必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Zamora

省份(region): Provincia del Guayas

国家(country): Ecuador

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): NEDETEL S.A.

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.196.61.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62528
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;131.196.61.4.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041401 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Mon Apr 15 07:16:32 +08 2019
;; MSG SIZE  rcvd: 116

HOST信息:
Host 4.61.196.131.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 4.61.196.131.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
60.250.131.43 attack
firewall-block, port(s): 445/tcp
2019-08-24 04:57:12
178.128.158.113 attackbots
Invalid user user from 178.128.158.113 port 39418
2019-08-24 05:03:26
188.254.0.160 attack
Aug 23 23:15:52 mail sshd\[10764\]: Invalid user anca from 188.254.0.160
Aug 23 23:15:52 mail sshd\[10764\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.160
Aug 23 23:15:54 mail sshd\[10764\]: Failed password for invalid user anca from 188.254.0.160 port 50166 ssh2
...
2019-08-24 05:34:57
198.199.94.14 attackspam
198.199.94.14 - - [23/Aug/2019:21:35:21 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
198.199.94.14 - - [23/Aug/2019:21:35:22 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
198.199.94.14 - - [23/Aug/2019:21:35:22 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
198.199.94.14 - - [23/Aug/2019:21:35:27 +0200] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
198.199.94.14 - - [23/Aug/2019:21:35:27 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
198.199.94.14 - - [23/Aug/2019:21:35:31 +0200] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-08-24 04:55:05
218.92.0.211 attackbotsspam
Aug 23 16:18:05 *** sshd[22980]: User root from 218.92.0.211 not allowed because not listed in AllowUsers
2019-08-24 04:57:47
103.52.52.22 attackbots
Jul  2 22:47:51 vtv3 sshd\[1925\]: Invalid user system from 103.52.52.22 port 59911
Jul  2 22:47:51 vtv3 sshd\[1925\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.52.52.22
Jul  2 22:47:53 vtv3 sshd\[1925\]: Failed password for invalid user system from 103.52.52.22 port 59911 ssh2
Jul  2 22:51:23 vtv3 sshd\[3734\]: Invalid user ntp from 103.52.52.22 port 48745
Jul  2 22:51:23 vtv3 sshd\[3734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.52.52.22
Jul  2 23:03:31 vtv3 sshd\[9300\]: Invalid user jason from 103.52.52.22 port 52390
Jul  2 23:03:31 vtv3 sshd\[9300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.52.52.22
Jul  2 23:03:33 vtv3 sshd\[9300\]: Failed password for invalid user jason from 103.52.52.22 port 52390 ssh2
Jul  2 23:06:02 vtv3 sshd\[10869\]: Invalid user pkjain from 103.52.52.22 port 36179
Jul  2 23:06:02 vtv3 sshd\[10869\]: pam_unix\(sshd:auth\)
2019-08-24 04:54:27
181.97.71.201 attack
2019-08-23 17:07:39 H=(host201.181-97-71.telecom.net.ar) [181.97.71.201]:22818 I=[10.100.18.25]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=181.97.71.201)
2019-08-23 17:07:40 unexpected disconnection while reading SMTP command from (host201.181-97-71.telecom.net.ar) [181.97.71.201]:22818 I=[10.100.18.25]:25 (error: Connection reset by peer)
2019-08-23 17:26:53 H=(host201.181-97-71.telecom.net.ar) [181.97.71.201]:22527 I=[10.100.18.25]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=181.97.71.201)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=181.97.71.201
2019-08-24 05:32:53
178.32.10.94 attackspam
2019-08-23T21:18:50.896486abusebot-7.cloudsearch.cf sshd\[20074\]: Invalid user oracle from 178.32.10.94 port 16468
2019-08-24 05:28:28
139.59.56.121 attackbotsspam
Aug 23 20:47:31 ip-172-31-1-72 sshd\[24575\]: Invalid user jfagan from 139.59.56.121
Aug 23 20:47:32 ip-172-31-1-72 sshd\[24575\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.56.121
Aug 23 20:47:34 ip-172-31-1-72 sshd\[24575\]: Failed password for invalid user jfagan from 139.59.56.121 port 45856 ssh2
Aug 23 20:53:25 ip-172-31-1-72 sshd\[24698\]: Invalid user nagios from 139.59.56.121
Aug 23 20:53:25 ip-172-31-1-72 sshd\[24698\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.56.121
2019-08-24 05:06:00
36.110.50.217 attack
2019-08-23T20:35:41.888720abusebot-2.cloudsearch.cf sshd\[28227\]: Invalid user kibana from 36.110.50.217 port 4769
2019-08-24 05:00:01
178.128.99.57 attackspambots
Invalid user amd from 178.128.99.57 port 48388
2019-08-24 05:16:09
36.225.49.181 attack
Caught in portsentry honeypot
2019-08-24 05:01:33
180.127.78.153 attack
Brute force attempt
2019-08-24 05:35:48
51.254.220.20 attackbotsspam
Aug 23 21:37:13 vps647732 sshd[6288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.220.20
Aug 23 21:37:15 vps647732 sshd[6288]: Failed password for invalid user yx from 51.254.220.20 port 54270 ssh2
...
2019-08-24 05:26:24
104.140.188.6 attack
Honeypot hit.
2019-08-24 04:56:51

最近上报的IP列表

212.115.232.75 125.75.47.46 113.110.230.178 213.238.235.65
190.22.149.125 185.199.82.90 111.192.144.163 91.134.170.118
177.189.204.86 93.127.52.4 113.120.142.171 62.210.70.138
36.24.118.196 106.47.84.155 189.59.17.127 79.137.112.61
169.236.180.245 183.131.116.10 106.47.87.89 106.47.127.176