必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.11.138.203
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44489
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.11.138.203.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022200 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 22 21:42:17 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
Host 203.138.11.116.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 203.138.11.116.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
116.209.190.95 attack
Honeypot attack, port: 23, PTR: PTR record not found
2019-06-29 00:31:52
177.107.30.194 attackbotsspam
Brute force SMTP login attempts.
2019-06-29 01:14:43
186.0.210.66 attackbotsspam
[Thu Jun 27 13:32:03.059773 2019] [:error] [pid 26865:tid 140527345288960] [client 186.0.210.66:57410] [client 186.0.210.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.1.1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "792"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197:80"] [severity "WARNING"] [ver "OWASP_CRS/3.1.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XRRi4xlQuTljWBroxg@lqQAAAAs"]
...
2019-06-29 01:23:19
35.240.170.59 attackbotsspam
Jun 28 15:47:27 lnxded64 sshd[29082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.240.170.59
Jun 28 15:47:27 lnxded64 sshd[29082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.240.170.59
2019-06-29 00:59:23
187.102.50.86 attack
[Thu Jun 27 18:19:31.396578 2019] [:error] [pid 6565:tid 140348542129920] [client 187.102.50.86:53092] [client 187.102.50.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.1.1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "792"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197:80"] [severity "WARNING"] [ver "OWASP_CRS/3.1.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XRSmQwTAE6Fl0cyL6JqPqgAAAAk"]
...
2019-06-29 01:22:36
37.210.167.220 attackbotsspam
Honeypot attack, port: 5555, PTR: PTR record not found
2019-06-29 00:36:31
151.80.117.133 attackbotsspam
(mod_security) mod_security (id:212000) triggered by 151.80.117.133 (FR/France/133.ip-151-80-117.eu): 5 in the last 3600 secs
2019-06-29 00:54:18
185.232.67.11 attack
Jun 28 08:18:07 cac1d2 sshd\[17032\]: Invalid user admin from 185.232.67.11 port 55095
Jun 28 08:18:07 cac1d2 sshd\[17032\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.232.67.11
Jun 28 08:18:09 cac1d2 sshd\[17032\]: Failed password for invalid user admin from 185.232.67.11 port 55095 ssh2
...
2019-06-29 00:57:41
184.105.139.70 attack
1561633716 - 06/27/2019 18:08:36 Host: scan-04.shadowserver.org/184.105.139.70 Port: 23 TCP Blocked
...
2019-06-29 00:57:15
188.138.122.18 attackbots
188.138.122.18 - - [28/Jun/2019:10:30:42 -0400] "HEAD /wallet.dat HTTP/1.0" 404 222 "-" "-"
2019-06-29 01:22:09
109.133.194.0 attack
1561627489 - 06/27/2019 16:24:49 Host: 109.133.194.0/109.133.194.0 Port: 23 TCP Blocked
...
2019-06-29 01:07:56
123.206.76.175 attackbotsspam
Jun 28 15:44:44 efgeha sshd[6283]: Did not receive identification string from 123.206.76.175
Jun 28 15:45:14 efgeha sshd[6299]: Invalid user geier from 123.206.76.175
Jun 28 15:45:35 efgeha sshd[6303]: Invalid user polycom from 123.206.76.175


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=123.206.76.175
2019-06-29 01:36:17
156.204.49.14 attack
Honeypot attack, port: 445, PTR: host-156.204.14.49-static.tedata.net.
2019-06-29 00:46:30
198.108.66.80 attackbots
[Thu Jun 27 11:06:15.528008 2019] [:error] [pid 25225:tid 140579438585600] [client 198.108.66.80:58942] [client 198.108.66.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.1.1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "792"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.1.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XRRAt-VRDWRc23Tf8fMciAAAAAY"]
...
2019-06-29 01:20:35
118.141.166.158 attackbotsspam
1561626337 - 06/27/2019 16:05:37 Host: sr-158-166-141-118-on-nets.com/118.141.166.158 Port: 23 TCP Blocked
...
2019-06-29 01:05:39

最近上报的IP列表

148.111.35.77 216.63.12.122 116.111.129.189 47.85.144.169
149.71.31.38 62.193.208.237 41.136.92.223 42.68.187.172
108.12.155.132 168.9.174.148 167.107.83.107 14.67.223.16
199.175.86.69 63.175.105.133 34.109.191.130 119.148.117.35
86.154.223.166 179.74.203.239 84.72.154.254 4.225.25.54