必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.108.85.189
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59875
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;125.108.85.189.			IN	A

;; AUTHORITY SECTION:
.			594	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031000 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 10 14:21:56 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 189.85.108.125.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 189.85.108.125.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
193.70.37.140 attack
Oct 20 14:46:35 meumeu sshd[32339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.37.140 
Oct 20 14:46:37 meumeu sshd[32339]: Failed password for invalid user stepan from 193.70.37.140 port 36680 ssh2
Oct 20 14:50:24 meumeu sshd[392]: Failed password for root from 193.70.37.140 port 45672 ssh2
...
2019-10-20 22:06:26
139.59.62.52 attackspam
Oct 20 13:40:25 mxgate1 postfix/postscreen[6535]: CONNECT from [139.59.62.52]:43488 to [176.31.12.44]:25
Oct 20 13:40:25 mxgate1 postfix/dnsblog[6664]: addr 139.59.62.52 listed by domain zen.spamhaus.org as 127.0.0.3
Oct 20 13:40:31 mxgate1 postfix/postscreen[6535]: DNSBL rank 2 for [139.59.62.52]:43488
Oct x@x
Oct 20 13:40:32 mxgate1 postfix/postscreen[6535]: DISCONNECT [139.59.62.52]:43488


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=139.59.62.52
2019-10-20 22:29:55
109.194.54.126 attackspambots
$f2bV_matches
2019-10-20 22:05:48
106.12.222.192 attackbotsspam
Oct 20 16:54:31 sauna sshd[90086]: Failed password for root from 106.12.222.192 port 52386 ssh2
Oct 20 17:00:35 sauna sshd[90125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.222.192
...
2019-10-20 22:25:17
2.185.150.252 attackbotsspam
Automatic report - Port Scan Attack
2019-10-20 22:22:09
222.186.173.154 attack
Oct 20 15:41:57 SilenceServices sshd[21073]: Failed password for root from 222.186.173.154 port 37028 ssh2
Oct 20 15:42:02 SilenceServices sshd[21073]: Failed password for root from 222.186.173.154 port 37028 ssh2
Oct 20 15:42:15 SilenceServices sshd[21073]: error: maximum authentication attempts exceeded for root from 222.186.173.154 port 37028 ssh2 [preauth]
2019-10-20 21:57:17
91.214.221.228 attackbotsspam
DATE:2019-10-20 14:03:25, IP:91.214.221.228, PORT:1433 - MSSQL brute force auth on a honeypot server (epe-dc)
2019-10-20 22:01:55
45.80.104.109 attackspambots
45.80.104.109 - - [20/Oct/2019:08:03:33 -0400] "GET /?page=products&action=..%2f..%2fetc%2fpasswd%00&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 17152 "https://newportbrassfaucets.com/?page=products&action=..%2f..%2fetc%2fpasswd%00&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
...
2019-10-20 21:57:02
195.138.90.190 attackbots
Fail2Ban Ban Triggered
2019-10-20 22:27:06
92.119.160.107 attackspambots
Oct 20 15:16:28 h2177944 kernel: \[4453288.557250\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.107 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=58091 PROTO=TCP SPT=56890 DPT=23999 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 20 15:22:21 h2177944 kernel: \[4453640.983664\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.107 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=63588 PROTO=TCP SPT=56890 DPT=23828 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 20 15:25:52 h2177944 kernel: \[4453852.431753\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.107 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=21829 PROTO=TCP SPT=56890 DPT=23917 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 20 15:27:04 h2177944 kernel: \[4453923.821341\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.107 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=17851 PROTO=TCP SPT=56890 DPT=24392 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 20 15:31:49 h2177944 kernel: \[4454209.493965\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.107 DST=85.
2019-10-20 21:49:09
61.95.233.61 attack
Oct 18 09:29:23 myhostname sshd[12238]: Invalid user bula from 61.95.233.61
Oct 18 09:29:23 myhostname sshd[12238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.95.233.61
Oct 18 09:29:24 myhostname sshd[12238]: Failed password for invalid user bula from 61.95.233.61 port 37718 ssh2
Oct 18 09:29:24 myhostname sshd[12238]: Received disconnect from 61.95.233.61 port 37718:11: Bye Bye [preauth]
Oct 18 09:29:24 myhostname sshd[12238]: Disconnected from 61.95.233.61 port 37718 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=61.95.233.61
2019-10-20 21:54:26
77.247.110.38 attackspam
Automatic report - Port Scan
2019-10-20 21:54:04
45.80.105.107 attackspambots
45.80.105.107 - - [20/Oct/2019:08:02:54 -0400] "GET /?page=products&action=..%2fetc%2fpasswd&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 17147 "https://newportbrassfaucets.com/?page=products&action=..%2fetc%2fpasswd&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
...
2019-10-20 22:19:00
164.132.42.32 attackspam
Oct 20 15:35:34 vpn01 sshd[21984]: Failed password for root from 164.132.42.32 port 59854 ssh2
...
2019-10-20 22:25:33
165.22.112.43 attack
Oct 20 16:05:34 v22018076622670303 sshd\[842\]: Invalid user lillie from 165.22.112.43 port 60588
Oct 20 16:05:34 v22018076622670303 sshd\[842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.112.43
Oct 20 16:05:37 v22018076622670303 sshd\[842\]: Failed password for invalid user lillie from 165.22.112.43 port 60588 ssh2
...
2019-10-20 22:20:41

最近上报的IP列表

125.108.85.186 125.108.85.190 125.108.85.193 125.108.85.195
125.108.85.2 125.108.85.20 125.108.85.205 156.194.131.134
125.108.85.214 125.108.85.222 125.108.85.234 125.108.85.236
125.108.85.239 125.108.85.247 125.108.85.249 125.108.85.32
125.108.85.35 125.108.85.36 125.108.85.38 125.108.85.4