必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United Kingdom of Great Britain and Northern Ireland (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.187.241.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19592
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;145.187.241.104.		IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400

;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 19 00:24:29 CST 2025
;; MSG SIZE  rcvd: 108
HOST信息:
Host 104.241.187.145.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 104.241.187.145.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
183.134.199.68 attackbotsspam
Invalid user cr from 183.134.199.68 port 41437
2019-09-01 15:10:23
200.98.163.70 attackbots
Scanning random ports - tries to find possible vulnerable services
2019-09-01 15:12:35
40.115.98.94 attack
Sep  1 02:01:48 OPSO sshd\[6866\]: Invalid user rosaleen from 40.115.98.94 port 48432
Sep  1 02:01:48 OPSO sshd\[6866\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.115.98.94
Sep  1 02:01:50 OPSO sshd\[6866\]: Failed password for invalid user rosaleen from 40.115.98.94 port 48432 ssh2
Sep  1 02:06:12 OPSO sshd\[7285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.115.98.94  user=root
Sep  1 02:06:14 OPSO sshd\[7285\]: Failed password for root from 40.115.98.94 port 37110 ssh2
2019-09-01 14:27:15
85.209.0.127 attackspam
*Port Scan* detected from 85.209.0.127 (RU/Russia/-). 11 hits in the last 45 seconds
2019-09-01 14:31:28
178.128.156.144 attackspam
Sep  1 08:17:54 pornomens sshd\[31833\]: Invalid user cpanel from 178.128.156.144 port 43588
Sep  1 08:17:54 pornomens sshd\[31833\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.156.144
Sep  1 08:17:57 pornomens sshd\[31833\]: Failed password for invalid user cpanel from 178.128.156.144 port 43588 ssh2
...
2019-09-01 14:30:22
165.22.143.139 attackspambots
Sep  1 07:44:10 h2177944 sshd\[27979\]: Invalid user user1 from 165.22.143.139 port 35750
Sep  1 07:44:10 h2177944 sshd\[27979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.143.139
Sep  1 07:44:12 h2177944 sshd\[27979\]: Failed password for invalid user user1 from 165.22.143.139 port 35750 ssh2
Sep  1 07:48:14 h2177944 sshd\[28137\]: Invalid user admin from 165.22.143.139 port 51960
...
2019-09-01 14:46:35
120.132.109.215 attack
Invalid user varnish from 120.132.109.215 port 48552
2019-09-01 15:00:40
200.32.243.53 attack
Scanning random ports - tries to find possible vulnerable services
2019-09-01 15:15:02
31.44.80.107 attackbotsspam
Sep  1 08:16:00 MK-Soft-Root1 sshd\[6997\]: Invalid user tokend from 31.44.80.107 port 51730
Sep  1 08:16:00 MK-Soft-Root1 sshd\[6997\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.44.80.107
Sep  1 08:16:02 MK-Soft-Root1 sshd\[6997\]: Failed password for invalid user tokend from 31.44.80.107 port 51730 ssh2
...
2019-09-01 14:43:00
200.94.105.34 attack
Scanning random ports - tries to find possible vulnerable services
2019-09-01 15:14:15
85.209.0.49 attackspambots
Blocked for port scanning.
Time: Sat Aug 31. 21:32:11 2019 +0200
IP: 85.209.0.49 (RU/Russia/-)

Sample of block hits:
Aug 31 21:31:31 vserv kernel: [40882032.533622] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=85.209.0.49 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=44119 PROTO=TCP SPT=59887 DPT=3481 WINDOW=1024 RES=0x00 SYN URGP=0
Aug 31 21:31:33 vserv kernel: [40882034.400273] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=85.209.0.49 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=60479 PROTO=TCP SPT=59887 DPT=3490 WINDOW=1024 RES=0x00 SYN URGP=0
Aug 31 21:31:39 vserv kernel: [40882040.242229] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=85.209.0.49 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=896 PROTO=TCP SPT=59887 DPT=3354 WINDOW=1024 RES=0x00 SYN URGP=0
Aug 31 21:31:39 vserv kernel: [40882040.281872] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=85.209.0.49 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=51528 PROTO=TCP SPT=59887 DPT=3392 WINDOW=1024 ....
2019-09-01 14:34:19
40.125.172.86 attack
Aug 31 13:54:11 web1 sshd\[683\]: Invalid user akhan from 40.125.172.86
Aug 31 13:54:11 web1 sshd\[683\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.125.172.86
Aug 31 13:54:12 web1 sshd\[683\]: Failed password for invalid user akhan from 40.125.172.86 port 1088 ssh2
Aug 31 13:56:52 web1 sshd\[913\]: Invalid user test1 from 40.125.172.86
Aug 31 13:56:52 web1 sshd\[913\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.125.172.86
2019-09-01 14:58:36
38.98.158.52 attack
Sep  1 07:31:33 mail sshd\[10289\]: Failed password for invalid user godzilla from 38.98.158.52 port 42744 ssh2
Sep  1 07:48:40 mail sshd\[10643\]: Invalid user ks from 38.98.158.52 port 49652
Sep  1 07:48:40 mail sshd\[10643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.98.158.52
...
2019-09-01 14:57:16
104.248.149.214 attack
DATE:2019-08-31 23:42:24, IP:104.248.149.214, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2019-09-01 14:27:49
183.215.10.153 attackspam
Unauthorised access (Sep  1) SRC=183.215.10.153 LEN=40 TOS=0x04 TTL=49 ID=23076 TCP DPT=8080 WINDOW=59992 SYN 
Unauthorised access (Aug 31) SRC=183.215.10.153 LEN=40 TOS=0x04 TTL=49 ID=47310 TCP DPT=8080 WINDOW=59992 SYN 
Unauthorised access (Aug 31) SRC=183.215.10.153 LEN=40 TOS=0x04 TTL=49 ID=17384 TCP DPT=8080 WINDOW=59992 SYN 
Unauthorised access (Aug 29) SRC=183.215.10.153 LEN=40 TOS=0x04 TTL=48 ID=23299 TCP DPT=8080 WINDOW=59992 SYN 
Unauthorised access (Aug 27) SRC=183.215.10.153 LEN=40 TOS=0x04 TTL=48 ID=48177 TCP DPT=8080 WINDOW=59992 SYN 
Unauthorised access (Aug 25) SRC=183.215.10.153 LEN=40 TOS=0x04 TTL=48 ID=14400 TCP DPT=8080 WINDOW=59992 SYN
2019-09-01 15:02:23

最近上报的IP列表

239.161.102.126 16.224.56.46 27.181.153.96 68.97.253.35
234.213.164.15 247.142.65.124 226.97.92.67 175.145.215.179
138.240.149.98 146.15.163.198 34.78.140.113 131.239.93.74
203.47.137.181 242.126.133.67 154.159.28.238 202.223.204.6
164.105.103.45 156.65.153.160 14.119.81.141 168.140.14.51