必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): South Africa

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.232.138.241
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30658
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;129.232.138.241.		IN	A

;; AUTHORITY SECTION:
.			215	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 11:02:30 CST 2022
;; MSG SIZE  rcvd: 108
HOST信息:
241.138.232.129.in-addr.arpa domain name pointer dedi906.jnb1.host-h.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
241.138.232.129.in-addr.arpa	name = dedi906.jnb1.host-h.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
213.32.16.127 attackspam
Jul 13 15:47:43 plusreed sshd[19303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.16.127  user=root
Jul 13 15:47:45 plusreed sshd[19303]: Failed password for root from 213.32.16.127 port 43018 ssh2
...
2019-07-14 03:56:32
176.198.118.131 attackspambots
Jul 13 19:49:14 s64-1 sshd[1212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.198.118.131
Jul 13 19:49:16 s64-1 sshd[1212]: Failed password for invalid user gold from 176.198.118.131 port 40701 ssh2
Jul 13 19:57:26 s64-1 sshd[1339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.198.118.131
...
2019-07-14 03:34:31
94.176.64.125 attack
(Jul 13)  LEN=40 TTL=244 ID=32779 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 13)  LEN=40 TTL=244 ID=61943 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 13)  LEN=40 TTL=244 ID=35664 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 13)  LEN=40 TTL=244 ID=12938 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 13)  LEN=40 TTL=244 ID=51825 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 13)  LEN=40 TTL=244 ID=41574 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 13)  LEN=40 TTL=244 ID=58492 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 12)  LEN=40 TTL=244 ID=44882 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 12)  LEN=40 TTL=244 ID=27775 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 12)  LEN=40 TTL=244 ID=8155 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 12)  LEN=40 TTL=244 ID=4068 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 12)  LEN=40 TTL=244 ID=30153 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 12)  LEN=40 TTL=244 ID=3308 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 12)  LEN=40 TTL=244 ID=46083 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 12)  LEN=40 TTL=244 ID=29241 DF TCP DPT=23 WINDOW=14600 SYN...
2019-07-14 04:02:46
49.228.59.200 attack
Lines containing failures of 49.228.59.200
Jul 13 16:52:33 mellenthin postfix/smtpd[5627]: warning: hostname 49-228-59-0.24.nat.sila1-cgn01.myaisfibre.com does not resolve to address 49.228.59.200
Jul 13 16:52:33 mellenthin postfix/smtpd[5627]: connect from unknown[49.228.59.200]
Jul x@x
Jul 13 16:52:34 mellenthin postfix/smtpd[5627]: lost connection after RCPT from unknown[49.228.59.200]
Jul 13 16:52:34 mellenthin postfix/smtpd[5627]: disconnect from unknown[49.228.59.200] ehlo=1 mail=1 rcpt=0/1 commands=2/3


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=49.228.59.200
2019-07-14 03:25:20
101.109.83.140 attackspam
Jul 14 01:07:42 vibhu-HP-Z238-Microtower-Workstation sshd\[2900\]: Invalid user puneet from 101.109.83.140
Jul 14 01:07:42 vibhu-HP-Z238-Microtower-Workstation sshd\[2900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.109.83.140
Jul 14 01:07:45 vibhu-HP-Z238-Microtower-Workstation sshd\[2900\]: Failed password for invalid user puneet from 101.109.83.140 port 33664 ssh2
Jul 14 01:13:45 vibhu-HP-Z238-Microtower-Workstation sshd\[3506\]: Invalid user administrador from 101.109.83.140
Jul 14 01:13:45 vibhu-HP-Z238-Microtower-Workstation sshd\[3506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.109.83.140
...
2019-07-14 03:47:31
163.172.217.172 attackspam
Jul 13 17:42:22 SilenceServices sshd[4888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.217.172
Jul 13 17:42:23 SilenceServices sshd[4888]: Failed password for invalid user postgres from 163.172.217.172 port 34432 ssh2
Jul 13 17:42:44 SilenceServices sshd[5086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.217.172
2019-07-14 03:26:59
187.116.89.162 attackbotsspam
Jul 13 21:57:08 rpi sshd[6165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.116.89.162 
Jul 13 21:57:10 rpi sshd[6165]: Failed password for invalid user kafka from 187.116.89.162 port 33323 ssh2
2019-07-14 04:04:28
75.75.235.239 attackbotsspam
WordPress XMLRPC scan :: 75.75.235.239 0.140 BYPASS [14/Jul/2019:01:10:47  1000] www.[censored_1] "POST /xmlrpc.php HTTP/1.1" 200 382 "https://www.[censored_1]/" "PHP/6.2.56"
2019-07-14 03:57:35
66.115.168.210 attack
Jul 13 21:13:54 ns41 sshd[32528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.115.168.210
2019-07-14 03:33:36
14.239.209.146 attackbots
19/7/13@11:11:23: FAIL: Alarm-Intrusion address from=14.239.209.146
...
2019-07-14 03:37:31
95.223.14.57 attack
Lines containing failures of 95.223.14.57
Jul 13 16:52:23 mellenthin postfix/smtpd[1487]: connect from ip-95-223-14-57.hsi16.unhostnameymediagroup.de[95.223.14.57]
Jul x@x
Jul 13 16:52:26 mellenthin postfix/smtpd[1487]: lost connection after DATA from ip-95-223-14-57.hsi16.unhostnameymediagroup.de[95.223.14.57]
Jul 13 16:52:26 mellenthin postfix/smtpd[1487]: disconnect from ip-95-223-14-57.hsi16.unhostnameymediagroup.de[95.223.14.57] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=95.223.14.57
2019-07-14 03:48:18
185.153.196.191 attack
13.07.2019 18:18:54 Connection to port 12429 blocked by firewall
2019-07-14 03:39:28
120.56.250.4 attack
Lines containing failures of 120.56.250.4
Jul 13 16:52:57 mellenthin postfix/smtpd[1487]: connect from unknown[120.56.250.4]
Jul x@x
Jul 13 16:52:58 mellenthin postfix/smtpd[1487]: lost connection after DATA from unknown[120.56.250.4]
Jul 13 16:52:58 mellenthin postfix/smtpd[1487]: disconnect from unknown[120.56.250.4] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=120.56.250.4
2019-07-14 03:36:51
60.172.230.184 attackbotsspam
failed_logins
2019-07-14 03:34:04
37.139.21.75 attackbots
Tried sshing with brute force.
2019-07-14 03:58:30

最近上报的IP列表

129.232.138.213 129.232.138.76 129.232.138.91 129.232.138.77
129.232.138.224 129.232.143.242 129.232.165.90 129.232.189.195
129.232.18.87 129.232.167.18 129.232.201.146 129.232.198.197
129.232.210.26 129.232.220.74 129.232.216.12 129.232.221.66
129.232.243.154 129.232.249.118 129.232.249.104 129.232.249.138