必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.105.193.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55560
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;109.105.193.48.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012100 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 21 18:21:06 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
Host 48.193.105.109.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 48.193.105.109.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
54.38.241.162 attack
Sep  4 18:34:20 hiderm sshd\[7419\]: Invalid user testftp from 54.38.241.162
Sep  4 18:34:20 hiderm sshd\[7419\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.ip-54-38-241.eu
Sep  4 18:34:22 hiderm sshd\[7419\]: Failed password for invalid user testftp from 54.38.241.162 port 58716 ssh2
Sep  4 18:42:51 hiderm sshd\[8247\]: Invalid user deploy from 54.38.241.162
Sep  4 18:42:51 hiderm sshd\[8247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.ip-54-38-241.eu
2019-09-05 12:51:33
193.90.12.116 attack
Sep  5 03:15:04 thevastnessof sshd[9132]: Failed password for root from 193.90.12.116 port 49480 ssh2
...
2019-09-05 12:29:37
31.47.199.127 attack
Automatic report - Port Scan Attack
2019-09-05 12:39:34
1.172.57.219 attackspambots
Sep  4 06:29:55 localhost kernel: [1330811.491301] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=1.172.57.219 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=44612 PROTO=TCP SPT=26653 DPT=23 WINDOW=120 RES=0x00 SYN URGP=0 
Sep  4 06:29:55 localhost kernel: [1330811.491330] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=1.172.57.219 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=44612 PROTO=TCP SPT=26653 DPT=23 SEQ=758669438 ACK=0 WINDOW=120 RES=0x00 SYN URGP=0 
Sep  4 18:58:02 localhost kernel: [1375698.416774] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=1.172.57.219 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=62485 PROTO=TCP SPT=27583 DPT=23 WINDOW=19355 RES=0x00 SYN URGP=0 
Sep  4 18:58:02 localhost kernel: [1375698.416809] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=1.172.57.219 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID
2019-09-05 12:45:04
67.160.238.143 attack
Sep  5 06:31:00 MK-Soft-Root1 sshd\[23774\]: Invalid user deployer from 67.160.238.143 port 57018
Sep  5 06:31:00 MK-Soft-Root1 sshd\[23774\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.160.238.143
Sep  5 06:31:02 MK-Soft-Root1 sshd\[23774\]: Failed password for invalid user deployer from 67.160.238.143 port 57018 ssh2
...
2019-09-05 12:36:19
218.98.26.180 attackbots
Sep  5 06:27:47 nginx sshd[704]: Connection from 218.98.26.180 port 60794 on 10.23.102.80 port 22
Sep  5 06:27:49 nginx sshd[704]: Received disconnect from 218.98.26.180 port 60794:11:  [preauth]
2019-09-05 12:47:36
187.176.190.225 attackspambots
Automatic report - Port Scan Attack
2019-09-05 12:26:19
159.65.164.210 attackspambots
Sep  5 00:23:17 ny01 sshd[18801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.164.210
Sep  5 00:23:19 ny01 sshd[18801]: Failed password for invalid user password1234 from 159.65.164.210 port 47996 ssh2
Sep  5 00:27:05 ny01 sshd[19788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.164.210
2019-09-05 12:27:34
182.61.105.89 attack
SSH Brute Force, server-1 sshd[21304]: Failed password for invalid user mcserver from 182.61.105.89 port 55220 ssh2
2019-09-05 13:00:20
206.189.95.16 attackbots
Python-urllib/2.7

Trying:
/vendor/phpunit/phpunit/composer.json
2019-09-05 12:31:37
190.80.96.134 attack
Lines containing failures of 190.80.96.134
Sep  5 00:19:57 ks3370873 postfix/smtpd[29623]: connect from unknown[190.80.96.134]
Sep x@x
Sep  5 00:19:58 ks3370873 postfix/smtpd[29623]: lost connection after DATA from unknown[190.80.96.134]
Sep  5 00:19:58 ks3370873 postfix/smtpd[29623]: disconnect from unknown[190.80.96.134] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=190.80.96.134
2019-09-05 13:03:21
183.60.21.112 attackspambots
2019-09-05 dovecot_login authenticator failed for \(**REMOVED**\) \[183.60.21.112\]: 535 Incorrect authentication data \(set_id=nologin\)
2019-09-05 dovecot_login authenticator failed for \(**REMOVED**\) \[183.60.21.112\]: 535 Incorrect authentication data \(set_id=anna\)
2019-09-05 dovecot_login authenticator failed for \(**REMOVED**\) \[183.60.21.112\]: 535 Incorrect authentication data \(set_id=anna\)
2019-09-05 13:06:17
106.12.39.227 attack
Sep  4 12:54:06 friendsofhawaii sshd\[28321\]: Invalid user ts3server from 106.12.39.227
Sep  4 12:54:06 friendsofhawaii sshd\[28321\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.39.227
Sep  4 12:54:08 friendsofhawaii sshd\[28321\]: Failed password for invalid user ts3server from 106.12.39.227 port 48522 ssh2
Sep  4 12:58:27 friendsofhawaii sshd\[28681\]: Invalid user sftpuser from 106.12.39.227
Sep  4 12:58:27 friendsofhawaii sshd\[28681\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.39.227
2019-09-05 12:20:57
206.189.147.229 attackbots
Sep  4 18:26:45 hcbb sshd\[5154\]: Invalid user customer from 206.189.147.229
Sep  4 18:26:45 hcbb sshd\[5154\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.147.229
Sep  4 18:26:47 hcbb sshd\[5154\]: Failed password for invalid user customer from 206.189.147.229 port 39200 ssh2
Sep  4 18:31:38 hcbb sshd\[5597\]: Invalid user 12345678 from 206.189.147.229
Sep  4 18:31:38 hcbb sshd\[5597\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.147.229
2019-09-05 12:50:10
139.59.37.209 attackspam
Sep  4 14:24:36 kapalua sshd\[23329\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.37.209  user=root
Sep  4 14:24:38 kapalua sshd\[23329\]: Failed password for root from 139.59.37.209 port 57956 ssh2
Sep  4 14:29:17 kapalua sshd\[23729\]: Invalid user merlin from 139.59.37.209
Sep  4 14:29:17 kapalua sshd\[23729\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.37.209
Sep  4 14:29:18 kapalua sshd\[23729\]: Failed password for invalid user merlin from 139.59.37.209 port 45062 ssh2
2019-09-05 12:44:39

最近上报的IP列表

110.25.170.110 18.82.26.132 208.100.245.155 61.54.196.63
240.79.53.219 198.23.182.76 80.90.50.175 246.191.214.39
251.152.245.195 151.27.199.237 196.203.238.197 163.140.8.221
209.30.32.213 41.185.223.234 35.219.120.27 176.43.251.205
193.180.172.12 82.125.141.92 9.68.156.184 104.218.190.70