必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.70.255.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5054
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;131.70.255.21.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022001 1800 900 604800 86400

;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 07:58:08 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 21.255.70.131.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
server can't find 131.70.255.21.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
106.12.85.12 attackbotsspam
Oct  4 04:13:01 www_kotimaassa_fi sshd[18443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.85.12
Oct  4 04:13:03 www_kotimaassa_fi sshd[18443]: Failed password for invalid user Bugatti-123 from 106.12.85.12 port 43037 ssh2
...
2019-10-04 16:20:23
178.140.254.239 attack
Oct  1 04:21:38 nxxxxxxx sshd[24446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=broadband-178-140-254-239.ip.moscow.rt.ru  user=r.r
Oct  1 04:21:40 nxxxxxxx sshd[24446]: Failed password for r.r from 178.140.254.239 port 48425 ssh2
Oct  1 04:21:42 nxxxxxxx sshd[24446]: Failed password for r.r from 178.140.254.239 port 48425 ssh2
Oct  1 04:21:44 nxxxxxxx sshd[24446]: Failed password for r.r from 178.140.254.239 port 48425 ssh2
Oct  1 04:21:46 nxxxxxxx sshd[24446]: Failed password for r.r from 178.140.254.239 port 48425 ssh2
Oct  1 04:21:48 nxxxxxxx sshd[24446]: Failed password for r.r from 178.140.254.239 port 48425 ssh2
Oct  1 04:21:50 nxxxxxxx sshd[24446]: Failed password for r.r from 178.140.254.239 port 48425 ssh2
Oct  1 04:21:50 nxxxxxxx sshd[24446]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=broadband-178-140-254-239.ip.moscow.rt.ru  user=r.r


........
-----------------------------------------------
https://www.blocklist.de
2019-10-04 16:03:13
157.230.58.196 attack
Oct  4 05:59:05 ip-172-31-1-72 sshd\[25271\]: Invalid user P@55word\#1234 from 157.230.58.196
Oct  4 05:59:05 ip-172-31-1-72 sshd\[25271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.58.196
Oct  4 05:59:07 ip-172-31-1-72 sshd\[25271\]: Failed password for invalid user P@55word\#1234 from 157.230.58.196 port 47262 ssh2
Oct  4 06:03:09 ip-172-31-1-72 sshd\[25328\]: Invalid user Killer123 from 157.230.58.196
Oct  4 06:03:09 ip-172-31-1-72 sshd\[25328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.58.196
2019-10-04 16:19:28
185.143.221.186 attackspam
10/04/2019-02:27:54.779133 185.143.221.186 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-10-04 15:47:06
99.122.154.169 attack
Oct  3 17:46:10 friendsofhawaii sshd\[5205\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=prox.sekrutstash.com  user=root
Oct  3 17:46:13 friendsofhawaii sshd\[5205\]: Failed password for root from 99.122.154.169 port 35364 ssh2
Oct  3 17:50:18 friendsofhawaii sshd\[5525\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=prox.sekrutstash.com  user=root
Oct  3 17:50:20 friendsofhawaii sshd\[5525\]: Failed password for root from 99.122.154.169 port 48688 ssh2
Oct  3 17:54:25 friendsofhawaii sshd\[5857\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=prox.sekrutstash.com  user=root
2019-10-04 16:02:30
95.182.129.243 botsattack
你妈死了 暴力破解别人密码很有意思是吧 老子用私钥看你破解你妈的鸡巴
2019-10-04 15:41:09
190.14.39.93 attackbots
Oct  3 15:41:12 localhost kernel: [3869491.782311] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=190.14.39.93 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=76 ID=44683 DF PROTO=TCP SPT=64618 DPT=22 SEQ=3376790456 ACK=0 WINDOW=29200 RES=0x00 SYN URGP=0 
Oct  3 17:26:38 localhost kernel: [3875817.221175] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=190.14.39.93 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=7752 DF PROTO=TCP SPT=51697 DPT=22 SEQ=392830835 ACK=0 WINDOW=29200 RES=0x00 SYN URGP=0 
Oct  3 23:55:03 localhost kernel: [3899122.632243] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=190.14.39.93 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=63 ID=29726 DF PROTO=TCP SPT=57604 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 
Oct  3 23:55:03 localhost kernel: [3899122.632274] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=190.14.39.93 DST=[mungedIP2] LE
2019-10-04 15:34:49
218.238.55.194 attack
Oct  1 18:13:37 mxgate1 postfix/postscreen[13833]: CONNECT from [218.238.55.194]:24619 to [176.31.12.44]:25
Oct  1 18:13:37 mxgate1 postfix/dnsblog[13834]: addr 218.238.55.194 listed by domain zen.spamhaus.org as 127.0.0.3
Oct  1 18:13:37 mxgate1 postfix/dnsblog[13834]: addr 218.238.55.194 listed by domain zen.spamhaus.org as 127.0.0.4
Oct  1 18:13:37 mxgate1 postfix/dnsblog[13834]: addr 218.238.55.194 listed by domain zen.spamhaus.org as 127.0.0.11
Oct  1 18:13:37 mxgate1 postfix/dnsblog[13836]: addr 218.238.55.194 listed by domain cbl.abuseat.org as 127.0.0.2
Oct  1 18:13:37 mxgate1 postfix/dnsblog[13838]: addr 218.238.55.194 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Oct  1 18:13:37 mxgate1 postfix/dnsblog[13837]: addr 218.238.55.194 listed by domain b.barracudacentral.org as 127.0.0.2
Oct  1 18:13:43 mxgate1 postfix/postscreen[13833]: DNSBL rank 5 for [218.238.55.194]:24619
Oct x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=218.238.55.194
2019-10-04 15:35:21
117.91.252.140 attackbots
Oct  1 07:18:27 esmtp postfix/smtpd[22900]: lost connection after AUTH from unknown[117.91.252.140]
Oct  1 07:18:30 esmtp postfix/smtpd[22900]: lost connection after AUTH from unknown[117.91.252.140]
Oct  1 07:18:53 esmtp postfix/smtpd[22848]: lost connection after AUTH from unknown[117.91.252.140]
Oct  1 07:18:53 esmtp postfix/smtpd[22870]: lost connection after AUTH from unknown[117.91.252.140]
Oct  1 07:18:54 esmtp postfix/smtpd[22848]: lost connection after AUTH from unknown[117.91.252.140]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.91.252.140
2019-10-04 15:53:06
51.15.182.231 attackbotsspam
Automatic report - Banned IP Access
2019-10-04 15:48:09
117.135.115.70 attack
Jan  1 18:46:15 server6 sshd[22051]: reveeclipse mapping checking getaddrinfo for . [117.135.115.70] failed - POSSIBLE BREAK-IN ATTEMPT!
Jan  1 18:46:17 server6 sshd[22051]: Failed password for invalid user usuario from 117.135.115.70 port 50393 ssh2
Jan  1 18:46:20 server6 sshd[22051]: Failed password for invalid user usuario from 117.135.115.70 port 50393 ssh2
Jan  1 18:46:22 server6 sshd[22051]: Failed password for invalid user usuario from 117.135.115.70 port 50393 ssh2
Jan  1 18:46:24 server6 sshd[22051]: Failed password for invalid user usuario from 117.135.115.70 port 50393 ssh2
Jan  1 18:46:26 server6 sshd[22051]: Failed password for invalid user usuario from 117.135.115.70 port 50393 ssh2
Jan  1 18:46:28 server6 sshd[22051]: Failed password for invalid user usuario from 117.135.115.70 port 50393 ssh2
Jan  1 18:46:28 server6 sshd[22051]: Disconnecting: Too many authentication failures for invalid user usuario from 117.135.115.70 port 50393 ssh2 [preauth]


........
------------------------------------
2019-10-04 16:09:14
177.185.221.17 attackbots
Lines containing failures of 177.185.221.17
Sep 30 03:20:13 shared03 postfix/smtpd[6386]: connect from host-177-185-221-17.globonet.net.br[177.185.221.17]
Sep 30 03:20:49 shared03 policyd-spf[9456]: prepend Received-SPF: None (mailfrom) identhostnamey=mailfrom; client-ip=177.185.221.17; helo=host-177-185-221-17.globonet.net.br; envelope-from=x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep 30 03:20:54 shared03 postfix/smtpd[6386]: lost connection after RCPT from host-177-185-221-17.globonet.net.br[177.185.221.17]
Sep 30 03:20:54 shared03 postfix/smtpd[6386]: disconnect from host-177-185-221-17.globonet.net.br[177.185.221.17] ehlo=1 mail=1 rcpt=0/5 commands=2/7


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=177.185.221.17
2019-10-04 16:22:40
23.129.64.216 attackbotsspam
[portscan] Port scan
2019-10-04 15:43:43
112.35.85.227 attack
fail2ban
2019-10-04 15:59:17
185.149.40.45 attackbotsspam
Oct  4 07:21:27 ip-172-31-62-245 sshd\[15336\]: Failed password for root from 185.149.40.45 port 47876 ssh2\
Oct  4 07:25:28 ip-172-31-62-245 sshd\[15377\]: Invalid user 123 from 185.149.40.45\
Oct  4 07:25:30 ip-172-31-62-245 sshd\[15377\]: Failed password for invalid user 123 from 185.149.40.45 port 59670 ssh2\
Oct  4 07:29:24 ip-172-31-62-245 sshd\[15394\]: Invalid user Sporting2017 from 185.149.40.45\
Oct  4 07:29:25 ip-172-31-62-245 sshd\[15394\]: Failed password for invalid user Sporting2017 from 185.149.40.45 port 43264 ssh2\
2019-10-04 15:49:42

最近上报的IP列表

191.168.77.60 232.98.138.245 216.107.130.85 176.129.28.92
221.62.26.103 95.189.117.156 7.8.229.15 86.203.228.193
234.24.224.166 201.218.232.218 232.219.150.242 65.118.31.122
65.191.226.17 210.237.167.235 85.44.8.77 251.213.93.191
255.67.136.85 198.184.134.158 167.211.250.204 33.113.250.43