必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Ellwangen

省份(region): Baden-Württemberg

国家(country): Germany

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.14.196.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61424
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;145.14.196.212.			IN	A

;; AUTHORITY SECTION:
.			374	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010102 1800 900 604800 86400

;; Query time: 877 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 02 08:59:16 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 212.196.14.145.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 212.196.14.145.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
31.184.199.114 attackspam
Aug 21 17:47:37 sip sshd[1379634]: Invalid user 0 from 31.184.199.114 port 41735
Aug 21 17:47:39 sip sshd[1379634]: Failed password for invalid user 0 from 31.184.199.114 port 41735 ssh2
Aug 21 17:47:40 sip sshd[1379634]: Disconnecting invalid user 0 31.184.199.114 port 41735: Change of username or service not allowed: (0,ssh-connection) -> (22,ssh-connection) [preauth]
...
2020-08-21 23:57:55
198.12.32.123 attackbots
Aug 21 12:04:20 ip-172-31-42-142 sshd\[22886\]: Invalid user elasticsearch from 198.12.32.123\
Aug 21 12:04:21 ip-172-31-42-142 sshd\[22876\]: Invalid user test from 198.12.32.123\
Aug 21 12:04:22 ip-172-31-42-142 sshd\[22890\]: Invalid user zabbix from 198.12.32.123\
Aug 21 12:04:22 ip-172-31-42-142 sshd\[22866\]: Failed password for root from 198.12.32.123 port 44350 ssh2\
Aug 21 12:04:22 ip-172-31-42-142 sshd\[22872\]: Failed password for root from 198.12.32.123 port 49072 ssh2\
2020-08-21 23:59:53
83.189.29.81 attackbotsspam
Aug 21 13:36:33 plesk sshd[14705]: Bad protocol version identification '' from 83.189.29.81 port 40266
Aug 21 13:36:34 plesk sshd[14706]: Invalid user plexuser from 83.189.29.81
Aug 21 13:36:36 plesk sshd[14706]: Failed password for invalid user plexuser from 83.189.29.81 port 40550 ssh2
Aug 21 13:36:36 plesk sshd[14706]: Connection closed by 83.189.29.81 [preauth]
Aug 21 13:36:40 plesk sshd[14708]: Failed password for r.r from 83.189.29.81 port 42358 ssh2
Aug 21 13:36:40 plesk sshd[14708]: Connection closed by 83.189.29.81 [preauth]
Aug 21 13:36:43 plesk sshd[14710]: Failed password for r.r from 83.189.29.81 port 44878 ssh2
Aug 21 13:36:43 plesk sshd[14710]: Connection closed by 83.189.29.81 [preauth]
Aug 21 13:36:47 plesk sshd[14712]: Failed password for r.r from 83.189.29.81 port 46832 ssh2
Aug 21 13:36:48 plesk sshd[14712]: Connection closed by 83.189.29.81 [preauth]
Aug 21 13:36:51 plesk sshd[14714]: Failed password for r.r from 83.189.29.81 port 49338 ssh2
Aug 21 ........
-------------------------------
2020-08-21 23:52:32
81.68.141.71 attackbots
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-21T15:14:06Z and 2020-08-21T15:25:30Z
2020-08-21 23:50:39
94.128.224.201 attackspambots
Aug 19 17:21:59 liveconfig01 sshd[26897]: Invalid user exx from 94.128.224.201
Aug 19 17:21:59 liveconfig01 sshd[26897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.128.224.201
Aug 19 17:22:01 liveconfig01 sshd[26897]: Failed password for invalid user exx from 94.128.224.201 port 21363 ssh2
Aug 19 17:22:02 liveconfig01 sshd[26897]: Received disconnect from 94.128.224.201 port 21363:11: Bye Bye [preauth]
Aug 19 17:22:02 liveconfig01 sshd[26897]: Disconnected from 94.128.224.201 port 21363 [preauth]
Aug 19 17:37:09 liveconfig01 sshd[27962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.128.224.201  user=r.r
Aug 19 17:37:11 liveconfig01 sshd[27962]: Failed password for r.r from 94.128.224.201 port 21364 ssh2
Aug 19 17:37:12 liveconfig01 sshd[27962]: Received disconnect from 94.128.224.201 port 21364:11: Bye Bye [preauth]
Aug 19 17:37:12 liveconfig01 sshd[27962]: Disconnected from 94........
-------------------------------
2020-08-21 23:56:28
106.13.66.103 attack
Aug 21 08:19:36 pixelmemory sshd[2516658]: Invalid user rosa from 106.13.66.103 port 57960
Aug 21 08:19:36 pixelmemory sshd[2516658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103 
Aug 21 08:19:36 pixelmemory sshd[2516658]: Invalid user rosa from 106.13.66.103 port 57960
Aug 21 08:19:38 pixelmemory sshd[2516658]: Failed password for invalid user rosa from 106.13.66.103 port 57960 ssh2
Aug 21 08:23:17 pixelmemory sshd[2523039]: Invalid user user2 from 106.13.66.103 port 36144
...
2020-08-21 23:31:38
124.41.243.22 attackbotsspam
srvr1: (mod_security) mod_security (id:942100) triggered by 124.41.243.22 (NP/-/22.243.41.124.dynamic.wlink.com.np): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:04:31 [error] 482759#0: *840458 [client 124.41.243.22] ModSecurity: Access denied with code 406 (phase 2).  [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "159801147167.463630"] [ref ""], client: 124.41.243.22, [redacted] request: "GET /forum/viewthread.php?thread_id=1122%29%29+OR+++%28%286466%3D0 HTTP/1.1" [redacted]
2020-08-21 23:48:05
213.55.95.203 attackspambots
Unauthorized IMAP connection attempt
2020-08-21 23:59:23
218.92.0.251 attackspam
Aug 21 15:20:04 localhost sshd[85435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.251  user=root
Aug 21 15:20:06 localhost sshd[85435]: Failed password for root from 218.92.0.251 port 34449 ssh2
Aug 21 15:20:10 localhost sshd[85435]: Failed password for root from 218.92.0.251 port 34449 ssh2
Aug 21 15:20:04 localhost sshd[85435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.251  user=root
Aug 21 15:20:06 localhost sshd[85435]: Failed password for root from 218.92.0.251 port 34449 ssh2
Aug 21 15:20:10 localhost sshd[85435]: Failed password for root from 218.92.0.251 port 34449 ssh2
Aug 21 15:20:04 localhost sshd[85435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.251  user=root
Aug 21 15:20:06 localhost sshd[85435]: Failed password for root from 218.92.0.251 port 34449 ssh2
Aug 21 15:20:10 localhost sshd[85435]: Failed password fo
...
2020-08-21 23:24:17
205.185.116.126 attackbotsspam
Failed password for root from 205.185.116.126 port 45775 ssh2
Failed password for root from 205.185.116.126 port 45775 ssh2
Failed password for root from 205.185.116.126 port 45775 ssh2
Failed password for root from 205.185.116.126 port 45775 ssh2
Failed password for root from 205.185.116.126 port 45775 ssh2
2020-08-21 23:39:19
45.40.196.167 attackspam
C2,DEF GET /shell.php
2020-08-21 23:51:02
129.205.135.171 attackspam
srvr1: (mod_security) mod_security (id:942100) triggered by 129.205.135.171 (ZA/-/129-205-135-171.dynamic.macrolan.co.za): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:05:05 [error] 482759#0: *840539 [client 129.205.135.171] ModSecurity: Access denied with code 406 (phase 2).  [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "159801150536.056070"] [ref ""], client: 129.205.135.171, [redacted] request: "GET /forum/viewthread.php?thread_id=1122%29%29%29+OR+++%28%28%284032%3D0 HTTP/1.1" [redacted]
2020-08-21 23:19:46
95.107.89.228 attack
Aug 21 11:46:58 UTC__SANYALnet-Labs__cac14 sshd[12156]: Connection from 95.107.89.228 port 34178 on 64.137.176.112 port 22
Aug 21 11:47:08 UTC__SANYALnet-Labs__cac14 sshd[12156]: User r.r from 95-107-89-228.dsl.orel.ru not allowed because not listed in AllowUsers
Aug 21 11:47:08 UTC__SANYALnet-Labs__cac14 sshd[12156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95-107-89-228.dsl.orel.ru  user=r.r
Aug 21 11:47:09 UTC__SANYALnet-Labs__cac14 sshd[12156]: Failed password for invalid user r.r from 95.107.89.228 port 34178 ssh2
Aug 21 11:47:15 UTC__SANYALnet-Labs__cac14 sshd[12156]: message repeated 2 serveres: [ Failed password for invalid user r.r from 95.107.89.228 port 34178 ssh2]
Aug 21 11:47:15 UTC__SANYALnet-Labs__cac14 sshd[12156]: error: maximum authentication attempts exceeded for invalid user r.r from 95.107.89.228 port 34178 ssh2 [preauth]
Aug 21 11:47:15 UTC__SANYALnet-Labs__cac14 sshd[12156]: PAM 2 more authentication ........
-------------------------------
2020-08-21 23:58:55
27.37.251.76 attackbotsspam
Aug 21 08:04:51 mx sshd[2570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.37.251.76
Aug 21 08:04:54 mx sshd[2570]: Failed password for invalid user dell from 27.37.251.76 port 11481 ssh2
2020-08-21 23:30:46
51.158.107.168 attack
sshd jail - ssh hack attempt
2020-08-22 00:03:00

最近上报的IP列表

8.216.253.150 208.197.143.213 211.237.91.2 175.186.100.155
33.2.206.166 70.195.207.105 32.67.144.184 179.157.43.24
88.235.3.237 54.36.238.211 94.130.55.143 177.71.36.203
91.158.121.215 169.63.225.217 173.176.178.218 143.168.245.205
98.47.5.188 81.54.45.72 65.158.144.25 9.21.193.124