必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.41.93.108
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55837
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;125.41.93.108.			IN	A

;; AUTHORITY SECTION:
.			547	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022001 1800 900 604800 86400

;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 21 06:18:09 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
108.93.41.125.in-addr.arpa domain name pointer hn.kd.ny.adsl.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
108.93.41.125.in-addr.arpa	name = hn.kd.ny.adsl.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
95.123.94.182 attackbots
Oct 30 17:28:38 shadeyouvpn sshd[10997]: Invalid user applmgr from 95.123.94.182
Oct 30 17:28:39 shadeyouvpn sshd[10997]: Failed password for invalid user applmgr from 95.123.94.182 port 40148 ssh2
Oct 30 17:28:40 shadeyouvpn sshd[10997]: Received disconnect from 95.123.94.182: 11: Bye Bye [preauth]
Oct 30 17:39:08 shadeyouvpn sshd[19145]: Failed password for r.r from 95.123.94.182 port 58690 ssh2
Oct 30 17:39:08 shadeyouvpn sshd[19145]: Received disconnect from 95.123.94.182: 11: Bye Bye [preauth]
Oct 30 17:43:16 shadeyouvpn sshd[23629]: Failed password for r.r from 95.123.94.182 port 42502 ssh2
Oct 30 17:43:16 shadeyouvpn sshd[23629]: Received disconnect from 95.123.94.182: 11: Bye Bye [preauth]
Oct 30 17:47:20 shadeyouvpn sshd[27871]: Invalid user login from 95.123.94.182
Oct 30 17:47:22 shadeyouvpn sshd[27871]: Failed password for invalid user login from 95.123.94.182 port 54546 ssh2
Oct 30 17:47:22 shadeyouvpn sshd[27871]: Received disconnect from 95.123.94.182: 11........
-------------------------------
2019-10-31 05:52:58
104.197.75.152 attackspam
enlinea.de 104.197.75.152 \[30/Oct/2019:21:26:47 +0100\] "POST /wp-login.php HTTP/1.1" 200 5768 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
enlinea.de 104.197.75.152 \[30/Oct/2019:21:26:48 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4076 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-10-31 06:30:07
129.45.59.80 attackspambots
Oct 30 21:14:28 mxgate1 postfix/postscreen[10169]: CONNECT from [129.45.59.80]:7049 to [176.31.12.44]:25
Oct 30 21:14:28 mxgate1 postfix/dnsblog[10173]: addr 129.45.59.80 listed by domain zen.spamhaus.org as 127.0.0.4
Oct 30 21:14:28 mxgate1 postfix/dnsblog[10173]: addr 129.45.59.80 listed by domain zen.spamhaus.org as 127.0.0.11
Oct 30 21:14:28 mxgate1 postfix/dnsblog[10170]: addr 129.45.59.80 listed by domain cbl.abuseat.org as 127.0.0.2
Oct 30 21:14:28 mxgate1 postfix/dnsblog[10171]: addr 129.45.59.80 listed by domain b.barracudacentral.org as 127.0.0.2
Oct 30 21:14:34 mxgate1 postfix/postscreen[10169]: DNSBL rank 4 for [129.45.59.80]:7049
Oct x@x
Oct 30 21:14:34 mxgate1 postfix/postscreen[10169]: HANGUP after 0.54 from [129.45.59.80]:7049 in tests after SMTP handshake
Oct 30 21:14:34 mxgate1 postfix/postscreen[10169]: DISCONNECT [129.45.59.80]:7049


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=129.45.59.80
2019-10-31 06:15:01
205.147.99.182 attackbots
Lines containing failures of 205.147.99.182
Oct 30 19:35:40 nextcloud sshd[17244]: Invalid user ad from 205.147.99.182 port 52658
Oct 30 19:35:40 nextcloud sshd[17244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.147.99.182
Oct 30 19:35:42 nextcloud sshd[17244]: Failed password for invalid user ad from 205.147.99.182 port 52658 ssh2
Oct 30 19:35:42 nextcloud sshd[17244]: Received disconnect from 205.147.99.182 port 52658:11: Bye Bye [preauth]
Oct 30 19:35:42 nextcloud sshd[17244]: Disconnected from invalid user ad 205.147.99.182 port 52658 [preauth]
Oct 30 19:57:38 nextcloud sshd[24964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.147.99.182  user=r.r
Oct 30 19:57:41 nextcloud sshd[24964]: Failed password for r.r from 205.147.99.182 port 20040 ssh2
Oct 30 19:57:41 nextcloud sshd[24964]: Received disconnect from 205.147.99.182 port 20040:11: Bye Bye [preauth]
Oct 30 19:57:41 ne........
------------------------------
2019-10-31 05:59:41
51.75.25.38 attackbots
Oct 30 23:16:59 SilenceServices sshd[27648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.25.38
Oct 30 23:17:00 SilenceServices sshd[27648]: Failed password for invalid user ncim from 51.75.25.38 port 58190 ssh2
Oct 30 23:20:39 SilenceServices sshd[30030]: Failed password for root from 51.75.25.38 port 41070 ssh2
2019-10-31 06:28:22
42.104.97.242 attack
Oct 30 23:00:30 vps666546 sshd\[11756\]: Invalid user www-user from 42.104.97.242 port 44515
Oct 30 23:00:30 vps666546 sshd\[11756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.104.97.242
Oct 30 23:00:32 vps666546 sshd\[11756\]: Failed password for invalid user www-user from 42.104.97.242 port 44515 ssh2
Oct 30 23:05:25 vps666546 sshd\[11829\]: Invalid user china22idc from 42.104.97.242 port 62069
Oct 30 23:05:25 vps666546 sshd\[11829\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.104.97.242
...
2019-10-31 06:20:18
189.165.192.179 attackbots
Oct 30 21:12:37 pl3server sshd[1547]: Did not receive identification string from 189.165.192.179
Oct 30 21:13:00 pl3server sshd[1548]: reveeclipse mapping checking getaddrinfo for dsl-189-165-192-179-dyn.prod-infinhostnameum.com.mx [189.165.192.179] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct 30 21:13:00 pl3server sshd[1548]: Invalid user adminixxxr from 189.165.192.179
Oct 30 21:13:02 pl3server sshd[1548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.165.192.179


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=189.165.192.179
2019-10-31 06:12:39
148.70.134.52 attack
Oct 30 21:42:01 legacy sshd[17087]: Failed password for root from 148.70.134.52 port 38932 ssh2
Oct 30 21:46:51 legacy sshd[17213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.134.52
Oct 30 21:46:54 legacy sshd[17213]: Failed password for invalid user it from 148.70.134.52 port 50654 ssh2
...
2019-10-31 06:00:50
175.145.234.225 attackbots
Oct 30 22:43:12 localhost sshd\[27815\]: Invalid user dsazxcdsazxc from 175.145.234.225 port 32790
Oct 30 22:43:12 localhost sshd\[27815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.145.234.225
Oct 30 22:43:14 localhost sshd\[27815\]: Failed password for invalid user dsazxcdsazxc from 175.145.234.225 port 32790 ssh2
2019-10-31 05:53:18
117.0.35.153 attack
frenzy
2019-10-31 06:05:06
125.161.148.59 attackspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/125.161.148.59/ 
 
 ID - 1H : (49)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : ID 
 NAME ASN : ASN17974 
 
 IP : 125.161.148.59 
 
 CIDR : 125.161.148.0/22 
 
 PREFIX COUNT : 1456 
 
 UNIQUE IP COUNT : 1245952 
 
 
 ATTACKS DETECTED ASN17974 :  
  1H - 2 
  3H - 2 
  6H - 3 
 12H - 5 
 24H - 8 
 
 DateTime : 2019-10-30 21:27:23 
 
 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN  - data recovery
2019-10-31 06:11:55
176.107.133.97 attack
Oct 30 11:46:25 sachi sshd\[21870\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.107.133.97  user=root
Oct 30 11:46:26 sachi sshd\[21870\]: Failed password for root from 176.107.133.97 port 57004 ssh2
Oct 30 11:50:30 sachi sshd\[22208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.107.133.97  user=root
Oct 30 11:50:32 sachi sshd\[22208\]: Failed password for root from 176.107.133.97 port 39356 ssh2
Oct 30 11:54:27 sachi sshd\[22497\]: Invalid user sa from 176.107.133.97
Oct 30 11:54:27 sachi sshd\[22497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.107.133.97
2019-10-31 05:56:14
196.189.89.3 attackbots
Oct 30 21:17:16 georgia postfix/smtpd[50706]: connect from unknown[196.189.89.3]
Oct 30 21:17:17 georgia postfix/smtpd[50706]: warning: unknown[196.189.89.3]: SASL LOGIN authentication failed: authentication failure
Oct 30 21:17:17 georgia postfix/smtpd[50706]: lost connection after AUTH from unknown[196.189.89.3]
Oct 30 21:17:17 georgia postfix/smtpd[50706]: disconnect from unknown[196.189.89.3] ehlo=1 auth=0/1 commands=1/2
Oct 30 21:17:17 georgia postfix/smtpd[50706]: connect from unknown[196.189.89.3]
Oct 30 21:17:18 georgia postfix/smtpd[50706]: warning: unknown[196.189.89.3]: SASL LOGIN authentication failed: authentication failure
Oct 30 21:17:18 georgia postfix/smtpd[50706]: lost connection after AUTH from unknown[196.189.89.3]
Oct 30 21:17:18 georgia postfix/smtpd[50706]: disconnect from unknown[196.189.89.3] ehlo=1 auth=0/1 commands=1/2
Oct 30 21:17:20 georgia postfix/smtpd[50706]: connect from unknown[196.189.89.3]
Oct 30 21:17:21 georgia postfix/smtpd[50706]:........
-------------------------------
2019-10-31 06:16:22
178.128.218.56 attack
Oct 30 21:44:52 vps666546 sshd\[6674\]: Invalid user awfizz from 178.128.218.56 port 53708
Oct 30 21:44:52 vps666546 sshd\[6674\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.218.56
Oct 30 21:44:55 vps666546 sshd\[6674\]: Failed password for invalid user awfizz from 178.128.218.56 port 53708 ssh2
Oct 30 21:49:22 vps666546 sshd\[6741\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.218.56  user=root
Oct 30 21:49:24 vps666546 sshd\[6741\]: Failed password for root from 178.128.218.56 port 36874 ssh2
...
2019-10-31 06:28:04
185.208.211.159 attack
2019-10-30 21:10:15 login authenticator failed for (WIN-VGJLQVTGQPN) [185.208.211.159]: 535 Incorrect authentication data (set_id=b8rab9fbh48)
2019-10-30 21:10:15 H=(WIN-VGJLQVTGQPN) [185.208.211.159] F=: authentication required
2019-10-30 x@x
2019-10-30 21:10:16 unexpected disconnection while reading SMTP command from (WIN-VGJLQVTGQPN) [185.208.211.159]
2019-10-30 21:10:16 login authenticator failed for (WIN-VGJLQVTGQPN) [185.208.211.159]: 535 Incorrect authentication data (set_id=948.pcondron)
2019-10-30 21:10:17 H=(WIN-VGJLQVTGQPN) [185.208.211.159] F=: authentication required
2019-10-30 x@x
2019-10-30 21:10:17 unexpected disconnection while reading SMTP command from (WIN-VGJLQVTGQPN) [185.208.211.159]
2019-10-30 21:10:18 login authenticator failed for (WIN-VGJLQVTGQPN) [185.208.211.159]: 535 Incorrect authentication data (set_id=3vrgfqblaepzfoieznbfntmrpqyix)
2019-10-30 21:10:18 H=(WIN-VGJLQVTGQPN) [185.208.211.159] F=: authentication required
2019-10-30 x@........
-------------------------------
2019-10-31 06:01:41

最近上报的IP列表

125.41.9.136 125.42.119.83 125.42.12.146 125.42.12.26
125.42.121.239 125.42.121.40 125.42.226.44 125.42.222.151
125.42.228.68 125.42.212.148 125.42.196.203 125.42.215.224
125.42.231.117 125.42.232.145 125.42.236.202 125.42.244.171
125.42.74.120 125.42.254.128 125.43.113.142 125.42.93.163