必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Azerbaijan

运营商(isp): Delta Telecom Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackbots
445/tcp 445/tcp 445/tcp...
[2019-06-06/07-02]7pkt,1pt.(tcp)
2019-07-02 15:32:32
相同子网IP讨论:
IP 类型 评论内容 时间
94.20.200.122 attack
Honeypot attack, port: 445, PTR: PTR record not found
2019-08-26 12:21:49
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.20.200.124
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55237
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.20.200.124.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019052601 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon May 27 12:35:23 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:
124.200.20.94.in-addr.arpa domain name pointer mail.rcom.az.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
*** Can't find 124.200.20.94.in-addr.arpa.: No answer

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
198.27.90.106 attackspam
Jan  3 00:03:36 ns382633 sshd\[7379\]: Invalid user name from 198.27.90.106 port 43764
Jan  3 00:03:36 ns382633 sshd\[7379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.27.90.106
Jan  3 00:03:37 ns382633 sshd\[7379\]: Failed password for invalid user name from 198.27.90.106 port 43764 ssh2
Jan  3 00:05:58 ns382633 sshd\[8046\]: Invalid user lpg from 198.27.90.106 port 52949
Jan  3 00:05:58 ns382633 sshd\[8046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.27.90.106
2020-01-03 08:31:55
218.92.0.138 attackspambots
Jan  3 01:30:28 solowordpress sshd[7471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138  user=root
Jan  3 01:30:30 solowordpress sshd[7471]: Failed password for root from 218.92.0.138 port 28007 ssh2
...
2020-01-03 08:38:13
203.160.165.2 attack
20/1/2@18:06:20: FAIL: Alarm-Network address from=203.160.165.2
...
2020-01-03 08:09:18
106.52.93.188 attackbotsspam
$f2bV_matches
2020-01-03 08:32:24
92.119.160.31 attack
Jan  3 00:53:57 h2177944 kernel: \[1207849.951234\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.31 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=53092 PROTO=TCP SPT=54881 DPT=4444 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  3 00:53:57 h2177944 kernel: \[1207849.951248\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.31 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=53092 PROTO=TCP SPT=54881 DPT=4444 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  3 00:58:30 h2177944 kernel: \[1208123.495582\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.31 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=34695 PROTO=TCP SPT=54881 DPT=33891 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  3 00:58:30 h2177944 kernel: \[1208123.495595\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.31 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=34695 PROTO=TCP SPT=54881 DPT=33891 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  3 01:07:54 h2177944 kernel: \[1208687.158796\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.31 DST=85.214.117
2020-01-03 08:18:16
115.41.57.249 attackbots
SSH Login Bruteforce
2020-01-03 08:37:12
98.249.144.202 attack
$f2bV_matches
2020-01-03 08:09:50
80.211.16.26 attackbotsspam
Jan  3 00:51:20 markkoudstaal sshd[20894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.16.26
Jan  3 00:51:21 markkoudstaal sshd[20894]: Failed password for invalid user sz from 80.211.16.26 port 37904 ssh2
Jan  3 00:54:07 markkoudstaal sshd[21167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.16.26
2020-01-03 08:12:18
126.66.1.86 attackbots
SASL PLAIN auth failed: ruser=...
2020-01-03 08:24:47
139.155.21.46 attackspam
(sshd) Failed SSH login from 139.155.21.46 (CN/China/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jan  2 23:00:00 andromeda sshd[11221]: Invalid user kda from 139.155.21.46 port 38714
Jan  2 23:00:02 andromeda sshd[11221]: Failed password for invalid user kda from 139.155.21.46 port 38714 ssh2
Jan  2 23:06:00 andromeda sshd[11917]: Invalid user tfserver from 139.155.21.46 port 36352
2020-01-03 08:18:46
37.139.3.113 attack
Runs a cryptocurrency malware that brute-forces servers over ssh
2020-01-03 08:36:24
177.86.186.254 attackspambots
Jan  3 00:46:48 [host] sshd[4422]: Invalid user sagemath from 177.86.186.254
Jan  3 00:46:48 [host] sshd[4422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.86.186.254
Jan  3 00:46:49 [host] sshd[4422]: Failed password for invalid user sagemath from 177.86.186.254 port 50292 ssh2
2020-01-03 08:05:08
14.162.69.123 attackbots
SASL PLAIN auth failed: ruser=...
2020-01-03 08:30:50
123.21.155.71 attackspambots
SASL PLAIN auth failed: ruser=...
2020-01-03 08:25:40
46.21.145.50 attackspambots
2020-01-03 00:06:14 auth_plain authenticator failed for win.1gbits.com (polypics.ru) [46.21.145.50]: 535 Incorrect authentication data (set_id=info)
2020-01-03 00:06:20 auth_plain authenticator failed for win.1gbits.com (polypics.ru) [46.21.145.50]: 535 Incorrect authentication data (set_id=info@polypics.ru)
...
2020-01-03 08:09:04

最近上报的IP列表

135.190.29.101 1.54.102.240 59.171.110.69 47.37.85.19
246.75.0.15 226.75.76.33 162.144.38.250 173.225.179.121
89.17.44.173 189.228.132.173 113.210.92.133 213.151.13.158
38.196.161.222 118.243.61.146 190.201.189.255 224.108.106.214
134.175.0.75 72.124.123.159 85.50.208.112 56.242.184.77