必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.20.192.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53512
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.20.192.109.			IN	A

;; AUTHORITY SECTION:
.			412	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 08:28:08 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 109.192.20.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 109.192.20.104.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
218.201.104.143 attackbotsspam
port scan and connect, tcp 1433 (ms-sql-s)
2020-08-15 22:43:52
164.132.38.166 attackbots
164.132.38.166 - - [15/Aug/2020:15:20:18 +0100] "POST /wp-login.php HTTP/1.1" 200 2082 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
164.132.38.166 - - [15/Aug/2020:15:20:19 +0100] "POST /wp-login.php HTTP/1.1" 200 2081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
164.132.38.166 - - [15/Aug/2020:15:20:20 +0100] "POST /wp-login.php HTTP/1.1" 200 2082 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-15 22:37:29
187.85.218.140 attack
Automatic report - Port Scan Attack
2020-08-15 23:01:28
123.122.161.233 attackspam
frenzy
2020-08-15 22:35:56
113.141.70.115 attackspam
Port Scan detected!
...
2020-08-15 22:38:09
167.172.239.118 attackbots
Aug 15 08:40:37 lanister sshd[13557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.239.118  user=root
Aug 15 08:40:40 lanister sshd[13557]: Failed password for root from 167.172.239.118 port 59336 ssh2
Aug 15 08:48:12 lanister sshd[13650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.239.118  user=root
Aug 15 08:48:14 lanister sshd[13650]: Failed password for root from 167.172.239.118 port 55014 ssh2
2020-08-15 22:52:24
75.82.233.30 attackspam
Aug 15 14:17:08 server2 sshd[29291]: Invalid user admin from 75.82.233.30
Aug 15 14:17:08 server2 sshd[29291]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-75-82-233-30.socal.res.rr.com 
Aug 15 14:17:10 server2 sshd[29291]: Failed password for invalid user admin from 75.82.233.30 port 36998 ssh2
Aug 15 14:17:10 server2 sshd[29291]: Received disconnect from 75.82.233.30: 11: Bye Bye [preauth]
Aug 15 14:17:11 server2 sshd[29301]: Invalid user admin from 75.82.233.30
Aug 15 14:17:11 server2 sshd[29301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-75-82-233-30.socal.res.rr.com 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=75.82.233.30
2020-08-15 23:15:38
192.99.31.122 attackspambots
192.99.31.122 - - [15/Aug/2020:15:35:35 +0200] "GET /wp-login.php HTTP/1.1" 200 9032 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
192.99.31.122 - - [15/Aug/2020:15:35:38 +0200] "POST /wp-login.php HTTP/1.1" 200 9283 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
192.99.31.122 - - [15/Aug/2020:15:35:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-08-15 22:46:59
222.186.175.151 attackbotsspam
SSH Brute-Force attacks
2020-08-15 23:03:08
194.61.24.177 attackbots
Aug 15 16:28:59 srv2 sshd\[21181\]: Invalid user 0 from 194.61.24.177 port 49369
Aug 15 16:29:00 srv2 sshd\[21187\]: Invalid user 22 from 194.61.24.177 port 20520
Aug 15 16:29:00 srv2 sshd\[21191\]: Invalid user 101 from 194.61.24.177 port 30283
2020-08-15 22:43:08
189.192.100.139 attackbotsspam
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-15T12:13:35Z and 2020-08-15T12:22:41Z
2020-08-15 22:56:39
51.38.186.244 attackspam
Aug 15 10:11:23 ny01 sshd[16791]: Failed password for root from 51.38.186.244 port 42390 ssh2
Aug 15 10:15:12 ny01 sshd[17255]: Failed password for root from 51.38.186.244 port 52208 ssh2
2020-08-15 22:34:26
35.224.204.56 attackbotsspam
Aug 15 16:41:41 lnxweb62 sshd[26988]: Failed password for root from 35.224.204.56 port 55268 ssh2
Aug 15 16:44:54 lnxweb62 sshd[28392]: Failed password for root from 35.224.204.56 port 55674 ssh2
2020-08-15 22:50:56
198.245.50.81 attack
Aug 15 07:25:07 serwer sshd\[20102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.245.50.81  user=root
Aug 15 07:25:09 serwer sshd\[20102\]: Failed password for root from 198.245.50.81 port 42784 ssh2
Aug 15 07:30:25 serwer sshd\[23672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.245.50.81  user=root
...
2020-08-15 23:10:24
167.58.240.138 attackspam
Aug 15 14:11:10 mxgate1 postfix/postscreen[4584]: CONNECT from [167.58.240.138]:48201 to [176.31.12.44]:25
Aug 15 14:11:10 mxgate1 postfix/dnsblog[4586]: addr 167.58.240.138 listed by domain zen.spamhaus.org as 127.0.0.11
Aug 15 14:11:10 mxgate1 postfix/dnsblog[4586]: addr 167.58.240.138 listed by domain zen.spamhaus.org as 127.0.0.4
Aug 15 14:11:10 mxgate1 postfix/dnsblog[4585]: addr 167.58.240.138 listed by domain cbl.abuseat.org as 127.0.0.2
Aug 15 14:11:16 mxgate1 postfix/postscreen[4584]: DNSBL rank 3 for [167.58.240.138]:48201
Aug x@x
Aug 15 14:11:17 mxgate1 postfix/postscreen[4584]: HANGUP after 1.6 from [167.58.240.138]:48201 in tests after SMTP handshake
Aug 15 14:11:17 mxgate1 postfix/postscreen[4584]: DISCONNECT [167.58.240.138]:48201


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=167.58.240.138
2020-08-15 22:55:48

最近上报的IP列表

104.20.214.26 104.20.215.26 125.29.34.163 104.20.191.109
104.20.216.62 104.20.217.62 104.20.22.236 104.20.227.109
104.20.225.69 104.20.224.69 104.20.228.109 104.20.229.115
104.20.230.115 104.20.240.77 104.20.23.236 104.20.245.122
104.20.241.77 125.29.34.171 104.20.253.52 104.20.246.122