必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.132.241.194
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42786
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.132.241.194.		IN	A

;; AUTHORITY SECTION:
.			553	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024081402 1800 900 604800 86400

;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Aug 15 12:18:42 CST 2024
;; MSG SIZE  rcvd: 108
HOST信息:
194.241.132.112.in-addr.arpa domain name pointer 194.241.132.112.adsl-pool.ah.cnuninet.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
194.241.132.112.in-addr.arpa	name = 194.241.132.112.adsl-pool.ah.cnuninet.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
121.237.168.230 attack
Lines containing failures of 121.237.168.230
Oct 26 13:35:47 mellenthin sshd[16762]: Invalid user hduser from 121.237.168.230 port 32289
Oct 26 13:35:47 mellenthin sshd[16762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.237.168.230
Oct 26 13:35:48 mellenthin sshd[16762]: Failed password for invalid user hduser from 121.237.168.230 port 32289 ssh2
Oct 26 13:35:49 mellenthin sshd[16762]: Received disconnect from 121.237.168.230 port 32289:11: Bye Bye [preauth]
Oct 26 13:35:49 mellenthin sshd[16762]: Disconnected from invalid user hduser 121.237.168.230 port 32289 [preauth]
Oct 26 13:44:52 mellenthin sshd[17404]: User r.r from 121.237.168.230 not allowed because not listed in AllowUsers
Oct 26 13:44:52 mellenthin sshd[17404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.237.168.230  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=121.237.168.230
2019-10-26 20:36:50
54.169.154.164 attackbots
Lines containing failures of 54.169.154.164
Oct 26 13:23:38 shared10 sshd[18014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.169.154.164  user=r.r
Oct 26 13:23:40 shared10 sshd[18014]: Failed password for r.r from 54.169.154.164 port 40866 ssh2
Oct 26 13:23:40 shared10 sshd[18014]: Received disconnect from 54.169.154.164 port 40866:11: Bye Bye [preauth]
Oct 26 13:23:40 shared10 sshd[18014]: Disconnected from authenticating user r.r 54.169.154.164 port 40866 [preauth]
Oct 26 13:48:36 shared10 sshd[26157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.169.154.164  user=r.r
Oct 26 13:48:38 shared10 sshd[26157]: Failed password for r.r from 54.169.154.164 port 37082 ssh2
Oct 26 13:48:38 shared10 sshd[26157]: Received disconnect from 54.169.154.164 port 37082:11: Bye Bye [preauth]
Oct 26 13:48:38 shared10 sshd[26157]: Disconnected from authenticating user r.r 54.169.154.164 port 37082........
------------------------------
2019-10-26 20:46:40
220.179.68.246 attackbotsspam
fail2ban
2019-10-26 20:51:33
185.153.208.26 attack
2019-10-26T14:17:47.970277scmdmz1 sshd\[1749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.153.208.26  user=root
2019-10-26T14:17:49.282364scmdmz1 sshd\[1749\]: Failed password for root from 185.153.208.26 port 35274 ssh2
2019-10-26T14:22:02.076203scmdmz1 sshd\[2158\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.153.208.26  user=root
...
2019-10-26 20:24:58
218.211.169.103 attack
Oct 26 04:52:54 server sshd\[4462\]: Failed password for invalid user test from 218.211.169.103 port 35114 ssh2
Oct 26 11:46:44 server sshd\[12721\]: Invalid user jboss from 218.211.169.103
Oct 26 11:46:44 server sshd\[12721\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.211.169.103 
Oct 26 11:46:46 server sshd\[12721\]: Failed password for invalid user jboss from 218.211.169.103 port 50864 ssh2
Oct 26 15:04:46 server sshd\[5028\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.211.169.103  user=root
...
2019-10-26 20:53:43
167.114.152.139 attackspam
Oct 26 15:43:49 server sshd\[2278\]: User root from 167.114.152.139 not allowed because listed in DenyUsers
Oct 26 15:43:49 server sshd\[2278\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.152.139  user=root
Oct 26 15:43:51 server sshd\[2278\]: Failed password for invalid user root from 167.114.152.139 port 49852 ssh2
Oct 26 15:48:05 server sshd\[16654\]: User root from 167.114.152.139 not allowed because listed in DenyUsers
Oct 26 15:48:05 server sshd\[16654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.152.139  user=root
2019-10-26 20:52:53
45.82.35.42 attack
Postfix DNSBL listed. Trying to send SPAM.
2019-10-26 20:31:04
45.143.220.4 attack
\[2019-10-26 08:26:04\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-26T08:26:04.161-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00441282797835",SessionID="0x7fdf2c567918",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.4/55818",ACLName="no_extension_match"
\[2019-10-26 08:26:30\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-26T08:26:30.418-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="000441282797835",SessionID="0x7fdf2c144d18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.4/54720",ACLName="no_extension_match"
\[2019-10-26 08:26:56\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-26T08:26:56.440-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="900441282797835",SessionID="0x7fdf2c3f5928",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.4/57803",ACLName="no_extensi
2019-10-26 20:39:08
103.130.218.125 attackspam
SSH bruteforce (Triggered fail2ban)
2019-10-26 20:53:17
91.185.236.236 attack
postfix
2019-10-26 20:24:27
148.251.20.137 attackbots
10/26/2019-08:35:42.370899 148.251.20.137 Protocol: 6 ET SCAN Potential SSH Scan
2019-10-26 20:36:13
217.61.17.7 attackspambots
Oct 26 11:57:06 ip-172-31-62-245 sshd\[16811\]: Invalid user gituser from 217.61.17.7\
Oct 26 11:57:09 ip-172-31-62-245 sshd\[16811\]: Failed password for invalid user gituser from 217.61.17.7 port 53758 ssh2\
Oct 26 12:00:51 ip-172-31-62-245 sshd\[16843\]: Invalid user tsteamspeak321 from 217.61.17.7\
Oct 26 12:00:53 ip-172-31-62-245 sshd\[16843\]: Failed password for invalid user tsteamspeak321 from 217.61.17.7 port 34918 ssh2\
Oct 26 12:04:43 ip-172-31-62-245 sshd\[16859\]: Invalid user vikky from 217.61.17.7\
2019-10-26 20:57:04
61.19.247.121 attackbots
Oct 26 08:23:58 plusreed sshd[22307]: Invalid user hardon from 61.19.247.121
...
2019-10-26 20:33:48
77.40.3.173 attackspambots
failed_logins
2019-10-26 20:40:20
104.248.19.57 attack
Oct 26 07:51:18 foo sshd[27359]: Did not receive identification string from 104.248.19.57
Oct 26 07:53:43 foo sshd[27360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.19.57  user=r.r
Oct 26 07:53:45 foo sshd[27360]: Failed password for r.r from 104.248.19.57 port 41382 ssh2
Oct 26 07:53:45 foo sshd[27360]: Received disconnect from 104.248.19.57: 11: Normal Shutdown, Thank you for playing [preauth]
Oct 26 07:54:11 foo sshd[27380]: Invalid user admin from 104.248.19.57
Oct 26 07:54:11 foo sshd[27380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.19.57 
Oct 26 07:54:13 foo sshd[27380]: Failed password for invalid user admin from 104.248.19.57 port 40562 ssh2
Oct 26 07:54:13 foo sshd[27380]: Received disconnect from 104.248.19.57: 11: Normal Shutdown, Thank you for playing [preauth]
Oct 26 07:54:41 foo sshd[27384]: Invalid user admin from 104.248.19.57
Oct 26 07:54:41 foo ........
-------------------------------
2019-10-26 20:56:40

最近上报的IP列表

112.132.27.138 112.132.235.242 112.132.221.145 112.132.231.40
112.132.220.211 112.132.214.91 112.132.189.123 112.132.246.252
112.132.195.118 112.132.176.211 112.132.169.226 112.132.164.111
112.132.35.149 112.132.166.177 112.132.145.89 112.132.141.69
112.132.128.63 112.132.76.219 112.132.132.89 112.133.193.20