必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '119.176.0.0 - 119.191.255.255'

% Abuse contact for '119.176.0.0 - 119.191.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        119.176.0.0 - 119.191.255.255
netname:        UNICOM-SD
descr:          China Unicom Shandong Province Network
descr:          China Unicom
country:        CN
admin-c:        CH1302-AP
tech-c:         XZ14-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP
mnt-lower:      MAINT-CNCGROUP-SD
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2025-01-22T13:14:10Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         XIAOFENG ZHANG
nic-hdl:        XZ14-AP
e-mail:         ip@pub.sd.cninfo.net
address:        Jinan,Shandong P.R China
phone:          +86-531-6666666
fax-no:         +86-531-6666666
country:        CN
mnt-by:         MAINT-ZXF
last-modified:  2008-09-04T07:29:35Z
source:         APNIC

% Information related to '119.176.0.0/12AS4837'

route:          119.176.0.0/12
descr:          CNC Group CHINA169 Shandong Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2008-09-04T07:55:14Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.181.20.113
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30947
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;119.181.20.113.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026100900 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 09 15:04:47 CST 2026
;; MSG SIZE  rcvd: 107
HOST信息:
Host 113.20.181.119.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 113.20.181.119.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
206.189.140.154 spam
Return-Path: 
Received: from meduim.com ([206.189.140.154]) by mx.kundenserver.de (mxeue009
 [212.227.15.41]) with ESMTP (Nemesis) id 1MduRq-1kdvRZ1U0M-00b7T2 for
 ; Tue, 04 Aug 2020 15:16:15 +0200
Received: by meduim.com (Postfix, from userid 33)
	id E35EB51FC7; Tue,  4 Aug 2020 13:15:01 +0000 (UTC)
Date: Tue, 4 Aug 2020 13:15:01 +0000
To: andreas@andur.de
From: =?utf-8?Q??= 
Subject: =?utf-8?Q?Sehr=20schlechte=20Nachrichten=20f=c3=bcr=20Sie?=
Message-ID: 
X-Priority: 3
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Envelope-To: 
X-Spam-Flag: NO
X-UI-Filterresults: notjunk:1;V03:K0:+S/S7V0xlF8=:XKtmlbI1P4AWYu9I/X/hrrBDcG

Ich grüße dich!

Ich habe schlechte Nachrichten für dich.
10.11.2019 - An diesem Tag habe ich mich in Ihr Betriebssystem gehackt und vollen Zugriff auf Ihr Konto erhalten.
2020-08-10 02:26:17
220.166.241.138 attackspam
Aug  4 14:05:50 *** sshd[11941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.166.241.138  user=r.r
Aug  4 14:05:52 *** sshd[11941]: Failed password for r.r from 220.166.241.138 port 48516 ssh2
Aug  4 14:05:52 *** sshd[11941]: Received disconnect from 220.166.241.138 port 48516:11: Bye Bye [preauth]
Aug  4 14:05:52 *** sshd[11941]: Disconnected from 220.166.241.138 port 48516 [preauth]
Aug  4 14:12:13 *** sshd[12045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.166.241.138  user=r.r
Aug  4 14:12:15 *** sshd[12045]: Failed password for r.r from 220.166.241.138 port 48792 ssh2
Aug  4 14:12:16 *** sshd[12045]: Received disconnect from 220.166.241.138 port 48792:11: Bye Bye [preauth]
Aug  4 14:12:16 *** sshd[12045]: Disconnected from 220.166.241.138 port 48792 [preauth]
Aug  4 14:14:58 *** sshd[12103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruse........
-------------------------------
2020-08-10 02:17:47
184.179.216.151 attackspambots
Dovecot Invalid User Login Attempt.
2020-08-10 02:03:03
162.217.55.7 attackspambots
Aug  9 20:28:42 server sshd[61806]: Failed password for root from 162.217.55.7 port 38151 ssh2
Aug  9 20:31:48 server sshd[62724]: Failed password for root from 162.217.55.7 port 36772 ssh2
Aug  9 20:34:50 server sshd[63673]: Failed password for root from 162.217.55.7 port 35358 ssh2
2020-08-10 02:35:42
165.227.46.89 attack
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-09T14:13:13Z and 2020-08-09T14:23:38Z
2020-08-10 02:31:25
106.12.11.206 attackspambots
Aug  9 15:47:47 hosting sshd[23827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.11.206  user=root
Aug  9 15:47:48 hosting sshd[23827]: Failed password for root from 106.12.11.206 port 58944 ssh2
...
2020-08-10 01:59:43
218.92.0.220 attackbotsspam
SSH Bruteforce Attempt on Honeypot
2020-08-10 01:57:59
186.69.159.5 attackbotsspam
Aug  5 15:15:13 XXX sshd[12841]: reveeclipse mapping checking getaddrinfo for 5.186-69-159.uio.satnet.net [186.69.159.5] failed - POSSIBLE BREAK-IN ATTEMPT!
Aug  5 15:15:13 XXX sshd[12841]: Invalid user admin from 186.69.159.5
Aug  5 15:15:13 XXX sshd[12841]: Received disconnect from 186.69.159.5: 11: Bye Bye [preauth]
Aug  5 15:15:15 XXX sshd[12843]: reveeclipse mapping checking getaddrinfo for 5.186-69-159.uio.satnet.net [186.69.159.5] failed - POSSIBLE BREAK-IN ATTEMPT!
Aug  5 15:15:15 XXX sshd[12843]: User r.r from 186.69.159.5 not allowed because none of user's groups are listed in AllowGroups
Aug  5 15:15:16 XXX sshd[12843]: Received disconnect from 186.69.159.5: 11: Bye Bye [preauth]
Aug  5 15:15:17 XXX sshd[12845]: reveeclipse mapping checking getaddrinfo for 5.186-69-159.uio.satnet.net [186.69.159.5] failed - POSSIBLE BREAK-IN ATTEMPT!
Aug  5 15:15:17 XXX sshd[12845]: Invalid user admin from 186.69.159.5
Aug  5 15:15:18 XXX sshd[12845]: Received disconnect from........
-------------------------------
2020-08-10 02:31:47
113.21.123.26 attackbots
Dovecot Invalid User Login Attempt.
2020-08-10 02:04:01
51.15.84.12 attackspam
(mod_security) mod_security (id:920350) triggered by 51.15.84.12 (NL/-/12-84-15-51.instances.scw.cloud): 1 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/09 19:58:24 [error] 346090#0: *27614 [client 51.15.84.12] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host'  [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/boaform/admin/formLogin"] [unique_id "159699590458.872160"] [ref "o0,15v45,15"], client: 51.15.84.12, [redacted] request: "POST /boaform/admin/formLogin HTTP/1.1" [redacted]
2020-08-10 02:26:27
202.153.37.194 attackbots
Aug  9 18:06:50 jumpserver sshd[87454]: Failed password for root from 202.153.37.194 port 34556 ssh2
Aug  9 18:11:17 jumpserver sshd[87475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.153.37.194  user=root
Aug  9 18:11:20 jumpserver sshd[87475]: Failed password for root from 202.153.37.194 port 28531 ssh2
...
2020-08-10 02:14:39
174.219.142.185 attack
Brute forcing email accounts
2020-08-10 02:06:43
212.58.119.200 spamattack
he hack our accs
2020-08-10 02:26:49
77.53.145.97 attackbots
Port Scan detected!
...
2020-08-10 02:15:10
120.52.120.5 attackspambots
Aug  9 14:07:59 ns3164893 sshd[3141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.120.5  user=root
Aug  9 14:08:01 ns3164893 sshd[3141]: Failed password for root from 120.52.120.5 port 34606 ssh2
...
2020-08-10 02:10:45

最近上报的IP列表

120.219.68.87 120.208.183.78 119.186.100.133 117.147.71.170
112.49.119.89 112.21.148.248 112.111.159.98 111.35.238.230
111.18.26.201 222.233.235.168 66.132.195.115 134.195.101.188
42.228.117.216 115.55.203.11 113.201.88.139 20.40.213.228
20.14.94.5 61.188.171.3 40.119.45.136 121.199.173.217