必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 6.16.240.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29250
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;6.16.240.21.			IN	A

;; AUTHORITY SECTION:
.			247	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023052400 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 24 14:51:26 CST 2023
;; MSG SIZE  rcvd: 104
HOST信息:
b'Host 21.240.16.6.in-addr.arpa not found: 2(SERVFAIL)
'
NSLOOKUP信息:
server can't find 6.16.240.21.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
104.244.79.241 attackbotsspam
Sep  9 12:58:55 prox sshd[24842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.79.241 
Sep  9 12:58:57 prox sshd[24842]: Failed password for invalid user admin from 104.244.79.241 port 35386 ssh2
2020-09-09 20:44:05
93.56.47.242 attack
93.56.47.242 - - \[09/Sep/2020:12:27:34 +0200\] "POST /wp-login.php HTTP/1.1" 200 12843 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
93.56.47.242 - - \[09/Sep/2020:12:27:35 +0200\] "POST /wp-login.php HTTP/1.1" 200 12678 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2020-09-09 20:59:33
5.188.158.147 attackbotsspam
(Sep  9)  LEN=40 TTL=249 ID=30607 TCP DPT=3389 WINDOW=1024 SYN 
 (Sep  9)  LEN=40 TTL=249 ID=32490 TCP DPT=3389 WINDOW=1024 SYN 
 (Sep  9)  LEN=40 TTL=248 ID=16658 TCP DPT=3389 WINDOW=1024 SYN 
 (Sep  9)  LEN=40 TTL=249 ID=11148 TCP DPT=3389 WINDOW=1024 SYN 
 (Sep  8)  LEN=40 TTL=248 ID=37536 TCP DPT=3389 WINDOW=1024 SYN 
 (Sep  8)  LEN=40 TTL=249 ID=25247 TCP DPT=3389 WINDOW=1024 SYN 
 (Sep  8)  LEN=40 TTL=249 ID=45601 TCP DPT=3389 WINDOW=1024 SYN 
 (Sep  8)  LEN=40 TTL=249 ID=37009 TCP DPT=3389 WINDOW=1024 SYN 
 (Sep  7)  LEN=40 TTL=249 ID=17591 TCP DPT=3389 WINDOW=1024 SYN 
 (Sep  7)  LEN=40 TTL=249 ID=25835 TCP DPT=3389 WINDOW=1024 SYN 
 (Sep  7)  LEN=40 TTL=248 ID=33462 TCP DPT=3389 WINDOW=1024 SYN 
 (Sep  7)  LEN=40 TTL=249 ID=37317 TCP DPT=3389 WINDOW=1024 SYN 
 (Sep  7)  LEN=40 TTL=249 ID=56103 TCP DPT=3389 WINDOW=1024 SYN
2020-09-09 20:56:39
73.6.227.20 attack
2020-09-09T04:35:44.483212devel sshd[10768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-73-6-227-20.hsd1.tx.comcast.net
2020-09-09T04:35:44.414706devel sshd[10768]: Invalid user pi from 73.6.227.20 port 60646
2020-09-09T04:35:46.546884devel sshd[10768]: Failed password for invalid user pi from 73.6.227.20 port 60646 ssh2
2020-09-09 20:38:53
130.149.80.199 attack
Automatic report - Banned IP Access
2020-09-09 20:34:03
157.245.178.61 attack
Sep  9 14:29:11 PorscheCustomer sshd[18867]: Failed password for root from 157.245.178.61 port 53440 ssh2
Sep  9 14:32:59 PorscheCustomer sshd[18955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.178.61
Sep  9 14:33:01 PorscheCustomer sshd[18955]: Failed password for invalid user jenkins from 157.245.178.61 port 60402 ssh2
...
2020-09-09 20:42:51
157.245.126.36 attack
157.245.126.36 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep  9 08:54:54 jbs1 sshd[31128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.101.132.241  user=root
Sep  9 08:54:57 jbs1 sshd[31128]: Failed password for root from 121.101.132.241 port 57834 ssh2
Sep  9 08:53:44 jbs1 sshd[30552]: Failed password for root from 91.134.240.130 port 43248 ssh2
Sep  9 09:01:02 jbs1 sshd[1052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.126.36  user=root
Sep  9 08:58:03 jbs1 sshd[32396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.110.238.171  user=root
Sep  9 08:58:05 jbs1 sshd[32396]: Failed password for root from 47.110.238.171 port 46124 ssh2

IP Addresses Blocked:

121.101.132.241 (ID/Indonesia/-)
91.134.240.130 (FR/France/-)
2020-09-09 21:02:21
213.145.137.102 attack
SPAM
2020-09-09 20:32:38
51.83.132.89 attackbots
Sep  9 12:25:35 vps333114 sshd[10572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=vps-4238fc4d.vps.ovh.net  user=root
Sep  9 12:25:37 vps333114 sshd[10572]: Failed password for root from 51.83.132.89 port 59769 ssh2
...
2020-09-09 21:00:17
177.53.140.230 attack
(mod_security) mod_security (id:211210) triggered by 177.53.140.230 (BR/Brazil/host140-230.viabrs.com.br): 5 in the last 3600 secs
2020-09-09 21:04:45
185.220.101.134 attackspam
Sep  9 14:47:33 rotator sshd\[11098\]: Failed password for root from 185.220.101.134 port 21654 ssh2Sep  9 14:47:35 rotator sshd\[11098\]: Failed password for root from 185.220.101.134 port 21654 ssh2Sep  9 14:47:37 rotator sshd\[11098\]: Failed password for root from 185.220.101.134 port 21654 ssh2Sep  9 14:47:39 rotator sshd\[11098\]: Failed password for root from 185.220.101.134 port 21654 ssh2Sep  9 14:47:41 rotator sshd\[11098\]: Failed password for root from 185.220.101.134 port 21654 ssh2Sep  9 14:47:44 rotator sshd\[11098\]: Failed password for root from 185.220.101.134 port 21654 ssh2
...
2020-09-09 21:08:44
106.54.47.171 attackbots
Sep  9 08:25:36 root sshd[1806]: Failed password for root from 106.54.47.171 port 50814 ssh2
...
2020-09-09 20:58:47
161.35.138.131 attackspam
20 attempts against mh-ssh on cloud
2020-09-09 20:33:46
81.163.117.212 attackspam
srvr2: (mod_security) mod_security (id:920350) triggered by 81.163.117.212 (UA/-/212-117.tkplazma.com.ua): 1 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/09/08 18:54:23 [error] 548013#0: *348564 [client 81.163.117.212] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host'  [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "159958406331.945953"] [ref "o0,18v21,18"], client: 81.163.117.212, [redacted] request: "GET / HTTP/1.1" [redacted]
2020-09-09 20:49:11
186.30.58.56 attackspam
Fail2Ban Ban Triggered
2020-09-09 21:01:58

最近上报的IP列表

187.24.231.30 5.175.146.6 1.66.202.232 137.43.183.193
140.128.197.54 71.83.118.243 251.90.4.6 229.10.92.196
6.99.254.217 98.167.194.249 47.46.11.252 246.21.11.143
85.76.12.210 8.6.90.124 103.19.1.191 172.91.39.70
86.178.126.53 194.209.25.11 228.16.111.115 49.140.143.80