必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.172.56.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6427
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.172.56.158.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012100 1800 900 604800 86400

;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 21 19:06:33 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
158.56.172.104.in-addr.arpa domain name pointer syn-104-172-056-158.res.spectrum.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
158.56.172.104.in-addr.arpa	name = syn-104-172-056-158.res.spectrum.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
181.44.60.10 attack
Port Scan: TCP/443
2020-09-13 22:14:55
193.169.253.169 attackspambots
Sep 13 15:18:22 *hidden* postfix/postscreen[16414]: DNSBL rank 3 for [193.169.253.169]:42332
2020-09-13 22:33:30
5.188.84.228 attackbotsspam
\[Sun Sep 13 16:20:49.731388 2020\] \[access_compat:error\] \[pid 24915:tid 140547746416384\] \[client 5.188.84.228:57386\] AH01797: client denied by server configuration: /web/blury_de/www/htdocs_cms/kontakt.html, referer: https://www.bernd-lury.de/kontakt.html
\[Sun Sep 13 16:20:49.928025 2020\] \[access_compat:error\] \[pid 24915:tid 140547870553856\] \[client 5.188.84.228:57587\] AH01797: client denied by server configuration: /web/blury_de/www/htdocs_cms/, referer: https://www.bernd-lury.de/kontakt.html
\[Sun Sep 13 16:20:50.130648 2020\] \[access_compat:error\] \[pid 24915:tid 140547729630976\] \[client 5.188.84.228:57734\] AH01797: client denied by server configuration: /web/blury_de/www/htdocs_cms/kontakt.html, referer: https://www.bernd-lury.de/kontakt.html
...
2020-09-13 22:26:42
193.56.28.18 attackspam
2020-09-12 20:06:45 dovecot_login authenticator failed for \(win-jm5ndcqfsu3.domain\) \[193.56.28.18\]: 535 Incorrect authentication data \(set_id=service\)
2020-09-12 20:07:00 dovecot_login authenticator failed for \(win-jm5ndcqfsu3.domain\) \[193.56.28.18\]: 535 Incorrect authentication data \(set_id=service\)
2020-09-12 20:07:15 dovecot_login authenticator failed for \(win-jm5ndcqfsu3.domain\) \[193.56.28.18\]: 535 Incorrect authentication data \(set_id=service\)
2020-09-12 20:07:31 dovecot_login authenticator failed for \(win-jm5ndcqfsu3.domain\) \[193.56.28.18\]: 535 Incorrect authentication data \(set_id=service\)
2020-09-12 20:07:49 dovecot_login authenticator failed for \(win-jm5ndcqfsu3.domain\) \[193.56.28.18\]: 535 Incorrect authentication data \(set_id=service\)
2020-09-13 22:25:07
178.128.243.225 attackbots
Sep 13 11:58:26 inter-technics sshd[1635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.243.225  user=root
Sep 13 11:58:28 inter-technics sshd[1635]: Failed password for root from 178.128.243.225 port 39236 ssh2
Sep 13 12:01:33 inter-technics sshd[1841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.243.225  user=root
Sep 13 12:01:36 inter-technics sshd[1841]: Failed password for root from 178.128.243.225 port 44166 ssh2
Sep 13 12:04:42 inter-technics sshd[1962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.243.225  user=root
Sep 13 12:04:44 inter-technics sshd[1962]: Failed password for root from 178.128.243.225 port 49096 ssh2
...
2020-09-13 22:31:01
200.60.110.117 attackbotsspam
Port probing on unauthorized port 445
2020-09-13 22:08:31
185.220.103.9 attackbotsspam
$f2bV_matches
2020-09-13 22:05:26
138.128.84.166 attack
Unauthorized access detected from black listed ip!
2020-09-13 22:01:35
67.216.209.77 attack
Sep 13 06:08:37 mail sshd\[302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.216.209.77  user=root
...
2020-09-13 22:02:45
159.89.115.126 attack
159.89.115.126 (CA/Canada/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 13 07:52:46 jbs1 sshd[11239]: Failed password for root from 142.93.215.19 port 60528 ssh2
Sep 13 07:53:23 jbs1 sshd[11545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.239.84.11  user=root
Sep 13 07:51:24 jbs1 sshd[10793]: Failed password for root from 115.58.194.113 port 1116 ssh2
Sep 13 07:51:35 jbs1 sshd[10928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.115.126  user=root
Sep 13 07:51:37 jbs1 sshd[10928]: Failed password for root from 159.89.115.126 port 59116 ssh2
Sep 13 07:52:43 jbs1 sshd[11239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.215.19  user=root

IP Addresses Blocked:

142.93.215.19 (IN/India/-)
103.239.84.11 (IN/India/-)
115.58.194.113 (CN/China/-)
2020-09-13 22:09:10
54.37.162.36 attack
Sep 13 03:47:35 ny01 sshd[30447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.162.36
Sep 13 03:47:37 ny01 sshd[30447]: Failed password for invalid user centos from 54.37.162.36 port 34796 ssh2
Sep 13 03:51:27 ny01 sshd[30919]: Failed password for root from 54.37.162.36 port 47556 ssh2
2020-09-13 22:13:16
157.245.64.140 attackspam
Sep 13 13:18:42 ns382633 sshd\[686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.64.140  user=root
Sep 13 13:18:44 ns382633 sshd\[686\]: Failed password for root from 157.245.64.140 port 55932 ssh2
Sep 13 13:24:34 ns382633 sshd\[1914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.64.140  user=root
Sep 13 13:24:35 ns382633 sshd\[1914\]: Failed password for root from 157.245.64.140 port 33850 ssh2
Sep 13 13:28:18 ns382633 sshd\[2988\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.64.140  user=root
2020-09-13 22:09:29
23.129.64.206 attackbots
(sshd) Failed SSH login from 23.129.64.206 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 13 08:50:10 amsweb01 sshd[18939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.129.64.206  user=root
Sep 13 08:50:11 amsweb01 sshd[18939]: Failed password for root from 23.129.64.206 port 16092 ssh2
Sep 13 08:50:15 amsweb01 sshd[18939]: Failed password for root from 23.129.64.206 port 16092 ssh2
Sep 13 08:50:17 amsweb01 sshd[18939]: Failed password for root from 23.129.64.206 port 16092 ssh2
Sep 13 08:50:20 amsweb01 sshd[18939]: Failed password for root from 23.129.64.206 port 16092 ssh2
2020-09-13 22:19:56
111.92.52.207 attackspam
Telnet Honeypot -> Telnet Bruteforce / Login
2020-09-13 22:15:21
181.129.165.139 attackspam
Sep 13 10:40:48 plex-server sshd[2183454]: Failed password for invalid user redmine from 181.129.165.139 port 41032 ssh2
Sep 13 10:45:13 plex-server sshd[2185454]: Invalid user ubnt from 181.129.165.139 port 53680
Sep 13 10:45:13 plex-server sshd[2185454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.129.165.139 
Sep 13 10:45:13 plex-server sshd[2185454]: Invalid user ubnt from 181.129.165.139 port 53680
Sep 13 10:45:15 plex-server sshd[2185454]: Failed password for invalid user ubnt from 181.129.165.139 port 53680 ssh2
...
2020-09-13 22:36:31

最近上报的IP列表

9.137.214.1 246.214.161.164 65.177.159.136 14.44.34.202
55.236.80.13 150.225.129.86 6.104.44.44 163.99.205.173
146.50.252.211 179.79.207.24 9.177.233.210 55.80.232.16
236.63.219.219 88.98.131.112 47.231.202.41 199.152.206.10
28.235.72.113 157.187.114.137 243.114.130.233 205.9.174.232