必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.148.248.237
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23049
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;107.148.248.237.		IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040400 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 04 14:30:04 CST 2022
;; MSG SIZE  rcvd: 108
HOST信息:
Host 237.248.148.107.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 237.248.148.107.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
185.14.185.108 attack
Oct 10 15:35:29 ahost sshd[20041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.14.185.108  user=r.r
Oct 10 15:35:31 ahost sshd[20041]: Failed password for r.r from 185.14.185.108 port 49052 ssh2
Oct 10 15:35:31 ahost sshd[20041]: Received disconnect from 185.14.185.108: 11: Bye Bye [preauth]
Oct 10 15:47:21 ahost sshd[25665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.14.185.108  user=r.r
Oct 10 15:47:23 ahost sshd[25665]: Failed password for r.r from 185.14.185.108 port 53654 ssh2
Oct 10 15:47:23 ahost sshd[25665]: Received disconnect from 185.14.185.108: 11: Bye Bye [preauth]
Oct 10 15:51:28 ahost sshd[25709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.14.185.108  user=r.r
Oct 10 15:51:30 ahost sshd[25709]: Failed password for r.r from 185.14.185.108 port 40682 ssh2
Oct 10 15:51:30 ahost sshd[25709]: Received disconnect from ........
------------------------------
2019-10-11 05:50:45
94.140.231.121 attack
Automatic report - Port Scan Attack
2019-10-11 05:19:46
122.14.217.137 attack
Oct  7 23:41:09 mail1 sshd[6209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.14.217.137  user=r.r
Oct  7 23:41:11 mail1 sshd[6209]: Failed password for r.r from 122.14.217.137 port 57570 ssh2
Oct  7 23:41:11 mail1 sshd[6209]: Received disconnect from 122.14.217.137 port 57570:11: Bye Bye [preauth]
Oct  7 23:41:11 mail1 sshd[6209]: Disconnected from 122.14.217.137 port 57570 [preauth]
Oct  8 00:00:37 mail1 sshd[7512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.14.217.137  user=r.r
Oct  8 00:00:39 mail1 sshd[7512]: Failed password for r.r from 122.14.217.137 port 51738 ssh2
Oct  8 00:00:39 mail1 sshd[7512]: Received disconnect from 122.14.217.137 port 51738:11: Bye Bye [preauth]
Oct  8 00:00:39 mail1 sshd[7512]: Disconnected from 122.14.217.137 port 51738 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=122.14.217.137
2019-10-11 05:45:46
92.188.124.228 attackspam
Oct 10 11:40:24 wbs sshd\[22475\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.188.124.228  user=root
Oct 10 11:40:27 wbs sshd\[22475\]: Failed password for root from 92.188.124.228 port 56560 ssh2
Oct 10 11:44:18 wbs sshd\[22787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.188.124.228  user=root
Oct 10 11:44:20 wbs sshd\[22787\]: Failed password for root from 92.188.124.228 port 51198 ssh2
Oct 10 11:48:37 wbs sshd\[23165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.188.124.228  user=root
2019-10-11 05:52:56
186.95.204.132 attackspambots
Attempt to attack host OS, exploiting network vulnerabilities, on 10-10-2019 21:10:22.
2019-10-11 05:15:39
103.136.179.212 attackbotsspam
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/103.136.179.212/ 
 KH - 1H : (7)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : KH 
 NAME ASN : ASN138690 
 
 IP : 103.136.179.212 
 
 CIDR : 103.136.179.0/24 
 
 PREFIX COUNT : 4 
 
 UNIQUE IP COUNT : 1024 
 
 
 WYKRYTE ATAKI Z ASN138690 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-10-10 22:10:05 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-11 05:25:46
209.17.97.82 attack
Automatic report - Banned IP Access
2019-10-11 05:34:35
51.75.163.218 attack
Oct 10 23:31:17 SilenceServices sshd[22307]: Failed password for root from 51.75.163.218 port 35432 ssh2
Oct 10 23:34:48 SilenceServices sshd[24500]: Failed password for root from 51.75.163.218 port 46356 ssh2
2019-10-11 05:49:53
185.216.140.180 attack
(Oct 11)  LEN=40 TTL=249 ID=47888 TCP DPT=3306 WINDOW=1024 SYN 
 (Oct 10)  LEN=40 TTL=249 ID=44854 TCP DPT=3306 WINDOW=1024 SYN 
 (Oct 10)  LEN=40 TTL=249 ID=57248 TCP DPT=3306 WINDOW=1024 SYN 
 (Oct 10)  LEN=40 TTL=249 ID=8407 TCP DPT=3306 WINDOW=1024 SYN 
 (Oct 10)  LEN=40 TTL=249 ID=44340 TCP DPT=3306 WINDOW=1024 SYN 
 (Oct 10)  LEN=40 TTL=249 ID=46717 TCP DPT=3306 WINDOW=1024 SYN 
 (Oct 10)  LEN=40 TTL=249 ID=34322 TCP DPT=3306 WINDOW=1024 SYN 
 (Oct 10)  LEN=40 TTL=249 ID=55386 TCP DPT=3306 WINDOW=1024 SYN 
 (Oct 10)  LEN=40 TTL=249 ID=40211 TCP DPT=3306 WINDOW=1024 SYN 
 (Oct 10)  LEN=40 TTL=249 ID=42098 TCP DPT=3306 WINDOW=1024 SYN 
 (Oct 10)  LEN=40 TTL=249 ID=46231 TCP DPT=3306 WINDOW=1024 SYN 
 (Oct 10)  LEN=40 TTL=249 ID=32729 TCP DPT=3306 WINDOW=1024 SYN 
 (Oct 10)  LEN=40 TTL=249 ID=61955 TCP DPT=3306 WINDOW=1024 SYN 
 (Oct 10)  LEN=40 TTL=249 ID=21574 TCP DPT=3306 WINDOW=1024 SYN 
 (Oct 10)  LEN=40 TTL=249 ID=5665 TCP DPT=3306 WINDOW=1024 SYN 
 (Oct 10)  LEN=40 TTL=249 I...
2019-10-11 05:41:53
111.67.193.34 attackbotsspam
Lines containing failures of 111.67.193.34
Oct  9 08:38:00 shared05 sshd[19756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.193.34  user=r.r
Oct  9 08:38:02 shared05 sshd[19756]: Failed password for r.r from 111.67.193.34 port 47999 ssh2
Oct  9 08:38:02 shared05 sshd[19756]: Received disconnect from 111.67.193.34 port 47999:11: Bye Bye [preauth]
Oct  9 08:38:02 shared05 sshd[19756]: Disconnected from authenticating user r.r 111.67.193.34 port 47999 [preauth]
Oct  9 09:09:43 shared05 sshd[30974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.193.34  user=r.r
Oct  9 09:09:45 shared05 sshd[30974]: Failed password for r.r from 111.67.193.34 port 60126 ssh2
Oct  9 09:09:46 shared05 sshd[30974]: Received disconnect from 111.67.193.34 port 60126:11: Bye Bye [preauth]
Oct  9 09:09:46 shared05 sshd[30974]: Disconnected from authenticating user r.r 111.67.193.34 port 60126 [preauth........
------------------------------
2019-10-11 05:38:56
58.254.132.140 attack
Oct 10 23:01:46 vps01 sshd[1835]: Failed password for root from 58.254.132.140 port 50673 ssh2
2019-10-11 05:28:57
113.121.77.23 attackbotsspam
Oct 10 16:03:43 esmtp postfix/smtpd[354]: lost connection after AUTH from unknown[113.121.77.23]
Oct 10 16:03:46 esmtp postfix/smtpd[334]: lost connection after AUTH from unknown[113.121.77.23]
Oct 10 16:03:49 esmtp postfix/smtpd[336]: lost connection after AUTH from unknown[113.121.77.23]
Oct 10 16:03:51 esmtp postfix/smtpd[336]: lost connection after AUTH from unknown[113.121.77.23]
Oct 10 16:03:53 esmtp postfix/smtpd[336]: lost connection after AUTH from unknown[113.121.77.23]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=113.121.77.23
2019-10-11 05:36:16
159.89.229.244 attack
Oct 10 23:09:31 meumeu sshd[12450]: Failed password for root from 159.89.229.244 port 48080 ssh2
Oct 10 23:13:39 meumeu sshd[13243]: Failed password for root from 159.89.229.244 port 59544 ssh2
...
2019-10-11 05:35:06
218.70.174.23 attackbots
Oct 11 00:21:54 tuotantolaitos sshd[12966]: Failed password for root from 218.70.174.23 port 50769 ssh2
...
2019-10-11 05:26:41
1.173.186.220 attack
firewall-block, port(s): 23/tcp
2019-10-11 05:30:41

最近上报的IP列表

107.148.243.28 107.149.136.189 107.149.90.34 107.150.121.12
107.151.64.114 107.152.148.134 107.152.148.17 107.152.175.224
107.152.190.117 107.152.190.127 107.152.222.85 107.152.225.19
107.152.225.78 107.152.39.101 107.154.146.46 107.154.146.79
107.154.147.172 107.154.152.149 107.154.153.134 107.154.154.193