必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): Amazon Technologies Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspambots
Oct 19 03:00:36 archiv sshd[24214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-18-140-20-72.ap-southeast-1.compute.amazonaws.com  user=r.r
Oct 19 03:00:39 archiv sshd[24214]: Failed password for r.r from 18.140.20.72 port 41580 ssh2
Oct 19 03:00:39 archiv sshd[24214]: Received disconnect from 18.140.20.72 port 41580:11: Bye Bye [preauth]
Oct 19 03:00:39 archiv sshd[24214]: Disconnected from 18.140.20.72 port 41580 [preauth]
Oct 19 03:25:24 archiv sshd[24472]: Connection closed by 18.140.20.72 port 57462 [preauth]
Oct 19 03:43:11 archiv sshd[24608]: Invalid user ubnt from 18.140.20.72 port 40350
Oct 19 03:43:11 archiv sshd[24608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-18-140-20-72.ap-southeast-1.compute.amazonaws.com
Oct 19 03:43:13 archiv sshd[24608]: Failed password for invalid user ubnt from 18.140.20.72 port 40350 ssh2
Oct 19 03:43:13 archiv sshd[24608]: Received di........
-------------------------------
2019-10-19 22:19:11
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.140.20.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19867
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;18.140.20.72.			IN	A

;; AUTHORITY SECTION:
.			383	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101900 1800 900 604800 86400

;; Query time: 234 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 19 22:19:03 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
72.20.140.18.in-addr.arpa domain name pointer ec2-18-140-20-72.ap-southeast-1.compute.amazonaws.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
72.20.140.18.in-addr.arpa	name = ec2-18-140-20-72.ap-southeast-1.compute.amazonaws.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
184.75.211.147 attackspambots
HTTP contact form spam
2019-10-31 17:59:12
131.130.9.248 attackspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/131.130.9.248/ 
 
 AT - 1H : (3)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : AT 
 NAME ASN : ASN760 
 
 IP : 131.130.9.248 
 
 CIDR : 131.130.0.0/16 
 
 PREFIX COUNT : 7 
 
 UNIQUE IP COUNT : 99584 
 
 
 ATTACKS DETECTED ASN760 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-10-31 04:48:57 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery
2019-10-31 17:58:05
14.248.96.129 attackspam
445/tcp
[2019-10-31]1pkt
2019-10-31 17:53:31
94.208.109.65 attackspambots
port scan and connect, tcp 5432 (postgresql)
2019-10-31 17:56:21
61.228.229.191 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/61.228.229.191/ 
 
 TW - 1H : (235)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TW 
 NAME ASN : ASN3462 
 
 IP : 61.228.229.191 
 
 CIDR : 61.228.0.0/16 
 
 PREFIX COUNT : 390 
 
 UNIQUE IP COUNT : 12267520 
 
 
 ATTACKS DETECTED ASN3462 :  
  1H - 5 
  3H - 12 
  6H - 35 
 12H - 79 
 24H - 221 
 
 DateTime : 2019-10-31 06:30:37 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-31 17:27:46
118.25.125.189 attackbotsspam
Oct 31 09:36:53 vps01 sshd[11589]: Failed password for root from 118.25.125.189 port 46786 ssh2
2019-10-31 17:35:05
37.211.15.156 attack
23/tcp
[2019-10-31]1pkt
2019-10-31 17:39:24
134.209.106.112 attackbotsspam
Oct 31 10:27:38 icinga sshd[31678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.112
Oct 31 10:27:40 icinga sshd[31678]: Failed password for invalid user qiao123 from 134.209.106.112 port 58886 ssh2
...
2019-10-31 17:32:30
103.218.242.10 attackbotsspam
Lines containing failures of 103.218.242.10
Oct 30 22:59:23 mailserver sshd[31485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.218.242.10  user=r.r
Oct 30 22:59:26 mailserver sshd[31485]: Failed password for r.r from 103.218.242.10 port 54594 ssh2
Oct 30 22:59:26 mailserver sshd[31485]: Received disconnect from 103.218.242.10 port 54594:11: Bye Bye [preauth]
Oct 30 22:59:26 mailserver sshd[31485]: Disconnected from authenticating user r.r 103.218.242.10 port 54594 [preauth]
Oct 30 23:15:22 mailserver sshd[1597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.218.242.10  user=r.r
Oct 30 23:15:24 mailserver sshd[1597]: Failed password for r.r from 103.218.242.10 port 60242 ssh2
Oct 30 23:15:24 mailserver sshd[1597]: Received disconnect from 103.218.242.10 port 60242:11: Bye Bye [preauth]
Oct 30 23:15:24 mailserver sshd[1597]: Disconnected from authenticating user r.r 103.218.242.1........
------------------------------
2019-10-31 17:42:24
218.94.136.90 attackbots
Oct 30 23:26:04 hanapaa sshd\[29650\]: Invalid user in from 218.94.136.90
Oct 30 23:26:04 hanapaa sshd\[29650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.94.136.90
Oct 30 23:26:05 hanapaa sshd\[29650\]: Failed password for invalid user in from 218.94.136.90 port 57511 ssh2
Oct 30 23:30:37 hanapaa sshd\[29961\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.94.136.90  user=games
Oct 30 23:30:38 hanapaa sshd\[29961\]: Failed password for games from 218.94.136.90 port 47445 ssh2
2019-10-31 17:58:53
103.30.95.66 attackspambots
Oct 30 13:25:42 our-server-hostname postfix/smtpd[8367]: connect from unknown[103.30.95.66]
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct 30 13:25:58 our-server-hostname postfix/smtpd[8367]: lost connection after RCPT from unknown[103.30.95.66]
Oct 30 13:25:58 our-server-hostname postfix/smtpd[8367]: disconnect from unknown[103.30.95.66]
Oct 30 13:41:25 our-server-hostname postfix/smtpd[22339]: connect from unknown[103.30.95.66]
Oct x@x
Oct x@x
Oct 30 13:41:29 our-server-hostname postfix/smtpd[22339]: lost connection after RCPT from unknown[103.30.95.66]
Oct 30 13:41:29 our-server-hostname postfix/smtpd[22339]: disconnect from unknown[103.30.95.66]
Oct 30 13:49:07 our-server-hostname postfix/smtpd[22551]: connect from unknown[103.30.95.66]
Oct x@x
Oct 30 13:49:09 our-server-hostname postfix/smtpd[22551]: lost connection after RCPT from unknown[103.30.95.66]
Oct 30 13:49:09 our-server-hostname postfix/smtpd[22551]: disconnect from unknown[103.30.95.66]
Oct 30 14:14........
-------------------------------
2019-10-31 17:34:03
149.202.206.206 attackspambots
2019-10-31T04:22:19.146787abusebot-8.cloudsearch.cf sshd\[27525\]: Invalid user jcs from 149.202.206.206 port 43624
2019-10-31 17:23:51
80.82.64.213 attackbotsspam
ft-1848-fussball.de 80.82.64.213 \[31/Oct/2019:09:13:54 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 666 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/74.0.3729.169 Safari/537.36"
ft-1848-fussball.de 80.82.64.213 \[31/Oct/2019:09:13:57 +0100\] "POST /wp-login.php HTTP/1.1" 200 5241 "http://ft-1848-fussball.de/wp-login.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/74.0.3729.169 Safari/537.36"
2019-10-31 17:32:53
42.113.183.91 attackspam
445/tcp
[2019-10-31]1pkt
2019-10-31 17:46:50
178.239.161.171 attack
Postfix SMTP rejection
...
2019-10-31 17:23:30

最近上报的IP列表

42.119.1.44 51.15.196.228 157.245.205.236 78.36.111.30
223.207.247.111 185.40.13.141 187.176.190.3 106.51.39.200
1.53.184.95 121.233.84.194 55.41.90.163 114.220.176.106
118.89.19.135 67.209.6.229 213.58.180.62 213.77.126.16
118.141.111.109 92.121.236.72 51.127.62.233 48.33.84.202