必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): Fujian

国家(country): China

运营商(isp): ChinaNet Fujian Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackbots
Port 1433 Scan
2019-12-13 20:50:28
attack
port scan and connect, tcp 1433 (ms-sql-s)
2019-11-10 23:48:32
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 218.66.111.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27482
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;218.66.111.134.			IN	A

;; AUTHORITY SECTION:
.			557	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111000 1800 900 604800 86400

;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 10 23:48:24 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 134.111.66.218.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 134.111.66.218.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
113.190.230.34 attackbots
1590119504 - 05/22/2020 05:51:44 Host: 113.190.230.34/113.190.230.34 Port: 445 TCP Blocked
2020-05-22 17:09:42
103.60.221.52 attackspambots
Invalid user rae from 103.60.221.52 port 44330
2020-05-22 17:18:47
106.13.106.27 attackspambots
May 22 06:52:58 srv-ubuntu-dev3 sshd[118326]: Invalid user xsh from 106.13.106.27
May 22 06:52:58 srv-ubuntu-dev3 sshd[118326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.106.27
May 22 06:52:58 srv-ubuntu-dev3 sshd[118326]: Invalid user xsh from 106.13.106.27
May 22 06:52:59 srv-ubuntu-dev3 sshd[118326]: Failed password for invalid user xsh from 106.13.106.27 port 52630 ssh2
May 22 06:55:37 srv-ubuntu-dev3 sshd[118837]: Invalid user ekp from 106.13.106.27
May 22 06:55:37 srv-ubuntu-dev3 sshd[118837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.106.27
May 22 06:55:37 srv-ubuntu-dev3 sshd[118837]: Invalid user ekp from 106.13.106.27
May 22 06:55:39 srv-ubuntu-dev3 sshd[118837]: Failed password for invalid user ekp from 106.13.106.27 port 58824 ssh2
May 22 06:58:20 srv-ubuntu-dev3 sshd[119331]: Invalid user frz from 106.13.106.27
...
2020-05-22 16:59:45
185.220.101.202 attackbotsspam
Brute force attempt
2020-05-22 17:33:44
82.62.246.70 attackbotsspam
Unauthorized connection attempt detected from IP address 82.62.246.70 to port 80
2020-05-22 17:17:24
116.114.95.130 attackspambots
Port probing on unauthorized port 23
2020-05-22 17:03:45
110.8.67.146 attackspambots
May 21 23:05:19 web1 sshd\[620\]: Invalid user ukd from 110.8.67.146
May 21 23:05:19 web1 sshd\[620\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.8.67.146
May 21 23:05:21 web1 sshd\[620\]: Failed password for invalid user ukd from 110.8.67.146 port 60762 ssh2
May 21 23:09:22 web1 sshd\[1122\]: Invalid user uxe from 110.8.67.146
May 21 23:09:22 web1 sshd\[1122\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.8.67.146
2020-05-22 17:11:22
120.132.6.27 attackspambots
Invalid user rrq from 120.132.6.27 port 40615
2020-05-22 17:12:05
195.54.167.17 attackbots
May 22 10:43:34 debian-2gb-nbg1-2 kernel: \[12395832.391056\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.54.167.17 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=26256 PROTO=TCP SPT=44313 DPT=30786 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-22 17:00:17
95.217.121.163 attackspambots
slow and persistent scanner
2020-05-22 17:10:03
222.186.175.23 attack
May 22 11:29:59 *host* sshd\[7936\]: User *user* from 222.186.175.23 not allowed because none of user's groups are listed in AllowGroups
2020-05-22 17:30:12
142.93.112.41 attack
$f2bV_matches
2020-05-22 17:18:15
122.202.48.251 attackspambots
May 22 11:12:52 nextcloud sshd\[28014\]: Invalid user cdq from 122.202.48.251
May 22 11:12:52 nextcloud sshd\[28014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.202.48.251
May 22 11:12:54 nextcloud sshd\[28014\]: Failed password for invalid user cdq from 122.202.48.251 port 54782 ssh2
2020-05-22 17:19:18
162.243.139.107 attack
Connection by 162.243.139.107 on port: 2222 got caught by honeypot at 5/22/2020 7:59:00 AM
2020-05-22 17:05:29
92.222.66.234 attackbots
2020-05-22T11:51:00.077389afi-git.jinr.ru sshd[18089]: Invalid user zwk from 92.222.66.234 port 40500
2020-05-22T11:51:00.080636afi-git.jinr.ru sshd[18089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=234.ip-92-222-66.eu
2020-05-22T11:51:00.077389afi-git.jinr.ru sshd[18089]: Invalid user zwk from 92.222.66.234 port 40500
2020-05-22T11:51:02.438350afi-git.jinr.ru sshd[18089]: Failed password for invalid user zwk from 92.222.66.234 port 40500 ssh2
2020-05-22T11:54:16.810035afi-git.jinr.ru sshd[19372]: Invalid user xob from 92.222.66.234 port 46148
...
2020-05-22 17:05:49

最近上报的IP列表

111.231.69.18 116.203.209.23 70.183.157.187 105.27.98.22
171.224.178.10 197.245.57.143 41.46.83.100 27.62.113.219
185.53.160.203 104.162.227.148 125.214.51.33 173.30.10.184
82.147.204.99 201.167.17.236 212.3.124.73 89.172.51.36
190.204.159.125 178.44.192.35 94.233.65.130 196.219.95.132