必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Braga

省份(region): Braga

国家(country): Portugal

运营商(isp): NOS

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.50.198.96
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10099
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;109.50.198.96.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012102 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 08:39:45 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
96.198.50.109.in-addr.arpa domain name pointer a109-50-198-96.cpe.netcabo.pt.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
96.198.50.109.in-addr.arpa	name = a109-50-198-96.cpe.netcabo.pt.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
78.97.26.81 attackbotsspam
Automatic report - Port Scan Attack
2019-11-02 08:01:37
91.121.142.225 attackspam
sshd jail - ssh hack attempt
2019-11-02 08:18:26
167.71.14.11 attackspam
techno.ws 167.71.14.11 \[02/Nov/2019:04:55:40 +0100\] "POST /wp-login.php HTTP/1.1" 200 5604 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
techno.ws 167.71.14.11 \[02/Nov/2019:04:55:44 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4070 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-11-02 12:04:55
88.230.93.144 attackspam
Spam Timestamp : 01-Nov-19 19:08   BlockList Provider  combined abuse   (645)
2019-11-02 08:15:44
164.132.54.215 attackbots
Nov  2 00:21:09 cvbnet sshd[20293]: Failed password for root from 164.132.54.215 port 56232 ssh2
...
2019-11-02 07:59:08
5.54.177.8 attackspambots
Telnet Server BruteForce Attack
2019-11-02 12:01:00
192.99.10.122 attackspam
Connection by 192.99.10.122 on port: 8545 got caught by honeypot at 11/1/2019 11:31:18 PM
2019-11-02 08:13:37
93.39.104.224 attackspam
Nov  1 00:22:44 fwweb01 sshd[26318]: Invalid user systeam from 93.39.104.224
Nov  1 00:22:44 fwweb01 sshd[26318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-39-104-224.ip75.fastwebnet.hostname 
Nov  1 00:22:47 fwweb01 sshd[26318]: Failed password for invalid user systeam from 93.39.104.224 port 60706 ssh2
Nov  1 00:22:47 fwweb01 sshd[26318]: Received disconnect from 93.39.104.224: 11: Bye Bye [preauth]
Nov  1 00:29:32 fwweb01 sshd[26640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-39-104-224.ip75.fastwebnet.hostname  user=r.r
Nov  1 00:29:34 fwweb01 sshd[26640]: Failed password for r.r from 93.39.104.224 port 40942 ssh2
Nov  1 00:29:34 fwweb01 sshd[26640]: Received disconnect from 93.39.104.224: 11: Bye Bye [preauth]
Nov  1 00:35:15 fwweb01 sshd[26968]: Invalid user 00 from 93.39.104.224
Nov  1 00:35:15 fwweb01 sshd[26968]: pam_unix(sshd:auth): authentication failure; logname........
-------------------------------
2019-11-02 12:12:23
18.194.194.113 attack
Nov  1 21:01:59 olgosrv01 sshd[28438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-18-194-194-113.eu-central-1.compute.amazonaws.com  user=r.r
Nov  1 21:02:01 olgosrv01 sshd[28438]: Failed password for r.r from 18.194.194.113 port 49718 ssh2
Nov  1 21:02:01 olgosrv01 sshd[28438]: Received disconnect from 18.194.194.113: 11: Bye Bye [preauth]
Nov  1 21:08:20 olgosrv01 sshd[28834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-18-194-194-113.eu-central-1.compute.amazonaws.com  user=r.r
Nov  1 21:08:22 olgosrv01 sshd[28834]: Failed password for r.r from 18.194.194.113 port 50124 ssh2
Nov  1 21:08:22 olgosrv01 sshd[28834]: Received disconnect from 18.194.194.113: 11: Bye Bye [preauth]
Nov  1 21:12:14 olgosrv01 sshd[29124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-18-194-194-113.eu-central-1.compute.amazonaws.com  user=r.r
Nov  1 21........
-------------------------------
2019-11-02 12:09:14
27.217.18.104 attackspambots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/27.217.18.104/ 
 
 CN - 1H : (670)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN4837 
 
 IP : 27.217.18.104 
 
 CIDR : 27.192.0.0/11 
 
 PREFIX COUNT : 1262 
 
 UNIQUE IP COUNT : 56665856 
 
 
 ATTACKS DETECTED ASN4837 :  
  1H - 19 
  3H - 42 
  6H - 63 
 12H - 129 
 24H - 255 
 
 DateTime : 2019-11-02 04:55:32 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-02 12:09:47
119.28.222.88 attackbotsspam
Nov  2 04:51:11 vps01 sshd[10173]: Failed password for root from 119.28.222.88 port 41916 ssh2
2019-11-02 12:09:01
45.143.220.16 attack
\[2019-11-01 23:55:48\] NOTICE\[2601\] chan_sip.c: Registration from '"2000" \' failed for '45.143.220.16:5134' - Wrong password
\[2019-11-01 23:55:48\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-01T23:55:48.715-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2000",SessionID="0x7fdf2c3f5928",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.16/5134",Challenge="5669094c",ReceivedChallenge="5669094c",ReceivedHash="8081391254c559628edd675997a78d99"
\[2019-11-01 23:55:48\] NOTICE\[2601\] chan_sip.c: Registration from '"2000" \' failed for '45.143.220.16:5134' - Wrong password
\[2019-11-01 23:55:48\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-01T23:55:48.820-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2000",SessionID="0x7fdf2c411158",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD
2019-11-02 12:00:03
183.11.130.173 attackspam
Lines containing failures of 183.11.130.173 (max 1000)
Nov  1 09:23:47 mm sshd[15112]: pam_unix(sshd:auth): authentication fai=
lure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D183.11.130=
.173  user=3Dr.r
Nov  1 09:23:49 mm sshd[15112]: Failed password for r.r from 183.11.13=
0.173 port 61540 ssh2
Nov  1 09:23:50 mm sshd[15112]: Received disconnect from 183.11.130.173=
 port 61540:11: Bye Bye [preauth]
Nov  1 09:23:50 mm sshd[15112]: Disconnected from authenticating user r=
oot 183.11.130.173 port 61540 [preauth]
Nov  1 09:44:43 mm sshd[15367]: Invalid user deluge from 183.11.130.173=
 port 63306
Nov  1 09:44:43 mm sshd[15367]: pam_unix(sshd:auth): authentication fai=
lure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D183.11.130=
.173
Nov  1 09:44:45 mm sshd[15367]: Failed password for invalid user deluge=
 from 183.11.130.173 port 63306 ssh2
Nov  1 09:44:46 mm sshd[15367]: Received disconnect from 183.11.130.173=
 port 63306:11: Bye Bye [preauth]
........
------------------------------
2019-11-02 08:04:05
187.207.179.40 attack
$f2bV_matches
2019-11-02 12:08:30
185.84.181.47 attackspam
185.84.181.47 - - \[02/Nov/2019:03:55:30 +0000\] "POST /wp-login.php HTTP/1.1" 200 4358 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
185.84.181.47 - - \[02/Nov/2019:03:55:31 +0000\] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2019-11-02 12:11:02

最近上报的IP列表

65.192.200.195 24.15.98.47 221.153.250.94 166.101.99.151
3.125.204.173 141.75.248.114 58.232.111.57 121.7.154.44
61.202.31.187 66.243.50.62 101.254.51.42 30.154.49.183
115.64.176.245 155.111.100.230 45.17.198.7 190.57.31.134
14.93.34.45 185.220.100.155 122.140.93.225 76.191.58.134