必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
125.163.119.115 attackbots
Automatic report - Port Scan Attack
2019-09-07 17:09:33
125.163.119.34 attackbots
Sat, 20 Jul 2019 21:55:21 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 10:43:21
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.163.119.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53098
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;125.163.119.48.			IN	A

;; AUTHORITY SECTION:
.			593	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 02:45:27 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 48.119.163.125.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 48.119.163.125.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
207.154.234.102 attackspam
Jul  5 07:52:18 home sshd[32679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.234.102
Jul  5 07:52:21 home sshd[32679]: Failed password for invalid user hengda from 207.154.234.102 port 58416 ssh2
Jul  5 07:55:44 home sshd[537]: Failed password for root from 207.154.234.102 port 56678 ssh2
...
2020-07-05 14:01:33
157.245.137.211 attackspam
2020-07-05T08:09:43.656892galaxy.wi.uni-potsdam.de sshd[19267]: Invalid user postgres from 157.245.137.211 port 37672
2020-07-05T08:09:43.658902galaxy.wi.uni-potsdam.de sshd[19267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.137.211
2020-07-05T08:09:43.656892galaxy.wi.uni-potsdam.de sshd[19267]: Invalid user postgres from 157.245.137.211 port 37672
2020-07-05T08:09:45.667012galaxy.wi.uni-potsdam.de sshd[19267]: Failed password for invalid user postgres from 157.245.137.211 port 37672 ssh2
2020-07-05T08:12:52.750084galaxy.wi.uni-potsdam.de sshd[19655]: Invalid user hansen from 157.245.137.211 port 35818
2020-07-05T08:12:52.751949galaxy.wi.uni-potsdam.de sshd[19655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.137.211
2020-07-05T08:12:52.750084galaxy.wi.uni-potsdam.de sshd[19655]: Invalid user hansen from 157.245.137.211 port 35818
2020-07-05T08:12:54.373521galaxy.wi.uni-potsdam.de ss
...
2020-07-05 14:13:51
211.23.125.95 attack
Jul  5 05:44:29 rotator sshd\[2166\]: Invalid user viet from 211.23.125.95Jul  5 05:44:31 rotator sshd\[2166\]: Failed password for invalid user viet from 211.23.125.95 port 41446 ssh2Jul  5 05:47:40 rotator sshd\[2967\]: Failed password for root from 211.23.125.95 port 38618 ssh2Jul  5 05:50:50 rotator sshd\[3740\]: Failed password for root from 211.23.125.95 port 35788 ssh2Jul  5 05:54:02 rotator sshd\[3775\]: Invalid user xo from 211.23.125.95Jul  5 05:54:04 rotator sshd\[3775\]: Failed password for invalid user xo from 211.23.125.95 port 32976 ssh2
...
2020-07-05 14:27:56
37.187.75.16 attack
37.187.75.16 - - [05/Jul/2020:07:19:36 +0100] "POST /wp-login.php HTTP/1.1" 200 5125 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
37.187.75.16 - - [05/Jul/2020:07:20:39 +0100] "POST /wp-login.php HTTP/1.1" 200 5125 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
37.187.75.16 - - [05/Jul/2020:07:21:36 +0100] "POST /wp-login.php HTTP/1.1" 200 5125 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
...
2020-07-05 14:39:15
106.39.21.10 attackspam
Jul  5 05:52:40 onepixel sshd[1755739]: Failed password for steam from 106.39.21.10 port 40971 ssh2
Jul  5 05:55:35 onepixel sshd[1757264]: Invalid user clock from 106.39.21.10 port 56867
Jul  5 05:55:35 onepixel sshd[1757264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.39.21.10 
Jul  5 05:55:35 onepixel sshd[1757264]: Invalid user clock from 106.39.21.10 port 56867
Jul  5 05:55:37 onepixel sshd[1757264]: Failed password for invalid user clock from 106.39.21.10 port 56867 ssh2
2020-07-05 14:05:39
104.248.122.143 attackbotsspam
Jul  5 08:00:19 * sshd[3105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.122.143
Jul  5 08:00:21 * sshd[3105]: Failed password for invalid user judi from 104.248.122.143 port 50608 ssh2
2020-07-05 14:09:36
115.221.143.246 attackbotsspam
FTP brute-force attack
2020-07-05 13:58:55
112.29.149.252 attackspambots
Jul  5 06:56:24 santamaria sshd\[18437\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.29.149.252  user=root
Jul  5 06:56:26 santamaria sshd\[18437\]: Failed password for root from 112.29.149.252 port 48444 ssh2
Jul  5 06:59:54 santamaria sshd\[18468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.29.149.252  user=root
...
2020-07-05 13:58:16
164.90.185.155 attack
Jul  4 21:42:59 XXX sshd[16213]: User r.r from 164.90.185.155 not allowed because none of user's groups are listed in AllowGroups
Jul  4 21:42:59 XXX sshd[16213]: Received disconnect from 164.90.185.155: 11: Bye Bye [preauth]
Jul  4 21:42:59 XXX sshd[16215]: Invalid user admin from 164.90.185.155
Jul  4 21:42:59 XXX sshd[16215]: Received disconnect from 164.90.185.155: 11: Bye Bye [preauth]
Jul  4 21:42:59 XXX sshd[16217]: Invalid user user from 164.90.185.155
Jul  4 21:42:59 XXX sshd[16217]: Received disconnect from 164.90.185.155: 11: Bye Bye [preauth]
Jul  4 21:42:59 XXX sshd[16219]: Invalid user ubnt from 164.90.185.155
Jul  4 21:42:59 XXX sshd[16219]: Received disconnect from 164.90.185.155: 11: Bye Bye [preauth]
Jul  4 21:43:00 XXX sshd[16221]: Invalid user admin from 164.90.185.155
Jul  4 21:43:00 XXX sshd[16221]: Received disconnect from 164.90.185.155: 11: Bye Bye [preauth]
Jul  4 21:43:00 XXX sshd[16223]: Invalid user guest from 164.90.185.155
Jul  4 21:43:00 ........
-------------------------------
2020-07-05 14:13:23
185.143.75.153 attackspam
Jul  5 08:32:17 srv01 postfix/smtpd\[14016\]: warning: unknown\[185.143.75.153\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  5 08:32:43 srv01 postfix/smtpd\[14017\]: warning: unknown\[185.143.75.153\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  5 08:33:05 srv01 postfix/smtpd\[14017\]: warning: unknown\[185.143.75.153\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  5 08:33:34 srv01 postfix/smtpd\[14017\]: warning: unknown\[185.143.75.153\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  5 08:34:00 srv01 postfix/smtpd\[13715\]: warning: unknown\[185.143.75.153\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-07-05 14:34:49
159.89.236.71 attackspambots
Jul  5 02:17:31 NPSTNNYC01T sshd[24785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.236.71
Jul  5 02:17:33 NPSTNNYC01T sshd[24785]: Failed password for invalid user mrl from 159.89.236.71 port 44338 ssh2
Jul  5 02:20:40 NPSTNNYC01T sshd[25105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.236.71
...
2020-07-05 14:26:01
46.165.230.5 attackspam
46.165.230.5 - - \[05/Jul/2020:05:54:10 +0200\] "GET /index.php\?id=ausland%27%2F%2A\&id=%2A%2FUNION%2F%2A\&id=%2A%2FALL%2F%2A\&id=%2A%2FSELECT%2F%2A\&id=%2A%2F1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=1197\&id=CHR%28113%29%7C%7CCHR%2898%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%7C%7CCHR%2874%29%7C%7CCHR%28118%29%7C%7CCHR%2875%29%7C%7CCHR%2871%29%7C%7CCHR%28114%29%7C%7CCHR%28118%29%7C%7CCHR%28103%29%7C%7CCHR%28122%29%7C%7CCHR%28121%29%7C%7CCHR%28103%29%7C%7CCHR%2897%29%7C%7CCHR%28115%29%7C%7CCHR%2868%29%7C%7CCHR%28112%29%7C%7CCHR%2898%29%7C%7CCHR%2886%29%7C%7CCHR%28121%29%7C%7CCHR%2889%29%7C%7CCHR%2875%29%7C%7CC
2020-07-05 14:25:04
145.239.188.66 attackspam
Jul  5 06:25:33 ns381471 sshd[11109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.188.66
Jul  5 06:25:35 ns381471 sshd[11109]: Failed password for invalid user carter from 145.239.188.66 port 38629 ssh2
2020-07-05 13:56:58
190.113.103.91 attack
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-07-05 14:37:28
186.225.80.194 attackbots
Jul  4 22:55:29 server1 sshd\[13175\]: Failed password for root from 186.225.80.194 port 42453 ssh2
Jul  4 22:59:17 server1 sshd\[14214\]: Invalid user user from 186.225.80.194
Jul  4 22:59:17 server1 sshd\[14214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.225.80.194 
Jul  4 22:59:19 server1 sshd\[14214\]: Failed password for invalid user user from 186.225.80.194 port 38878 ssh2
Jul  4 23:03:13 server1 sshd\[15318\]: Invalid user git from 186.225.80.194
...
2020-07-05 14:31:38

最近上报的IP列表

117.89.95.134 125.163.119.76 125.163.119.67 125.163.119.99
125.163.119.8 125.163.120.113 125.163.12.111 125.163.12.233
125.163.120.184 125.163.120.86 125.163.120.240 125.163.121.157
125.163.121.168 117.89.95.139 125.163.122.96 125.163.123.121
125.163.124.109 125.163.123.74 125.163.124.246 125.163.124.249