必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Groningen

省份(region): Groningen

国家(country): Netherlands

运营商(isp): Osso B.V.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-08-23 01:25:02
attackbotsspam
IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.
2020-08-01 00:46:40
attackbots
[MK-VM2] Blocked by UFW
2020-07-13 01:55:09
attack
sdsd
2020-07-12 03:40:36
attack
[MK-VM3] Blocked by UFW
2020-07-05 18:20:27
attackspam
Automatic report - Port Scan
2020-06-30 18:16:34
attackbotsspam
Jun 26 09:19:06 debian-2gb-nbg1-2 kernel: \[15414604.481717\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=217.21.193.74 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=38 ID=10323 PROTO=TCP SPT=64180 DPT=464 WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-26 15:32:28
attackspambots
05/28/2020-00:19:46.596302 217.21.193.74 Protocol: 1 GPL SCAN PING NMAP
2020-05-28 15:58:29
attackspam
05/09/2020-16:30:59.678978 217.21.193.74 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-05-10 04:39:06
attackbotsspam
[Thu Apr 23 23:13:50 2020] - DDoS Attack From IP: 217.21.193.74 Port: 49704
2020-04-28 07:28:06
attack
Scaning TCP ports every few days. Blocked on 365 days. Scam IP !!
2020-04-27 01:38:41
attackspam
1587648561 - 04/23/2020 15:29:21 Host: 217.21.193.74/217.21.193.74 Port: 11 TCP Blocked
...
2020-04-23 21:58:10
attackbots
ping sweep
2020-04-20 07:31:41
attack
04/13/2020-23:52:24.603292 217.21.193.74 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-04-14 14:34:32
attackbotsspam
IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.
2020-04-03 04:21:18
attackbots
Port scan: Attack repeated for 24 hours
2020-03-07 08:01:15
attackspam
24.02.2020 20:46:13 HTTPs access blocked by firewall
2020-02-25 05:34:28
attackbotsspam
Feb 20 05:57:32 debian-2gb-nbg1-2 kernel: \[4433864.284295\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=217.21.193.74 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=37 ID=41019 PROTO=TCP SPT=61939 DPT=11211 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb 20 05:57:32 debian-2gb-nbg1-2 kernel: \[4433864.384481\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=217.21.193.74 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=45 ID=32278 PROTO=TCP SPT=61940 DPT=11211 WINDOW=1024 RES=0x00 SYN URGP=0
2020-02-20 13:01:17
attackspam
13.02.2020 20:40:37 HTTPs access blocked by firewall
2020-02-14 07:12:39
attack
ICMP MH Probe, Scan /Distributed -
2020-02-11 01:06:19
attackspambots
*Port Scan* detected from 217.21.193.74 (NL/Netherlands/ip-space-by.osso.nl). 4 hits in the last 285 seconds
2020-01-16 13:36:36
attackspambots
Portscan or hack attempt detected by psad/fwsnort
2019-12-31 05:12:34
attackspambots
12/17/2019-09:26:16.455405 217.21.193.74 Protocol: 1 GPL SCAN PING NMAP
2019-12-17 23:00:23
attackbots
07.12.2019 06:37:43 HTTPs access blocked by firewall
2019-12-07 14:52:53
attackbotsspam
217.21.193.74 was recorded 5 times by 3 hosts attempting to connect to the following ports: 1194. Incident counter (4h, 24h, all-time): 5, 13, 200
2019-11-20 06:15:11
attack
Portscan or hack attempt detected by psad/fwsnort
2019-11-18 07:20:07
attack
Portscan or hack attempt detected by psad/fwsnort
2019-11-11 20:32:54
相同子网IP讨论:
IP 类型 评论内容 时间
217.21.193.20 attackbotsspam
Automatic report - Banned IP Access
2019-11-01 03:58:09
217.21.193.20 attack
10/19/2019-07:59:59.346846 217.21.193.20 Protocol: 1 GPL SCAN PING NMAP
2019-10-20 01:05:59
217.21.193.20 attackbotsspam
10/15/2019-22:25:37.098289 217.21.193.20 Protocol: 1 GPL SCAN PING NMAP
2019-10-16 11:19:59
217.21.193.20 attackspam
10/15/2019-11:06:01.932652 217.21.193.20 Protocol: 1 GPL SCAN PING NMAP
2019-10-16 03:42:31
217.21.193.20 attackspambots
10/14/2019-00:18:08.960903 217.21.193.20 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-10-14 18:03:32
217.21.193.20 attack
10/09/2019-01:12:50.177156 217.21.193.20 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-10-09 15:12:06
217.21.193.20 attack
464/tcp 445/tcp 401/tcp...
[2019-08-03/10-04]1953pkt,101pt.(tcp),2tp.(icmp)
2019-10-04 22:43:25
217.21.193.20 attack
09/25/2019-01:09:19.002611 217.21.193.20 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-09-25 13:10:33
217.21.193.20 attack
27017/tcp 21064/tcp 12010/tcp...
[2019-07-22/09-21]2002pkt,102pt.(tcp),2tp.(icmp)
2019-09-22 14:37:23
217.21.193.20 attackbots
5800/tcp 5601/tcp 5444/tcp...
[2019-07-11/09-11]2057pkt,102pt.(tcp),2tp.(icmp)
2019-09-12 06:49:43
217.21.193.20 attackspambots
09/04/2019-00:34:02.750028 217.21.193.20 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-09-04 16:27:22
217.21.193.20 attackbotsspam
Splunk® : port scan detected:
Aug 24 08:28:51 testbed kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:64:c3:d6:0b:ef:f0:08:00 SRC=217.21.193.20 DST=104.248.11.191 LEN=44 TOS=0x00 PREC=0x00 TTL=39 ID=13104 PROTO=TCP SPT=48734 DPT=5000 WINDOW=1024 RES=0x00 SYN URGP=0
2019-08-25 01:14:01
217.21.193.20 attackbotsspam
Portscan or hack attempt detected by psad/fwsnort
2019-08-19 07:25:06
217.21.193.20 attackbots
Portscan or hack attempt detected by psad/fwsnort
2019-08-11 05:05:47
217.21.193.20 attackbots
08/07/2019-03:59:45.310586 217.21.193.20 Protocol: 1 GPL SCAN PING NMAP
2019-08-07 20:21:23
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 217.21.193.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32535
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;217.21.193.74.			IN	A

;; AUTHORITY SECTION:
.			124	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111100 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 11 20:32:51 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
74.193.21.217.in-addr.arpa domain name pointer ip-space-by.osso.nl.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
74.193.21.217.in-addr.arpa	name = ip-space-by.osso.nl.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
112.26.98.122 attack
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-08-29 23:15:32
222.186.52.78 attack
2020-08-29T15:16:28.785019server.espacesoutien.com sshd[28323]: Failed password for root from 222.186.52.78 port 33027 ssh2
2020-08-29T15:16:31.759767server.espacesoutien.com sshd[28323]: Failed password for root from 222.186.52.78 port 33027 ssh2
2020-08-29T15:17:50.391901server.espacesoutien.com sshd[30472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.78  user=root
2020-08-29T15:17:51.713848server.espacesoutien.com sshd[30472]: Failed password for root from 222.186.52.78 port 44379 ssh2
...
2020-08-29 23:26:20
125.212.203.113 attackspambots
Aug 29 17:01:49 fhem-rasp sshd[8014]: Failed password for root from 125.212.203.113 port 35982 ssh2
Aug 29 17:01:51 fhem-rasp sshd[8014]: Disconnected from authenticating user root 125.212.203.113 port 35982 [preauth]
...
2020-08-29 23:04:14
112.85.42.89 attackspambots
Aug 29 20:41:20 dhoomketu sshd[2748624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89  user=root
Aug 29 20:41:22 dhoomketu sshd[2748624]: Failed password for root from 112.85.42.89 port 29720 ssh2
Aug 29 20:41:20 dhoomketu sshd[2748624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89  user=root
Aug 29 20:41:22 dhoomketu sshd[2748624]: Failed password for root from 112.85.42.89 port 29720 ssh2
Aug 29 20:41:25 dhoomketu sshd[2748624]: Failed password for root from 112.85.42.89 port 29720 ssh2
...
2020-08-29 23:24:37
182.73.52.210 attack
Unauthorized connection attempt detected from IP address 182.73.52.210 to port 445 [T]
2020-08-29 23:29:24
89.222.181.58 attack
2020-08-29T09:56:31.152541dreamphreak.com sshd[161796]: Invalid user nadmin from 89.222.181.58 port 37678
2020-08-29T09:56:33.568316dreamphreak.com sshd[161796]: Failed password for invalid user nadmin from 89.222.181.58 port 37678 ssh2
...
2020-08-29 23:13:30
178.128.95.43 attackspam
Aug 29 16:08:38 abendstille sshd\[4006\]: Invalid user postgres from 178.128.95.43
Aug 29 16:08:38 abendstille sshd\[4006\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.95.43
Aug 29 16:08:40 abendstille sshd\[4006\]: Failed password for invalid user postgres from 178.128.95.43 port 63264 ssh2
Aug 29 16:13:05 abendstille sshd\[7790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.95.43  user=root
Aug 29 16:13:06 abendstille sshd\[7790\]: Failed password for root from 178.128.95.43 port 61701 ssh2
...
2020-08-29 23:17:04
47.104.85.14 attackspambots
47.104.85.14 - - [29/Aug/2020:15:30:34 +0100] "POST /wp-login.php HTTP/1.1" 200 1905 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
47.104.85.14 - - [29/Aug/2020:15:30:39 +0100] "POST /wp-login.php HTTP/1.1" 200 1890 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
47.104.85.14 - - [29/Aug/2020:15:30:44 +0100] "POST /wp-login.php HTTP/1.1" 200 1887 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-29 23:18:48
192.241.233.184 attackspambots
firewall-block, port(s): 21/tcp
2020-08-29 23:41:57
142.93.242.246 attackspam
Aug 29 10:13:09 firewall sshd[12731]: Failed password for invalid user nec from 142.93.242.246 port 33536 ssh2
Aug 29 10:18:02 firewall sshd[12805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.242.246  user=root
Aug 29 10:18:04 firewall sshd[12805]: Failed password for root from 142.93.242.246 port 34968 ssh2
...
2020-08-29 23:03:47
212.70.149.83 attackbots
3068 times SMTP brute-force
2020-08-29 23:06:14
51.79.74.209 attackspambots
Aug 29 16:22:08 pkdns2 sshd\[38200\]: Invalid user pieter from 51.79.74.209Aug 29 16:22:11 pkdns2 sshd\[38200\]: Failed password for invalid user pieter from 51.79.74.209 port 33898 ssh2Aug 29 16:26:07 pkdns2 sshd\[38417\]: Invalid user xguest from 51.79.74.209Aug 29 16:26:08 pkdns2 sshd\[38417\]: Failed password for invalid user xguest from 51.79.74.209 port 43560 ssh2Aug 29 16:29:57 pkdns2 sshd\[38521\]: Invalid user janis from 51.79.74.209Aug 29 16:29:59 pkdns2 sshd\[38521\]: Failed password for invalid user janis from 51.79.74.209 port 53126 ssh2
...
2020-08-29 23:15:04
181.197.26.16 attack
[N10.H1.VM1] Port Scanner Detected Blocked by UFW
2020-08-29 22:59:54
171.221.217.145 attackspam
Aug 29 05:06:33 pixelmemory sshd[1149046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.221.217.145 
Aug 29 05:06:33 pixelmemory sshd[1149046]: Invalid user elise from 171.221.217.145 port 56355
Aug 29 05:06:35 pixelmemory sshd[1149046]: Failed password for invalid user elise from 171.221.217.145 port 56355 ssh2
Aug 29 05:09:15 pixelmemory sshd[1149425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.221.217.145  user=root
Aug 29 05:09:17 pixelmemory sshd[1149425]: Failed password for root from 171.221.217.145 port 43345 ssh2
...
2020-08-29 23:24:03
103.51.139.69 attackbotsspam
103.51.139.69 - - [29/Aug/2020:13:09:37 +0100] "POST /xmlrpc.php HTTP/1.1" 404 191 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.36"
103.51.139.69 - - [29/Aug/2020:13:09:38 +0100] "POST /xmlrpc.php HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.36"
103.51.139.69 - - [29/Aug/2020:13:09:38 +0100] "POST /wordpress/xmlrpc.php HTTP/1.1" 404 191 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.36"
...
2020-08-29 23:08:34

最近上报的IP列表

106.198.20.57 171.103.38.34 102.158.107.95 78.229.188.187
202.53.87.74 156.96.150.62 82.209.229.231 107.173.222.159
190.182.179.12 217.196.110.2 94.74.170.18 92.222.92.128
167.99.119.244 89.189.128.224 81.12.64.172 49.146.35.95
49.145.194.165 49.144.239.177 43.247.14.155 42.114.156.170