必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.131.242.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58199
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;105.131.242.138.		IN	A

;; AUTHORITY SECTION:
.			441	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023112203 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 23 10:28:29 CST 2023
;; MSG SIZE  rcvd: 108
HOST信息:
Host 138.242.131.105.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.242.131.105.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
183.82.100.220 attackspambots
RDP Bruteforce
2020-10-08 04:55:49
115.96.155.193 attackbotsspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-10-08 04:51:20
211.95.84.146 attack
2020-10-07T13:17:27.931877yoshi.linuxbox.ninja sshd[2138726]: Failed password for root from 211.95.84.146 port 51466 ssh2
2020-10-07T13:18:33.848103yoshi.linuxbox.ninja sshd[2139458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.95.84.146  user=root
2020-10-07T13:18:35.784284yoshi.linuxbox.ninja sshd[2139458]: Failed password for root from 211.95.84.146 port 58932 ssh2
...
2020-10-08 04:54:17
181.52.172.107 attack
Oct  7 23:44:01 itv-usvr-02 sshd[11708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.52.172.107  user=root
Oct  7 23:47:17 itv-usvr-02 sshd[11821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.52.172.107  user=root
Oct  7 23:50:43 itv-usvr-02 sshd[11975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.52.172.107  user=root
2020-10-08 04:40:33
195.224.173.133 attackbotsspam
10/06/2020-13:46:39 - *Port Scan* detected from 195.224.173.133 (GB/United Kingdom/Monmouthshire/Abergavenny/-/[AS5413 Daisy Communications Ltd]) 40
2020-10-08 04:58:07
83.97.20.35 attack
ET DROP Dshield Block Listed Source group 1 - port: 7288 proto: tcp cat: Misc Attackbytes: 60
2020-10-08 04:36:08
141.98.81.141 attackbotsspam
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-10-07T19:24:23Z
2020-10-08 04:15:03
193.107.103.39 attack
Unauthorized connection attempt from IP address 193.107.103.39 on Port 445(SMB)
2020-10-08 04:33:48
62.210.136.189 attackbotsspam
Oct  7 22:31:45 buvik sshd[30407]: Failed password for root from 62.210.136.189 port 58020 ssh2
Oct  7 22:31:43 buvik sshd[30405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.210.136.189  user=root
Oct  7 22:31:45 buvik sshd[30405]: Failed password for root from 62.210.136.189 port 57156 ssh2
...
2020-10-08 05:00:35
192.3.163.226 attack
Lines containing failures of 192.3.163.226
Oct  6 19:39:47 g1 sshd[22172]: User r.r from 192.3.163.226 not allowed because not listed in AllowUsers
Oct  6 19:39:47 g1 sshd[22172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.163.226  user=r.r
Oct  6 19:39:50 g1 sshd[22172]: Failed password for invalid user r.r from 192.3.163.226 port 41434 ssh2
Oct  6 19:39:50 g1 sshd[22172]: Received disconnect from 192.3.163.226 port 41434:11: Bye Bye [preauth]
Oct  6 19:39:50 g1 sshd[22172]: Disconnected from invalid user r.r 192.3.163.226 port 41434 [preauth]
Oct  6 19:45:25 g1 sshd[22581]: User r.r from 192.3.163.226 not allowed because not listed in AllowUsers
Oct  6 19:45:25 g1 sshd[22581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.163.226  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=192.3.163.226
2020-10-08 04:12:40
51.91.250.49 attackbotsspam
51.91.250.49 (FR/France/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct  7 09:27:20 server5 sshd[17675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.101.151.41  user=root
Oct  7 09:18:47 server5 sshd[14266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.69.161.113  user=root
Oct  7 09:26:02 server5 sshd[17257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.89.216  user=root
Oct  7 09:26:05 server5 sshd[17257]: Failed password for root from 68.183.89.216 port 49222 ssh2
Oct  7 09:21:33 server5 sshd[15306]: Failed password for root from 51.91.250.49 port 34728 ssh2

IP Addresses Blocked:

5.101.151.41 (GB/United Kingdom/-)
125.69.161.113 (CN/China/-)
68.183.89.216 (IN/India/-)
2020-10-08 04:46:12
45.129.33.120 attack
Blocked by jail apache-security2
2020-10-08 04:24:17
213.6.61.219 attack
GET /admin//config.php HTTP/1.1
2020-10-08 04:52:57
220.149.227.105 attackbotsspam
Oct  7 09:56:07 ns3164893 sshd[26980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.149.227.105  user=root
Oct  7 09:56:09 ns3164893 sshd[26980]: Failed password for root from 220.149.227.105 port 43838 ssh2
...
2020-10-08 04:34:35
190.75.149.11 attackspambots
Unauthorized connection attempt from IP address 190.75.149.11 on Port 445(SMB)
2020-10-08 04:37:18

最近上报的IP列表

105.131.250.129 105.131.179.147 105.131.254.128 105.131.239.128
105.131.27.201 105.131.82.95 105.131.17.38 105.131.155.240
105.131.245.179 105.131.154.112 105.131.221.214 105.131.198.53
105.131.180.208 105.131.103.58 105.130.95.15 105.131.34.107
105.131.127.116 105.131.158.68 105.131.207.245 105.130.37.173