sshd\[6774\]: Invalid user peter from 157.230.178.211 port 44260
Aug 24 14:18:16 vtv3 sshd\[6774\]: pam_unix\(sshd:auth\): authentication failure\; logname= ui
2019-08-25 05:46:13
160.20.12.148 attackbotsspam
IP: 160.20.12.148
ASN: AS27630 XFERNET
Port: Simple Mail Transfer 25
Found in one or more Blacklists
Date: 24/08/2019 12:41:01 PM UTC
2019-08-25 05:31:36
51.38.230.62 attack
Invalid user roo from 51.38.230.62 port 34150
2019-08-25 06:15:53
206.189.221.160 attackspam
Aug 24 11:59:53 tdfoods sshd\[3382\]: Invalid user transfer from 206.189.221.160
Aug 24 11:59:53 tdfoods sshd\[3382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=desligar.me
Aug 24 11:59:55 tdfoods sshd\[3382\]: Failed password for invalid user transfer from 206.189.221.160 port 51628 ssh2
Aug 24 12:03:58 tdfoods sshd\[3690\]: Invalid user zhao from 206.189.221.160
Aug 24 12:03:58 tdfoods sshd\[3690\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=desligar.me
2019-08-25 06:16:08
128.199.177.224 attack
2019-08-24T21:16:09.443124abusebot-2.cloudsearch.cf sshd\[1910\]: Invalid user ingres from 128.199.177.224 port 37780
2019-08-25 05:37:45
221.217.99.39 attackbotsspam
Aug 24 23:44:34 [host] sshd[10564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.217.99.39  user=root
Aug 24 23:44:36 [host] sshd[10564]: Failed password for root from 221.217.99.39 port 60130 ssh2
Aug 24 23:47:59 [host] sshd[10624]: Invalid user c&a from 221.217.99.39
2019-08-25 05:56:12
223.130.100.157 attackspam
Aug 24 17:47:54 TORMINT sshd\[29295\]: Invalid user mb from 223.130.100.157
Aug 24 17:47:54 TORMINT sshd\[29295\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.130.100.157
Aug 24 17:47:56 TORMINT sshd\[29295\]: Failed password for invalid user mb from 223.130.100.157 port 42984 ssh2
...
2019-08-25 05:59:05

最近上报的IP列表

117.94.21.234 117.94.21.40 117.94.21.45 114.235.23.14
117.94.21.71 117.94.21.24 114.235.23.140 117.94.21.16
114.235.23.144 114.235.23.146 114.235.23.148 114.235.23.149
114.235.23.150 117.94.222.75 117.94.222.80 117.94.222.82
117.94.222.98 117.94.222.94 117.94.222.93 117.94.222.84