必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): South Africa

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 165.145.158.189
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34488
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;165.145.158.189.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012201 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 12:25:26 CST 2025
;; MSG SIZE  rcvd: 108
HOST信息:
189.158.145.165.in-addr.arpa domain name pointer dsl-165-145-158-189.telkomadsl.co.za.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
189.158.145.165.in-addr.arpa	name = dsl-165-145-158-189.telkomadsl.co.za.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
200.7.217.185 attackspam
Sep  5 15:19:36 ns41 sshd[11749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.7.217.185
2020-09-05 21:39:20
115.159.153.180 attackspambots
Invalid user ping from 115.159.153.180 port 59299
2020-09-05 21:44:39
180.76.107.10 attack
Invalid user zhangfan from 180.76.107.10 port 45526
2020-09-05 21:44:57
82.223.19.45 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-05 21:21:11
182.122.68.93 attackbots
$f2bV_matches
2020-09-05 21:24:04
200.38.232.248 attack
200.38.232.248 (MX/Mexico/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep  5 08:14:45 server5 sshd[13337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.6.149.195  user=root
Sep  5 08:14:47 server5 sshd[13337]: Failed password for root from 203.6.149.195 port 47736 ssh2
Sep  5 08:24:35 server5 sshd[17680]: Failed password for root from 51.79.53.139 port 46690 ssh2
Sep  5 08:19:04 server5 sshd[15445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.158.42  user=root
Sep  5 08:19:05 server5 sshd[15445]: Failed password for root from 118.24.158.42 port 58786 ssh2
Sep  5 08:14:02 server5 sshd[12763]: Failed password for root from 200.38.232.248 port 44198 ssh2

IP Addresses Blocked:

203.6.149.195 (ID/Indonesia/-)
51.79.53.139 (CA/Canada/-)
118.24.158.42 (CN/China/-)
2020-09-05 21:43:09
65.49.194.40 attack
$f2bV_matches
2020-09-05 21:32:31
192.42.116.13 attackbots
IP blocked
2020-09-05 21:25:00
111.229.109.26 attackbotsspam
(sshd) Failed SSH login from 111.229.109.26 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  5 09:47:49 amsweb01 sshd[2042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.109.26  user=root
Sep  5 09:47:51 amsweb01 sshd[2043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.109.26  user=root
Sep  5 09:47:51 amsweb01 sshd[2042]: Failed password for root from 111.229.109.26 port 41568 ssh2
Sep  5 09:47:53 amsweb01 sshd[2043]: Failed password for root from 111.229.109.26 port 46968 ssh2
Sep  5 09:47:55 amsweb01 sshd[2047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.109.26  user=root
2020-09-05 21:40:37
168.197.31.16 attackbots
Sep  5 09:47:48 ip106 sshd[3789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.197.31.16 
Sep  5 09:47:51 ip106 sshd[3789]: Failed password for invalid user ventas from 168.197.31.16 port 55578 ssh2
...
2020-09-05 21:59:51
203.113.102.178 attackbotsspam
Dovecot Invalid User Login Attempt.
2020-09-05 21:33:36
37.59.54.36 attackspambots
(mod_security) mod_security (id:1010101) triggered by 37.59.54.36 (FR/France/ns3267365.ip-37-59-54.eu): 5 in the last 3600 secs
2020-09-05 21:41:58
217.170.205.14 attackspam
srv02 SSH BruteForce Attacks 22 ..
2020-09-05 21:37:15
87.98.241.242 attackbots
[2020-09-05 09:13:39] NOTICE[1194] chan_sip.c: Registration from '' failed for '87.98.241.242:58497' - Wrong password
[2020-09-05 09:13:39] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-05T09:13:39.641-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3928",SessionID="0x7f2ddc04e988",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/87.98.241.242/58497",Challenge="1d92484f",ReceivedChallenge="1d92484f",ReceivedHash="724159bee4f113612f8d161c72b27d61"
[2020-09-05 09:15:09] NOTICE[1194] chan_sip.c: Registration from '' failed for '87.98.241.242:59890' - Wrong password
[2020-09-05 09:15:09] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-05T09:15:09.026-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8102",SessionID="0x7f2ddc04e988",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/87.98.241.242
...
2020-09-05 21:38:14
159.203.184.19 attackspam
scans once in preceeding hours on the ports (in chronological order) 12042 resulting in total of 5 scans from 159.203.0.0/16 block.
2020-09-05 21:54:34

最近上报的IP列表

165.45.98.198 126.10.5.122 237.158.29.111 134.242.168.40
97.172.147.221 113.75.234.234 59.234.129.250 62.210.155.243
25.152.128.22 125.114.243.40 107.48.82.130 244.14.128.235
138.223.55.63 97.78.10.255 133.106.101.222 229.167.25.233
210.244.150.116 134.36.60.111 12.136.119.176 253.101.7.28