必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Egypt

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
点此参与IP信息讨论
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.139.89.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11632
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;154.139.89.30.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022200 1800 900 604800 86400

;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 22 15:05:52 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 30.89.139.154.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 30.89.139.154.in-addr.arpa: NXDOMAIN
相关IP信息:
154.139.89.65
154.139.89.251
154.139.89.147
154.139.89.172
154.139.89.153
154.139.89.78
154.139.89.169
154.139.89.168
154.139.89.155
154.139.89.148
154.139.89.152
154.139.89.81
154.139.89.24
154.139.89.217
154.139.89.41
154.139.89.11
154.139.89.90
154.139.89.62
154.139.89.236
154.139.89.219
154.139.89.19
154.139.89.228
154.139.89.158
154.139.89.133
154.139.89.63
154.139.89.18
154.139.89.232
154.139.89.37
154.139.89.114
154.139.89.60
154.139.89.231
154.139.89.52
154.139.89.160
154.139.89.167
154.139.89.74
154.139.89.192
154.139.89.99
154.139.89.79
154.139.89.53
154.139.89.54
154.139.89.85
154.139.89.165
154.139.89.87
154.139.89.50
154.139.89.117
154.139.89.218
154.139.89.187
154.139.89.111
154.139.89.177
154.139.89.91
154.139.89.199
154.139.89.66
154.139.89.227
154.139.89.123
154.139.89.140
154.139.89.124
154.139.89.220
154.139.89.94
154.139.89.243
154.139.89.96
154.139.89.173
154.139.89.118
154.139.89.239
154.139.89.93
154.139.89.201
154.139.89.131
154.139.89.176
154.139.89.72
154.139.89.38
154.139.89.161
154.139.89.189
154.139.89.213
154.139.89.132
154.139.89.80
154.139.89.12
154.139.89.225
154.139.89.30
154.139.89.107
154.139.89.69
154.139.89.207
154.139.89.223
154.139.89.190
154.139.89.129
154.139.89.31
154.139.89.10
154.139.89.126
154.139.89.240
154.139.89.115
154.139.89.234
154.139.89.212
154.139.89.138
154.139.89.125
154.139.89.98
154.139.89.3
154.139.89.180
154.139.89.2
154.139.89.171
154.139.89.49
154.139.89.103
154.139.89.196
154.139.89.67
154.139.89.214
154.139.89.250
154.139.89.137
154.139.89.46
154.139.89.156
154.139.89.230
154.139.89.163
154.139.89.45
154.139.89.88
154.139.89.146
154.139.89.246
154.139.89.211
154.139.89.151
154.139.89.55
154.139.89.150
154.139.89.142
154.139.89.241
154.139.89.119
154.139.89.43
154.139.89.25
154.139.89.120
154.139.89.215
154.139.89.110
154.139.89.1
154.139.89.194
154.139.89.42
154.139.89.92
154.139.89.245
154.139.89.61
154.139.89.183
154.139.89.68
154.139.89.237
154.139.89.248
154.139.89.226
154.139.89.198
154.139.89.40
154.139.89.56
154.139.89.108
154.139.89.59
154.139.89.83
154.139.89.34
154.139.89.197
154.139.89.178
154.139.89.122
154.139.89.159
154.139.89.238
154.139.89.222
154.139.89.135
154.139.89.64
154.139.89.216
154.139.89.86
154.139.89.166
154.139.89.7
154.139.89.224
154.139.89.71
154.139.89.179
154.139.89.170
154.139.89.235
154.139.89.32
154.139.89.242
154.139.89.181
154.139.89.106
154.139.89.206
154.139.89.28
154.139.89.193
154.139.89.175
154.139.89.84
154.139.89.89
154.139.89.82
154.139.89.145
154.139.89.144
154.139.89.21
154.139.89.112
154.139.89.35
154.139.89.164
154.139.89.209
154.139.89.5
154.139.89.185
154.139.89.221
154.139.89.57
154.139.89.95
154.139.89.58
154.139.89.136
154.139.89.116
154.139.89.101
154.139.89.134
154.139.89.39
154.139.89.121
154.139.89.22
154.139.89.128
154.139.89.73
154.139.89.157
154.139.89.75
154.139.89.203
154.139.89.244
154.139.89.6
154.139.89.44
154.139.89.76
154.139.89.113
154.139.89.130
154.139.89.191
154.139.89.105
154.139.89.202
154.139.89.8
154.139.89.204
154.139.89.174
154.139.89.33
154.139.89.9
154.139.89.102
154.139.89.104
154.139.89.143
154.139.89.252
154.139.89.70
154.139.89.14
154.139.89.51
154.139.89.27
154.139.89.17
154.139.89.100
154.139.89.77
154.139.89.149
154.139.89.188
154.139.89.254
154.139.89.200
154.139.89.97
154.139.89.47
154.139.89.141
154.139.89.109
154.139.89.195
154.139.89.13
154.139.89.210
154.139.89.247
154.139.89.205
154.139.89.186
154.139.89.253
154.139.89.36
154.139.89.4
154.139.89.16
154.139.89.182
154.139.89.15
154.139.89.127
154.139.89.26
154.139.89.20
154.139.89.229
154.139.89.23
154.139.89.249
154.139.89.184
154.139.89.208
154.139.89.139
154.139.89.48
154.139.89.233
154.139.89.154
154.139.89.162
154.139.89.29
最新评论:
IP 类型 评论内容 时间
46.38.150.193 attack 
2020-06-23T22:57:49.546906linuxbox-skyline auth[139800]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=guest5 rhost=46.38.150.193
...
 2020-06-24 12:58:38
178.128.122.89 attackbotsspam 
178.128.122.89 - - [24/Jun/2020:05:57:11 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.128.122.89 - - [24/Jun/2020:05:57:12 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.128.122.89 - - [24/Jun/2020:05:57:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
 2020-06-24 13:00:09
103.145.12.177 attackbots 
[2020-06-24 00:50:17] NOTICE[1273] chan_sip.c: Registration from '"11" ' failed for '103.145.12.177:5889' - Wrong password
[2020-06-24 00:50:17] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-24T00:50:17.440-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="11",SessionID="0x7f31c05e9da8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.177/5889",Challenge="18bc8bb6",ReceivedChallenge="18bc8bb6",ReceivedHash="da65f77656962b767fa02d5b1ec71a7e"
[2020-06-24 00:50:17] NOTICE[1273] chan_sip.c: Registration from '"11" ' failed for '103.145.12.177:5889' - Wrong password
[2020-06-24 00:50:17] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-24T00:50:17.545-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="11",SessionID="0x7f31c018ea98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.
...
 2020-06-24 12:56:31
185.39.10.10 attackspam 
[Wed Jun 24 11:46:08 2020] - Syn Flood From IP: 185.39.10.10 Port: 46766
 2020-06-24 12:38:00
122.152.204.42 attackspam 
Unauthorized connection attempt detected from IP address 122.152.204.42 to port 7582
 2020-06-24 12:48:54
51.77.255.109 attackspam 
Brute-force general attack.
 2020-06-24 12:40:21
46.229.168.139 attackbots 
[Wed Jun 24 10:57:31.532686 2020] [:error] [pid 19832:tid 140192808445696] [client 46.229.168.139:39508] [client 46.229.168.139] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "118"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "XvLPKBFox1xZh-fe-nlQCwAAAcM"]
...
 2020-06-24 12:46:11
122.51.58.221 attack 
Jun 24 06:28:02 PorscheCustomer sshd[4299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.58.221
Jun 24 06:28:04 PorscheCustomer sshd[4299]: Failed password for invalid user kubernetes from 122.51.58.221 port 50682 ssh2
Jun 24 06:31:10 PorscheCustomer sshd[4458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.58.221
...
 2020-06-24 12:32:20
174.219.139.64 attackbots 
Brute forcing email accounts
 2020-06-24 12:52:40
129.204.36.13 attackspam 
SSH bruteforce
 2020-06-24 12:44:16
106.75.99.198 attack 
(sshd) Failed SSH login from 106.75.99.198 (CN/China/-): 5 in the last 3600 secs
 2020-06-24 12:28:46
120.92.45.102 attackspam 
Jun 24 05:51:33 server sshd[44990]: Failed password for invalid user daddy from 120.92.45.102 port 33758 ssh2
Jun 24 05:54:34 server sshd[47305]: Failed password for invalid user hive from 120.92.45.102 port 51464 ssh2
Jun 24 05:57:26 server sshd[49445]: Failed password for root from 120.92.45.102 port 4659 ssh2
 2020-06-24 12:50:58
129.28.77.179 attackspam 
Jun 24 05:52:24 ns392434 sshd[23625]: Invalid user git from 129.28.77.179 port 33126
Jun 24 05:52:24 ns392434 sshd[23625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.77.179
Jun 24 05:52:24 ns392434 sshd[23625]: Invalid user git from 129.28.77.179 port 33126
Jun 24 05:52:25 ns392434 sshd[23625]: Failed password for invalid user git from 129.28.77.179 port 33126 ssh2
Jun 24 05:59:10 ns392434 sshd[23919]: Invalid user nina from 129.28.77.179 port 39812
Jun 24 05:59:10 ns392434 sshd[23919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.77.179
Jun 24 05:59:10 ns392434 sshd[23919]: Invalid user nina from 129.28.77.179 port 39812
Jun 24 05:59:12 ns392434 sshd[23919]: Failed password for invalid user nina from 129.28.77.179 port 39812 ssh2
Jun 24 06:03:06 ns392434 sshd[24070]: Invalid user roy from 129.28.77.179 port 51976
 2020-06-24 12:55:50
122.155.223.48 attack 
SSH bruteforce
 2020-06-24 12:41:38
62.117.230.144 attackbots 
$f2bV_matches
 2020-06-24 12:47:14

最近上报的IP列表

106.217.176.101 241.57.0.143 154.96.9.21 75.22.236.69
239.177.143.155 86.146.89.65 9.185.45.30 31.142.65.178
9.57.205.163 164.186.166.192 131.97.135.36 245.176.42.205
230.76.8.145 207.107.251.9 30.31.173.64 77.145.234.33
71.86.58.222 235.217.61.167 14.223.12.86 35.15.69.93