必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.124.141.172
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18185
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;149.124.141.172.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022702 1800 900 604800 86400

;; Query time: 49 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 05:04:08 CST 2025
;; MSG SIZE  rcvd: 108
HOST信息:
Host 172.141.124.149.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 172.141.124.149.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
208.103.229.87 attack
Repeated brute force against a port
2019-06-21 15:01:18
80.88.90.35 attackbotsspam
RDP Bruteforce
2019-06-21 14:50:48
159.89.234.142 attack
xmlrpc attack
2019-06-21 15:00:14
139.210.106.219 attackspam
2323/tcp
[2019-06-21]1pkt
2019-06-21 14:42:54
129.204.201.9 attack
2019-06-21T05:13:29.446821abusebot-7.cloudsearch.cf sshd\[28704\]: Invalid user wen from 129.204.201.9 port 57018
2019-06-21 14:29:14
187.198.220.200 attack
445/tcp
[2019-06-21]1pkt
2019-06-21 14:37:20
178.128.10.204 attack
Jun 21 03:59:11 zulu1842 sshd[22733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.10.204  user=r.r
Jun 21 03:59:13 zulu1842 sshd[22733]: Failed password for r.r from 178.128.10.204 port 51948 ssh2
Jun 21 03:59:14 zulu1842 sshd[22733]: Received disconnect from 178.128.10.204: 11: Bye Bye [preauth]
Jun 21 03:59:20 zulu1842 sshd[22742]: Invalid user admin from 178.128.10.204
Jun 21 03:59:20 zulu1842 sshd[22742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.10.204 
Jun 21 03:59:22 zulu1842 sshd[22742]: Failed password for invalid user admin from 178.128.10.204 port 58958 ssh2
Jun 21 03:59:22 zulu1842 sshd[22742]: Received disconnect from 178.128.10.204: 11: Bye Bye [preauth]
Jun 21 03:59:28 zulu1842 sshd[22747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.10.204  user=r.r
Jun 21 03:59:30 zulu1842 sshd[22747]: Failed passw........
-------------------------------
2019-06-21 14:33:49
117.187.111.223 attackbots
3389BruteforceFW21
2019-06-21 14:37:01
2.86.50.36 attackbotsspam
Jun 21 06:31:11 mxgate1 postfix/postscreen[19029]: CONNECT from [2.86.50.36]:42071 to [176.31.12.44]:25
Jun 21 06:31:11 mxgate1 postfix/dnsblog[19030]: addr 2.86.50.36 listed by domain zen.spamhaus.org as 127.0.0.10
Jun 21 06:31:11 mxgate1 postfix/dnsblog[19030]: addr 2.86.50.36 listed by domain zen.spamhaus.org as 127.0.0.4
Jun 21 06:31:11 mxgate1 postfix/dnsblog[19033]: addr 2.86.50.36 listed by domain cbl.abuseat.org as 127.0.0.2
Jun 21 06:31:11 mxgate1 postfix/dnsblog[19031]: addr 2.86.50.36 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jun 21 06:31:11 mxgate1 postfix/dnsblog[19034]: addr 2.86.50.36 listed by domain bl.spamcop.net as 127.0.0.2
Jun 21 06:31:17 mxgate1 postfix/postscreen[19029]: DNSBL rank 5 for [2.86.50.36]:42071
Jun x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=2.86.50.36
2019-06-21 14:58:21
183.189.255.5 attackbots
/var/log/messages:Jun 20 16:29:20 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1561048160.541:6357): pid=22044 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aexxxxxxx28-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=22045 suid=74 rport=40538 laddr=104.167.106.93 lport=22  exe="/usr/sbin/sshd" hostname=? addr=183.189.255.5 terminal=? res=success'
/var/log/messages:Jun 20 16:29:20 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1561048160.543:6358): pid=22044 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aexxxxxxx28-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=22045 suid=74 rport=40538 laddr=104.167.106.93 lport=22  exe="/usr/sbin/sshd" hostname=? addr=183.189.255.5 terminal=? res=success'
/var/log/messages:Jun 20 16:29:22 sanyalnet-cloud-vps fail2ban.filte........
-------------------------------
2019-06-21 14:12:30
123.126.106.87 attack
Jun 21 00:29:27 newdogma sshd[14297]: Bad protocol version identification '' from 123.126.106.87 port 52048
Jun 21 00:29:29 newdogma sshd[14298]: Invalid user support from 123.126.106.87 port 52200
Jun 21 00:29:29 newdogma sshd[14298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.126.106.87
Jun 21 00:29:31 newdogma sshd[14298]: Failed password for invalid user support from 123.126.106.87 port 52200 ssh2
Jun 21 00:29:31 newdogma sshd[14298]: Connection closed by 123.126.106.87 port 52200 [preauth]
Jun 21 00:29:32 newdogma sshd[14300]: Invalid user ubnt from 123.126.106.87 port 53152
Jun 21 00:29:32 newdogma sshd[14300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.126.106.87


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=123.126.106.87
2019-06-21 14:56:36
185.114.234.3 attackspambots
Jun 21 05:42:15 risk sshd[29870]: Did not receive identification string from 185.114.234.3
Jun 21 05:47:12 risk sshd[29956]: reveeclipse mapping checking getaddrinfo for dynamic-host-185-114-234-3.macsolution.hostname [185.114.234.3] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 21 05:47:12 risk sshd[29956]: Invalid user FadeCommunhostnamey from 185.114.234.3
Jun 21 05:47:12 risk sshd[29956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.114.234.3 
Jun 21 05:47:14 risk sshd[29956]: Failed password for invalid user FadeCommunhostnamey from 185.114.234.3 port 47166 ssh2
Jun 21 05:48:14 risk sshd[29970]: reveeclipse mapping checking getaddrinfo for dynamic-host-185-114-234-3.macsolution.hostname [185.114.234.3] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 21 05:48:14 risk sshd[29970]: Invalid user HDP from 185.114.234.3
Jun 21 05:48:14 risk sshd[29970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhos........
-------------------------------
2019-06-21 14:46:35
197.44.12.58 attackspam
445/tcp
[2019-06-21]1pkt
2019-06-21 14:47:33
185.10.68.147 attackbotsspam
" "
2019-06-21 14:31:17
113.236.164.18 attackbotsspam
23/tcp
[2019-06-21]1pkt
2019-06-21 14:55:05

最近上报的IP列表

246.126.203.88 229.210.196.198 128.250.98.81 153.26.216.221
119.17.249.212 170.230.233.21 226.245.94.61 7.225.118.164
251.255.161.29 25.98.54.145 69.128.137.167 61.217.103.20
117.73.111.159 38.160.173.195 52.81.32.147 207.130.29.226
58.235.30.75 145.185.112.185 81.146.149.9 61.213.6.196