必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Japan

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 165.102.196.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6459
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;165.102.196.5.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400

;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 22:14:28 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 5.196.102.165.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 5.196.102.165.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
41.204.191.53 attack
fraudulent SSH attempt
2019-10-16 08:44:44
117.36.158.226 attack
firewall-block, port(s): 1433/tcp
2019-10-16 08:59:29
49.7.43.8 attack
Blocked for port scanning.
Time: Tue Oct 15. 19:44:47 2019 +0200
IP: 49.7.43.8 (CN/China/-)

Sample of block hits:
Oct 15 19:43:42 vserv kernel: [44763591.510049] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=49.7.43.8 DST=[removed] LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=13671 DF PROTO=TCP SPT=30539 DPT=25084 WINDOW=29200 RES=0x00 SYN URGP=0
Oct 15 19:43:43 vserv kernel: [44763592.512217] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=49.7.43.8 DST=[removed] LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=13672 DF PROTO=TCP SPT=30539 DPT=25084 WINDOW=29200 RES=0x00 SYN URGP=0
Oct 15 19:43:45 vserv kernel: [44763594.517298] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=49.7.43.8 DST=[removed] LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=13673 DF PROTO=TCP SPT=30539 DPT=25084 WINDOW=29200 RES=0x00 SYN URGP=0
Oct 15 19:43:49 vserv kernel: [44763598.525602] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=49.7.43.8 DST=[removed] LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=13674 DF PROTO=TCP SPT=30539 DPT=25084 WINDOW=29200
2019-10-16 08:55:30
118.25.150.90 attackbots
Oct 14 18:21:02 euve59663 sshd[7756]: pam_unix(sshd:auth): authenticati=
on failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D118.=
25.150.90  user=3Duucp
Oct 14 18:21:04 euve59663 sshd[7756]: Failed password for uucp from 118=
.25.150.90 port 43493 ssh2
Oct 14 18:21:04 euve59663 sshd[7756]: Received disconnect from 118.25.1=
50.90: 11: Bye Bye [preauth]
Oct 14 18:33:25 euve59663 sshd[2649]: pam_unix(sshd:auth): authenticati=
on failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D118.=
25.150.90  user=3Dr.r
Oct 14 18:33:27 euve59663 sshd[2649]: Failed password for r.r from 118=
.25.150.90 port 55810 ssh2
Oct 14 18:33:28 euve59663 sshd[2649]: Received disconnect from 118.25.1=
50.90: 11: Bye Bye [preauth]
Oct 14 18:38:00 euve59663 sshd[2692]: Invalid user ftp_boot from 118.25=
.150.90
Oct 14 18:38:00 euve59663 sshd[2692]: pam_unix(sshd:auth): authenticati=
on failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D118.=
25.150.90=20
Oct ........
-------------------------------
2019-10-16 09:00:08
89.33.8.34 attackbotsspam
15.10.2019 19:51:28 Recursive DNS scan
2019-10-16 09:02:33
80.211.172.45 attackspambots
2019-10-15T22:47:16.973466abusebot-6.cloudsearch.cf sshd\[29295\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.172.45  user=root
2019-10-16 08:47:43
77.238.128.220 attackbotsspam
[portscan] Port scan
2019-10-16 09:01:07
130.185.156.95 attackbots
firewall-block, port(s): 25/tcp
2019-10-16 08:58:37
41.141.250.244 attackspam
fraudulent SSH attempt
2019-10-16 08:47:04
106.13.82.49 attackbots
Oct 15 23:19:12 vps647732 sshd[19046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.82.49
Oct 15 23:19:14 vps647732 sshd[19046]: Failed password for invalid user ahmed from 106.13.82.49 port 41172 ssh2
...
2019-10-16 09:15:40
139.199.228.133 attackbots
Invalid user marla from 139.199.228.133 port 28040
2019-10-16 08:41:34
92.118.160.21 attack
Honeypot attack, port: 445, PTR: 92.118.160.21.netsystemsresearch.com.
2019-10-16 09:04:14
222.186.175.161 attackspambots
Oct 16 02:52:23 nextcloud sshd\[29580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.161  user=root
Oct 16 02:52:25 nextcloud sshd\[29580\]: Failed password for root from 222.186.175.161 port 34430 ssh2
Oct 16 02:52:51 nextcloud sshd\[30250\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.161  user=root
...
2019-10-16 08:57:29
159.203.201.89 attackspambots
Unauthorized SSH login attempts
2019-10-16 08:56:05
139.219.14.12 attackspam
Oct 16 02:27:54 master sshd[28548]: Failed password for invalid user rt from 139.219.14.12 port 60300 ssh2
2019-10-16 08:55:12

最近上报的IP列表

223.68.212.64 250.124.51.230 108.77.1.134 239.30.105.31
13.62.108.188 65.1.85.226 97.237.204.37 108.149.148.231
32.255.82.56 109.109.44.38 131.77.247.93 136.110.181.116
151.183.235.108 245.219.156.31 206.207.161.185 167.219.55.247
86.164.78.232 83.26.238.87 95.5.126.226 183.7.41.32