必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.80.129.152
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5088
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;145.80.129.152.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 11:08:23 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
Host 152.129.80.145.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 152.129.80.145.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
170.0.236.182 attackbotsspam
RDP Bruteforce
2019-10-15 02:50:18
60.222.254.231 attack
Oct 14 15:06:47 andromeda postfix/smtpd\[26757\]: warning: unknown\[60.222.254.231\]: SASL LOGIN authentication failed: authentication failure
Oct 14 15:07:01 andromeda postfix/smtpd\[22081\]: warning: unknown\[60.222.254.231\]: SASL LOGIN authentication failed: authentication failure
Oct 14 15:07:12 andromeda postfix/smtpd\[22081\]: warning: unknown\[60.222.254.231\]: SASL LOGIN authentication failed: authentication failure
Oct 14 15:07:26 andromeda postfix/smtpd\[21593\]: warning: unknown\[60.222.254.231\]: SASL LOGIN authentication failed: authentication failure
Oct 14 15:07:39 andromeda postfix/smtpd\[26757\]: warning: unknown\[60.222.254.231\]: SASL LOGIN authentication failed: authentication failure
2019-10-15 03:17:47
81.190.192.235 attackbots
2019-10-14T21:00:22.498779centos sshd\[3963\]: Invalid user ubnt from 81.190.192.235 port 51334
2019-10-14T21:00:25.706906centos sshd\[3963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-81-190-192-235.dynamic.mm.pl
2019-10-14T21:00:27.644505centos sshd\[3963\]: Failed password for invalid user ubnt from 81.190.192.235 port 51334 ssh2
2019-10-15 03:04:25
114.5.12.186 attack
Oct  9 19:20:20 heissa sshd\[15943\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.5.12.186  user=root
Oct  9 19:20:23 heissa sshd\[15943\]: Failed password for root from 114.5.12.186 port 51753 ssh2
Oct  9 19:24:44 heissa sshd\[16590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.5.12.186  user=root
Oct  9 19:24:46 heissa sshd\[16590\]: Failed password for root from 114.5.12.186 port 42795 ssh2
Oct  9 19:29:11 heissa sshd\[17241\]: Invalid user 123 from 114.5.12.186 port 33835
Oct  9 19:29:11 heissa sshd\[17241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.5.12.186
2019-10-15 02:50:45
5.196.217.177 attackspam
Oct 14 19:21:03 mail postfix/smtpd\[19729\]: warning: unknown\[5.196.217.177\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Oct 14 20:04:09 mail postfix/smtpd\[22071\]: warning: unknown\[5.196.217.177\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Oct 14 20:12:59 mail postfix/smtpd\[19912\]: warning: unknown\[5.196.217.177\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Oct 14 20:25:20 mail postfix/smtpd\[22236\]: warning: unknown\[5.196.217.177\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2019-10-15 03:07:37
176.56.236.21 attackbots
Automatic report - Banned IP Access
2019-10-15 03:21:26
221.214.5.163 attack
Oct 14 13:31:59 host sshd[23332]: User r.r from 221.214.5.163 not allowed because none of user's groups are listed in AllowGroups
Oct 14 13:31:59 host sshd[23332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.214.5.163  user=r.r
Oct 14 13:32:02 host sshd[23332]: Failed password for invalid user r.r from 221.214.5.163 port 49301 ssh2
Oct 14 13:32:03 host sshd[23332]: Received disconnect from 221.214.5.163 port 49301:11: Bye Bye [preauth]
Oct 14 13:32:03 host sshd[23332]: Disconnected from invalid user r.r 221.214.5.163 port 49301 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=221.214.5.163
2019-10-15 03:22:09
13.211.1.93 attack
wp4.breidenba.ch 13.211.1.93 \[14/Oct/2019:13:42:36 +0200\] "POST /wp-login.php HTTP/1.1" 200 5603 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
wp4.breidenba.ch 13.211.1.93 \[14/Oct/2019:13:42:38 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4083 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-10-15 03:18:14
68.47.224.14 attackspambots
Oct 14 19:20:40 apollo sshd\[13508\]: Invalid user keith from 68.47.224.14Oct 14 19:20:42 apollo sshd\[13508\]: Failed password for invalid user keith from 68.47.224.14 port 43930 ssh2Oct 14 19:38:56 apollo sshd\[13687\]: Invalid user qhsupport from 68.47.224.14
...
2019-10-15 02:50:33
46.229.168.136 attack
Malicious Traffic/Form Submission
2019-10-15 03:22:41
118.175.38.5 attack
Looking for resource vulnerabilities
2019-10-15 03:00:31
89.109.112.90 attack
fail2ban honeypot
2019-10-15 03:28:33
190.113.142.197 attackspam
2019-10-14T13:16:19.133478abusebot-7.cloudsearch.cf sshd\[24851\]: Invalid user geoff from 190.113.142.197 port 43687
2019-10-15 03:29:13
197.148.103.130 attackspambots
Oct 14 13:33:04 mxgate1 postfix/postscreen[32436]: CONNECT from [197.148.103.130]:54920 to [176.31.12.44]:25
Oct 14 13:33:04 mxgate1 postfix/dnsblog[32438]: addr 197.148.103.130 listed by domain zen.spamhaus.org as 127.0.0.11
Oct 14 13:33:04 mxgate1 postfix/dnsblog[32438]: addr 197.148.103.130 listed by domain zen.spamhaus.org as 127.0.0.4
Oct 14 13:33:04 mxgate1 postfix/dnsblog[32441]: addr 197.148.103.130 listed by domain cbl.abuseat.org as 127.0.0.2
Oct 14 13:33:04 mxgate1 postfix/dnsblog[32437]: addr 197.148.103.130 listed by domain b.barracudacentral.org as 127.0.0.2
Oct 14 13:33:04 mxgate1 postfix/postscreen[32436]: PREGREET 24 after 0.21 from [197.148.103.130]:54920: EHLO [197.148.103.130]

Oct 14 13:33:04 mxgate1 postfix/postscreen[32436]: DNSBL rank 4 for [197.148.103.130]:54920
Oct x@x
Oct 14 13:33:06 mxgate1 postfix/postscreen[32436]: HANGUP after 1.3 from [197.148.103.130]:54920 in tests after SMTP handshake
Oct 14 13:33:06 mxgate1 postfix/postscreen[32436]:........
-------------------------------
2019-10-15 03:26:24
157.245.212.16 attack
Oct 14 11:37:59 toyboy sshd[12451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.212.16  user=r.r
Oct 14 11:38:01 toyboy sshd[12451]: Failed password for r.r from 157.245.212.16 port 45328 ssh2
Oct 14 11:38:01 toyboy sshd[12451]: Received disconnect from 157.245.212.16: 11: Bye Bye [preauth]
Oct 14 11:51:38 toyboy sshd[13450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.212.16  user=r.r
Oct 14 11:51:41 toyboy sshd[13450]: Failed password for r.r from 157.245.212.16 port 57600 ssh2
Oct 14 11:51:41 toyboy sshd[13450]: Received disconnect from 157.245.212.16: 11: Bye Bye [preauth]
Oct 14 11:55:27 toyboy sshd[13671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.212.16  user=r.r
Oct 14 11:55:29 toyboy sshd[13671]: Failed password for r.r from 157.245.212.16 port 43952 ssh2
Oct 14 11:55:29 toyboy sshd[13671]: Received discon........
-------------------------------
2019-10-15 02:59:28

最近上报的IP列表

191.172.145.130 213.211.164.200 201.176.30.165 226.163.30.108
124.197.5.111 23.160.41.12 226.255.19.175 222.74.230.179
167.252.25.93 51.33.54.155 191.138.75.118 116.163.228.161
81.104.68.83 233.97.151.2 133.10.227.165 39.77.98.147
121.65.202.74 135.85.110.73 192.98.228.78 157.246.207.141