必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United Kingdom of Great Britain and Northern Ireland (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.155.68.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59042
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;149.155.68.48.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400

;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 01:30:48 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 48.68.155.149.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 48.68.155.149.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
222.186.175.148 attack
Nov  7 09:31:04 vpn01 sshd[16128]: Failed password for root from 222.186.175.148 port 13368 ssh2
Nov  7 09:31:08 vpn01 sshd[16128]: Failed password for root from 222.186.175.148 port 13368 ssh2
...
2019-11-07 16:31:15
221.4.169.197 attack
DATE:2019-11-07 07:28:32, IP:221.4.169.197, PORT:1433 - MSSQL brute force auth on a honeypot server (epe-dc)
2019-11-07 16:15:31
91.121.157.83 attack
Nov  7 08:44:00 lnxded64 sshd[1674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.157.83
2019-11-07 16:50:39
139.59.38.169 attackbots
Nov  7 08:15:45 srv01 sshd[8316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.38.169  user=root
Nov  7 08:15:47 srv01 sshd[8316]: Failed password for root from 139.59.38.169 port 59758 ssh2
Nov  7 08:20:02 srv01 sshd[8507]: Invalid user bodo from 139.59.38.169
Nov  7 08:20:02 srv01 sshd[8507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.38.169
Nov  7 08:20:02 srv01 sshd[8507]: Invalid user bodo from 139.59.38.169
Nov  7 08:20:04 srv01 sshd[8507]: Failed password for invalid user bodo from 139.59.38.169 port 42070 ssh2
...
2019-11-07 16:19:50
40.78.133.79 attackbots
2019-11-07T09:17:24.848879scmdmz1 sshd\[19432\]: Invalid user 0987654321 from 40.78.133.79 port 51998
2019-11-07T09:17:24.852277scmdmz1 sshd\[19432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.78.133.79
2019-11-07T09:17:27.052854scmdmz1 sshd\[19432\]: Failed password for invalid user 0987654321 from 40.78.133.79 port 51998 ssh2
...
2019-11-07 16:30:33
142.4.1.222 attackspambots
fail2ban honeypot
2019-11-07 16:08:29
185.88.196.30 attack
Automatic report - SSH Brute-Force Attack
2019-11-07 16:51:17
80.211.51.116 attackspam
Nov  7 14:04:31 vibhu-HP-Z238-Microtower-Workstation sshd\[16793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.51.116  user=root
Nov  7 14:04:33 vibhu-HP-Z238-Microtower-Workstation sshd\[16793\]: Failed password for root from 80.211.51.116 port 48760 ssh2
Nov  7 14:08:29 vibhu-HP-Z238-Microtower-Workstation sshd\[16949\]: Invalid user 6 from 80.211.51.116
Nov  7 14:08:29 vibhu-HP-Z238-Microtower-Workstation sshd\[16949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.51.116
Nov  7 14:08:32 vibhu-HP-Z238-Microtower-Workstation sshd\[16949\]: Failed password for invalid user 6 from 80.211.51.116 port 58798 ssh2
...
2019-11-07 16:42:05
106.246.250.202 attackbotsspam
Nov  7 08:35:50 lnxded63 sshd[11838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.246.250.202
2019-11-07 16:47:51
210.177.54.141 attackbots
Nov  6 22:26:10 php1 sshd\[14574\]: Invalid user 1q2w3e from 210.177.54.141
Nov  6 22:26:10 php1 sshd\[14574\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.177.54.141
Nov  6 22:26:12 php1 sshd\[14574\]: Failed password for invalid user 1q2w3e from 210.177.54.141 port 58050 ssh2
Nov  6 22:31:15 php1 sshd\[15176\]: Invalid user desih from 210.177.54.141
Nov  6 22:31:15 php1 sshd\[15176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.177.54.141
2019-11-07 16:35:54
182.61.170.213 attackbots
Nov  7 08:19:54 web8 sshd\[14523\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.170.213  user=root
Nov  7 08:19:56 web8 sshd\[14523\]: Failed password for root from 182.61.170.213 port 55182 ssh2
Nov  7 08:24:08 web8 sshd\[16388\]: Invalid user jonatan from 182.61.170.213
Nov  7 08:24:08 web8 sshd\[16388\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.170.213
Nov  7 08:24:10 web8 sshd\[16388\]: Failed password for invalid user jonatan from 182.61.170.213 port 36474 ssh2
2019-11-07 16:25:09
113.206.56.158 attack
Multiple failed FTP logins
2019-11-07 16:25:33
77.247.110.63 attack
[Thu Nov 07 13:28:38.291449 2019] [:error] [pid 19117:tid 140464925619968] [client 77.247.110.63:50635] [client 77.247.110.63] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "972"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/robots.txt"] [unique_id "XcO5lgmF7nx8HNga2aYSrQAAAJQ"]
...
2019-11-07 16:11:29
91.121.155.226 attackspambots
$f2bV_matches
2019-11-07 16:28:02
195.24.207.252 attackbots
Bruteforce on SSH Honeypot
2019-11-07 16:21:13

最近上报的IP列表

119.58.141.155 146.67.95.201 245.116.191.237 73.135.132.196
54.81.42.80 34.25.84.51 86.41.19.222 234.118.160.158
4.85.125.244 194.38.106.34 247.128.129.98 51.96.75.69
190.225.239.154 189.7.41.15 89.70.186.186 7.237.67.196
224.205.121.47 192.83.36.95 175.229.80.105 193.162.59.201