必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): unknown

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.92.89.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15937
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.92.89.49.			IN	A

;; AUTHORITY SECTION:
.			595	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 46 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:54:27 CST 2022
;; MSG SIZE  rcvd: 105
HOST信息:
Host 49.89.92.138.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 49.89.92.138.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
193.111.77.230 attackspambots
SASL Brute Force
2019-11-03 06:22:09
223.247.129.84 attackspam
Oct 29 16:49:12 zulu1842 sshd[3298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.129.84  user=r.r
Oct 29 16:49:13 zulu1842 sshd[3298]: Failed password for r.r from 223.247.129.84 port 37056 ssh2
Oct 29 16:49:14 zulu1842 sshd[3298]: Received disconnect from 223.247.129.84: 11: Bye Bye [preauth]
Oct 29 17:07:20 zulu1842 sshd[4183]: Invalid user wc from 223.247.129.84
Oct 29 17:07:20 zulu1842 sshd[4183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.129.84 
Oct 29 17:07:22 zulu1842 sshd[4183]: Failed password for invalid user wc from 223.247.129.84 port 46836 ssh2
Oct 29 17:07:22 zulu1842 sshd[4183]: Received disconnect from 223.247.129.84: 11: Bye Bye [preauth]
Oct 29 17:12:45 zulu1842 sshd[4525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.129.84  user=r.r
Oct 29 17:12:47 zulu1842 sshd[4525]: Failed password for r.r fro........
-------------------------------
2019-11-03 06:18:41
123.206.76.184 attack
2019-11-02T22:20:59.395277abusebot-2.cloudsearch.cf sshd\[14995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.76.184  user=root
2019-11-03 06:35:12
185.244.192.250 attack
SSH/22 MH Probe, BF, Hack -
2019-11-03 06:37:24
13.251.170.198 attack
RDP Bruteforce
2019-11-03 06:15:02
163.172.204.185 attack
Nov  2 11:52:41 auw2 sshd\[18244\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.204.185  user=root
Nov  2 11:52:43 auw2 sshd\[18244\]: Failed password for root from 163.172.204.185 port 33642 ssh2
Nov  2 11:57:12 auw2 sshd\[18606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.204.185  user=root
Nov  2 11:57:13 auw2 sshd\[18606\]: Failed password for root from 163.172.204.185 port 35208 ssh2
Nov  2 12:01:34 auw2 sshd\[18942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.204.185  user=root
2019-11-03 06:02:12
106.12.45.108 attack
Nov  2 20:12:16 fwservlet sshd[7897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.45.108  user=r.r
Nov  2 20:12:18 fwservlet sshd[7897]: Failed password for r.r from 106.12.45.108 port 44822 ssh2
Nov  2 20:12:18 fwservlet sshd[7897]: Received disconnect from 106.12.45.108 port 44822:11: Bye Bye [preauth]
Nov  2 20:12:18 fwservlet sshd[7897]: Disconnected from 106.12.45.108 port 44822 [preauth]
Nov  2 20:34:45 fwservlet sshd[8190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.45.108  user=r.r
Nov  2 20:34:47 fwservlet sshd[8190]: Failed password for r.r from 106.12.45.108 port 60876 ssh2
Nov  2 20:34:47 fwservlet sshd[8190]: Received disconnect from 106.12.45.108 port 60876:11: Bye Bye [preauth]
Nov  2 20:34:47 fwservlet sshd[8190]: Disconnected from 106.12.45.108 port 60876 [preauth]
Nov  2 20:39:19 fwservlet sshd[8352]: pam_unix(sshd:auth): authentication failure; logna........
-------------------------------
2019-11-03 06:24:31
117.139.166.27 attackspambots
Oct 28 17:17:01 roadrisk sshd[9562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27  user=r.r
Oct 28 17:17:04 roadrisk sshd[9562]: Failed password for r.r from 117.139.166.27 port 2055 ssh2
Oct 28 17:17:04 roadrisk sshd[9562]: Received disconnect from 117.139.166.27: 11: Bye Bye [preauth]
Oct 28 17:32:08 roadrisk sshd[9831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27  user=r.r
Oct 28 17:32:10 roadrisk sshd[9831]: Failed password for r.r from 117.139.166.27 port 2060 ssh2
Oct 28 17:32:10 roadrisk sshd[9831]: Received disconnect from 117.139.166.27: 11: Bye Bye [preauth]
Oct 28 17:37:31 roadrisk sshd[9900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27  user=r.r
Oct 28 17:37:33 roadrisk sshd[9900]: Failed password for r.r from 117.139.166.27 port 2062 ssh2
Oct 28 17:37:33 roadrisk sshd[9900]: Received ........
-------------------------------
2019-11-03 06:00:23
95.191.231.224 attackbots
Chat Spam
2019-11-03 06:06:56
46.12.212.123 attackspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/46.12.212.123/ 
 
 GR - 1H : (72)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : GR 
 NAME ASN : ASN1241 
 
 IP : 46.12.212.123 
 
 CIDR : 46.12.192.0/18 
 
 PREFIX COUNT : 137 
 
 UNIQUE IP COUNT : 604672 
 
 
 ATTACKS DETECTED ASN1241 :  
  1H - 1 
  3H - 1 
  6H - 5 
 12H - 10 
 24H - 20 
 
 DateTime : 2019-11-02 21:18:01 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-03 06:15:54
104.237.128.197 attack
3389BruteforceFW21
2019-11-03 06:19:49
51.77.140.244 attackbotsspam
Automatic report - Banned IP Access
2019-11-03 06:07:19
39.135.1.160 attack
39.135.1.160 was recorded 5 times by 1 hosts attempting to connect to the following ports: 8088,9200,6380,7002. Incident counter (4h, 24h, all-time): 5, 13, 19
2019-11-03 06:02:27
183.99.77.161 attackbots
Nov  2 22:34:47 vtv3 sshd\[31324\]: Invalid user montana from 183.99.77.161 port 15818
Nov  2 22:34:47 vtv3 sshd\[31324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.99.77.161
Nov  2 22:34:49 vtv3 sshd\[31324\]: Failed password for invalid user montana from 183.99.77.161 port 15818 ssh2
Nov  2 22:39:04 vtv3 sshd\[1173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.99.77.161  user=root
Nov  2 22:39:06 vtv3 sshd\[1173\]: Failed password for root from 183.99.77.161 port 26157 ssh2
Nov  2 22:51:39 vtv3 sshd\[8240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.99.77.161  user=root
Nov  2 22:51:40 vtv3 sshd\[8240\]: Failed password for root from 183.99.77.161 port 6567 ssh2
Nov  2 22:56:00 vtv3 sshd\[10606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.99.77.161  user=root
Nov  2 22:56:02 vtv3 sshd\[10606\]: Faile
2019-11-03 06:39:17
180.76.116.132 attackspam
/var/log/messages:Oct 30 02:27:03 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1572402423.859:109470): pid=26836 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=26837 suid=74 rport=55984 laddr=104.167.106.93 lport=23  exe="/usr/sbin/sshd" hostname=? addr=180.76.116.132 terminal=? res=success'
/var/log/messages:Oct 30 02:27:03 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1572402423.863:109471): pid=26836 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=26837 suid=74 rport=55984 laddr=104.167.106.93 lport=23  exe="/usr/sbin/sshd" hostname=? addr=180.76.116.132 terminal=? res=success'
/var/log/messages:Oct 30 02:27:05 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.fr........
-------------------------------
2019-11-03 06:30:25

最近上报的IP列表

138.91.56.119 138.94.0.162 138.94.104.50 138.94.108.74
118.190.151.73 138.94.109.61 138.94.102.221 138.94.108.166
138.94.110.118 118.190.152.134 118.190.152.148 118.190.152.15
118.190.152.166 118.190.153.52 138.94.160.44 138.94.160.52
138.94.160.50 138.94.160.41 138.94.160.32 138.94.160.46