必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.40.219.152
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17662
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;125.40.219.152.			IN	A

;; AUTHORITY SECTION:
.			172	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 10:55:01 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
152.219.40.125.in-addr.arpa domain name pointer hn.kd.ny.adsl.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
152.219.40.125.in-addr.arpa	name = hn.kd.ny.adsl.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
37.49.226.50 attackspam
(Feb  8)  LEN=40 TTL=57 ID=22313 TCP DPT=8080 WINDOW=55868 SYN 
 (Feb  8)  LEN=40 TTL=57 ID=62870 TCP DPT=8080 WINDOW=55868 SYN 
 (Feb  8)  LEN=40 TTL=57 ID=22504 TCP DPT=8080 WINDOW=19786 SYN 
 (Feb  7)  LEN=40 TTL=57 ID=23245 TCP DPT=8080 WINDOW=47442 SYN 
 (Feb  7)  LEN=40 TTL=57 ID=28082 TCP DPT=8080 WINDOW=24676 SYN 
 (Feb  6)  LEN=40 TTL=57 ID=62643 TCP DPT=8080 WINDOW=24676 SYN 
 (Feb  6)  LEN=40 TTL=57 ID=44574 TCP DPT=8080 WINDOW=47442 SYN 
 (Feb  6)  LEN=40 TTL=57 ID=1179 TCP DPT=8080 WINDOW=47442 SYN 
 (Feb  3)  LEN=40 TTL=57 ID=27194 TCP DPT=8080 WINDOW=24676 SYN 
 (Feb  3)  LEN=40 TTL=57 ID=3354 TCP DPT=8080 WINDOW=8018 SYN 
 (Feb  3)  LEN=40 TTL=57 ID=14967 TCP DPT=8080 WINDOW=40914 SYN 
 (Feb  2)  LEN=40 TTL=57 ID=59437 TCP DPT=8080 WINDOW=57234 SYN 
 (Feb  2)  LEN=40 TTL=57 ID=2242 TCP DPT=8080 WINDOW=57234 SYN
2020-02-09 04:44:28
188.68.0.112 attackspambots
16.222.773,06-13/04 [bc27/m129] PostRequest-Spammer scoring: maputo01_x2b
2020-02-09 04:31:12
178.34.150.78 attackbotsspam
Feb  6 15:49:16 django sshd[38069]: Did not receive identification string from 178.34.150.78
Feb  6 15:49:20 django sshd[38074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.34.150.78  user=r.r
Feb  6 15:49:21 django sshd[38074]: Failed password for r.r from 178.34.150.78 port 20444 ssh2
Feb  6 15:49:22 django sshd[38075]: Connection closed by 178.34.150.78
Feb  6 15:49:28 django sshd[38081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.34.150.78  user=r.r
Feb  6 15:49:30 django sshd[38081]: Failed password for r.r from 178.34.150.78 port 24576 ssh2
Feb  6 15:49:30 django sshd[38082]: Connection closed by 178.34.150.78
Feb  6 15:49:31 django sshd[38087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.34.150.78  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=178.34.150.78
2020-02-09 04:19:26
139.170.150.252 attackbots
Feb  8 15:29:42 firewall sshd[450]: Invalid user ftq from 139.170.150.252
Feb  8 15:29:44 firewall sshd[450]: Failed password for invalid user ftq from 139.170.150.252 port 38548 ssh2
Feb  8 15:33:58 firewall sshd[608]: Invalid user ibc from 139.170.150.252
...
2020-02-09 04:23:43
46.136.173.103 attackspam
Feb  8 17:43:02 silence02 sshd[21287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.136.173.103
Feb  8 17:43:04 silence02 sshd[21287]: Failed password for invalid user kjz from 46.136.173.103 port 46162 ssh2
Feb  8 17:46:58 silence02 sshd[21652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.136.173.103
2020-02-09 04:30:45
120.1.140.101 attackspambots
Honeypot attack, port: 81, PTR: PTR record not found
2020-02-09 04:55:51
199.195.251.227 attack
Automatic report - SSH Brute-Force Attack
2020-02-09 04:59:35
218.92.0.138 attack
detected by Fail2Ban
2020-02-09 04:58:26
13.235.8.123 attackspambots
(sshd) Failed SSH login from 13.235.8.123 (IN/India/ec2-13-235-8-123.ap-south-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Feb  8 20:09:19 elude sshd[5893]: Invalid user fsc from 13.235.8.123 port 37732
Feb  8 20:09:21 elude sshd[5893]: Failed password for invalid user fsc from 13.235.8.123 port 37732 ssh2
Feb  8 20:34:21 elude sshd[7370]: Invalid user dgx from 13.235.8.123 port 58264
Feb  8 20:34:23 elude sshd[7370]: Failed password for invalid user dgx from 13.235.8.123 port 58264 ssh2
Feb  8 20:37:57 elude sshd[7610]: Invalid user fhp from 13.235.8.123 port 59224
2020-02-09 04:10:42
145.239.94.191 attack
2020-02-08T15:21:00.123009scmdmz1 sshd[17637]: Invalid user umy from 145.239.94.191 port 51190
2020-02-08T15:21:00.125854scmdmz1 sshd[17637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.ip-145-239-94.eu
2020-02-08T15:21:00.123009scmdmz1 sshd[17637]: Invalid user umy from 145.239.94.191 port 51190
2020-02-08T15:21:01.989476scmdmz1 sshd[17637]: Failed password for invalid user umy from 145.239.94.191 port 51190 ssh2
2020-02-08T15:23:38.671995scmdmz1 sshd[17928]: Invalid user nsf from 145.239.94.191 port 34620
...
2020-02-09 04:15:09
71.6.233.205 attack
Honeypot hit.
2020-02-09 04:33:50
123.206.69.81 attackspambots
2020-02-08T15:37:06.811271scmdmz1 sshd[19612]: Invalid user qod from 123.206.69.81 port 43405
2020-02-08T15:37:06.814112scmdmz1 sshd[19612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.69.81
2020-02-08T15:37:06.811271scmdmz1 sshd[19612]: Invalid user qod from 123.206.69.81 port 43405
2020-02-08T15:37:08.599341scmdmz1 sshd[19612]: Failed password for invalid user qod from 123.206.69.81 port 43405 ssh2
2020-02-08T15:41:59.238301scmdmz1 sshd[20107]: Invalid user raj from 123.206.69.81 port 56068
...
2020-02-09 04:43:56
68.105.128.21 attack
Brute forcing email accounts
2020-02-09 04:19:45
203.231.146.217 attackspambots
Feb  8 20:25:42 nextcloud sshd\[19194\]: Invalid user nfv from 203.231.146.217
Feb  8 20:25:42 nextcloud sshd\[19194\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.231.146.217
Feb  8 20:25:44 nextcloud sshd\[19194\]: Failed password for invalid user nfv from 203.231.146.217 port 43248 ssh2
2020-02-09 04:21:07
183.236.248.227 attack
Feb  8 15:23:35 debian-2gb-nbg1-2 kernel: \[3431055.312850\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=183.236.248.227 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0xE0 TTL=49 ID=36286 PROTO=TCP SPT=39933 DPT=23 WINDOW=32997 RES=0x00 SYN URGP=0
2020-02-09 04:15:28

最近上报的IP列表

125.40.136.134 125.40.163.18 125.40.129.255 125.40.160.221
125.40.161.11 125.40.31.210 125.40.73.247 125.41.0.81
125.41.107.113 125.41.129.107 125.41.133.10 125.41.1.74
125.41.13.115 125.41.14.144 125.41.137.67 125.41.11.115
125.41.14.159 125.41.141.94 125.41.15.201 125.41.143.118