必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.149.109.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25224
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.149.109.9.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 17:59:30 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
b'Host 9.109.149.104.in-addr.arpa not found: 2(SERVFAIL)
'
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 9.109.149.104.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
91.214.221.228 attackbotsspam
DATE:2019-10-20 14:03:25, IP:91.214.221.228, PORT:1433 - MSSQL brute force auth on a honeypot server (epe-dc)
2019-10-20 22:01:55
80.241.212.209 attackspambots
Oct 20 12:15:09 amida sshd[281469]: Address 80.241.212.209 maps to mail.crowncloud.de, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Oct 20 12:15:09 amida sshd[281469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.241.212.209  user=r.r
Oct 20 12:15:11 amida sshd[281469]: Failed password for r.r from 80.241.212.209 port 35140 ssh2
Oct 20 12:15:11 amida sshd[281469]: Received disconnect from 80.241.212.209: 11: Bye Bye [preauth]
Oct 20 12:25:39 amida sshd[283868]: Address 80.241.212.209 maps to mail.crowncloud.de, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Oct 20 12:25:39 amida sshd[283868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.241.212.209  user=r.r
Oct 20 12:25:41 amida sshd[283868]: Failed password for r.r from 80.241.212.209 port 55832 ssh2
Oct 20 12:25:41 amida sshd[283868]: Received disconnect from 80.241.212.209: 11........
-------------------------------
2019-10-20 21:55:56
184.105.139.119 attack
" "
2019-10-20 21:30:37
200.54.170.198 attack
Oct 20 16:49:53 hosting sshd[16090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200-54-170-198.static.tie.cl  user=root
Oct 20 16:49:55 hosting sshd[16090]: Failed password for root from 200.54.170.198 port 49866 ssh2
...
2019-10-20 22:02:38
45.148.232.94 attackbotsspam
45.148.232.94 - - [20/Oct/2019:08:03:49 -0400] "GET /?page=products&action=../../../etc/passwd%00&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 17150 "https://newportbrassfaucets.com/?page=products&action=../../../etc/passwd%00&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
...
2019-10-20 21:39:08
92.119.160.107 attackspambots
Oct 20 15:16:28 h2177944 kernel: \[4453288.557250\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.107 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=58091 PROTO=TCP SPT=56890 DPT=23999 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 20 15:22:21 h2177944 kernel: \[4453640.983664\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.107 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=63588 PROTO=TCP SPT=56890 DPT=23828 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 20 15:25:52 h2177944 kernel: \[4453852.431753\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.107 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=21829 PROTO=TCP SPT=56890 DPT=23917 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 20 15:27:04 h2177944 kernel: \[4453923.821341\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.107 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=17851 PROTO=TCP SPT=56890 DPT=24392 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 20 15:31:49 h2177944 kernel: \[4454209.493965\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.107 DST=85.
2019-10-20 21:49:09
50.236.62.30 attackbots
Triggered by Fail2Ban at Ares web server
2019-10-20 22:03:23
222.186.173.201 attackspambots
SSH-bruteforce attempts
2019-10-20 21:28:20
68.183.91.25 attackspam
$f2bV_matches
2019-10-20 21:58:01
193.112.78.133 attack
Oct 20 13:47:23 nextcloud sshd\[2063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.78.133  user=root
Oct 20 13:47:26 nextcloud sshd\[2063\]: Failed password for root from 193.112.78.133 port 36968 ssh2
Oct 20 14:03:19 nextcloud sshd\[28271\]: Invalid user ie from 193.112.78.133
...
2019-10-20 22:04:58
140.249.206.6 attack
Oct 17 04:42:01 vpxxxxxxx22308 sshd[6179]: Invalid user noreply from 140.249.206.6
Oct 17 04:42:01 vpxxxxxxx22308 sshd[6179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.249.206.6
Oct 17 04:42:03 vpxxxxxxx22308 sshd[6179]: Failed password for invalid user noreply from 140.249.206.6 port 44509 ssh2
Oct 17 04:46:10 vpxxxxxxx22308 sshd[6432]: Invalid user betteti from 140.249.206.6
Oct 17 04:46:10 vpxxxxxxx22308 sshd[6432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.249.206.6

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=140.249.206.6
2019-10-20 21:51:12
65.49.212.67 attackspam
Oct 20 15:06:56 MK-Soft-VM7 sshd[20813]: Failed password for root from 65.49.212.67 port 34506 ssh2
Oct 20 15:12:43 MK-Soft-VM7 sshd[20887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.49.212.67 
...
2019-10-20 21:35:09
157.245.75.86 attackspambots
$f2bV_matches
2019-10-20 21:42:41
51.255.168.202 attackspam
Oct 20 15:27:26 SilenceServices sshd[17248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.168.202
Oct 20 15:27:28 SilenceServices sshd[17248]: Failed password for invalid user 1234 from 51.255.168.202 port 47162 ssh2
Oct 20 15:31:47 SilenceServices sshd[18382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.168.202
2019-10-20 21:48:02
89.46.196.10 attackbots
Oct 20 11:42:11 vtv3 sshd\[5747\]: Invalid user ovh from 89.46.196.10 port 50510
Oct 20 11:42:11 vtv3 sshd\[5747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.46.196.10
Oct 20 11:42:13 vtv3 sshd\[5747\]: Failed password for invalid user ovh from 89.46.196.10 port 50510 ssh2
Oct 20 11:46:05 vtv3 sshd\[7675\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.46.196.10  user=root
Oct 20 11:46:06 vtv3 sshd\[7675\]: Failed password for root from 89.46.196.10 port 34562 ssh2
Oct 20 11:58:50 vtv3 sshd\[14038\]: Invalid user lpadm from 89.46.196.10 port 43190
Oct 20 11:58:50 vtv3 sshd\[14038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.46.196.10
Oct 20 11:58:52 vtv3 sshd\[14038\]: Failed password for invalid user lpadm from 89.46.196.10 port 43190 ssh2
Oct 20 12:03:09 vtv3 sshd\[16523\]: Invalid user yang from 89.46.196.10 port 55474
Oct 20 12:03:09 vtv3 sshd\[16523\]: pa
2019-10-20 21:46:55

最近上报的IP列表

4.255.92.144 72.63.108.217 152.182.229.72 127.213.51.1
210.217.185.252 44.14.9.135 31.128.214.99 152.94.4.149
96.8.15.229 187.222.135.7 94.216.161.196 119.44.209.214
57.211.227.61 202.160.197.164 129.159.5.90 26.227.49.218
225.226.103.249 205.215.176.36 53.96.17.192 67.77.136.66