必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 10.196.139.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47681
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;10.196.139.159.			IN	A

;; AUTHORITY SECTION:
.			513	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022010401 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 05 08:11:29 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 159.139.196.10.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 159.139.196.10.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
49.88.112.55 attackspam
Aug  2 02:38:47 dallas01 sshd[25921]: Failed password for root from 49.88.112.55 port 16010 ssh2
Aug  2 02:39:01 dallas01 sshd[25921]: error: maximum authentication attempts exceeded for root from 49.88.112.55 port 16010 ssh2 [preauth]
Aug  2 02:39:06 dallas01 sshd[26274]: Failed password for root from 49.88.112.55 port 18977 ssh2
2019-08-02 16:38:31
157.230.255.181 attack
2019-08-02T08:26:39.813785abusebot-2.cloudsearch.cf sshd\[22340\]: Invalid user emplazamiento from 157.230.255.181 port 60994
2019-08-02 16:48:45
103.35.64.222 attackbots
Aug  2 06:51:35 server sshd\[13461\]: Invalid user mathilde from 103.35.64.222 port 57426
Aug  2 06:51:35 server sshd\[13461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.35.64.222
Aug  2 06:51:37 server sshd\[13461\]: Failed password for invalid user mathilde from 103.35.64.222 port 57426 ssh2
Aug  2 06:56:54 server sshd\[7007\]: Invalid user deploy from 103.35.64.222 port 63254
Aug  2 06:56:54 server sshd\[7007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.35.64.222
2019-08-02 16:44:32
125.160.65.144 attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-02 04:26:42,489 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.160.65.144)
2019-08-02 17:04:20
187.113.46.137 attackbots
Aug  2 10:32:39 web2 sshd[30065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.113.46.137
Aug  2 10:32:40 web2 sshd[30065]: Failed password for invalid user lshields from 187.113.46.137 port 49772 ssh2
2019-08-02 16:52:05
112.85.42.87 attackspam
Aug  2 10:23:13 ubuntu-2gb-nbg1-dc3-1 sshd[12506]: Failed password for root from 112.85.42.87 port 34415 ssh2
Aug  2 10:23:17 ubuntu-2gb-nbg1-dc3-1 sshd[12506]: error: maximum authentication attempts exceeded for root from 112.85.42.87 port 34415 ssh2 [preauth]
...
2019-08-02 16:28:36
27.66.228.13 attackbots
Chat Spam
2019-08-02 16:55:20
144.121.28.206 attack
Aug  2 08:52:22 MK-Soft-VM4 sshd\[1845\]: Invalid user node from 144.121.28.206 port 7838
Aug  2 08:52:22 MK-Soft-VM4 sshd\[1845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.121.28.206
Aug  2 08:52:24 MK-Soft-VM4 sshd\[1845\]: Failed password for invalid user node from 144.121.28.206 port 7838 ssh2
...
2019-08-02 17:14:15
95.0.145.162 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-02 04:26:30,461 INFO [amun_request_handler] PortScan Detected on Port: 445 (95.0.145.162)
2019-08-02 17:06:39
77.42.73.143 attackspambots
Automatic report - Port Scan Attack
2019-08-02 16:46:05
42.60.138.121 attack
Lines containing failures of 42.60.138.121
auth.log:Jul 30 03:38:06 omfg sshd[17315]: Connection from 42.60.138.121 port 36836 on 78.46.60.40 port 22
auth.log:Jul 30 03:38:06 omfg sshd[17315]: Bad protocol version identification '' from 42.60.138.121 port 36836
auth.log:Jul 30 03:38:07 omfg sshd[17316]: Connection from 42.60.138.121 port 37112 on 78.46.60.40 port 22
auth.log:Jul 30 03:38:08 omfg sshd[17316]: Invalid user misp from 42.60.138.121
auth.log:Jul 30 03:38:08 omfg sshd[17316]: Connection closed by 42.60.138.121 port 37112 [preauth]
auth.log:Jul 30 03:38:08 omfg sshd[17318]: Connection from 42.60.138.121 port 37684 on 78.46.60.40 port 22
auth.log:Jul 30 03:38:09 omfg sshd[17318]: Invalid user osbash from 42.60.138.121
auth.log:Jul 30 03:38:09 omfg sshd[17318]: Connection closed by 42.60.138.121 port 37684 [preauth]
auth.log:Jul 30 03:38:09 omfg sshd[17320]: Connection from 42.60.138.121 port 38206 on 78.46.60.40 port 22
auth.log:Jul 30 03:38:10 omfg sshd[17320]:........
------------------------------
2019-08-02 17:09:06
42.159.92.147 attackspambots
$f2bV_matches
2019-08-02 16:56:40
103.254.175.54 attack
Aug  2 00:53:04 seraph sshd[3883]: Did not receive identification string fr=
om 103.254.175.54
Aug  2 00:53:46 seraph sshd[3991]: Invalid user 888888 from 103.254.175.54
Aug  2 00:53:51 seraph sshd[3991]: pam_unix(sshd:auth): authentication fail=
ure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D103.254.175.54
Aug  2 00:53:53 seraph sshd[3991]: Failed password for invalid user 888888 =
from 103.254.175.54 port 57590 ssh2
Aug  2 00:53:54 seraph sshd[3991]: Connection closed by 103.254.175.54 port=
 57590 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.254.175.54
2019-08-02 16:27:31
180.179.212.184 attack
180.179.212.184 - - [02/Aug/2019:10:52:21 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
180.179.212.184 - - [02/Aug/2019:10:52:23 +0200] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
180.179.212.184 - - [02/Aug/2019:10:52:24 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
180.179.212.184 - - [02/Aug/2019:10:52:24 +0200] "POST /wp-login.php HTTP/1.1" 200 1684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
180.179.212.184 - - [02/Aug/2019:10:52:25 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
180.179.212.184 - - [02/Aug/2019:10:52:27 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
..
2019-08-02 17:11:25
37.186.220.241 attackspambots
Aug  2 01:01:16 mxgate1 postfix/postscreen[28029]: CONNECT from [37.186.220.241]:35164 to [176.31.12.44]:25
Aug  2 01:01:16 mxgate1 postfix/dnsblog[28418]: addr 37.186.220.241 listed by domain bl.spamcop.net as 127.0.0.2
Aug  2 01:01:16 mxgate1 postfix/dnsblog[28420]: addr 37.186.220.241 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Aug  2 01:01:22 mxgate1 postfix/postscreen[28029]: DNSBL rank 2 for [37.186.220.241]:35164
Aug  2 01:01:22 mxgate1 postfix/tlsproxy[28523]: CONNECT from [37.186.220.241]:35164
Aug x@x
Aug  2 01:01:23 mxgate1 postfix/postscreen[28029]: DISCONNECT [37.186.220.241]:35164
Aug  2 01:01:23 mxgate1 postfix/tlsproxy[28523]: DISCONNECT [37.186.220.241]:35164


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=37.186.220.241
2019-08-02 16:34:02

最近上报的IP列表

93.197.76.57 63.172.218.155 66.106.3.96 63.39.104.118
66.120.24.109 165.210.161.48 60.62.21.65 61.16.83.74
108.169.8.246 252.35.77.219 107.138.167.10 242.176.193.151
44.121.33.165 70.34.217.36 153.63.35.187 127.118.160.33
170.238.117.187 224.126.63.102 21.48.104.208 225.144.121.31