必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): New Zealand

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.148.90.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26932
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.148.90.142.			IN	A

;; AUTHORITY SECTION:
.			585	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400

;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 15:51:38 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 142.90.148.103.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.90.148.103.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
171.228.249.26 attackspambots
2020-09-03 11:33:34.598869-0500  localhost smtpd[17351]: NOQUEUE: reject: RCPT from unknown[171.228.249.26]: 554 5.7.1 Service unavailable; Client host [171.228.249.26] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/171.228.249.26; from= to= proto=ESMTP helo=<[171.228.249.26]>
2020-09-04 07:16:42
186.22.74.193 attackspam
Sep  3 18:48:08 mellenthin postfix/smtpd[19006]: NOQUEUE: reject: RCPT from unknown[186.22.74.193]: 554 5.7.1 Service unavailable; Client host [186.22.74.193] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/186.22.74.193; from= to= proto=ESMTP helo=
2020-09-04 07:08:32
218.92.0.248 attack
SSH Brute-force
2020-09-04 07:12:34
111.72.194.128 attackspambots
Sep  3 21:01:28 srv01 postfix/smtpd\[17580\]: warning: unknown\[111.72.194.128\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  3 21:01:40 srv01 postfix/smtpd\[17580\]: warning: unknown\[111.72.194.128\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  3 21:01:56 srv01 postfix/smtpd\[17580\]: warning: unknown\[111.72.194.128\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  3 21:02:14 srv01 postfix/smtpd\[17580\]: warning: unknown\[111.72.194.128\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  3 21:02:26 srv01 postfix/smtpd\[17580\]: warning: unknown\[111.72.194.128\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-09-04 07:20:57
125.111.151.76 attackspambots
/%23
2020-09-04 06:55:41
138.197.130.138 attackspambots
Sep  4 00:58:50 inter-technics sshd[15068]: Invalid user openlava from 138.197.130.138 port 40176
Sep  4 00:58:50 inter-technics sshd[15068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138
Sep  4 00:58:50 inter-technics sshd[15068]: Invalid user openlava from 138.197.130.138 port 40176
Sep  4 00:58:52 inter-technics sshd[15068]: Failed password for invalid user openlava from 138.197.130.138 port 40176 ssh2
Sep  4 01:01:59 inter-technics sshd[15248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=root
Sep  4 01:02:01 inter-technics sshd[15248]: Failed password for root from 138.197.130.138 port 52128 ssh2
...
2020-09-04 07:11:47
207.249.163.34 attack
Sep  3 18:48:09 mellenthin postfix/smtpd[20928]: NOQUEUE: reject: RCPT from unknown[207.249.163.34]: 554 5.7.1 Service unavailable; Client host [207.249.163.34] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/207.249.163.34; from= to= proto=ESMTP helo=<[207.249.163.34]>
2020-09-04 07:08:13
49.234.221.217 attack
Invalid user craig from 49.234.221.217 port 41264
2020-09-04 07:30:59
51.103.142.75 attack
CMS Bruteforce / WebApp Attack attempt
2020-09-04 07:02:02
197.50.232.198 attack
20/9/3@12:47:44: FAIL: Alarm-Network address from=197.50.232.198
...
2020-09-04 07:29:15
183.52.107.222 attackspam
Lines containing failures of 183.52.107.222
Sep  2 04:19:50 newdogma sshd[23693]: Invalid user marcio from 183.52.107.222 port 53138
Sep  2 04:19:50 newdogma sshd[23693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.52.107.222 
Sep  2 04:19:52 newdogma sshd[23693]: Failed password for invalid user marcio from 183.52.107.222 port 53138 ssh2
Sep  2 04:19:54 newdogma sshd[23693]: Received disconnect from 183.52.107.222 port 53138:11: Bye Bye [preauth]
Sep  2 04:19:54 newdogma sshd[23693]: Disconnected from invalid user marcio 183.52.107.222 port 53138 [preauth]
Sep  2 04:22:27 newdogma sshd[24301]: Invalid user aya from 183.52.107.222 port 51680
Sep  2 04:22:27 newdogma sshd[24301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.52.107.222 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=183.52.107.222
2020-09-04 07:23:00
185.101.32.19 attackspambots
Icarus honeypot on github
2020-09-04 07:21:20
41.142.245.48 attackspambots
2020-09-03 11:40:01.688513-0500  localhost smtpd[17531]: NOQUEUE: reject: RCPT from unknown[41.142.245.48]: 554 5.7.1 Service unavailable; Client host [41.142.245.48] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/41.142.245.48; from= to= proto=ESMTP helo=<[41.142.245.48]>
2020-09-04 07:15:38
41.144.80.18 attackbots
Sep  2 10:18:58 mxgate1 postfix/postscreen[17278]: CONNECT from [41.144.80.18]:29510 to [176.31.12.44]:25
Sep  2 10:18:58 mxgate1 postfix/dnsblog[17284]: addr 41.144.80.18 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  2 10:18:58 mxgate1 postfix/dnsblog[17284]: addr 41.144.80.18 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  2 10:18:58 mxgate1 postfix/dnsblog[17287]: addr 41.144.80.18 listed by domain cbl.abuseat.org as 127.0.0.2
Sep  2 10:18:58 mxgate1 postfix/dnsblog[17286]: addr 41.144.80.18 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Sep  2 10:18:58 mxgate1 postfix/dnsblog[17283]: addr 41.144.80.18 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  2 10:19:04 mxgate1 postfix/postscreen[17278]: DNSBL rank 5 for [41.144.80.18]:29510
Sep x@x
Sep  2 10:19:05 mxgate1 postfix/postscreen[17278]: HANGUP after 1.4 from [41.144.80.18]:29510 in tests after SMTP handshake
Sep  2 10:19:05 mxgate1 postfix/postscreen[17278]: DISCONNECT [41.144.80.18]:29510
........
-------------------------------
2020-09-04 07:07:42
54.145.46.204 attack
SMTP Screen: 54.145.46.204 (United States): tried sending to 6 unknown recipients
2020-09-04 07:25:41

最近上报的IP列表

82.195.147.121 103.149.149.12 103.149.159.221 103.162.47.231
103.163.110.11 103.163.139.5 103.163.210.117 103.163.210.121
103.164.246.166 103.164.81.66 103.167.112.147 103.167.114.14
103.167.248.53 103.167.248.61 103.167.248.62 103.167.248.65
103.168.21.200 103.169.142.250 103.169.142.6 103.169.35.139