必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Taiwan, China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.110.21.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65533
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;120.110.21.242.			IN	A

;; AUTHORITY SECTION:
.			324	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023050300 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 03 17:13:48 CST 2023
;; MSG SIZE  rcvd: 107
HOST信息:
242.21.110.120.in-addr.arpa domain name pointer resolver.dns242.cyut.edu.tw.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
242.21.110.120.in-addr.arpa	name = resolver.dns242.cyut.edu.tw.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
45.142.120.49 attack
Sep  4 23:32:47 srv01 postfix/smtpd\[29658\]: warning: unknown\[45.142.120.49\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  4 23:33:00 srv01 postfix/smtpd\[8679\]: warning: unknown\[45.142.120.49\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  4 23:33:06 srv01 postfix/smtpd\[29677\]: warning: unknown\[45.142.120.49\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  4 23:33:32 srv01 postfix/smtpd\[8679\]: warning: unknown\[45.142.120.49\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  4 23:33:43 srv01 postfix/smtpd\[29655\]: warning: unknown\[45.142.120.49\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-09-05 05:35:41
191.31.91.156 attack
Telnet Server BruteForce Attack
2020-09-05 05:12:17
14.116.207.212 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-05 05:25:34
62.112.11.8 attack
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-04T19:52:38Z and 2020-09-04T20:42:59Z
2020-09-05 05:14:18
104.131.45.150 attackspam
Sep  4 22:05:53 l02a sshd[10943]: Invalid user lzy from 104.131.45.150
Sep  4 22:05:53 l02a sshd[10943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150 
Sep  4 22:05:53 l02a sshd[10943]: Invalid user lzy from 104.131.45.150
Sep  4 22:05:55 l02a sshd[10943]: Failed password for invalid user lzy from 104.131.45.150 port 48500 ssh2
2020-09-05 05:27:16
122.141.13.219 attackbotsspam
Port probing on unauthorized port 23
2020-09-05 05:20:54
222.186.173.226 attackspambots
Sep  4 23:07:18 PorscheCustomer sshd[31099]: Failed password for root from 222.186.173.226 port 64283 ssh2
Sep  4 23:07:21 PorscheCustomer sshd[31099]: Failed password for root from 222.186.173.226 port 64283 ssh2
Sep  4 23:07:24 PorscheCustomer sshd[31099]: Failed password for root from 222.186.173.226 port 64283 ssh2
Sep  4 23:07:27 PorscheCustomer sshd[31099]: Failed password for root from 222.186.173.226 port 64283 ssh2
...
2020-09-05 05:14:48
139.211.38.117 attackbots
Telnet Honeypot -> Telnet Bruteforce / Login
2020-09-05 05:36:03
39.41.26.111 attack
Sep  4 18:53:05 mellenthin postfix/smtpd[32352]: NOQUEUE: reject: RCPT from unknown[39.41.26.111]: 554 5.7.1 Service unavailable; Client host [39.41.26.111] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/39.41.26.111; from= to= proto=ESMTP helo=<[39.41.26.111]>
2020-09-05 05:23:05
144.168.164.26 attackspam
2020-09-04T18:53:10+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)
2020-09-05 05:17:42
146.56.192.233 attack
DATE:2020-09-04 18:52:08, IP:146.56.192.233, PORT:6379 REDIS brute force auth on honeypot server (epe-honey1-hq)
2020-09-05 05:19:50
187.17.106.144 attackbotsspam
xmlrpc attack
2020-09-05 05:27:51
217.182.168.167 attackspambots
SSH
2020-09-05 05:28:22
222.186.42.155 attackbotsspam
2020-09-04T20:56:09.354061Z 8c12b395b435 New connection: 222.186.42.155:22934 (172.17.0.2:2222) [session: 8c12b395b435]
2020-09-04T21:14:57.161936Z 60b56c065f14 New connection: 222.186.42.155:51538 (172.17.0.2:2222) [session: 60b56c065f14]
2020-09-05 05:18:09
108.62.121.180 attackbots
[2020-09-04 17:08:36] NOTICE[1194] chan_sip.c: Registration from '"4005" ' failed for '108.62.121.180:5576' - Wrong password
[2020-09-04 17:08:36] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-04T17:08:36.517-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4005",SessionID="0x7f2ddc1178e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/108.62.121.180/5576",Challenge="230c35e5",ReceivedChallenge="230c35e5",ReceivedHash="d95df77b37ada77a48fc4e45ad4dffa4"
[2020-09-04 17:08:36] NOTICE[1194] chan_sip.c: Registration from '"4005" ' failed for '108.62.121.180:5576' - Wrong password
[2020-09-04 17:08:36] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-04T17:08:36.559-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4005",SessionID="0x7f2ddc00cc78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP
...
2020-09-05 05:35:23

最近上报的IP列表

131.155.2.3 140.116.73.2 91.10.215.6 223.255.224.102
140.116.235.189 140.116.58.122 140.116.253.172 128.239.211.194
120.110.84.31 140.116.32.126 140.116.83.124 140.116.49.41
133.62.128.32 198.51.92.1 140.116.109.146 47.106.86.117
202.67.41.247 83.212.201.105 103.25.167.216 114.79.55.75