必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): unknown

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
120.138.126.189 attackspambots
Brute forcing RDP port 3389
2020-06-30 20:46:40
120.138.125.2 attackbots
Unauthorized connection attempt from IP address 120.138.125.2 on Port 445(SMB)
2020-02-20 05:58:22
120.138.126.33 attackspam
Lines containing failures of 120.138.126.33
Feb 18 13:21:50 keyhelp sshd[22113]: Invalid user o0 from 120.138.126.33 port 54102
Feb 18 13:21:50 keyhelp sshd[22113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.138.126.33
Feb 18 13:21:51 keyhelp sshd[22113]: Failed password for invalid user o0 from 120.138.126.33 port 54102 ssh2
Feb 18 13:21:51 keyhelp sshd[22113]: Received disconnect from 120.138.126.33 port 54102:11: Bye Bye [preauth]
Feb 18 13:21:51 keyhelp sshd[22113]: Disconnected from invalid user o0 120.138.126.33 port 54102 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=120.138.126.33
2020-02-18 22:38:12
120.138.126.33 attackspam
SSH/22 MH Probe, BF, Hack -
2020-02-12 21:58:38
120.138.125.2 attackspambots
Honeypot attack, port: 445, PTR: 2-125-138-120.mysipl.com.
2020-02-06 19:37:31
120.138.125.106 attack
Honeypot attack, port: 23, PTR: 106-125-138-120.mysipl.com.
2019-12-28 20:52:42
120.138.125.106 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-12-16 22:02:41
120.138.125.106 attackbots
Dec 12 09:27:17 debian-2gb-vpn-nbg1-1 kernel: [510418.461045] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=120.138.125.106 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=3520 PROTO=TCP SPT=3203 DPT=23 WINDOW=29114 RES=0x00 SYN URGP=0
2019-12-12 17:44:23
120.138.124.122 attack
SpamReport
2019-11-30 15:08:29
120.138.125.222 attackbots
23/tcp
[2019-11-15]1pkt
2019-11-15 21:08:03
120.138.125.2 attackbots
Unauthorized connection attempt from IP address 120.138.125.2 on Port 445(SMB)
2019-08-21 11:22:19
120.138.125.188 attackspambots
Aug 19 01:32:48 kapalua sshd\[25982\]: Invalid user support from 120.138.125.188
Aug 19 01:32:48 kapalua sshd\[25982\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.138.125.188
Aug 19 01:32:50 kapalua sshd\[25982\]: Failed password for invalid user support from 120.138.125.188 port 57444 ssh2
Aug 19 01:37:24 kapalua sshd\[26453\]: Invalid user emp from 120.138.125.188
Aug 19 01:37:24 kapalua sshd\[26453\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.138.125.188
2019-08-19 19:39:24
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.138.12.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56974
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;120.138.12.130.			IN	A

;; AUTHORITY SECTION:
.			311	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030900 1800 900 604800 86400

;; Query time: 180 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 16:31:41 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
130.12.138.120.in-addr.arpa domain name pointer ws130-12.138.120.rcil.gov.in.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
130.12.138.120.in-addr.arpa	name = ws130-12.138.120.rcil.gov.in.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
178.128.121.188 attackspambots
2019-11-10T10:37:02.521275shield sshd\[19386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.121.188  user=root
2019-11-10T10:37:04.854708shield sshd\[19386\]: Failed password for root from 178.128.121.188 port 51378 ssh2
2019-11-10T10:41:16.823280shield sshd\[20066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.121.188  user=root
2019-11-10T10:41:19.034462shield sshd\[20066\]: Failed password for root from 178.128.121.188 port 60678 ssh2
2019-11-10T10:45:28.756198shield sshd\[20503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.121.188  user=root
2019-11-10 19:01:48
106.12.82.70 attackbotsspam
Nov  9 23:38:53 web1 sshd\[30979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.82.70  user=root
Nov  9 23:38:55 web1 sshd\[30979\]: Failed password for root from 106.12.82.70 port 43878 ssh2
Nov  9 23:43:21 web1 sshd\[31582\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.82.70  user=root
Nov  9 23:43:23 web1 sshd\[31582\]: Failed password for root from 106.12.82.70 port 51654 ssh2
Nov  9 23:48:35 web1 sshd\[32049\]: Invalid user user from 106.12.82.70
Nov  9 23:48:35 web1 sshd\[32049\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.82.70
2019-11-10 19:07:50
209.11.168.73 attackbotsspam
port scan and connect, tcp 1433 (ms-sql-s)
2019-11-10 19:09:29
104.131.224.81 attackspam
Nov 10 11:33:32 MK-Soft-VM6 sshd[5897]: Failed password for root from 104.131.224.81 port 42983 ssh2
...
2019-11-10 18:53:19
123.207.237.31 attack
2019-11-10T11:53:42.076374scmdmz1 sshd\[20614\]: Invalid user temp from 123.207.237.31 port 37052
2019-11-10T11:53:42.079122scmdmz1 sshd\[20614\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.237.31
2019-11-10T11:53:44.362130scmdmz1 sshd\[20614\]: Failed password for invalid user temp from 123.207.237.31 port 37052 ssh2
...
2019-11-10 18:55:57
94.203.254.248 attack
10.11.2019 10:47:53 SSH access blocked by firewall
2019-11-10 19:08:22
217.182.79.245 attackspam
Triggered by Fail2Ban at Vostok web server
2019-11-10 18:50:49
45.224.105.55 attack
Nov 10 11:52:02 diego dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=45.224.105.55, lip=172.104.242.163, TLS, session=\<29EK9/qWeNgt4Gk3\>
2019-11-10 19:03:55
151.80.155.98 attackbots
Nov 10 11:28:28 host sshd[6082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.ip-151-80-155.eu  user=root
Nov 10 11:28:30 host sshd[6082]: Failed password for root from 151.80.155.98 port 52016 ssh2
...
2019-11-10 18:55:10
203.69.10.33 attackbots
Nov 10 12:03:12 our-server-hostname postfix/smtpd[27292]: connect from unknown[203.69.10.33]
Nov x@x
Nov 10 12:03:13 our-server-hostname postfix/smtpd[27292]: lost connection after RCPT from unknown[203.69.10.33]
Nov 10 12:03:13 our-server-hostname postfix/smtpd[27292]: disconnect from unknown[203.69.10.33]
Nov 10 12:03:13 our-server-hostname postfix/smtpd[26579]: connect from unknown[203.69.10.33]
Nov 10 12:03:16 our-server-hostname postfix/smtpd[26579]: NOQUEUE: reject: RCPT from unknown[203.69.10.33]: 554 5.7.1 Service unavailable; Client host [203.69.10.33] blocked using zen.spamhaus.org; hxxps://www.spamhaus.org/query/ip/203.69.10.33 / hxxps://www.spamh
.... truncated .... 

Nov 10 12:03:12 our-server-hostname postfix/smtpd[27292]: connect from unknown[203.69.10.33]
Nov x@x
Nov 10 12:03:13 our-server-hostname postfix/smtpd[27292]: lost connection after RCPT from unknown[203.69.10.33]
Nov 10 12:03:13 our-server-hostname postfix/smtpd[27292]: disconnect from unknown[........
-------------------------------
2019-11-10 19:11:35
129.211.62.131 attack
Nov 10 09:07:46 localhost sshd\[27693\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.62.131  user=root
Nov 10 09:07:48 localhost sshd\[27693\]: Failed password for root from 129.211.62.131 port 39825 ssh2
Nov 10 09:13:59 localhost sshd\[28276\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.62.131  user=root
2019-11-10 19:19:47
124.235.206.130 attack
Nov 10 10:17:49 eventyay sshd[14177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.235.206.130
Nov 10 10:17:51 eventyay sshd[14177]: Failed password for invalid user administrator from 124.235.206.130 port 43561 ssh2
Nov 10 10:23:20 eventyay sshd[14237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.235.206.130
...
2019-11-10 19:17:28
46.229.168.152 attack
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
2019-11-10 18:56:55
45.141.84.25 attack
no
2019-11-10 19:21:14
111.90.144.200 attackbots
Automatic report - XMLRPC Attack
2019-11-10 19:19:19

最近上报的IP列表

120.138.12.107 120.138.12.144 120.138.12.31 120.138.17.203
120.138.17.230 120.138.17.250 120.138.18.11 120.138.18.111
120.138.18.113 120.138.18.123 120.138.18.128 120.138.18.169
120.138.18.177 120.138.18.198 120.138.18.236 120.138.18.246
120.138.18.30 120.138.18.44 120.138.18.59 120.138.18.62