必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Canada

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
149.56.118.205 attackspam
149.56.118.205 - - [07/Oct/2020:06:11:28 +0100] "POST /wp-login.php HTTP/1.1" 200 2172 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.56.118.205 - - [07/Oct/2020:06:11:29 +0100] "POST /wp-login.php HTTP/1.1" 200 2199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.56.118.205 - - [07/Oct/2020:06:11:30 +0100] "POST /wp-login.php HTTP/1.1" 200 2197 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-07 14:19:27
149.56.118.205 attack
MYH,DEF GET /wp-login.php
2020-10-06 01:54:21
149.56.118.205 attack
149.56.118.205 - - [05/Oct/2020:10:00:18 +0100] "POST /wp-login.php HTTP/1.1" 200 2863 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.56.118.205 - - [05/Oct/2020:10:00:20 +0100] "POST /wp-login.php HTTP/1.1" 200 2844 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.56.118.205 - - [05/Oct/2020:10:00:22 +0100] "POST /wp-login.php HTTP/1.1" 200 2801 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-05 17:43:06
149.56.118.205 attackspambots
149.56.118.205 - - \[30/Sep/2020:22:32:40 +0200\] "POST /wp-login.php HTTP/1.1" 200 12843 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
149.56.118.205 - - \[30/Sep/2020:22:32:41 +0200\] "POST /wp-login.php HTTP/1.1" 200 12712 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2020-10-01 04:43:50
149.56.118.205 attackbots
149.56.118.205 - - [30/Sep/2020:05:50:28 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.56.118.205 - - [30/Sep/2020:05:50:30 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.56.118.205 - - [30/Sep/2020:05:50:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-30 20:57:51
149.56.118.205 attack
149.56.118.205 - - [30/Sep/2020:05:50:28 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.56.118.205 - - [30/Sep/2020:05:50:30 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.56.118.205 - - [30/Sep/2020:05:50:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-30 13:26:52
149.56.118.205 attack
149.56.118.205 - - [28/Sep/2020:10:29:01 +0100] "POST /wp-login.php HTTP/1.1" 200 1861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.56.118.205 - - [28/Sep/2020:10:29:02 +0100] "POST /wp-login.php HTTP/1.1" 200 1839 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.56.118.205 - - [28/Sep/2020:10:29:04 +0100] "POST /wp-login.php HTTP/1.1" 200 1845 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-29 01:01:04
149.56.118.205 attackbots
www.goldgier.de 149.56.118.205 [28/Sep/2020:10:42:42 +0200] "POST /wp-login.php HTTP/1.1" 200 8763 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
www.goldgier.de 149.56.118.205 [28/Sep/2020:10:42:43 +0200] "POST /wp-login.php HTTP/1.1" 200 8764 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-28 17:04:14
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.56.118.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63895
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;149.56.118.161.			IN	A

;; AUTHORITY SECTION:
.			597	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 14:38:42 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 161.118.56.149.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 161.118.56.149.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
113.53.210.136 attackspam
Nov  1 03:38:34 sanyalnet-cloud-vps2 sshd[29025]: Connection from 113.53.210.136 port 53610 on 45.62.253.138 port 22
Nov  1 03:38:34 sanyalnet-cloud-vps2 sshd[29025]: Did not receive identification string from 113.53.210.136 port 53610
Nov  1 03:38:37 sanyalnet-cloud-vps2 sshd[29026]: Connection from 113.53.210.136 port 53632 on 45.62.253.138 port 22
Nov  1 03:38:45 sanyalnet-cloud-vps2 sshd[29026]: Address 113.53.210.136 maps to node-3ns.pool-113-53.dynamic.totinternet.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Nov  1 03:38:45 sanyalnet-cloud-vps2 sshd[29026]: Invalid user Adminixxxr from 113.53.210.136 port 53632
Nov  1 03:38:45 sanyalnet-cloud-vps2 sshd[29026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.53.210.136
Nov  1 03:38:47 sanyalnet-cloud-vps2 sshd[29026]: Failed password for invalid user Adminixxxr from 113.53.210.136 port 53632 ssh2
Nov  1 03:38:47 sanyalnet-cloud-vps2 sshd[290........
-------------------------------
2019-11-01 17:30:30
62.234.79.230 attackspam
2019-11-01T06:01:23.554289abusebot-7.cloudsearch.cf sshd\[25418\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.79.230  user=root
2019-11-01 17:36:58
180.250.115.93 attackbots
2019-11-01T08:29:55.941975abusebot-7.cloudsearch.cf sshd\[26134\]: Invalid user photo1 from 180.250.115.93 port 40459
2019-11-01 17:26:56
85.214.95.14 attackspam
Nov  1 04:39:15 HOST sshd[904]: Failed password for r.r from 85.214.95.14 port 40636 ssh2
Nov  1 04:39:15 HOST sshd[904]: Connection closed by 85.214.95.14 [preauth]
Nov  1 04:39:15 HOST sshd[907]: Failed password for r.r from 85.214.95.14 port 40640 ssh2
Nov  1 04:39:15 HOST sshd[903]: Failed password for r.r from 85.214.95.14 port 40632 ssh2
Nov  1 04:39:15 HOST sshd[903]: Connection closed by 85.214.95.14 [preauth]
Nov  1 04:39:15 HOST sshd[907]: Connection closed by 85.214.95.14 [preauth]
Nov  1 04:39:15 HOST sshd[908]: Failed password for r.r from 85.214.95.14 port 40644 ssh2
Nov  1 04:39:15 HOST sshd[908]: Connection closed by 85.214.95.14 [preauth]
Nov  1 04:39:15 HOST sshd[902]: Failed password for r.r from 85.214.95.14 port 40630 ssh2
Nov  1 04:39:15 HOST sshd[902]: Connection closed by 85.214.95.14 [preauth]
Nov  1 04:39:15 HOST sshd[905]: Failed password for r.r from 85.214.95.14 port 40634 ssh2
Nov  1 04:39:15 HOST sshd[906]: Failed password for r.r from 85.........
-------------------------------
2019-11-01 17:32:59
195.228.137.52 attack
8080/tcp
[2019-11-01]1pkt
2019-11-01 17:03:02
151.80.41.64 attackbotsspam
Nov  1 10:09:03 ns41 sshd[20007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.41.64
2019-11-01 17:21:48
167.99.83.237 attackspam
Invalid user io from 167.99.83.237 port 59888
2019-11-01 17:19:16
171.97.122.6 attack
Honeypot attack, port: 23, PTR: ppp-171-97-122-6.revip8.asianet.co.th.
2019-11-01 17:17:25
106.248.41.245 attack
Oct 31 22:45:50 dallas01 sshd[28528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.248.41.245
Oct 31 22:45:52 dallas01 sshd[28528]: Failed password for invalid user yt from 106.248.41.245 port 45544 ssh2
Oct 31 22:50:07 dallas01 sshd[29300]: Failed password for root from 106.248.41.245 port 56264 ssh2
2019-11-01 17:41:11
118.24.101.182 attackbotsspam
SSH Brute-Force attacks
2019-11-01 17:35:32
42.236.10.72 attackspambots
Automatic report - Banned IP Access
2019-11-01 17:24:01
134.209.183.145 attackspam
Nov  1 06:53:12 jane sshd[20668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.183.145 
Nov  1 06:53:14 jane sshd[20668]: Failed password for invalid user twins1990 from 134.209.183.145 port 52870 ssh2
...
2019-11-01 17:30:56
36.81.70.184 attackbotsspam
Fail2Ban Ban Triggered
2019-11-01 17:25:24
201.234.81.181 attack
2019-10-31 22:50:24 H=(lovess.it) [201.234.81.181]:60428 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-10-31 22:50:25 H=(lovess.it) [201.234.81.181]:60428 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/201.234.81.181)
2019-10-31 22:50:25 H=(lovess.it) [201.234.81.181]:60428 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/201.234.81.181)
...
2019-11-01 17:32:14
121.202.7.13 attackspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/121.202.7.13/ 
 
 HK - 1H : (24)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : HK 
 NAME ASN : ASN17924 
 
 IP : 121.202.7.13 
 
 CIDR : 121.202.0.0/18 
 
 PREFIX COUNT : 113 
 
 UNIQUE IP COUNT : 464896 
 
 
 ATTACKS DETECTED ASN17924 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-11-01 04:50:36 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-01 17:23:28

最近上报的IP列表

149.56.111.157 149.56.112.47 149.56.123.99 149.56.113.223
149.56.126.52 149.56.128.144 149.56.13.157 149.56.133.10
149.56.134.236 149.56.133.135 149.56.150.58 149.56.143.238
149.56.142.215 149.56.150.67 149.56.14.162 149.56.134.58
149.56.150.66 149.28.65.207 149.56.151.116 149.28.84.137