必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Republic of China (ROC)

运营商(isp): Chunghwa Telecom Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspam
Jul  9 16:30:54 dallas01 sshd[12968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.134.138.111
Jul  9 16:30:56 dallas01 sshd[12968]: Failed password for invalid user testftp from 220.134.138.111 port 37808 ssh2
Jul  9 16:32:40 dallas01 sshd[13497]: Failed password for root from 220.134.138.111 port 54738 ssh2
2019-10-08 23:37:34
attack
Sep  3 22:40:20 dev0-dcfr-rnet sshd[26582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.134.138.111
Sep  3 22:40:23 dev0-dcfr-rnet sshd[26582]: Failed password for invalid user crm from 220.134.138.111 port 43116 ssh2
Sep  3 22:45:22 dev0-dcfr-rnet sshd[26699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.134.138.111
2019-09-04 06:23:45
attackbots
Aug 18 23:19:38 mail sshd\[25538\]: Invalid user test from 220.134.138.111
Aug 18 23:19:38 mail sshd\[25538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.134.138.111
Aug 18 23:19:41 mail sshd\[25538\]: Failed password for invalid user test from 220.134.138.111 port 33168 ssh2
...
2019-08-19 06:15:54
attack
Invalid user thomas from 220.134.138.111 port 34414
2019-08-16 22:37:46
attackbots
Automatic report - Banned IP Access
2019-08-09 04:19:33
attackbots
$f2bV_matches
2019-08-05 07:36:52
attackspambots
Jul 31 20:23:29 srv-4 sshd\[16380\]: Invalid user kun from 220.134.138.111
Jul 31 20:23:29 srv-4 sshd\[16380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.134.138.111
Jul 31 20:23:31 srv-4 sshd\[16380\]: Failed password for invalid user kun from 220.134.138.111 port 49172 ssh2
...
2019-08-01 02:24:19
attack
Jul 20 00:03:28 eventyay sshd[4439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.134.138.111
Jul 20 00:03:30 eventyay sshd[4439]: Failed password for invalid user usuario2 from 220.134.138.111 port 55264 ssh2
Jul 20 00:08:44 eventyay sshd[5674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.134.138.111
...
2019-07-20 07:52:34
attack
Jul 14 14:40:11 tux-35-217 sshd\[22853\]: Invalid user micha from 220.134.138.111 port 54846
Jul 14 14:40:11 tux-35-217 sshd\[22853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.134.138.111
Jul 14 14:40:13 tux-35-217 sshd\[22853\]: Failed password for invalid user micha from 220.134.138.111 port 54846 ssh2
Jul 14 14:45:43 tux-35-217 sshd\[22880\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.134.138.111  user=root
...
2019-07-14 20:58:36
attackbots
2019-06-28T08:58:20.258286  sshd[11339]: Invalid user jira from 220.134.138.111 port 48860
2019-06-28T08:58:20.275599  sshd[11339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.134.138.111
2019-06-28T08:58:20.258286  sshd[11339]: Invalid user jira from 220.134.138.111 port 48860
2019-06-28T08:58:22.801059  sshd[11339]: Failed password for invalid user jira from 220.134.138.111 port 48860 ssh2
2019-06-28T09:01:20.221717  sshd[11392]: Invalid user serverpilot from 220.134.138.111 port 50652
...
2019-06-28 17:36:53
attackspam
SSH Brute Force
2019-06-23 16:22:55
相同子网IP讨论:
IP 类型 评论内容 时间
220.134.138.171 attackbotsspam
Portscan detected
2020-07-28 06:08:42
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 220.134.138.111
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16774
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;220.134.138.111.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019050800 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Wed May 08 17:42:13 +08 2019
;; MSG SIZE  rcvd: 119

HOST信息:
111.138.134.220.in-addr.arpa domain name pointer 220-134-138-111.HINET-IP.hinet.net.
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
111.138.134.220.in-addr.arpa	name = 220-134-138-111.HINET-IP.hinet.net.

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
70.71.148.228 attackbotsspam
$f2bV_matches
2019-10-01 14:54:41
114.33.158.199 attackspam
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/114.33.158.199/ 
 TW - 1H : (223)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TW 
 NAME ASN : ASN3462 
 
 IP : 114.33.158.199 
 
 CIDR : 114.33.0.0/16 
 
 PREFIX COUNT : 390 
 
 UNIQUE IP COUNT : 12267520 
 
 
 WYKRYTE ATAKI Z ASN3462 :  
  1H - 20 
  3H - 50 
  6H - 63 
 12H - 93 
 24H - 155 
 
 DateTime : 2019-10-01 05:51:48 
 
 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN  - data recovery
2019-10-01 15:05:07
185.175.93.103 attack
10/01/2019-09:08:03.589396 185.175.93.103 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-10-01 15:11:17
187.121.108.183 attackbots
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/187.121.108.183/ 
 BR - 1H : (511)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : BR 
 NAME ASN : ASN19182 
 
 IP : 187.121.108.183 
 
 CIDR : 187.121.0.0/17 
 
 PREFIX COUNT : 63 
 
 UNIQUE IP COUNT : 236800 
 
 
 WYKRYTE ATAKI Z ASN19182 :  
  1H - 1 
  3H - 3 
  6H - 5 
 12H - 5 
 24H - 6 
 
 DateTime : 2019-10-01 05:52:22 
 
 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN  - data recovery
2019-10-01 14:36:56
5.249.145.245 attackbotsspam
Oct  1 06:56:39 localhost sshd\[6302\]: Invalid user administrator from 5.249.145.245 port 55917
Oct  1 06:56:39 localhost sshd\[6302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.249.145.245
Oct  1 06:56:41 localhost sshd\[6302\]: Failed password for invalid user administrator from 5.249.145.245 port 55917 ssh2
2019-10-01 15:18:39
172.96.118.42 attackspam
Oct  1 08:37:23 rotator sshd\[19502\]: Failed password for root from 172.96.118.42 port 39320 ssh2Oct  1 08:37:26 rotator sshd\[19502\]: Failed password for root from 172.96.118.42 port 39320 ssh2Oct  1 08:37:29 rotator sshd\[19502\]: Failed password for root from 172.96.118.42 port 39320 ssh2Oct  1 08:37:31 rotator sshd\[19502\]: Failed password for root from 172.96.118.42 port 39320 ssh2Oct  1 08:37:34 rotator sshd\[19502\]: Failed password for root from 172.96.118.42 port 39320 ssh2Oct  1 08:37:36 rotator sshd\[19502\]: Failed password for root from 172.96.118.42 port 39320 ssh2
...
2019-10-01 14:38:22
181.48.29.35 attack
Oct  1 07:12:20 vps647732 sshd[7726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.29.35
Oct  1 07:12:22 vps647732 sshd[7726]: Failed password for invalid user isis from 181.48.29.35 port 43238 ssh2
...
2019-10-01 15:01:50
186.170.28.46 attack
Automated report - ssh fail2ban:
Oct 1 08:03:30 authentication failure 
Oct 1 08:03:32 wrong password, user=rmkim, port=58922, ssh2
Oct 1 08:08:21 authentication failure
2019-10-01 14:59:06
60.250.23.105 attackspam
Invalid user rtkit from 60.250.23.105 port 37596
2019-10-01 15:03:14
188.162.43.9 attack
Brute force attack to crack SMTP password (port 25 / 587)
2019-10-01 14:42:56
106.12.34.56 attackspam
Invalid user bng5 from 106.12.34.56 port 51606
2019-10-01 15:18:06
159.203.122.149 attackbots
Oct  1 04:08:14 unicornsoft sshd\[23044\]: Invalid user cactiuser from 159.203.122.149
Oct  1 04:08:14 unicornsoft sshd\[23044\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.122.149
Oct  1 04:08:16 unicornsoft sshd\[23044\]: Failed password for invalid user cactiuser from 159.203.122.149 port 54130 ssh2
2019-10-01 14:44:01
49.74.67.144 attackbots
2019-10-01T09:39:51.473601tmaserv sshd\[26514\]: Invalid user support from 49.74.67.144 port 1523
2019-10-01T09:39:51.478712tmaserv sshd\[26514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.74.67.144
2019-10-01T09:39:53.534909tmaserv sshd\[26514\]: Failed password for invalid user support from 49.74.67.144 port 1523 ssh2
2019-10-01T09:52:33.509658tmaserv sshd\[27275\]: Invalid user temp from 49.74.67.144 port 3144
2019-10-01T09:52:33.515708tmaserv sshd\[27275\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.74.67.144
2019-10-01T09:52:35.180521tmaserv sshd\[27275\]: Failed password for invalid user temp from 49.74.67.144 port 3144 ssh2
...
2019-10-01 15:07:40
197.248.205.53 attack
Oct  1 06:39:39 vpn01 sshd[14668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.205.53
Oct  1 06:39:41 vpn01 sshd[14668]: Failed password for invalid user soporte from 197.248.205.53 port 39854 ssh2
...
2019-10-01 14:47:02
51.75.32.141 attackbots
2019-10-01T07:00:24.511399abusebot-3.cloudsearch.cf sshd\[29847\]: Invalid user admin from 51.75.32.141 port 36490
2019-10-01 15:19:55

最近上报的IP列表

111.220.132.70 81.106.59.76 190.98.194.146 95.52.84.202
115.21.169.88 85.146.41.136 218.28.2.142 155.93.228.24
188.165.119.104 77.242.178.237 178.87.73.224 42.112.235.22
59.92.91.214 46.162.38.31 32.179.220.50 138.68.41.184
123.194.225.199 102.250.240.46 85.101.0.30 87.72.65.252