必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Beijing

省份(region): Beijing

国家(country): China

运营商(isp): China Unicom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.203.45.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56235
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;111.203.45.139.			IN	A

;; AUTHORITY SECTION:
.			533	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011601 1800 900 604800 86400

;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 17 04:52:55 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 139.45.203.111.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.45.203.111.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
85.37.38.195 attackbots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/85.37.38.195/ 
 
 IT - 1H : (139)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : IT 
 NAME ASN : ASN3269 
 
 IP : 85.37.38.195 
 
 CIDR : 85.37.32.0/19 
 
 PREFIX COUNT : 550 
 
 UNIQUE IP COUNT : 19507712 
 
 
 ATTACKS DETECTED ASN3269 :  
  1H - 5 
  3H - 12 
  6H - 21 
 12H - 37 
 24H - 89 
 
 DateTime : 2019-10-30 08:32:44 
 
 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN  - data recovery
2019-10-30 18:01:40
138.197.175.236 attackspam
Invalid user shclient from 138.197.175.236 port 42472
2019-10-30 17:40:35
140.115.22.94 attackspam
5x Failed Password
2019-10-30 17:53:44
123.206.30.83 attackbots
Oct 30 07:45:05 vps01 sshd[20661]: Failed password for root from 123.206.30.83 port 59548 ssh2
2019-10-30 17:37:59
186.103.223.10 attackspam
Oct 29 20:47:41 hanapaa sshd\[23917\]: Invalid user passwd from 186.103.223.10
Oct 29 20:47:41 hanapaa sshd\[23917\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.103.223.10
Oct 29 20:47:43 hanapaa sshd\[23917\]: Failed password for invalid user passwd from 186.103.223.10 port 58486 ssh2
Oct 29 20:52:42 hanapaa sshd\[24313\]: Invalid user delinke from 186.103.223.10
Oct 29 20:52:42 hanapaa sshd\[24313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.103.223.10
2019-10-30 17:54:30
211.195.12.33 attack
(sshd) Failed SSH login from 211.195.12.33 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 30 09:22:46 server2 sshd[25596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.195.12.33  user=root
Oct 30 09:22:47 server2 sshd[25596]: Failed password for root from 211.195.12.33 port 51295 ssh2
Oct 30 09:28:34 server2 sshd[25769]: Invalid user administrator from 211.195.12.33 port 46369
Oct 30 09:28:36 server2 sshd[25769]: Failed password for invalid user administrator from 211.195.12.33 port 46369 ssh2
Oct 30 09:33:04 server2 sshd[25894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.195.12.33  user=root
2019-10-30 18:03:10
207.154.209.159 attackbotsspam
Oct 30 05:46:01 web8 sshd\[26214\]: Invalid user teamspeak from 207.154.209.159
Oct 30 05:46:01 web8 sshd\[26214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.209.159
Oct 30 05:46:03 web8 sshd\[26214\]: Failed password for invalid user teamspeak from 207.154.209.159 port 55146 ssh2
Oct 30 05:49:59 web8 sshd\[28060\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.209.159  user=root
Oct 30 05:50:02 web8 sshd\[28060\]: Failed password for root from 207.154.209.159 port 37802 ssh2
2019-10-30 17:46:54
121.129.20.247 attackbotsspam
Telnet Server BruteForce Attack
2019-10-30 17:57:42
106.12.127.183 attack
Oct 30 15:10:53 itv-usvr-01 sshd[20779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.127.183  user=root
Oct 30 15:10:55 itv-usvr-01 sshd[20779]: Failed password for root from 106.12.127.183 port 39080 ssh2
Oct 30 15:16:46 itv-usvr-01 sshd[20988]: Invalid user j2deployer from 106.12.127.183
Oct 30 15:16:46 itv-usvr-01 sshd[20988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.127.183
Oct 30 15:16:46 itv-usvr-01 sshd[20988]: Invalid user j2deployer from 106.12.127.183
Oct 30 15:16:48 itv-usvr-01 sshd[20988]: Failed password for invalid user j2deployer from 106.12.127.183 port 47946 ssh2
2019-10-30 18:13:24
80.211.116.102 attackspam
Oct 30 05:49:13 TORMINT sshd\[1734\]: Invalid user 123456 from 80.211.116.102
Oct 30 05:49:13 TORMINT sshd\[1734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.116.102
Oct 30 05:49:16 TORMINT sshd\[1734\]: Failed password for invalid user 123456 from 80.211.116.102 port 50777 ssh2
...
2019-10-30 18:01:56
49.234.122.254 attackspam
Invalid user fc from 49.234.122.254 port 43390
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.122.254
Failed password for invalid user fc from 49.234.122.254 port 43390 ssh2
Invalid user wp from 49.234.122.254 port 50380
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.122.254
2019-10-30 17:43:05
104.131.115.50 attackbotsspam
Wordpress Admin Login attack
2019-10-30 17:59:52
132.232.7.197 attackspam
Oct 30 05:36:56 legacy sshd[21808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.7.197
Oct 30 05:36:58 legacy sshd[21808]: Failed password for invalid user rfrfrfrf from 132.232.7.197 port 42250 ssh2
Oct 30 05:42:18 legacy sshd[21975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.7.197
...
2019-10-30 17:39:49
148.70.63.175 attack
/var/log/messages:Oct 29 00:10:52 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1572307852.525:104027): pid=4951 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=4952 suid=74 rport=41788 laddr=104.167.106.93 lport=22  exe="/usr/sbin/sshd" hostname=? addr=148.70.63.175 terminal=? res=success'
/var/log/messages:Oct 29 00:10:52 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1572307852.529:104028): pid=4951 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=4952 suid=74 rport=41788 laddr=104.167.106.93 lport=22  exe="/usr/sbin/sshd" hostname=? addr=148.70.63.175 terminal=? res=success'
/var/log/messages:Oct 29 00:10:54 sanyalnet-cloud-vps fail2ban.filter[1538]: INFO [sshd] Found 1........
-------------------------------
2019-10-30 17:49:07
104.238.126.167 attackspambots
Brute forcing RDP port 3389
2019-10-30 17:56:17

最近上报的IP列表

104.168.142.229 103.248.14.92 154.185.8.218 216.185.240.205
71.41.225.116 102.41.234.21 39.10.90.89 75.6.18.176
91.218.209.36 91.210.104.253 201.5.9.154 47.46.195.215
90.136.33.107 179.43.109.143 61.228.206.214 79.131.154.42
78.134.123.183 146.196.243.227 77.34.225.183 174.134.141.129