必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Shenzhen

省份(region): Guangdong

国家(country): China

运营商(isp): ChinaNet Guangdong Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackbotsspam
Unauthorized connection attempt detected from IP address 119.145.0.213 to port 1433 [T]
2020-01-17 06:35:24
相同子网IP讨论:
IP 类型 评论内容 时间
119.145.0.211 attackbotsspam
Unauthorized connection attempt detected from IP address 119.145.0.211 to port 1433 [T]
2020-01-30 17:26:31
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.145.0.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8701
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;119.145.0.213.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011601 1800 900 604800 86400

;; Query time: 130 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 17 06:35:21 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 213.0.145.119.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 213.0.145.119.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
39.129.7.86 attackspam
2020-07-08T18:25:05.693589hostname sshd[24866]: Invalid user luc from 39.129.7.86 port 46744
2020-07-08T18:25:07.035864hostname sshd[24866]: Failed password for invalid user luc from 39.129.7.86 port 46744 ssh2
2020-07-08T18:29:04.024920hostname sshd[26100]: Invalid user riak from 39.129.7.86 port 39450
...
2020-07-08 19:35:15
51.38.127.227 attackspam
fail2ban -- 51.38.127.227
...
2020-07-08 19:10:01
138.68.82.194 attack
Failed password for invalid user jps from 138.68.82.194 port 37680 ssh2
2020-07-08 19:19:56
23.234.6.5 attackbots
1433/tcp
[2020-07-08]1pkt
2020-07-08 19:31:48
93.174.93.200 attackbots
07/08/2020-04:49:30.174567 93.174.93.200 Protocol: 17 ET DROP Dshield Block Listed Source group 1
2020-07-08 19:15:41
67.21.79.138 attackspambots
[MK-VM4] Blocked by UFW
2020-07-08 19:19:30
185.176.27.42 attack
 TCP (SYN) 185.176.27.42:58993 -> port 40985, len 44
2020-07-08 18:58:48
61.177.172.102 attackspambots
Jul  8 07:23:11 ny01 sshd[32429]: Failed password for root from 61.177.172.102 port 12698 ssh2
Jul  8 07:23:39 ny01 sshd[32526]: Failed password for root from 61.177.172.102 port 20525 ssh2
2020-07-08 19:25:46
150.158.178.137 attack
Jul  8 13:13:27 buvik sshd[16116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.158.178.137
Jul  8 13:13:29 buvik sshd[16116]: Failed password for invalid user cori from 150.158.178.137 port 60332 ssh2
Jul  8 13:17:07 buvik sshd[16606]: Invalid user oracle from 150.158.178.137
...
2020-07-08 19:29:14
72.167.226.88 attack
72.167.226.88 - - [08/Jul/2020:12:05:09 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
72.167.226.88 - - [08/Jul/2020:12:05:10 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
72.167.226.88 - - [08/Jul/2020:12:05:11 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-07-08 19:34:37
109.244.101.212 attack
Jul  8 10:22:05 ns382633 sshd\[22255\]: Invalid user zouwenxin from 109.244.101.212 port 36860
Jul  8 10:22:05 ns382633 sshd\[22255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.244.101.212
Jul  8 10:22:07 ns382633 sshd\[22255\]: Failed password for invalid user zouwenxin from 109.244.101.212 port 36860 ssh2
Jul  8 10:37:48 ns382633 sshd\[25022\]: Invalid user bart from 109.244.101.212 port 7171
Jul  8 10:37:48 ns382633 sshd\[25022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.244.101.212
2020-07-08 19:28:12
165.22.185.159 attack
2020-07-08T06:20:00.1220031495-001 sshd[9168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.185.159  user=mail
2020-07-08T06:20:01.3489421495-001 sshd[9168]: Failed password for mail from 165.22.185.159 port 48028 ssh2
2020-07-08T06:22:27.2839891495-001 sshd[9267]: Invalid user pxe from 165.22.185.159 port 33690
2020-07-08T06:22:27.2909811495-001 sshd[9267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.185.159
2020-07-08T06:22:27.2839891495-001 sshd[9267]: Invalid user pxe from 165.22.185.159 port 33690
2020-07-08T06:22:29.3660171495-001 sshd[9267]: Failed password for invalid user pxe from 165.22.185.159 port 33690 ssh2
...
2020-07-08 19:08:15
185.143.72.34 attackspam
2020-07-08T13:07:22.266579www postfix/smtpd[6425]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-07-08T13:08:01.463249www postfix/smtpd[6425]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-07-08T13:08:39.360641www postfix/smtpd[6425]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-07-08 19:10:51
185.143.73.175 attackbotsspam
Jul  8 13:30:06 relay postfix/smtpd\[17392\]: warning: unknown\[185.143.73.175\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  8 13:30:44 relay postfix/smtpd\[13907\]: warning: unknown\[185.143.73.175\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  8 13:31:22 relay postfix/smtpd\[17389\]: warning: unknown\[185.143.73.175\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  8 13:31:56 relay postfix/smtpd\[13907\]: warning: unknown\[185.143.73.175\]: SASL LOGIN authentication failed: VXNlcm5hbWU6
Jul  8 13:32:39 relay postfix/smtpd\[13905\]: warning: unknown\[185.143.73.175\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-07-08 19:33:57
208.100.26.247 attackbots
208.100.26.247 - - [08/Jul/2020:13:33:55 +0300] "HEAD /core/misc/drupal.js HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36"
208.100.26.247 - - [08/Jul/2020:13:33:55 +0300] "HEAD /misc/drupal.js HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36"
2020-07-08 19:28:50

最近上报的IP列表

73.228.210.250 114.239.102.54 208.90.151.155 114.234.104.16
114.227.94.220 50.253.40.69 113.87.195.129 179.202.250.176
113.25.238.218 113.22.52.146 90.91.194.1 50.112.17.236
179.201.217.28 103.228.53.17 79.68.10.147 103.78.181.204
115.165.41.18 101.109.140.241 52.215.131.208 101.30.208.67