必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 161.219.156.248
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9249
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;161.219.156.248.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020602 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 07:31:39 CST 2025
;; MSG SIZE  rcvd: 108
HOST信息:
Host 248.156.219.161.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 248.156.219.161.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
141.98.9.161 attackspambots
2020-08-07T08:40:52.482941abusebot-5.cloudsearch.cf sshd[7200]: Invalid user admin from 141.98.9.161 port 33453
2020-08-07T08:40:52.489770abusebot-5.cloudsearch.cf sshd[7200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.161
2020-08-07T08:40:52.482941abusebot-5.cloudsearch.cf sshd[7200]: Invalid user admin from 141.98.9.161 port 33453
2020-08-07T08:40:54.614304abusebot-5.cloudsearch.cf sshd[7200]: Failed password for invalid user admin from 141.98.9.161 port 33453 ssh2
2020-08-07T08:41:16.965772abusebot-5.cloudsearch.cf sshd[7263]: Invalid user ubnt from 141.98.9.161 port 40927
2020-08-07T08:41:16.972054abusebot-5.cloudsearch.cf sshd[7263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.161
2020-08-07T08:41:16.965772abusebot-5.cloudsearch.cf sshd[7263]: Invalid user ubnt from 141.98.9.161 port 40927
2020-08-07T08:41:18.393625abusebot-5.cloudsearch.cf sshd[7263]: Failed password for inv
...
2020-08-07 16:44:47
114.67.106.137 attack
2020-08-07T05:45:18.170975amanda2.illicoweb.com sshd\[1433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.106.137  user=root
2020-08-07T05:45:20.397210amanda2.illicoweb.com sshd\[1433\]: Failed password for root from 114.67.106.137 port 42472 ssh2
2020-08-07T05:50:03.012994amanda2.illicoweb.com sshd\[2331\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.106.137  user=root
2020-08-07T05:50:05.364664amanda2.illicoweb.com sshd\[2331\]: Failed password for root from 114.67.106.137 port 42760 ssh2
2020-08-07T05:52:11.364220amanda2.illicoweb.com sshd\[2949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.106.137  user=root
...
2020-08-07 17:01:10
141.98.80.67 attackspambots
Aug  7 10:56:22 web01.agentur-b-2.de postfix/smtpd[874459]: warning: unknown[141.98.80.67]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  7 10:56:22 web01.agentur-b-2.de postfix/smtpd[874459]: lost connection after AUTH from unknown[141.98.80.67]
Aug  7 10:56:27 web01.agentur-b-2.de postfix/smtpd[869882]: lost connection after AUTH from unknown[141.98.80.67]
Aug  7 10:56:32 web01.agentur-b-2.de postfix/smtpd[874459]: lost connection after AUTH from unknown[141.98.80.67]
Aug  7 10:56:36 web01.agentur-b-2.de postfix/smtpd[869882]: lost connection after AUTH from unknown[141.98.80.67]
2020-08-07 17:10:46
80.82.65.187 attackbots
Aug  7 08:15:18 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.187, lip=185.118.198.210, session=
Aug  7 08:16:41 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.187, lip=185.118.198.210, session=
Aug  7 08:16:47 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=80.82.65.187, lip=185.118.198.210, session=
Aug  7 08:16:47 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=80.82.65.187, lip=185.118.198.210, session=
Aug  7 08:16:47 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, m
2020-08-07 17:02:31
113.91.39.210 attackspambots
Aug  7 10:13:39 mail.srvfarm.net postfix/smtpd[3281323]: NOQUEUE: reject: RCPT from unknown[113.91.39.210]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=SMTP helo=
Aug  7 10:13:40 mail.srvfarm.net postfix/smtpd[3281323]: lost connection after RCPT from unknown[113.91.39.210]
Aug  7 10:13:41 mail.srvfarm.net postfix/smtpd[3293895]: NOQUEUE: reject: RCPT from unknown[113.91.39.210]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=SMTP helo=
Aug  7 10:13:42 mail.srvfarm.net postfix/smtpd[3293895]: lost connection after RCPT from unknown[113.91.39.210]
Aug  7 10:13:59 mail.srvfarm.net postfix/smtpd[3280265]: NOQUEUE: reject: RCPT from unknown[113.91.39.210]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=SMTP helo=
2020-08-07 17:01:43
62.210.194.6 attackspambots
Aug  7 09:59:28 mail.srvfarm.net postfix/smtpd[3280528]: lost connection after STARTTLS from r6.news.eu.rvca.com[62.210.194.6]
Aug  7 10:00:33 mail.srvfarm.net postfix/smtpd[3280259]: lost connection after STARTTLS from r6.news.eu.rvca.com[62.210.194.6]
Aug  7 10:01:36 mail.srvfarm.net postfix/smtpd[3281310]: lost connection after STARTTLS from r6.news.eu.rvca.com[62.210.194.6]
Aug  7 10:03:53 mail.srvfarm.net postfix/smtpd[3280256]: lost connection after STARTTLS from r6.news.eu.rvca.com[62.210.194.6]
Aug  7 10:06:19 mail.srvfarm.net postfix/smtpd[3293900]: lost connection after STARTTLS from r6.news.eu.rvca.com[62.210.194.6]
2020-08-07 17:04:19
110.164.189.53 attackspam
2020-08-07T08:48:37.894847amanda2.illicoweb.com sshd\[36002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.164.189.53  user=root
2020-08-07T08:48:40.089996amanda2.illicoweb.com sshd\[36002\]: Failed password for root from 110.164.189.53 port 55730 ssh2
2020-08-07T08:50:42.000038amanda2.illicoweb.com sshd\[36343\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.164.189.53  user=root
2020-08-07T08:50:44.219973amanda2.illicoweb.com sshd\[36343\]: Failed password for root from 110.164.189.53 port 38678 ssh2
2020-08-07T08:52:48.861450amanda2.illicoweb.com sshd\[36840\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.164.189.53  user=root
...
2020-08-07 16:43:12
46.142.3.78 attackspam
Aug  7 05:10:36 xxx sshd[1892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78-3-142-46.pool.kielnet.net  user=r.r
Aug  7 05:52:48 xxx sshd[4887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78-3-142-46.pool.kielnet.net  user=r.r
Aug  7 06:34:29 xxx sshd[8937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78-3-142-46.pool.kielnet.net  user=r.r
Aug  7 07:15:39 xxx sshd[12978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78-3-142-46.pool.kielnet.net  user=r.r
Aug  7 07:56:47 xxx sshd[15544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78-3-142-46.pool.kielnet.net  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=46.142.3.78
2020-08-07 16:54:30
124.78.40.216 attack
(mod_security) mod_security (id:20000005) triggered by 124.78.40.216 (CN/China/216.40.78.124.broad.xw.sh.dynamic.163data.com.cn): 5 in the last 300 secs
2020-08-07 17:00:14
146.196.60.31 attackbots
Aug  7 05:08:02 mail.srvfarm.net postfix/smtpd[3188835]: warning: unknown[146.196.60.31]: SASL PLAIN authentication failed: 
Aug  7 05:08:02 mail.srvfarm.net postfix/smtpd[3188835]: lost connection after AUTH from unknown[146.196.60.31]
Aug  7 05:09:42 mail.srvfarm.net postfix/smtpd[3188834]: warning: unknown[146.196.60.31]: SASL PLAIN authentication failed: 
Aug  7 05:09:42 mail.srvfarm.net postfix/smtpd[3188834]: lost connection after AUTH from unknown[146.196.60.31]
Aug  7 05:15:31 mail.srvfarm.net postfix/smtps/smtpd[3176101]: warning: unknown[146.196.60.31]: SASL PLAIN authentication failed:
2020-08-07 17:10:17
181.174.144.138 attack
Aug  7 05:03:17 mail.srvfarm.net postfix/smtps/smtpd[3172594]: warning: unknown[181.174.144.138]: SASL PLAIN authentication failed: 
Aug  7 05:03:18 mail.srvfarm.net postfix/smtps/smtpd[3172594]: lost connection after AUTH from unknown[181.174.144.138]
Aug  7 05:07:14 mail.srvfarm.net postfix/smtps/smtpd[3176093]: warning: unknown[181.174.144.138]: SASL PLAIN authentication failed: 
Aug  7 05:07:15 mail.srvfarm.net postfix/smtps/smtpd[3176093]: lost connection after AUTH from unknown[181.174.144.138]
Aug  7 05:09:05 mail.srvfarm.net postfix/smtpd[3172456]: warning: unknown[181.174.144.138]: SASL PLAIN authentication failed:
2020-08-07 17:07:31
78.128.113.116 attackbotsspam
Aug  7 11:00:41 srv01 postfix/smtpd\[5624\]: warning: unknown\[78.128.113.116\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  7 11:00:59 srv01 postfix/smtpd\[5624\]: warning: unknown\[78.128.113.116\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  7 11:03:26 srv01 postfix/smtpd\[7893\]: warning: unknown\[78.128.113.116\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  7 11:03:44 srv01 postfix/smtpd\[5633\]: warning: unknown\[78.128.113.116\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  7 11:11:38 srv01 postfix/smtpd\[32254\]: warning: unknown\[78.128.113.116\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-08-07 17:11:56
80.82.64.210 attack
Aug  7 10:28:26 debian-2gb-nbg1-2 kernel: \[19047358.753227\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.64.210 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=31024 PROTO=TCP SPT=56962 DPT=1680 WINDOW=1024 RES=0x00 SYN URGP=0
2020-08-07 16:48:42
49.234.18.158 attack
$f2bV_matches
2020-08-07 16:50:02
37.49.224.192 attackbotsspam
Aug  7 08:37:37 scw-focused-cartwright sshd[26152]: Failed password for root from 37.49.224.192 port 56252 ssh2
2020-08-07 16:44:11

最近上报的IP列表

43.155.14.121 230.189.153.211 248.172.128.86 63.218.47.215
226.63.211.185 62.88.190.15 83.37.168.143 186.40.131.147
33.116.69.164 61.191.33.167 18.167.221.8 42.84.93.196
209.137.157.0 59.248.15.188 167.207.128.234 6.192.131.12
60.47.78.146 234.157.21.174 17.89.48.139 140.206.16.194