必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.148.255.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55237
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.148.255.131.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 05:58:54 CST 2025
;; MSG SIZE  rcvd: 108
HOST信息:
131.255.148.104.in-addr.arpa domain name pointer ool-6894ff83.dyn.optonline.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
131.255.148.104.in-addr.arpa	name = ool-6894ff83.dyn.optonline.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
103.119.25.249 attackbots
NAME : STARKTELECOM-AF CIDR : 103.119.25.0/24 SYN Flood DDoS Attack Afghanistan - block certain countries :) IP: 103.119.25.249  Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery https://help-dysk.pl
2019-07-29 02:03:29
103.40.29.135 attack
Jul 28 11:12:27 localhost sshd\[104117\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.40.29.135  user=root
Jul 28 11:12:29 localhost sshd\[104117\]: Failed password for root from 103.40.29.135 port 63320 ssh2
Jul 28 11:16:45 localhost sshd\[104229\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.40.29.135  user=root
Jul 28 11:16:47 localhost sshd\[104229\]: Failed password for root from 103.40.29.135 port 38126 ssh2
Jul 28 11:21:06 localhost sshd\[104341\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.40.29.135  user=root
...
2019-07-29 02:15:00
180.126.220.48 attackspambots
20 attempts against mh-ssh on star.magehost.pro
2019-07-29 02:08:29
134.73.129.146 attack
Jul 28 12:45:58 shared02 sshd[25280]: Invalid user com from 134.73.129.146
Jul 28 12:45:58 shared02 sshd[25280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.129.146
Jul 28 12:46:00 shared02 sshd[25280]: Failed password for invalid user com from 134.73.129.146 port 35264 ssh2
Jul 28 12:46:00 shared02 sshd[25280]: Received disconnect from 134.73.129.146 port 35264:11: Bye Bye [preauth]
Jul 28 12:46:00 shared02 sshd[25280]: Disconnected from 134.73.129.146 port 35264 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=134.73.129.146
2019-07-29 02:12:16
173.12.157.141 attack
Multiple SSH auth failures recorded by fail2ban
2019-07-29 01:53:20
169.0.78.22 attack
Lines containing failures of 169.0.78.22


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=169.0.78.22
2019-07-29 02:03:55
218.92.0.211 attackbots
Jul 28 15:42:28 *** sshd[18471]: User root from 218.92.0.211 not allowed because not listed in AllowUsers
2019-07-29 02:25:42
220.161.247.254 attackbotsspam
Jul 28 12:49:49 h2421860 postfix/postscreen[15071]: CONNECT from [220.161.247.254]:54993 to [85.214.119.52]:25
Jul 28 12:49:49 h2421860 postfix/dnsblog[15073]: addr 220.161.247.254 listed by domain zen.spamhaus.org as 127.0.0.11
Jul 28 12:49:49 h2421860 postfix/dnsblog[15073]: addr 220.161.247.254 listed by domain zen.spamhaus.org as 127.0.0.4
Jul 28 12:49:49 h2421860 postfix/dnsblog[15074]: addr 220.161.247.254 listed by domain Unknown.trblspam.com as 185.53.179.7
Jul 28 12:49:49 h2421860 postfix/dnsblog[15079]: addr 220.161.247.254 listed by domain dnsbl.sorbs.net as 127.0.0.10
Jul 28 12:49:49 h2421860 postfix/dnsblog[15076]: addr 220.161.247.254 listed by domain b.barracudacentral.org as 127.0.0.2
Jul 28 12:49:55 h2421860 postfix/postscreen[15071]: DNSBL rank 7 for [220.161.247.254]:54993
Jul x@x
Jul 28 12:49:58 h2421860 postfix/postscreen[15071]: HANGUP after 3.2 from [220.161.247.254]:54993 in tests after SMTP handshake
Jul 28 12:49:58 h2421860 postfix/postscreen[1........
-------------------------------
2019-07-29 02:34:34
185.176.26.104 attackbotsspam
Jul 28 18:46:13 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=185.176.26.104 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=30570 PROTO=TCP SPT=46706 DPT=3900 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-07-29 02:11:10
78.198.69.64 attack
Jul 28 13:21:48 icinga sshd[24701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.198.69.64
...
2019-07-29 01:49:13
58.87.67.226 attackbotsspam
Jul 28 17:51:58 mout sshd[22221]: Invalid user ipodtouch from 58.87.67.226 port 50444
2019-07-29 01:51:03
104.238.220.10 attackbots
Unauthorised access (Jul 28) SRC=104.238.220.10 LEN=40 TTL=243 ID=19539 TCP DPT=445 WINDOW=1024 SYN
2019-07-29 02:09:31
118.24.34.26 attackbotsspam
2019-07-28T07:43:45.481836mizuno.rwx.ovh sshd[6761]: Connection from 118.24.34.26 port 24497 on 78.46.61.178 port 22
2019-07-28T07:43:47.001660mizuno.rwx.ovh sshd[6761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.34.26  user=root
2019-07-28T07:43:48.865908mizuno.rwx.ovh sshd[6761]: Failed password for root from 118.24.34.26 port 24497 ssh2
2019-07-28T08:21:11.567189mizuno.rwx.ovh sshd[15576]: Connection from 118.24.34.26 port 40612 on 78.46.61.178 port 22
2019-07-28T08:21:13.097943mizuno.rwx.ovh sshd[15576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.34.26  user=root
2019-07-28T08:21:14.770747mizuno.rwx.ovh sshd[15576]: Failed password for root from 118.24.34.26 port 40612 ssh2
...
2019-07-29 02:06:59
198.20.244.98 attackbots
Wordpress Admin Login attack
2019-07-29 02:18:56
40.118.62.100 attack
v+ssh-bruteforce
2019-07-29 02:39:33

最近上报的IP列表

188.189.84.72 14.79.65.137 249.160.77.158 155.59.207.220
201.147.246.72 245.107.23.83 9.99.230.109 29.150.95.171
248.104.202.103 38.73.114.11 43.149.92.104 233.58.107.97
190.232.141.167 35.100.179.8 108.122.233.168 19.92.49.143
29.7.54.21 133.34.248.151 117.110.222.183 253.241.227.239