必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Korea, Republic of

运营商(isp): KT Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspambots
Unauthorized connection attempt detected from IP address 121.136.234.237 to port 81 [J]
2020-01-13 02:22:08
attackspambots
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/121.136.234.237/ 
 KR - 1H : (53)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : KR 
 NAME ASN : ASN4766 
 
 IP : 121.136.234.237 
 
 CIDR : 121.136.128.0/17 
 
 PREFIX COUNT : 8136 
 
 UNIQUE IP COUNT : 44725248 
 
 
 WYKRYTE ATAKI Z ASN4766 :  
  1H - 3 
  3H - 5 
  6H - 9 
 12H - 18 
 24H - 33 
 
 DateTime : 2019-10-18 13:43:14 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-18 21:24:33
相同子网IP讨论:
IP 类型 评论内容 时间
121.136.234.16 attackbots
 TCP (SYN) 121.136.234.16:51543 -> port 22, len 40
2020-09-21 00:50:34
121.136.234.16 attackspam
 TCP (SYN) 121.136.234.16:51543 -> port 22, len 40
2020-09-20 16:46:21
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.136.234.237
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14168
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.136.234.237.		IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101800 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 18 21:24:28 CST 2019
;; MSG SIZE  rcvd: 119
HOST信息:
Host 237.234.136.121.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 237.234.136.121.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
121.202.28.73 attackbots
" "
2019-06-29 15:57:11
151.48.151.51 attack
Jun 29 02:06:25 master sshd[22366]: Failed password for invalid user admin from 151.48.151.51 port 56660 ssh2
2019-06-29 15:42:12
150.95.129.150 attackspam
2019-06-29T07:31:14.583501abusebot-5.cloudsearch.cf sshd\[17717\]: Invalid user node from 150.95.129.150 port 56046
2019-06-29 15:52:39
186.37.115.25 attackspam
SSH Brute Force, server-1 sshd[6679]: Failed password for invalid user hekz from 186.37.115.25 port 55814 ssh2
2019-06-29 15:46:28
172.68.255.173 attackbots
172.68.255.173 - - [29/Jun/2019:00:07:23 +0100] "POST /wp-login.php HTTP/1.1" 200 1458 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-06-29 15:45:56
106.13.60.155 attackbotsspam
Jun 29 04:44:05 Ubuntu-1404-trusty-64-minimal sshd\[19707\]: Invalid user george from 106.13.60.155
Jun 29 04:44:05 Ubuntu-1404-trusty-64-minimal sshd\[19707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.60.155
Jun 29 04:44:06 Ubuntu-1404-trusty-64-minimal sshd\[19707\]: Failed password for invalid user george from 106.13.60.155 port 45666 ssh2
Jun 29 04:48:30 Ubuntu-1404-trusty-64-minimal sshd\[22502\]: Invalid user confluence from 106.13.60.155
Jun 29 04:48:30 Ubuntu-1404-trusty-64-minimal sshd\[22502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.60.155
2019-06-29 15:56:02
188.166.1.123 attackspambots
2019-06-29T09:10:48.854962centos sshd\[23380\]: Invalid user support from 188.166.1.123 port 50512
2019-06-29T09:10:48.859594centos sshd\[23380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.1.123
2019-06-29T09:10:50.621454centos sshd\[23380\]: Failed password for invalid user support from 188.166.1.123 port 50512 ssh2
2019-06-29 16:03:55
31.185.104.20 attack
Jun 29 01:07:12 vps sshd[27841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.185.104.20 
Jun 29 01:07:14 vps sshd[27841]: Failed password for invalid user guest from 31.185.104.20 port 34073 ssh2
Jun 29 01:07:17 vps sshd[27841]: Failed password for invalid user guest from 31.185.104.20 port 34073 ssh2
Jun 29 01:07:20 vps sshd[27850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.185.104.20 
...
2019-06-29 15:46:58
201.216.193.65 attack
Jun 29 08:06:16 mail sshd\[16935\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.216.193.65  user=root
Jun 29 08:06:18 mail sshd\[16935\]: Failed password for root from 201.216.193.65 port 43443 ssh2
...
2019-06-29 15:51:25
106.39.33.2 attackspam
Jun 29 05:26:24 work-partkepr sshd\[31954\]: User www-data from 106.39.33.2 not allowed because not listed in AllowUsers
Jun 29 05:26:24 work-partkepr sshd\[31954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.39.33.2  user=www-data
...
2019-06-29 16:05:18
112.14.32.207 attackspambots
Jun  7 09:37:58 mercury auth[27085]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=josh@learnargentinianspanish.com rhost=112.14.32.207
...
2019-06-29 15:33:27
113.58.50.196 attackbots
Jun 29 01:39:16 master sshd[22324]: Failed password for invalid user admin from 113.58.50.196 port 55166 ssh2
2019-06-29 15:37:35
191.102.126.138 attack
Sent mail to target address hacked/leaked from abandonia in 2016
2019-06-29 15:59:02
177.93.70.51 attackbotsspam
Jun 29 00:50:02 lvps87-230-18-106 sshd[24945]: reveeclipse mapping checking getaddrinfo for maxfibra-177-93-70-51.yune.com.br [177.93.70.51] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 29 00:50:02 lvps87-230-18-106 sshd[24945]: Invalid user admin from 177.93.70.51
Jun 29 00:50:02 lvps87-230-18-106 sshd[24945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.93.70.51 
Jun 29 00:50:04 lvps87-230-18-106 sshd[24945]: Failed password for invalid user admin from 177.93.70.51 port 33460 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=177.93.70.51
2019-06-29 16:21:13
189.164.124.57 attackbots
Jun 29 00:32:43 srv01 sshd[30842]: reveeclipse mapping checking getaddrinfo for dsl-189-164-124-57-dyn.prod-infinhostnameum.com.mx [189.164.124.57] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 29 00:32:43 srv01 sshd[30842]: Invalid user test from 189.164.124.57
Jun 29 00:32:43 srv01 sshd[30842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.164.124.57 
Jun 29 00:32:45 srv01 sshd[30842]: Failed password for invalid user test from 189.164.124.57 port 58199 ssh2
Jun 29 00:32:47 srv01 sshd[30842]: Received disconnect from 189.164.124.57: 11: Bye Bye [preauth]
Jun 29 00:41:58 srv01 sshd[31249]: reveeclipse mapping checking getaddrinfo for dsl-189-164-124-57-dyn.prod-infinhostnameum.com.mx [189.164.124.57] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 29 00:41:58 srv01 sshd[31249]: Invalid user tester from 189.164.124.57
Jun 29 00:41:58 srv01 sshd[31249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost........
-------------------------------
2019-06-29 15:55:40

最近上报的IP列表

188.128.23.67 221.54.144.53 14.132.158.35 156.81.190.219
7.189.187.87 0.8.172.230 56.17.234.36 83.184.202.76
90.108.37.44 161.0.153.35 160.114.15.229 198.212.95.201
85.131.72.141 33.187.239.140 122.154.57.98 49.72.65.238
93.187.202.65 83.23.31.85 178.175.135.100 45.116.251.190