必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.104.172.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26276
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.104.172.212.		IN	A

;; AUTHORITY SECTION:
.			519	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023102100 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 22 01:31:13 CST 2023
;; MSG SIZE  rcvd: 108
HOST信息:
Host 212.172.104.103.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 212.172.104.103.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
222.186.15.115 attack
Aug 15 15:58:15 abendstille sshd\[18183\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.115  user=root
Aug 15 15:58:17 abendstille sshd\[18183\]: Failed password for root from 222.186.15.115 port 31711 ssh2
Aug 15 15:58:24 abendstille sshd\[18391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.115  user=root
Aug 15 15:58:26 abendstille sshd\[18391\]: Failed password for root from 222.186.15.115 port 13172 ssh2
Aug 15 15:58:33 abendstille sshd\[18562\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.115  user=root
...
2020-08-15 21:59:57
104.131.55.92 attackspam
Aug 15 15:08:54 eventyay sshd[13026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.55.92
Aug 15 15:08:56 eventyay sshd[13026]: Failed password for invalid user Abc3 from 104.131.55.92 port 47690 ssh2
Aug 15 15:13:08 eventyay sshd[13103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.55.92
...
2020-08-15 22:09:02
162.243.116.41 attackbotsspam
Aug 15 09:53:23 vps46666688 sshd[714]: Failed password for root from 162.243.116.41 port 47034 ssh2
...
2020-08-15 22:22:29
132.232.37.206 attackbots
Lines containing failures of 132.232.37.206 (max 1000)
Aug 12 22:03:18 archiv sshd[587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.37.206  user=r.r
Aug 12 22:03:20 archiv sshd[587]: Failed password for r.r from 132.232.37.206 port 37660 ssh2
Aug 12 22:03:21 archiv sshd[587]: Received disconnect from 132.232.37.206 port 37660:11: Bye Bye [preauth]
Aug 12 22:03:21 archiv sshd[587]: Disconnected from 132.232.37.206 port 37660 [preauth]
Aug 12 22:16:56 archiv sshd[858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.37.206  user=r.r
Aug 12 22:16:58 archiv sshd[858]: Failed password for r.r from 132.232.37.206 port 59052 ssh2
Aug 12 22:16:58 archiv sshd[858]: Received disconnect from 132.232.37.206 port 59052:11: Bye Bye [preauth]
Aug 12 22:16:58 archiv sshd[858]: Disconnected from 132.232.37.206 port 59052 [preauth]
Aug 12 22:22:30 archiv sshd[938]: pam_unix(sshd:auth): aut........
------------------------------
2020-08-15 21:55:45
3.81.245.94 attackbotsspam
Automated report (2020-08-15T20:23:50+08:00). Misbehaving bot detected at this address.
2020-08-15 22:14:06
41.242.142.195 attack
Aug 15 15:37:57 jane sshd[22842]: Failed password for root from 41.242.142.195 port 39599 ssh2
...
2020-08-15 22:19:51
129.213.58.48 attackspambots
srvr2: (mod_security) mod_security (id:920350) triggered by 129.213.58.48 (US/-/-): 1 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/15 14:23:30 [error] 65017#0: *141590 [client 129.213.58.48] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host'  [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "159749421098.896216"] [ref "o0,17v21,17"], client: 129.213.58.48, [redacted] request: "GET / HTTP/1.1" [redacted]
2020-08-15 22:22:00
128.199.214.208 attack
Aug 15 18:40:17 gw1 sshd[6229]: Failed password for root from 128.199.214.208 port 34900 ssh2
...
2020-08-15 21:58:22
167.172.69.52 attack
Port Scan/VNC login attempt
...
2020-08-15 22:01:21
178.154.200.165 attackspambots
[Sat Aug 15 19:23:51.486787 2020] [:error] [pid 3316:tid 140592466097920] [client 178.154.200.165:54044] [client 178.154.200.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XzfT1@a0Xgxjnrgkau-8CQAAAnY"]
...
2020-08-15 22:11:52
45.84.196.70 attackspam
2020-08-15T14:09:46.748539dmca.cloudsearch.cf sshd[10150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.84.196.70  user=root
2020-08-15T14:09:49.066387dmca.cloudsearch.cf sshd[10150]: Failed password for root from 45.84.196.70 port 37344 ssh2
2020-08-15T14:10:03.691445dmca.cloudsearch.cf sshd[10160]: Invalid user oracle from 45.84.196.70 port 48622
2020-08-15T14:10:03.696464dmca.cloudsearch.cf sshd[10160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.84.196.70
2020-08-15T14:10:03.691445dmca.cloudsearch.cf sshd[10160]: Invalid user oracle from 45.84.196.70 port 48622
2020-08-15T14:10:05.678440dmca.cloudsearch.cf sshd[10160]: Failed password for invalid user oracle from 45.84.196.70 port 48622 ssh2
2020-08-15T14:10:21.660122dmca.cloudsearch.cf sshd[10164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.84.196.70  user=root
2020-08-15T14:10:23.782438dmca.
...
2020-08-15 22:23:54
142.44.240.82 attackspam
142.44.240.82 - - [15/Aug/2020:14:48:15 +0100] "POST /wp-login.php HTTP/1.1" 200 2415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.44.240.82 - - [15/Aug/2020:14:48:16 +0100] "POST /wp-login.php HTTP/1.1" 200 2364 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.44.240.82 - - [15/Aug/2020:14:48:16 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-15 22:16:21
114.104.134.161 attackspam
Aug 15 15:45:33 srv01 postfix/smtpd\[32433\]: warning: unknown\[114.104.134.161\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 15:45:45 srv01 postfix/smtpd\[32433\]: warning: unknown\[114.104.134.161\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 15:45:59 srv01 postfix/smtpd\[32433\]: warning: unknown\[114.104.134.161\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 15:46:21 srv01 postfix/smtpd\[32433\]: warning: unknown\[114.104.134.161\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 15:46:32 srv01 postfix/smtpd\[32433\]: warning: unknown\[114.104.134.161\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-08-15 22:18:05
106.12.105.130 attackspam
Aug 15 05:24:02 propaganda sshd[7344]: Connection from 106.12.105.130 port 51288 on 10.0.0.161 port 22 rdomain ""
Aug 15 05:24:02 propaganda sshd[7344]: Connection closed by 106.12.105.130 port 51288 [preauth]
2020-08-15 22:04:30
187.95.124.103 attackspambots
Aug 15 13:31:33 localhost sshd[75907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.95.124.103  user=root
Aug 15 13:31:36 localhost sshd[75907]: Failed password for root from 187.95.124.103 port 38559 ssh2
Aug 15 13:36:20 localhost sshd[76414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.95.124.103  user=root
Aug 15 13:36:22 localhost sshd[76414]: Failed password for root from 187.95.124.103 port 42628 ssh2
Aug 15 13:41:08 localhost sshd[76980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.95.124.103  user=root
Aug 15 13:41:10 localhost sshd[76980]: Failed password for root from 187.95.124.103 port 46689 ssh2
...
2020-08-15 21:52:04

最近上报的IP列表

103.104.192.12 103.104.178.181 103.104.159.212 103.104.143.18
103.104.147.248 103.104.134.198 103.104.161.35 103.104.133.122
103.104.165.237 103.104.157.12 103.104.149.39 103.104.148.199
103.104.128.161 103.104.122.241 103.104.117.194 103.104.112.127
103.103.92.237 103.104.102.131 103.103.81.191 103.103.9.145