必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): India

运营商(isp): Shreenet

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attack
Unauthorized connection attempt from IP address 120.138.4.104 on Port 445(SMB)
2019-10-12 16:36:50
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.138.4.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48864
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;120.138.4.104.			IN	A

;; AUTHORITY SECTION:
.			460	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101200 1800 900 604800 86400

;; Query time: 489 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 12 16:36:47 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 104.4.138.120.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 104.4.138.120.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
115.68.207.164 attackspambots
SSH Brute-Force Attack
2020-07-06 18:29:17
61.219.11.153 attack
 TCP (SYN) 61.219.11.153:64201 -> port 443, len 40
2020-07-06 17:42:50
165.22.52.22 attackbots
Fail2Ban Ban Triggered
2020-07-06 18:10:27
119.28.138.87 attackspambots
Jul  6 10:58:35 abendstille sshd\[23649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.138.87  user=root
Jul  6 10:58:37 abendstille sshd\[23649\]: Failed password for root from 119.28.138.87 port 49670 ssh2
Jul  6 11:01:04 abendstille sshd\[25990\]: Invalid user cris from 119.28.138.87
Jul  6 11:01:04 abendstille sshd\[25990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.138.87
Jul  6 11:01:05 abendstille sshd\[25990\]: Failed password for invalid user cris from 119.28.138.87 port 56910 ssh2
...
2020-07-06 18:33:03
212.237.25.210 attackspambots
212.237.25.210 - - [06/Jul/2020:05:49:31 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.237.25.210 - - [06/Jul/2020:05:49:32 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.237.25.210 - - [06/Jul/2020:05:49:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-07-06 17:49:31
191.235.65.29 attack
2020-07-06T09:00:21.158637afi-git.jinr.ru sshd[21730]: Invalid user sys from 191.235.65.29 port 53552
2020-07-06T09:00:21.161862afi-git.jinr.ru sshd[21730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.235.65.29
2020-07-06T09:00:21.158637afi-git.jinr.ru sshd[21730]: Invalid user sys from 191.235.65.29 port 53552
2020-07-06T09:00:22.897791afi-git.jinr.ru sshd[21730]: Failed password for invalid user sys from 191.235.65.29 port 53552 ssh2
2020-07-06T09:02:41.201287afi-git.jinr.ru sshd[22274]: Invalid user f from 191.235.65.29 port 53036
...
2020-07-06 17:43:12
68.183.77.157 attack
Jul  6 07:31:33 ssh2 sshd[59545]: User root from skaerbaek.minlandsby.dk not allowed because not listed in AllowUsers
Jul  6 07:31:33 ssh2 sshd[59545]: Failed password for invalid user root from 68.183.77.157 port 34462 ssh2
Jul  6 07:31:33 ssh2 sshd[59545]: Connection closed by invalid user root 68.183.77.157 port 34462 [preauth]
...
2020-07-06 18:01:20
182.135.64.12 attack
Jul  6 05:48:53 serwer sshd\[25968\]: Invalid user deploy from 182.135.64.12 port 20778
Jul  6 05:48:53 serwer sshd\[25968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.135.64.12
Jul  6 05:48:55 serwer sshd\[25968\]: Failed password for invalid user deploy from 182.135.64.12 port 20778 ssh2
...
2020-07-06 18:29:04
194.26.29.33 attackbotsspam
Jul  6 11:32:00 debian-2gb-nbg1-2 kernel: \[16286529.253156\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.29.33 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=23252 PROTO=TCP SPT=42129 DPT=1843 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-06 17:59:37
218.253.69.134 attackbots
2020-07-06T10:50:13+0200 Failed SSH Authentication/Brute Force Attack. (Server 10)
2020-07-06 18:28:46
142.112.145.68 attack
(From fletcher.lyons11@gmail.com) TITLE: Are YOU Building Your Own DREAMS Or Has SOMEONE ELSE Hired You To Build THEIRS? 

DESCRIPTION: Have you ever looked at sites like Google or Facebook and asked yourself…“How can they make SO MUCH MONEY when they aren’t even really selling any products?!?!”
Well, Google and Facebook are cashing in on their platforms. They’re taking advantage of the millions of people who come to their sites…Then view and click the ads on their pages.
Those sites have turned into billion dollar companies by getting paid to send traffic to businesses. 

Did You Know That More People Have Become Millionaires In The Past Year Than Ever Before? Did You Know You Can Make Money By Becoming A Traffic Affiliate?

Watch Our Video & Discover The Easy 1-Step System Our Members Are Using To Get Paid Daily.

URL: https://bit.ly/retirement-biz
2020-07-06 18:30:12
185.143.73.162 attack
Jul  6 12:17:13 srv01 postfix/smtpd\[7664\]: warning: unknown\[185.143.73.162\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  6 12:17:53 srv01 postfix/smtpd\[13113\]: warning: unknown\[185.143.73.162\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  6 12:18:31 srv01 postfix/smtpd\[7664\]: warning: unknown\[185.143.73.162\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  6 12:19:11 srv01 postfix/smtpd\[13112\]: warning: unknown\[185.143.73.162\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  6 12:19:51 srv01 postfix/smtpd\[7664\]: warning: unknown\[185.143.73.162\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-07-06 18:20:45
185.220.101.28 attackbots
Unauthorized connection attempt detected from IP address 185.220.101.28 to port 2222
2020-07-06 17:52:25
114.7.123.14 attack
1594007346 - 07/06/2020 05:49:06 Host: 114.7.123.14/114.7.123.14 Port: 445 TCP Blocked
2020-07-06 18:19:22
49.234.109.58 attack
20 attempts against mh-ssh on flow
2020-07-06 17:43:46

最近上报的IP列表

112.133.251.124 36.73.170.104 203.128.240.114 213.220.229.107
54.153.114.228 36.83.102.109 119.92.138.202 173.185.195.197
45.112.199.154 88.230.98.253 95.173.248.29 122.160.13.32
14.226.92.104 122.160.16.53 145.255.21.172 203.160.171.2
98.148.174.175 122.96.82.122 93.147.51.14 114.114.71.171