必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): New Zealand

运营商(isp): Spark New Zealand Trading Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Mobile ISP

用户上报:
类型 评论内容 时间
attack
Unauthorized connection attempt detected from IP address 125.239.148.116 to port 23 [J]
2020-02-05 19:33:17
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.239.148.116
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32690
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.239.148.116.		IN	A

;; AUTHORITY SECTION:
.			409	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020401 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 19:33:12 CST 2020
;; MSG SIZE  rcvd: 119
HOST信息:
116.148.239.125.in-addr.arpa domain name pointer 125-239-148-116-fibre.sparkbb.co.nz.
NSLOOKUP信息:
Server:		183.60.82.98
Address:	183.60.82.98#53

Non-authoritative answer:
116.148.239.125.in-addr.arpa	name = 125-239-148-116-fibre.sparkbb.co.nz.

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
112.85.42.188 attackbots
07/26/2020-10:34:36.418746 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan
2020-07-26 22:36:13
170.106.38.97 attackspam
Port Scan
...
2020-07-26 22:13:01
177.23.58.22 attackspambots
(smtpauth) Failed SMTP AUTH login from 177.23.58.22 (BR/Brazil/acesso-177.23.58.22.voxxtelecom.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-26 16:35:44 plain authenticator failed for ([177.23.58.22]) [177.23.58.22]: 535 Incorrect authentication data (set_id=info@akmasanat.com)
2020-07-26 22:34:00
47.244.226.247 attackbotsspam
47.244.226.247 - - \[26/Jul/2020:15:50:41 +0200\] "POST /wp-login.php HTTP/1.0" 200 5932 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
47.244.226.247 - - \[26/Jul/2020:15:50:44 +0200\] "POST /wp-login.php HTTP/1.0" 200 5745 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
47.244.226.247 - - \[26/Jul/2020:15:50:46 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-07-26 22:27:19
157.245.133.78 attack
157.245.133.78 - - \[26/Jul/2020:14:05:35 +0200\] "POST /wp-login.php HTTP/1.0" 200 2797 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
157.245.133.78 - - \[26/Jul/2020:14:05:39 +0200\] "POST /wp-login.php HTTP/1.0" 200 2724 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
157.245.133.78 - - \[26/Jul/2020:14:05:41 +0200\] "POST /wp-login.php HTTP/1.0" 200 2762 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-07-26 22:40:32
122.15.137.106 attack
Unauthorized SSH login attempts
2020-07-26 22:09:27
207.244.92.6 attack
207.244.92.6 was recorded 9 times by 4 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 9, 42, 272
2020-07-26 22:28:02
186.147.129.110 attackbotsspam
Jul 26 14:19:55 rocket sshd[4651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.147.129.110
Jul 26 14:19:57 rocket sshd[4651]: Failed password for invalid user yyz from 186.147.129.110 port 36176 ssh2
...
2020-07-26 22:03:32
125.137.191.215 attack
Jul 26 14:06:35 ajax sshd[12061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.137.191.215 
Jul 26 14:06:37 ajax sshd[12061]: Failed password for invalid user mom from 125.137.191.215 port 916 ssh2
2020-07-26 21:58:48
27.72.170.42 attack
Unauthorized connection attempt from IP address 27.72.170.42 on Port 445(SMB)
2020-07-26 22:38:36
138.197.89.186 attack
Port Scan
...
2020-07-26 22:34:57
103.97.95.92 attack
[portscan] Port scan
2020-07-26 22:11:59
218.92.0.249 attackbotsspam
Jul 26 13:58:05 rush sshd[25925]: Failed password for root from 218.92.0.249 port 21667 ssh2
Jul 26 13:58:19 rush sshd[25927]: Failed password for root from 218.92.0.249 port 41211 ssh2
Jul 26 13:58:22 rush sshd[25927]: Failed password for root from 218.92.0.249 port 41211 ssh2
...
2020-07-26 22:21:28
51.38.126.92 attackbots
Jul 26 12:02:33 124388 sshd[29031]: Invalid user eti from 51.38.126.92 port 40460
Jul 26 12:02:33 124388 sshd[29031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.126.92
Jul 26 12:02:33 124388 sshd[29031]: Invalid user eti from 51.38.126.92 port 40460
Jul 26 12:02:35 124388 sshd[29031]: Failed password for invalid user eti from 51.38.126.92 port 40460 ssh2
Jul 26 12:06:08 124388 sshd[29167]: Invalid user chart from 51.38.126.92 port 48904
2020-07-26 22:09:45
178.54.86.119 attack
REQUESTED PAGE: /HNAP1/
2020-07-26 22:25:28

最近上报的IP列表

89.186.84.150 83.143.31.38 77.236.93.28 77.120.146.154
59.127.130.207 59.127.11.50 46.176.6.91 46.158.49.229
42.116.158.1 31.223.122.231 31.207.73.51 23.129.64.224
2.134.242.89 222.80.41.132 221.201.251.125 221.154.110.186
218.32.154.131 213.45.160.43 211.217.85.156 211.72.70.132