必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.195.241.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32533
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;109.195.241.145.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022301 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 24 13:28:03 CST 2025
;; MSG SIZE  rcvd: 108
HOST信息:
145.241.195.109.in-addr.arpa domain name pointer 109x195x241x145.static-business.cheb.ertelecom.ru.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
145.241.195.109.in-addr.arpa	name = 109x195x241x145.static-business.cheb.ertelecom.ru.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
148.72.208.210 attackbots
Aug  9 12:05:42 localhost sshd[78556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-148-72-208-210.ip.secureserver.net  user=root
Aug  9 12:05:44 localhost sshd[78556]: Failed password for root from 148.72.208.210 port 57138 ssh2
Aug  9 12:10:22 localhost sshd[78993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-148-72-208-210.ip.secureserver.net  user=root
Aug  9 12:10:24 localhost sshd[78993]: Failed password for root from 148.72.208.210 port 39936 ssh2
Aug  9 12:15:29 localhost sshd[79535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-148-72-208-210.ip.secureserver.net  user=root
Aug  9 12:15:31 localhost sshd[79535]: Failed password for root from 148.72.208.210 port 50966 ssh2
...
2020-08-09 20:27:30
36.134.5.7 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 16 - port: 3944 proto: tcp cat: Misc Attackbytes: 60
2020-08-09 19:59:58
195.154.53.237 attack
[2020-08-09 07:33:43] NOTICE[1248][C-00005119] chan_sip.c: Call from '' (195.154.53.237:55617) to extension '011972595725668' rejected because extension not found in context 'public'.
[2020-08-09 07:33:43] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-09T07:33:43.373-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595725668",SessionID="0x7f27203c7888",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.53.237/55617",ACLName="no_extension_match"
[2020-08-09 07:35:52] NOTICE[1248][C-0000511c] chan_sip.c: Call from '' (195.154.53.237:63524) to extension '011972595725668' rejected because extension not found in context 'public'.
[2020-08-09 07:35:52] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-09T07:35:52.880-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595725668",SessionID="0x7f2720302028",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/U
...
2020-08-09 20:00:35
114.42.151.109 attackspambots
Unauthorized connection attempt from IP address 114.42.151.109 on Port 445(SMB)
2020-08-09 20:29:41
5.253.25.170 attack
Aug  9 08:06:14 host sshd\[22210\]: Failed password for root from 5.253.25.170 port 47102 ssh2
Aug  9 08:10:54 host sshd\[23206\]: Failed password for root from 5.253.25.170 port 57206 ssh2
Aug  9 08:15:38 host sshd\[24217\]: Failed password for root from 5.253.25.170 port 39082 ssh2
...
2020-08-09 20:21:41
34.75.86.157 attackspambots
34.75.86.157 - - [09/Aug/2020:14:01:11 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
34.75.86.157 - - [09/Aug/2020:14:15:40 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-09 20:19:26
223.149.241.39 attackspam
GPON Home Routers Remote Code Execution Vulnerability
2020-08-09 20:31:12
202.154.184.148 attack
Aug  9 14:08:18 ns381471 sshd[15474]: Failed password for root from 202.154.184.148 port 36332 ssh2
2020-08-09 20:35:11
218.92.0.173 attackbots
Aug  9 14:15:29 vps sshd[104685]: Failed password for root from 218.92.0.173 port 58196 ssh2
Aug  9 14:15:31 vps sshd[104685]: Failed password for root from 218.92.0.173 port 58196 ssh2
Aug  9 14:15:35 vps sshd[104685]: Failed password for root from 218.92.0.173 port 58196 ssh2
Aug  9 14:15:38 vps sshd[104685]: Failed password for root from 218.92.0.173 port 58196 ssh2
Aug  9 14:15:41 vps sshd[104685]: Failed password for root from 218.92.0.173 port 58196 ssh2
...
2020-08-09 20:17:54
112.85.42.174 attackspam
Aug  9 08:25:20 NPSTNNYC01T sshd[10556]: Failed password for root from 112.85.42.174 port 48847 ssh2
Aug  9 08:25:34 NPSTNNYC01T sshd[10556]: error: maximum authentication attempts exceeded for root from 112.85.42.174 port 48847 ssh2 [preauth]
Aug  9 08:25:42 NPSTNNYC01T sshd[10569]: Failed password for root from 112.85.42.174 port 13569 ssh2
...
2020-08-09 20:33:18
89.215.168.133 attack
Aug  9 14:11:38 pve1 sshd[8887]: Failed password for root from 89.215.168.133 port 44462 ssh2
...
2020-08-09 20:25:02
157.41.76.186 attackbots
1596975340 - 08/09/2020 14:15:40 Host: 157.41.76.186/157.41.76.186 Port: 445 TCP Blocked
...
2020-08-09 20:20:19
54.37.154.113 attackbots
Aug  9 13:04:12 rancher-0 sshd[948494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.154.113  user=root
Aug  9 13:04:15 rancher-0 sshd[948494]: Failed password for root from 54.37.154.113 port 38792 ssh2
...
2020-08-09 20:04:06
159.65.149.139 attackspam
Aug  9 13:22:06 server sshd[22584]: Failed password for root from 159.65.149.139 port 59750 ssh2
Aug  9 13:27:59 server sshd[30613]: Failed password for root from 159.65.149.139 port 53884 ssh2
Aug  9 13:31:25 server sshd[2700]: Failed password for root from 159.65.149.139 port 48652 ssh2
2020-08-09 19:59:27
58.165.216.33 attackspambots
Draytek Vigor Remote Command Injection Vulnerability
2020-08-09 20:34:19

最近上报的IP列表

36.91.251.167 246.138.226.240 206.166.184.122 29.74.161.67
146.158.145.188 40.82.246.224 209.60.19.14 96.92.64.20
98.247.251.244 26.200.34.65 214.0.86.219 182.193.10.117
4.167.4.20 254.181.164.1 27.12.160.103 21.241.162.86
49.143.169.179 225.54.160.221 160.51.166.9 179.81.207.94