必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Sichuan Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Honeypot attack, port: 445, PTR: PTR record not found
2019-12-12 21:37:40
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.122.116.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5902
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;118.122.116.14.			IN	A

;; AUTHORITY SECTION:
.			524	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121200 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 12 21:37:35 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 14.116.122.118.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 14.116.122.118.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
36.74.117.5 attackbots
Attempt to attack host OS, exploiting network vulnerabilities, on 14-10-2019 04:45:19.
2019-10-14 19:39:36
117.135.131.123 attackbots
$f2bV_matches
2019-10-14 19:10:04
49.234.116.13 attackbots
Lines containing failures of 49.234.116.13
Oct 14 01:39:17 nextcloud sshd[29939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.116.13  user=r.r
Oct 14 01:39:18 nextcloud sshd[29939]: Failed password for r.r from 49.234.116.13 port 51412 ssh2
Oct 14 01:39:19 nextcloud sshd[29939]: Received disconnect from 49.234.116.13 port 51412:11: Bye Bye [preauth]
Oct 14 01:39:19 nextcloud sshd[29939]: Disconnected from authenticating user r.r 49.234.116.13 port 51412 [preauth]
Oct 14 01:54:36 nextcloud sshd[31668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.116.13  user=r.r
Oct 14 01:54:38 nextcloud sshd[31668]: Failed password for r.r from 49.234.116.13 port 57852 ssh2
Oct 14 01:54:39 nextcloud sshd[31668]: Received disconnect from 49.234.116.13 port 57852:11: Bye Bye [preauth]
Oct 14 01:54:39 nextcloud sshd[31668]: Disconnected from authenticating user r.r 49.234.116.13 port 57852 ........
------------------------------
2019-10-14 19:54:07
206.189.30.229 attack
Oct 13 22:19:46 php1 sshd\[15317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.30.229  user=root
Oct 13 22:19:48 php1 sshd\[15317\]: Failed password for root from 206.189.30.229 port 46516 ssh2
Oct 13 22:23:19 php1 sshd\[15623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.30.229  user=root
Oct 13 22:23:22 php1 sshd\[15623\]: Failed password for root from 206.189.30.229 port 57346 ssh2
Oct 13 22:26:53 php1 sshd\[15900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.30.229  user=root
2019-10-14 19:34:29
62.210.149.30 attack
\[2019-10-14 07:23:42\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-14T07:23:42.692-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="90015183806824",SessionID="0x7fc3ac5226d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/52044",ACLName="no_extension_match"
\[2019-10-14 07:23:55\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-14T07:23:55.517-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="0015183806824",SessionID="0x7fc3ac2ed548",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/64749",ACLName="no_extension_match"
\[2019-10-14 07:24:09\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-14T07:24:09.499-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00015183806824",SessionID="0x7fc3ac00c388",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/61310",ACLName="no_extensi
2019-10-14 19:38:33
14.228.42.11 attackbots
Attempt to attack host OS, exploiting network vulnerabilities, on 14-10-2019 04:45:16.
2019-10-14 19:43:23
134.73.76.16 attack
Oct 14 05:31:53 tux postfix/smtpd[8764]: connect from chop.juntosms.com[134.73.76.16]
Oct x@x
Oct 14 05:31:53 tux postfix/smtpd[8764]: disconnect from chop.juntosms.com[134.73.76.16]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=134.73.76.16
2019-10-14 19:25:25
36.82.101.189 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 14-10-2019 04:45:19.
2019-10-14 19:39:12
185.90.118.80 attackspam
10/14/2019-05:58:11.090698 185.90.118.80 Protocol: 6 ET SCAN Potential SSH Scan
2019-10-14 19:19:08
73.205.108.52 attackspambots
port scan and connect, tcp 23 (telnet)
2019-10-14 19:30:11
109.129.78.127 attack
2019-10-14T10:15:10.305579homeassistant sshd[16555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.129.78.127  user=root
2019-10-14T10:15:12.047670homeassistant sshd[16555]: Failed password for root from 109.129.78.127 port 51790 ssh2
...
2019-10-14 19:12:07
185.113.247.215 attackspambots
Honeypot attack, port: 445, PTR: PTR record not found
2019-10-14 19:35:25
65.99.128.234 attackbotsspam
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/65.99.128.234/ 
 DE - 1H : (72)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : DE 
 NAME ASN : ASN12552 
 
 IP : 65.99.128.234 
 
 CIDR : 65.99.128.0/20 
 
 PREFIX COUNT : 284 
 
 UNIQUE IP COUNT : 304128 
 
 
 WYKRYTE ATAKI Z ASN12552 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-10-14 05:45:54 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-14 19:17:35
45.40.199.87 attackspambots
detected by Fail2Ban
2019-10-14 19:29:37
140.143.90.154 attack
Oct 14 11:46:41 v22018076622670303 sshd\[12197\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.90.154  user=root
Oct 14 11:46:43 v22018076622670303 sshd\[12197\]: Failed password for root from 140.143.90.154 port 39064 ssh2
Oct 14 11:51:22 v22018076622670303 sshd\[12220\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.90.154  user=root
...
2019-10-14 19:15:14

最近上报的IP列表

118.254.229.171 113.172.155.215 103.75.161.67 119.37.198.140
94.10.193.126 177.12.211.44 104.134.112.11 102.164.210.17
106.52.36.128 124.140.35.48 203.166.214.15 178.237.238.177
182.71.90.202 175.11.215.74 101.108.156.143 62.109.10.104
1.179.155.66 200.195.171.74 171.242.175.84 95.9.248.2