必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): unknown

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
138.91.249.49 attackbotsspam
Nov 25 00:06:49 kmh-wsh-001-nbg03 sshd[27269]: Invalid user marvette from 138.91.249.49 port 9216
Nov 25 00:06:49 kmh-wsh-001-nbg03 sshd[27269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.91.249.49
Nov 25 00:06:51 kmh-wsh-001-nbg03 sshd[27269]: Failed password for invalid user marvette from 138.91.249.49 port 9216 ssh2
Nov 25 00:06:51 kmh-wsh-001-nbg03 sshd[27269]: Received disconnect from 138.91.249.49 port 9216:11: Bye Bye [preauth]
Nov 25 00:06:51 kmh-wsh-001-nbg03 sshd[27269]: Disconnected from 138.91.249.49 port 9216 [preauth]
Nov 25 00:32:15 kmh-wsh-001-nbg03 sshd[28370]: Invalid user gaby from 138.91.249.49 port 9216
Nov 25 00:32:15 kmh-wsh-001-nbg03 sshd[28370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.91.249.49
Nov 25 00:32:17 kmh-wsh-001-nbg03 sshd[28370]: Failed password for invalid user gaby from 138.91.249.49 port 9216 ssh2
Nov 25 00:32:17 kmh-wsh-001-nbg03 s........
-------------------------------
2019-11-25 17:29:12
138.91.249.49 attack
$f2bV_matches
2019-11-02 04:10:16
138.91.249.49 attackspam
Automatic report - Banned IP Access
2019-10-30 16:51:08
138.91.249.49 attackspambots
Oct 25 08:06:46 server sshd\[29945\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.91.249.49  user=games
Oct 25 08:06:48 server sshd\[29945\]: Failed password for games from 138.91.249.49 port 6784 ssh2
Oct 25 08:11:39 server sshd\[31619\]: Invalid user temp from 138.91.249.49 port 6784
Oct 25 08:11:39 server sshd\[31619\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.91.249.49
Oct 25 08:11:41 server sshd\[31619\]: Failed password for invalid user temp from 138.91.249.49 port 6784 ssh2
2019-10-25 17:16:08
138.91.249.49 attack
Sep  3 13:52:33 mail sshd[10858]: Invalid user rewe from 138.91.249.49
Sep  3 13:52:33 mail sshd[10858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.91.249.49
Sep  3 13:52:33 mail sshd[10858]: Invalid user rewe from 138.91.249.49
Sep  3 13:52:34 mail sshd[10858]: Failed password for invalid user rewe from 138.91.249.49 port 6720 ssh2
Sep  3 14:04:47 mail sshd[29336]: Invalid user john from 138.91.249.49
...
2019-09-03 21:22:12
138.91.249.49 attackspambots
Aug 29 20:26:40 game-panel sshd[3276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.91.249.49
Aug 29 20:26:42 game-panel sshd[3276]: Failed password for invalid user dropbox from 138.91.249.49 port 6720 ssh2
Aug 29 20:31:16 game-panel sshd[3447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.91.249.49
2019-08-30 04:40:24
138.91.249.49 attackspam
Aug 25 15:12:31 plusreed sshd[28615]: Invalid user seb from 138.91.249.49
...
2019-08-26 03:13:59
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.91.249.185
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30107
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.91.249.185.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 28 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:54:22 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 185.249.91.138.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 185.249.91.138.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
65.50.209.87 attackbots
Sep  3 18:10:40 rush sshd[18829]: Failed password for root from 65.50.209.87 port 60326 ssh2
Sep  3 18:14:14 rush sshd[18943]: Failed password for root from 65.50.209.87 port 35028 ssh2
Sep  3 18:17:52 rush sshd[19052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.50.209.87
...
2020-09-04 14:57:47
112.85.42.180 attackbotsspam
Sep  4 09:11:08 nextcloud sshd\[18815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.180  user=root
Sep  4 09:11:10 nextcloud sshd\[18815\]: Failed password for root from 112.85.42.180 port 44077 ssh2
Sep  4 09:11:39 nextcloud sshd\[19544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.180  user=root
2020-09-04 15:19:25
200.21.174.58 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-04 15:25:16
197.32.91.52 attackspambots
197.32.91.52 - - [03/Sep/2020:19:51:01 +0200] "POST /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.116 Safari/537.36 Mozilla/5.0 (iPad; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10"
197.32.91.52 - - [03/Sep/2020:19:51:07 +0200] "POST /wordpress/xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.116 Safari/537.36 Mozilla/5.0 (iPad; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10"
...
2020-09-04 15:03:47
185.101.32.19 attack
Icarus honeypot on github
2020-09-04 14:57:18
222.186.175.215 attackbotsspam
Sep  4 09:01:19 jane sshd[11304]: Failed password for root from 222.186.175.215 port 33650 ssh2
Sep  4 09:01:23 jane sshd[11304]: Failed password for root from 222.186.175.215 port 33650 ssh2
...
2020-09-04 15:13:08
87.116.181.99 attackbotsspam
Wordpress attack
2020-09-04 15:15:16
139.199.10.43 attackspam
 TCP (SYN) 139.199.10.43:56883 -> port 445, len 44
2020-09-04 15:13:58
201.249.13.77 attack
Port probing on unauthorized port 445
2020-09-04 14:59:05
178.128.243.225 attack
Invalid user user01 from 178.128.243.225 port 60506
2020-09-04 14:44:35
188.226.167.212 attack
$f2bV_matches
2020-09-04 15:16:35
103.81.154.88 attackspambots
Sep  3 18:48:00 mellenthin postfix/smtpd[19006]: NOQUEUE: reject: RCPT from unknown[103.81.154.88]: 554 5.7.1 Service unavailable; Client host [103.81.154.88] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/103.81.154.88; from= to= proto=ESMTP helo=<[103.81.154.122]>
2020-09-04 14:55:40
116.103.168.253 attackbots
2020-09-03 11:41:08.585863-0500  localhost smtpd[17531]: NOQUEUE: reject: RCPT from unknown[116.103.168.253]: 554 5.7.1 Service unavailable; Client host [116.103.168.253] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/116.103.168.253; from= to= proto=ESMTP helo=<[116.103.168.253]>
2020-09-04 14:51:22
177.200.68.157 attackbotsspam
Sep  3 18:47:55 mellenthin postfix/smtpd[20177]: NOQUEUE: reject: RCPT from 177-200-68-157.dynamic.skysever.com.br[177.200.68.157]: 554 5.7.1 Service unavailable; Client host [177.200.68.157] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/177.200.68.157; from= to= proto=ESMTP helo=<177-200-68-157.dynamic.skysever.com.br>
2020-09-04 14:59:54
162.142.125.22 attackspambots
Port scan denied
2020-09-04 14:50:30

最近上报的IP列表

138.91.239.97 138.91.252.187 138.91.239.54 138.91.194.153
138.91.252.236 138.91.26.66 138.91.52.208 138.91.51.42
138.91.7.179 138.91.51.48 118.190.150.166 138.91.37.105
138.91.91.241 138.91.93.227 138.91.55.105 138.91.56.119
138.92.89.49 138.94.0.162 138.94.104.50 138.94.108.74