必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.79.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49324
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.79.12.			IN	A

;; AUTHORITY SECTION:
.			82	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030300 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 01:23:12 CST 2022
;; MSG SIZE  rcvd: 105
HOST信息:
Host 12.79.18.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 12.79.18.104.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
148.64.98.84 attackbots
Honeypot attack, port: 23, PTR: 148-64-98-84.PUBLIC.monkeybrains.net.
2019-07-29 09:09:48
195.175.30.22 attackbots
Jul 26 15:11:08 xb3 sshd[24728]: Address 195.175.30.22 maps to 195.175.30.22.static.turktelekom.com.tr, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jul 26 15:11:08 xb3 sshd[24728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.175.30.22  user=r.r
Jul 26 15:11:10 xb3 sshd[24728]: Failed password for r.r from 195.175.30.22 port 45270 ssh2
Jul 26 15:11:10 xb3 sshd[24728]: Received disconnect from 195.175.30.22: 11: Bye Bye [preauth]
Jul 26 15:41:35 xb3 sshd[24128]: Address 195.175.30.22 maps to 195.175.30.22.static.turktelekom.com.tr, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jul 26 15:41:35 xb3 sshd[24128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.175.30.22  user=r.r
Jul 26 15:41:37 xb3
.... truncated .... 

Jul 26 15:11:08 xb3 sshd[24728]: Address 195.175.30.22 maps to 195.175.30.22.static.turktelekom.com.tr, but this do........
-------------------------------
2019-07-29 09:23:56
171.221.205.133 attackspam
Jul 26 22:25:56 ACSRAD auth.info sshd[28563]: Failed password for r.r from 171.221.205.133 port 27029 ssh2
Jul 26 22:25:57 ACSRAD auth.info sshd[28563]: Received disconnect from 171.221.205.133 port 27029:11: Bye Bye [preauth]
Jul 26 22:25:57 ACSRAD auth.info sshd[28563]: Disconnected from 171.221.205.133 port 27029 [preauth]
Jul 26 22:25:57 ACSRAD auth.notice sshguard[18224]: Attack from "171.221.205.133" on service 100 whostnameh danger 10.
Jul 26 22:25:57 ACSRAD auth.notice sshguard[18224]: Attack from "171.221.205.133" on service 100 whostnameh danger 10.
Jul 26 22:30:09 ACSRAD auth.info sshd[30873]: Failed password for r.r from 171.221.205.133 port 21715 ssh2
Jul 26 22:30:09 ACSRAD auth.notice sshguard[18224]: Attack from "171.221.205.133" on service 100 whostnameh danger 10.
Jul 26 22:30:09 ACSRAD auth.warn sshguard[18224]: Blocking "171.221.205.133/32" forever (3 attacks in 252 secs, after 2 abuses over 771 secs.)
Jul 26 22:30:09 ACSRAD auth.info sshd[30873]: Rece........
------------------------------
2019-07-29 09:26:17
193.213.152.118 attackbots
Invalid user com from 193.213.152.118 port 54820
2019-07-29 09:23:14
101.36.160.50 attackbotsspam
Jul 27 04:32:23 GIZ-Server-02 sshd[2065]: User r.r from 101.36.160.50 not allowed because not listed in AllowUsers
Jul 27 04:32:23 GIZ-Server-02 sshd[2065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.160.50  user=r.r
Jul 27 04:32:25 GIZ-Server-02 sshd[2065]: Failed password for invalid user r.r from 101.36.160.50 port 60845 ssh2
Jul 27 04:32:25 GIZ-Server-02 sshd[2065]: Received disconnect from 101.36.160.50: 11: Bye Bye [preauth]
Jul 27 04:46:12 GIZ-Server-02 sshd[3077]: User r.r from 101.36.160.50 not allowed because not listed in AllowUsers
Jul 27 04:46:12 GIZ-Server-02 sshd[3077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.160.50  user=r.r
Jul 27 04:46:14 GIZ-Server-02 sshd[3077]: Failed password for invalid user r.r from 101.36.160.50 port 48233 ssh2
Jul 27 04:46:14 GIZ-Server-02 sshd[3077]: Received disconnect from 101.36.160.50: 11: Bye Bye [preauth]
Jul 27 04:........
-------------------------------
2019-07-29 09:32:24
61.134.52.164 attack
Brute force attack stopped by firewall
2019-07-29 09:14:12
1.172.50.212 attackspam
Jul 28 15:39:23 localhost kernel: [15586956.306251] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=1.172.50.212 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=3946 PROTO=TCP SPT=50722 DPT=37215 WINDOW=58886 RES=0x00 SYN URGP=0 
Jul 28 15:39:23 localhost kernel: [15586956.306279] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=1.172.50.212 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=3946 PROTO=TCP SPT=50722 DPT=37215 SEQ=758669438 ACK=0 WINDOW=58886 RES=0x00 SYN URGP=0 
Jul 28 17:28:28 localhost kernel: [15593501.684766] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=1.172.50.212 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=40659 PROTO=TCP SPT=50722 DPT=37215 WINDOW=58886 RES=0x00 SYN URGP=0 
Jul 28 17:28:28 localhost kernel: [15593501.684793] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=1.172.50.212 DST=[mungedIP2] LEN=40 TOS=0x00 PREC
2019-07-29 08:51:44
129.211.36.183 attackbotsspam
Jul 27 01:36:45 h2034429 sshd[32674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.36.183  user=r.r
Jul 27 01:36:47 h2034429 sshd[32674]: Failed password for r.r from 129.211.36.183 port 49888 ssh2
Jul 27 01:36:48 h2034429 sshd[32674]: Received disconnect from 129.211.36.183 port 49888:11: Bye Bye [preauth]
Jul 27 01:36:48 h2034429 sshd[32674]: Disconnected from 129.211.36.183 port 49888 [preauth]
Jul 27 02:12:12 h2034429 sshd[560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.36.183  user=r.r
Jul 27 02:12:14 h2034429 sshd[560]: Failed password for r.r from 129.211.36.183 port 41428 ssh2
Jul 27 02:12:14 h2034429 sshd[560]: Received disconnect from 129.211.36.183 port 41428:11: Bye Bye [preauth]
Jul 27 02:12:14 h2034429 sshd[560]: Disconnected from 129.211.36.183 port 41428 [preauth]
Jul 27 02:17:26 h2034429 sshd[615]: pam_unix(sshd:auth): authentication failure; logname........
-------------------------------
2019-07-29 08:49:03
188.190.223.66 attackspam
Automatic report - Port Scan Attack
2019-07-29 09:12:46
45.64.11.3 attack
2019-07-29T04:28:15.203187enmeeting.mahidol.ac.th sshd\[5110\]: User root from 45.64.11.3 not allowed because not listed in AllowUsers
2019-07-29T04:28:15.325661enmeeting.mahidol.ac.th sshd\[5110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.64.11.3  user=root
2019-07-29T04:28:17.773193enmeeting.mahidol.ac.th sshd\[5110\]: Failed password for invalid user root from 45.64.11.3 port 48832 ssh2
...
2019-07-29 08:54:30
166.157.232.1 attack
2019-07-27 21:48:31 server sshd[23756]: Failed password for root from 166.157.232.1 port 37356 ssh2
2019-07-29 09:14:30
103.244.80.150 attackspam
Jul 26 23:55:43 lamijardin sshd[20466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.244.80.150  user=r.r
Jul 26 23:55:45 lamijardin sshd[20466]: Failed password for r.r from 103.244.80.150 port 52242 ssh2
Jul 26 23:55:46 lamijardin sshd[20466]: Received disconnect from 103.244.80.150 port 52242:11: Bye Bye [preauth]
Jul 26 23:55:46 lamijardin sshd[20466]: Disconnected from 103.244.80.150 port 52242 [preauth]
Jul 27 00:22:34 lamijardin sshd[20554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.244.80.150  user=r.r
Jul 27 00:22:37 lamijardin sshd[20554]: Failed password for r.r from 103.244.80.150 port 34840 ssh2
Jul 27 00:22:37 lamijardin sshd[20554]: Received disconnect from 103.244.80.150 port 34840:11: Bye Bye [preauth]
Jul 27 00:22:37 lamijardin sshd[20554]: Disconnected from 103.244.80.150 port 34840 [preauth]
Jul 27 00:26:59 lamijardin sshd[20586]: pam_unix(sshd:auth): aut........
-------------------------------
2019-07-29 09:03:14
185.176.27.114 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2019-07-29 08:56:23
60.21.73.44 attackspam
" "
2019-07-29 08:55:57
109.177.76.169 attackspambots
k+ssh-bruteforce
2019-07-29 08:54:13

最近上报的IP列表

104.18.7.71 104.18.8.33 104.18.8.88 104.18.83.68
104.18.84.162 104.18.84.68 104.18.88.83 104.18.89.83
104.19.129.78 104.19.130.59 104.19.130.78 104.19.131.78
104.19.138.100 104.19.139.100 104.19.14.245 104.19.142.58
104.19.143.58 104.19.143.77 104.19.148.27 104.19.148.3