必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Guangzhou

省份(region): Guangdong

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
121.8.28.182 attack
Unauthorized connection attempt detected from IP address 121.8.28.182 to port 6656 [T]
2020-01-30 16:58:14
WHOIS信息:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '121.8.0.0 - 121.15.255.255'

% Abuse contact for '121.8.0.0 - 121.15.255.255' is 'anti-spam@chinatelecom.cn'

inetnum:        121.8.0.0 - 121.15.255.255
netname:        CHINANET-GD
descr:          CHINANET Guangdong province network
descr:          China Telecom
descr:          No.31,jingrong street
descr:          Beijing 100032
country:        CN
admin-c:        CH93-AP
tech-c:         IC83-AP
abuse-c:        AC1573-AP
status:         ALLOCATED PORTABLE
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CHINANET-GD
mnt-routes:     MAINT-CHINANET-GD
mnt-irt:        IRT-CHINANET-CN
last-modified:  2021-06-15T08:06:11Z
source:         APNIC

irt:            IRT-CHINANET-CN
address:        No.31 ,jingrong street,beijing
address:        100032
e-mail:         anti-spam@chinatelecom.cn
abuse-mailbox:  anti-spam@chinatelecom.cn
admin-c:        CH93-AP
tech-c:         CH93-AP
auth:           # Filtered
remarks:        anti-spam@chinatelecom.cn was validated on 2026-05-21
mnt-by:         MAINT-CHINANET
last-modified:  2026-05-21T01:31:36Z
source:         APNIC

role:           ABUSE CHINANETCN
country:        ZZ
address:        No.31 ,jingrong street,beijing
address:        100032
phone:          +000000000
e-mail:         anti-spam@chinatelecom.cn
admin-c:        CH93-AP
tech-c:         CH93-AP
nic-hdl:        AC1573-AP
remarks:        Generated from irt object IRT-CHINANET-CN
remarks:        anti-spam@chinatelecom.cn was validated on 2026-05-21
abuse-mailbox:  anti-spam@chinatelecom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-05-21T01:32:00Z
source:         APNIC

person:         Chinanet Hostmaster
nic-hdl:        CH93-AP
e-mail:         anti-spam@chinatelecom.cn
address:        No.31 ,jingrong street,beijing
address:        100032
phone:          +86-10-58501724
fax-no:         +86-10-58501724
country:        CN
mnt-by:         MAINT-CHINANET
last-modified:  2022-02-28T06:53:44Z
source:         APNIC

person:         IPMASTER CHINANET-GD
nic-hdl:        IC83-AP
e-mail:         abuse_gdicnoc@163.com
address:        NO.18,RO. ZHONGSHANER,YUEXIU DISTRIC,GUANGZHOU
phone:          +86-20-87189274
fax-no:         +86-20-87189274
country:        CN
mnt-by:         MAINT-CHINANET-GD
remarks:        IPMASTER is not for spam complaint,please send spam complaint to abuse_gdicnoc@163.com
abuse-mailbox:  abuse_gdicnoc@163.com
last-modified:  2021-05-12T09:06:58Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.8.28.84
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3961
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;121.8.28.84.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026062500 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 25 15:04:31 CST 2026
;; MSG SIZE  rcvd: 104
HOST信息:
Host 84.28.8.121.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 84.28.8.121.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
185.147.215.14 attackbotsspam
[2020-10-09 14:41:20] NOTICE[1182] chan_sip.c: Registration from '' failed for '185.147.215.14:59915' - Wrong password
[2020-10-09 14:41:20] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-09T14:41:20.411-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1633",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.14/59915",Challenge="2708f506",ReceivedChallenge="2708f506",ReceivedHash="b88059f6a920e958d28b9e285e7264dc"
[2020-10-09 14:42:01] NOTICE[1182] chan_sip.c: Registration from '' failed for '185.147.215.14:56609' - Wrong password
[2020-10-09 14:42:01] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-09T14:42:01.691-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5205",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.21
...
2020-10-10 02:54:30
83.18.149.38 attack
2020-10-09T15:50:14.918203shield sshd\[3423\]: Invalid user deborah from 83.18.149.38 port 43723
2020-10-09T15:50:14.927799shield sshd\[3423\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=azt38.internetdsl.tpnet.pl
2020-10-09T15:50:16.961879shield sshd\[3423\]: Failed password for invalid user deborah from 83.18.149.38 port 43723 ssh2
2020-10-09T15:56:22.761050shield sshd\[3969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=azt38.internetdsl.tpnet.pl  user=postfix
2020-10-09T15:56:24.977596shield sshd\[3969\]: Failed password for postfix from 83.18.149.38 port 45802 ssh2
2020-10-10 02:58:46
147.135.157.67 attackspambots
Oct  9 09:31:54 electroncash sshd[12338]: Failed password for invalid user helpdesk1 from 147.135.157.67 port 39586 ssh2
Oct  9 09:36:26 electroncash sshd[14039]: Invalid user history from 147.135.157.67 port 50158
Oct  9 09:36:26 electroncash sshd[14039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.157.67 
Oct  9 09:36:26 electroncash sshd[14039]: Invalid user history from 147.135.157.67 port 50158
Oct  9 09:36:29 electroncash sshd[14039]: Failed password for invalid user history from 147.135.157.67 port 50158 ssh2
...
2020-10-10 03:11:42
163.172.40.236 attackbots
163.172.40.236 - - [09/Oct/2020:22:16:01 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2"
...
2020-10-10 02:49:52
162.158.90.34 attackbots
srv02 DDoS Malware Target(80:http) ..
2020-10-10 03:10:35
118.89.244.84 attack
2020-10-09T16:27:34.586458abusebot-2.cloudsearch.cf sshd[32493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.244.84  user=root
2020-10-09T16:27:36.456774abusebot-2.cloudsearch.cf sshd[32493]: Failed password for root from 118.89.244.84 port 36874 ssh2
2020-10-09T16:30:57.047921abusebot-2.cloudsearch.cf sshd[32497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.244.84  user=root
2020-10-09T16:30:59.119070abusebot-2.cloudsearch.cf sshd[32497]: Failed password for root from 118.89.244.84 port 40722 ssh2
2020-10-09T16:33:48.057910abusebot-2.cloudsearch.cf sshd[32505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.244.84  user=root
2020-10-09T16:33:49.606901abusebot-2.cloudsearch.cf sshd[32505]: Failed password for root from 118.89.244.84 port 41702 ssh2
2020-10-09T16:36:45.397359abusebot-2.cloudsearch.cf sshd[32510]: pam_unix(sshd:auth): authe
...
2020-10-10 03:05:47
159.65.13.233 attack
2020-10-09T17:37:11.905333abusebot-3.cloudsearch.cf sshd[24153]: Invalid user testftp from 159.65.13.233 port 35762
2020-10-09T17:37:11.910963abusebot-3.cloudsearch.cf sshd[24153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.13.233
2020-10-09T17:37:11.905333abusebot-3.cloudsearch.cf sshd[24153]: Invalid user testftp from 159.65.13.233 port 35762
2020-10-09T17:37:13.544890abusebot-3.cloudsearch.cf sshd[24153]: Failed password for invalid user testftp from 159.65.13.233 port 35762 ssh2
2020-10-09T17:41:01.277049abusebot-3.cloudsearch.cf sshd[24162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.13.233  user=root
2020-10-09T17:41:03.487963abusebot-3.cloudsearch.cf sshd[24162]: Failed password for root from 159.65.13.233 port 39636 ssh2
2020-10-09T17:44:56.123954abusebot-3.cloudsearch.cf sshd[24174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.
...
2020-10-10 02:53:11
106.52.231.137 attack
ET SCAN NMAP -sS window 1024
2020-10-10 03:01:11
119.45.21.98 attackbots
Oct  9 13:00:43 minden010 sshd[13550]: Failed password for root from 119.45.21.98 port 42840 ssh2
Oct  9 13:04:35 minden010 sshd[14806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.21.98
Oct  9 13:04:37 minden010 sshd[14806]: Failed password for invalid user alex from 119.45.21.98 port 55112 ssh2
...
2020-10-10 02:45:09
185.240.96.123 attackspambots
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-10-09T05:41:14Z and 2020-10-09T05:48:21Z
2020-10-10 03:12:13
125.133.32.189 attackspambots
125.133.32.189 (KR/South Korea/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct  9 17:45:00 server sshd[3776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.73.239  user=root
Oct  9 17:45:02 server sshd[3776]: Failed password for root from 198.199.73.239 port 45975 ssh2
Oct  9 17:39:45 server sshd[2960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.133.32.189  user=root
Oct  9 17:39:47 server sshd[2960]: Failed password for root from 125.133.32.189 port 9655 ssh2
Oct  9 17:42:36 server sshd[3368]: Failed password for root from 187.188.90.141 port 45730 ssh2
Oct  9 17:55:46 server sshd[5424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.71.231.81  user=root

IP Addresses Blocked:

198.199.73.239 (US/United States/-)
2020-10-10 03:12:57
172.105.173.19 attack
recursive dns scanner
2020-10-10 03:14:07
200.194.3.2 attackbots
Automatic report - Port Scan Attack
2020-10-10 02:50:16
112.85.42.85 attack
2020-10-09T19:01:08.695057abusebot-3.cloudsearch.cf sshd[24799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.85  user=root
2020-10-09T19:01:10.152919abusebot-3.cloudsearch.cf sshd[24799]: Failed password for root from 112.85.42.85 port 16692 ssh2
2020-10-09T19:01:13.339484abusebot-3.cloudsearch.cf sshd[24799]: Failed password for root from 112.85.42.85 port 16692 ssh2
2020-10-09T19:01:08.695057abusebot-3.cloudsearch.cf sshd[24799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.85  user=root
2020-10-09T19:01:10.152919abusebot-3.cloudsearch.cf sshd[24799]: Failed password for root from 112.85.42.85 port 16692 ssh2
2020-10-09T19:01:13.339484abusebot-3.cloudsearch.cf sshd[24799]: Failed password for root from 112.85.42.85 port 16692 ssh2
2020-10-09T19:01:08.695057abusebot-3.cloudsearch.cf sshd[24799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rho
...
2020-10-10 03:07:39
79.137.72.121 attack
(sshd) Failed SSH login from 79.137.72.121 (FR/France/121.ip-79-137-72.eu): 5 in the last 3600 secs
2020-10-10 02:48:39

最近上报的IP列表

103.83.86.43 2606:4700:10::6814:8437 218.59.103.135 101.33.34.232
90.251.182.56 47.95.205.76 110.77.226.206 110.78.154.91
2606:4700:10::ac43:2316 148.222.240.100 85.11.187.8 85.11.187.103
31.220.75.131 154.44.123.245 2606:4700:10::6814:5418 2606:4700:10::6814:7864
2606:4700:10::6814:5127 2606:4700:10::6814:6147 164.155.74.123 58.19.79.0