必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): unknown

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.125.239.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40061
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.125.239.92.			IN	A

;; AUTHORITY SECTION:
.			458	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030900 1800 900 604800 86400

;; Query time: 218 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 19:39:00 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
92.239.125.104.in-addr.arpa domain name pointer a104-125-239-92.deploy.static.akamaitechnologies.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
92.239.125.104.in-addr.arpa	name = a104-125-239-92.deploy.static.akamaitechnologies.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
95.85.28.28 attackspambots
95.85.28.28 - - [01/Aug/2019:09:25:33 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
95.85.28.28 - - [01/Aug/2019:09:25:33 +0200] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
95.85.28.28 - - [01/Aug/2019:09:25:34 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
95.85.28.28 - - [01/Aug/2019:09:25:34 +0200] "POST /wp-login.php HTTP/1.1" 200 1631 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
95.85.28.28 - - [01/Aug/2019:09:25:34 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
95.85.28.28 - - [01/Aug/2019:09:25:34 +0200] "POST /wp-login.php HTTP/1.1" 200 1630 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-08-01 16:31:58
46.161.59.46 attackspambots
B: Magento admin pass test (wrong country)
2019-08-01 16:19:37
34.207.67.28 attack
WordPress wp-login brute force :: 34.207.67.28 0.056 BYPASS [01/Aug/2019:13:27:06  1000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 4630 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-08-01 16:28:04
118.24.220.177 attackspambots
[munged]::443 118.24.220.177 - - [01/Aug/2019:05:26:23 +0200] "POST /[munged]: HTTP/1.1" 200 9120 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 118.24.220.177 - - [01/Aug/2019:05:26:26 +0200] "POST /[munged]: HTTP/1.1" 200 9120 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 118.24.220.177 - - [01/Aug/2019:05:26:55 +0200] "POST /[munged]: HTTP/1.1" 200 9120 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 118.24.220.177 - - [01/Aug/2019:05:26:57 +0200] "POST /[munged]: HTTP/1.1" 200 9120 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 118.24.220.177 - - [01/Aug/2019:05:27:01 +0200] "POST /[munged]: HTTP/1.1" 200 9120 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 118.24.220.177 - - [01/Aug/2019:05:27:04 +0200] "POST /[munged]: HTTP/1.1" 200 9120 "-" "Mozilla/5.0 (X11
2019-08-01 16:18:53
103.1.40.189 attackspam
Aug  1 11:06:37 yabzik sshd[4168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.1.40.189
Aug  1 11:06:39 yabzik sshd[4168]: Failed password for invalid user ftptest from 103.1.40.189 port 42622 ssh2
Aug  1 11:10:46 yabzik sshd[5757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.1.40.189
2019-08-01 16:14:17
185.30.177.176 attack
Aug105:05:49server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=185.30.177.63\,lip=148.251.104.77\,TLS:Connectionclosed\,session=\Aug105:06:45server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=185.30.177.176\,lip=148.251.104.77\,TLS:Connectionclosed\,session=\Aug105:06:06server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=185.30.177.176\,lip=148.251.104.77\,TLS:Connectionclosed\,session=\Aug105:16:54server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=185.30.177.176\,lip=148.251.104.77\,TLS:Connectionclosed\,session=\Aug105:05:47server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=185.30.177.176\,lip=148.25
2019-08-01 16:33:18
68.183.236.66 attackspam
Jul 30 14:48:35 this_host sshd[3203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.236.66  user=r.r
Jul 30 14:48:37 this_host sshd[3203]: Failed password for r.r from 68.183.236.66 port 49770 ssh2
Jul 30 14:48:38 this_host sshd[3203]: Received disconnect from 68.183.236.66: 11: Bye Bye [preauth]
Jul 30 14:59:25 this_host sshd[3272]: Invalid user wt from 68.183.236.66
Jul 30 14:59:25 this_host sshd[3272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.236.66 
Jul 30 14:59:27 this_host sshd[3272]: Failed password for invalid user wt from 68.183.236.66 port 59796 ssh2
Jul 30 14:59:27 this_host sshd[3272]: Received disconnect from 68.183.236.66: 11: Bye Bye [preauth]
Jul 30 15:04:41 this_host sshd[3301]: Invalid user kristen from 68.183.236.66
Jul 30 15:04:41 this_host sshd[3301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.236........
-------------------------------
2019-08-01 16:57:01
212.95.113.220 attackbots
Aug  1 10:39:52 dedicated sshd[2215]: Invalid user 123 from 212.95.113.220 port 34773
2019-08-01 16:41:42
73.140.175.106 attackbotsspam
Jul 29 21:45:32 dallas01 sshd[1534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.140.175.106
Jul 29 21:45:35 dallas01 sshd[1534]: Failed password for invalid user admin from 73.140.175.106 port 56149 ssh2
Jul 29 21:45:36 dallas01 sshd[1534]: Failed password for invalid user admin from 73.140.175.106 port 56149 ssh2
Jul 29 21:45:38 dallas01 sshd[1534]: Failed password for invalid user admin from 73.140.175.106 port 56149 ssh2
2019-08-01 16:51:01
157.230.6.42 attack
Invalid user agylis from 157.230.6.42 port 55930
2019-08-01 16:08:15
113.185.19.242 attackspam
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.185.19.242  user=root
Failed password for root from 113.185.19.242 port 43733 ssh2
Invalid user info from 113.185.19.242 port 11800
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.185.19.242
Failed password for invalid user info from 113.185.19.242 port 11800 ssh2
2019-08-01 16:13:00
118.25.48.248 attackbotsspam
Aug  1 00:05:22 xtremcommunity sshd\[8727\]: Invalid user bhaskar from 118.25.48.248 port 35598
Aug  1 00:05:22 xtremcommunity sshd\[8727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.48.248
Aug  1 00:05:25 xtremcommunity sshd\[8727\]: Failed password for invalid user bhaskar from 118.25.48.248 port 35598 ssh2
Aug  1 00:10:19 xtremcommunity sshd\[8926\]: Invalid user testftp from 118.25.48.248 port 58132
Aug  1 00:10:19 xtremcommunity sshd\[8926\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.48.248
...
2019-08-01 16:39:28
191.53.253.145 attackbots
Currently 7 failed/unauthorized logins attempts via SMTP/IMAP whostnameh 7 different usernames and wrong password:
2019-08-01T05:01:59+02:00 x@x
2019-07-29T18:47:10+02:00 x@x
2019-07-24T13:31:31+02:00 x@x
2019-07-15T18:15:36+02:00 x@x
2019-07-15T14:31:53+02:00 x@x
2019-07-10T22:22:39+02:00 x@x
2019-06-23T12:28:37+02:00 x@x

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=191.53.253.145
2019-08-01 16:27:43
153.36.232.49 attack
Aug  1 10:13:32 MainVPS sshd[12065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.232.49  user=root
Aug  1 10:13:33 MainVPS sshd[12065]: Failed password for root from 153.36.232.49 port 13393 ssh2
Aug  1 10:13:57 MainVPS sshd[12101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.232.49  user=root
Aug  1 10:13:59 MainVPS sshd[12101]: Failed password for root from 153.36.232.49 port 19554 ssh2
Aug  1 10:14:07 MainVPS sshd[12115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.232.49  user=root
Aug  1 10:14:09 MainVPS sshd[12115]: Failed password for root from 153.36.232.49 port 53788 ssh2
...
2019-08-01 16:20:56
213.152.162.154 attack
REQUESTED PAGE: /xmlrpc.php
2019-08-01 16:49:52

最近上报的IP列表

121.126.191.189 121.126.191.236 121.126.194.124 121.126.194.127
121.126.194.155 121.126.194.31 121.126.196.35 121.126.196.7
121.126.199.80 121.126.2.56 121.126.2.59 121.126.2.61
121.126.2.63 121.126.20.120 121.126.20.122 121.126.20.160
121.126.20.167 158.63.253.22 121.126.20.86 121.126.200.22