必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Vienna

省份(region): Vienna

国家(country): Austria

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): Vienna University Computer Center

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.130.137.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44731
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;131.130.137.130.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082500 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 26 00:45:40 CST 2019
;; MSG SIZE  rcvd: 119
HOST信息:
130.137.130.131.in-addr.arpa domain name pointer a443-p120.tfm.univie.ac.at.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
130.137.130.131.in-addr.arpa	name = a443-p120.tfm.univie.ac.at.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
103.52.217.57 attack
" "
2019-11-24 22:27:12
118.200.41.3 attack
Nov 24 11:33:18 124388 sshd[27274]: Invalid user matsuhiro from 118.200.41.3 port 56598
Nov 24 11:33:18 124388 sshd[27274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.200.41.3
Nov 24 11:33:18 124388 sshd[27274]: Invalid user matsuhiro from 118.200.41.3 port 56598
Nov 24 11:33:20 124388 sshd[27274]: Failed password for invalid user matsuhiro from 118.200.41.3 port 56598 ssh2
Nov 24 11:37:13 124388 sshd[27315]: Invalid user arata from 118.200.41.3 port 40448
2019-11-24 22:32:34
116.6.47.125 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/116.6.47.125/ 
 
 CN - 1H : (29)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN134772 
 
 IP : 116.6.47.125 
 
 CIDR : 116.6.44.0/22 
 
 PREFIX COUNT : 29 
 
 UNIQUE IP COUNT : 31744 
 
 
 ATTACKS DETECTED ASN134772 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-11-24 07:17:28 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-24 22:08:14
23.94.183.158 attack
\[2019-11-24 05:11:55\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-24T05:11:55.249-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442032875237",SessionID="0x7f26c490c748",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/23.94.183.158/54939",ACLName="no_extension_match"
\[2019-11-24 05:12:18\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-24T05:12:18.255-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011442032875237",SessionID="0x7f26c414c548",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/23.94.183.158/59295",ACLName="no_extension_match"
\[2019-11-24 05:12:41\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-24T05:12:41.090-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="8011442032875237",SessionID="0x7f26c414b068",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/23.94.183.158/62766",ACLName="no_e
2019-11-24 22:15:13
142.112.118.71 attack
Scanning random ports - tries to find possible vulnerable services
2019-11-24 22:02:58
111.230.157.219 attack
Nov 24 07:17:43 MK-Soft-VM8 sshd[6355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.157.219 
Nov 24 07:17:45 MK-Soft-VM8 sshd[6355]: Failed password for invalid user kaneshiro from 111.230.157.219 port 38922 ssh2
...
2019-11-24 21:58:57
185.170.210.24 attack
[portscan] tcp/81 [alter-web/web-proxy]
*(RWIN=1024)(11241118)
2019-11-24 22:22:26
51.68.228.85 attackbots
51.68.228.85 - - \[24/Nov/2019:12:11:09 +0100\] "POST /wp-login.php HTTP/1.0" 200 5707 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
51.68.228.85 - - \[24/Nov/2019:12:11:10 +0100\] "POST /wp-login.php HTTP/1.0" 200 5707 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
51.68.228.85 - - \[24/Nov/2019:12:11:10 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 802 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-11-24 21:54:15
51.38.135.110 attackbots
Nov 24 07:50:06 legacy sshd[2727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.135.110
Nov 24 07:50:08 legacy sshd[2727]: Failed password for invalid user batal from 51.38.135.110 port 54700 ssh2
Nov 24 07:56:31 legacy sshd[2873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.135.110
...
2019-11-24 22:00:07
175.211.116.230 attackspambots
Nov 24 14:12:50 vps sshd[28211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.211.116.230 
Nov 24 14:12:51 vps sshd[28211]: Failed password for invalid user bernadette from 175.211.116.230 port 39756 ssh2
Nov 24 14:48:03 vps sshd[29770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.211.116.230 
...
2019-11-24 22:05:00
223.112.69.58 attackspambots
Nov 24 14:28:28 MK-Soft-VM7 sshd[15014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.112.69.58 
Nov 24 14:28:30 MK-Soft-VM7 sshd[15014]: Failed password for invalid user broadb from 223.112.69.58 port 35772 ssh2
...
2019-11-24 22:16:43
46.101.101.66 attackspambots
Invalid user zimbra from 46.101.101.66 port 32970
2019-11-24 22:05:31
209.131.125.7 attackspam
RDP Bruteforce
2019-11-24 22:13:23
129.213.22.121 attack
129.213.22.121 - - \[24/Nov/2019:15:15:42 +0100\] "GET /scripts/setup.php HTTP/1.1" 404 162 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\; rv:57.0\) Gecko/20100101 Firefox/57.0"
129.213.22.121 - - \[24/Nov/2019:15:15:42 +0100\] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 162 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\; rv:57.0\) Gecko/20100101 Firefox/57.0"
129.213.22.121 - - \[24/Nov/2019:15:15:42 +0100\] "GET /mysql/scripts/setup.php HTTP/1.1" 404 162 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\; rv:57.0\) Gecko/20100101 Firefox/57.0"
129.213.22.121 - - \[24/Nov/2019:15:15:43 +0100\] "GET /phpmyadmin/scripts/_setup.php HTTP/1.1" 404 162 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\; rv:57.0\) Gecko/20100101 Firefox/57.0"
129.213.22.121 - - \[24/Nov/2019:15:15:43 +0100\] "GET /pma/scripts/setup.php HTTP/1.1" 404 162 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\; rv:57.0\) Gecko/20100101 Firefox/57.0"
...
2019-11-24 22:17:02
172.217.18.163 attackbotsspam
TCP Port Scanning
2019-11-24 21:53:40

最近上报的IP列表

121.43.2.64 216.102.253.110 206.37.125.198 119.125.243.51
160.8.49.135 1.190.153.197 37.177.240.10 150.152.177.181
108.27.172.212 203.156.60.121 103.125.75.140 223.226.30.125
212.109.197.113 36.236.155.132 220.3.218.105 149.226.229.198
167.141.113.78 143.177.98.16 137.73.107.129 45.241.207.25