必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.38.2.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38110
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;148.38.2.2.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024120800 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 08 22:18:06 CST 2024
;; MSG SIZE  rcvd: 103
HOST信息:
Host 2.2.38.148.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.2.38.148.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
122.114.234.48 attackbots
Lines containing failures of 122.114.234.48 (max 1000)
Aug  3 03:04:12 localhost sshd[9039]: User r.r from 122.114.234.48 not allowed because listed in DenyUsers
Aug  3 03:04:12 localhost sshd[9039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.234.48  user=r.r
Aug  3 03:04:14 localhost sshd[9039]: Failed password for invalid user r.r from 122.114.234.48 port 56722 ssh2
Aug  3 03:04:16 localhost sshd[9039]: Received disconnect from 122.114.234.48 port 56722:11: Bye Bye [preauth]
Aug  3 03:04:16 localhost sshd[9039]: Disconnected from invalid user r.r 122.114.234.48 port 56722 [preauth]
Aug  3 03:15:41 localhost sshd[12275]: User r.r from 122.114.234.48 not allowed because listed in DenyUsers
Aug  3 03:15:41 localhost sshd[12275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.234.48  user=r.r
Aug  3 03:15:43 localhost sshd[12275]: Failed password for invalid user r.r from ........
------------------------------
2020-08-03 22:46:12
186.150.202.220 attack
Port Scan
...
2020-08-03 23:03:41
94.51.214.241 attackspambots
20/8/3@08:25:34: FAIL: Alarm-Network address from=94.51.214.241
...
2020-08-03 23:07:39
27.185.12.20 attackbotsspam
Aug  3 12:24:46 ns3033917 sshd[17350]: Failed password for root from 27.185.12.20 port 43014 ssh2
Aug  3 12:25:45 ns3033917 sshd[17369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.185.12.20  user=root
Aug  3 12:25:47 ns3033917 sshd[17369]: Failed password for root from 27.185.12.20 port 49338 ssh2
...
2020-08-03 22:57:36
74.82.47.10 attack
 TCP (SYN) 74.82.47.10:42269 -> port 2323, len 40
2020-08-03 22:40:33
35.194.64.202 attack
Aug  3 13:27:49 ip-172-31-61-156 sshd[3333]: Failed password for root from 35.194.64.202 port 53374 ssh2
Aug  3 13:31:53 ip-172-31-61-156 sshd[3509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.194.64.202  user=root
Aug  3 13:31:55 ip-172-31-61-156 sshd[3509]: Failed password for root from 35.194.64.202 port 37652 ssh2
Aug  3 13:31:53 ip-172-31-61-156 sshd[3509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.194.64.202  user=root
Aug  3 13:31:55 ip-172-31-61-156 sshd[3509]: Failed password for root from 35.194.64.202 port 37652 ssh2
...
2020-08-03 23:04:56
173.30.96.81 attack
SSH authentication failure x 6 reported by Fail2Ban
...
2020-08-03 22:50:59
45.129.33.7 attackspam
Aug  3 16:43:53 debian-2gb-nbg1-2 kernel: \[18724304.006190\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.129.33.7 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=15241 PROTO=TCP SPT=59555 DPT=5846 WINDOW=1024 RES=0x00 SYN URGP=0
2020-08-03 22:59:37
109.236.91.85 attackbotsspam
Connection to SSH Honeypot - Detected by HoneypotDB
2020-08-03 22:48:45
163.172.117.227 attack
163.172.117.227 - - [03/Aug/2020:14:43:03 +0100] "POST /wp-login.php HTTP/1.1" 200 2081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
163.172.117.227 - - [03/Aug/2020:14:43:04 +0100] "POST /wp-login.php HTTP/1.1" 200 2081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
163.172.117.227 - - [03/Aug/2020:14:43:05 +0100] "POST /wp-login.php HTTP/1.1" 200 2084 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-03 22:30:52
181.47.210.210 attackbotsspam
Aug  3 16:51:11 mail sshd[593409]: Failed password for root from 181.47.210.210 port 38023 ssh2
Aug  3 16:55:44 mail sshd[593558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.47.210.210  user=root
Aug  3 16:55:46 mail sshd[593558]: Failed password for root from 181.47.210.210 port 59905 ssh2
...
2020-08-03 23:01:23
118.24.11.226 attackbots
Aug  3 14:27:39 ajax sshd[13014]: Failed password for root from 118.24.11.226 port 45468 ssh2
2020-08-03 22:53:09
217.219.155.34 attackspam
port scan and connect, tcp 1433 (ms-sql-s)
2020-08-03 22:53:53
118.25.220.214 attackbotsspam
Lines containing failures of 118.25.220.214 (max 1000)
Aug  2 22:13:26 UTC__SANYALnet-Labs__cac14 sshd[21652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.220.214  user=r.r
Aug  3 00:56:57 UTC__SANYALnet-Labs__cac1 sshd[14818]: Connection from 118.25.220.214 port 53170 on 64.137.179.160 port 22
Aug  3 00:56:59 UTC__SANYALnet-Labs__cac1 sshd[14818]: User r.r from 118.25.220.214 not allowed because not listed in AllowUsers
Aug  3 00:56:59 UTC__SANYALnet-Labs__cac1 sshd[14818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.220.214  user=r.r
Aug  3 00:57:01 UTC__SANYALnet-Labs__cac1 sshd[14818]: Failed password for invalid user r.r from 118.25.220.214 port 53170 ssh2
Aug  3 00:57:01 UTC__SANYALnet-Labs__cac1 sshd[14818]: Received disconnect from 118.25.220.214 port 53170:11: Bye Bye [preauth]
Aug  3 00:57:01 UTC__SANYALnet-Labs__cac1 sshd[14818]: Disconnected from 118.25.220.2........
------------------------------
2020-08-03 22:54:55
179.191.88.58 attack
IP blocked
2020-08-03 22:30:00

最近上报的IP列表

251.201.55.241 33.194.98.165 21.218.114.74 26.75.162.164
152.91.65.235 8.27.84.73 240.195.27.181 40.27.168.197
175.49.78.202 34.60.151.114 155.193.217.17 23.254.94.217
83.44.29.36 133.117.105.21 187.153.165.238 252.95.46.49
215.58.101.11 166.39.243.144 77.47.35.145 40.243.71.238