必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Korea Republic of

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.139.157.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59229
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;125.139.157.56.			IN	A

;; AUTHORITY SECTION:
.			155	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 07:03:22 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 56.157.139.125.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 56.157.139.125.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
59.99.192.207 attackbotsspam
/wp-login.php
2020-08-15 21:27:04
177.54.251.181 attackbots
"SMTP brute force auth login attempt."
2020-08-15 21:11:23
218.92.0.219 attack
Aug 15 15:30:08 ovpn sshd\[21708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.219  user=root
Aug 15 15:30:10 ovpn sshd\[21708\]: Failed password for root from 218.92.0.219 port 53179 ssh2
Aug 15 15:30:18 ovpn sshd\[21754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.219  user=root
Aug 15 15:30:19 ovpn sshd\[21754\]: Failed password for root from 218.92.0.219 port 26733 ssh2
Aug 15 15:30:27 ovpn sshd\[21818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.219  user=root
2020-08-15 21:34:09
106.13.89.134 attackspam
ThinkPHP Remote Command Execution Vulnerability, PTR: PTR record not found
2020-08-15 21:14:09
178.128.51.162 attackbots
Automatic report generated by Wazuh
2020-08-15 21:06:56
112.85.42.238 attackspam
Aug 15 13:30:16 jumpserver sshd[162031]: Failed password for root from 112.85.42.238 port 52428 ssh2
Aug 15 13:30:20 jumpserver sshd[162031]: Failed password for root from 112.85.42.238 port 52428 ssh2
Aug 15 13:30:24 jumpserver sshd[162031]: Failed password for root from 112.85.42.238 port 52428 ssh2
...
2020-08-15 21:39:15
69.131.62.50 attack
Port 22 Scan, PTR: None
2020-08-15 21:34:23
118.25.59.139 attack
Lines containing failures of 118.25.59.139
Aug 12 05:10:12 shared02 sshd[1229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.59.139  user=r.r
Aug 12 05:10:14 shared02 sshd[1229]: Failed password for r.r from 118.25.59.139 port 57940 ssh2
Aug 12 05:10:14 shared02 sshd[1229]: Received disconnect from 118.25.59.139 port 57940:11: Bye Bye [preauth]
Aug 12 05:10:14 shared02 sshd[1229]: Disconnected from authenticating user r.r 118.25.59.139 port 57940 [preauth]
Aug 12 05:24:16 shared02 sshd[5981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.59.139  user=r.r
Aug 12 05:24:19 shared02 sshd[5981]: Failed password for r.r from 118.25.59.139 port 39734 ssh2
Aug 12 05:24:19 shared02 sshd[5981]: Received disconnect from 118.25.59.139 port 39734:11: Bye Bye [preauth]
Aug 12 05:24:19 shared02 sshd[5981]: Disconnected from authenticating user r.r 118.25.59.139 port 39734 [preauth]
Aug 12........
------------------------------
2020-08-15 21:06:10
49.88.112.115 attack
Aug 15 10:24:48 vps46666688 sshd[1543]: Failed password for root from 49.88.112.115 port 49026 ssh2
...
2020-08-15 21:34:57
113.94.86.109 attackspambots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-08-15 20:59:43
49.88.112.75 attack
Aug 15 14:55:24 ip106 sshd[4638]: Failed password for root from 49.88.112.75 port 60693 ssh2
Aug 15 14:55:27 ip106 sshd[4638]: Failed password for root from 49.88.112.75 port 60693 ssh2
...
2020-08-15 21:10:09
5.196.124.228 attack
Multiple failed cPanel logins
2020-08-15 21:31:05
160.153.156.131 attackspambots
C1,DEF GET /1/wp-includes/wlwmanifest.xml
2020-08-15 21:35:52
181.143.101.194 attackbotsspam
[Sat Aug 15 09:47:35.278660 2020] [:error] [pid 169562] [client 181.143.101.194:36660] [client 181.143.101.194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "127.0.0.1"] [uri "/cgi-bin/ViewLog.asp"] [unique_id "XzfZZx6HKfMmpcIWI5nu1wAAAAQ"]
...
2020-08-15 21:36:54
222.186.30.167 attack
Aug 15 08:55:33 plusreed sshd[6946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167  user=root
Aug 15 08:55:35 plusreed sshd[6946]: Failed password for root from 222.186.30.167 port 13204 ssh2
...
2020-08-15 21:08:20

最近上报的IP列表

125.138.212.136 125.140.167.82 125.142.137.172 125.138.129.95
125.142.180.111 125.160.192.26 125.160.166.112 125.160.250.195
125.161.188.220 125.161.198.49 125.161.27.76 125.162.124.179
125.162.153.166 125.162.222.249 125.162.212.199 125.162.215.183
125.163.192.93 125.163.217.78 125.163.253.37 125.163.68.195