必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.168.103.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1417
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;18.168.103.54.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021801 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 03:55:06 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
54.103.168.18.in-addr.arpa domain name pointer ec2-18-168-103-54.eu-west-2.compute.amazonaws.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
54.103.168.18.in-addr.arpa	name = ec2-18-168-103-54.eu-west-2.compute.amazonaws.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
183.146.209.68 attack
suspicious action Fri, 06 Mar 2020 10:30:22 -0300
2020-03-07 02:21:50
5.45.207.74 attackspam
[Sat Mar 07 00:11:51.307505 2020] [:error] [pid 1466:tid 140639952922368] [client 5.45.207.74:52503] [client 5.45.207.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XmKEVyC0S6lpJGq8Q9Wl5wAAAUw"]
...
2020-03-07 02:54:21
116.97.209.212 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 06-03-2020 13:30:11.
2020-03-07 02:40:08
114.33.113.68 attack
firewall-block, port(s): 4567/tcp
2020-03-07 02:29:48
5.236.19.149 attack
IP: 5.236.19.149
Ports affected
    World Wide Web HTTP (80) 
Abuse Confidence rating 41%
Found in DNSBL('s)
ASN Details
   AS58224 Iran Telecommunication Company PJS
   Iran (IR)
   CIDR 5.236.0.0/17
Log Date: 6/03/2020 1:12:15 PM UTC
2020-03-07 02:43:49
129.211.104.34 attackbotsspam
Failed password for invalid user spam from 129.211.104.34 port 58458 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.104.34  user=man
Failed password for man from 129.211.104.34 port 56112 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.104.34  user=nagios
Failed password for nagios from 129.211.104.34 port 53766 ssh2
2020-03-07 02:39:53
192.241.230.45 attack
Automatic report - Port Scan Attack
2020-03-07 02:23:34
45.95.33.103 attackspambots
Mar  6 15:03:07 mail.srvfarm.net postfix/smtpd[2137311]: NOQUEUE: reject: RCPT from unknown[45.95.33.103]: 450 4.1.8 : Sender address rejected: Domain not found; from= to=<3eneuenhaus@eag-fpi.de> proto=ESMTP helo=
Mar  6 15:04:30 mail.srvfarm.net postfix/smtpd[2137314]: NOQUEUE: reject: RCPT from unknown[45.95.33.103]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  6 15:05:40 mail.srvfarm.net postfix/smtpd[2133568]: NOQUEUE: reject: RCPT from unknown[45.95.33.103]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  6 15:09:46 mail.srvfarm.net postfix/smtpd[2131727]: NOQUEUE: reject: RCPT from unknown[45.95.33.103]: 450 4.1.8 : Sender address rejected: Domain not
2020-03-07 02:15:15
184.105.139.93 attackbotsspam
Mar  6 14:56:22 debian-2gb-nbg1-2 kernel: \[5762147.584421\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=184.105.139.93 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=51329 DPT=9200 WINDOW=65535 RES=0x00 SYN URGP=0
2020-03-07 02:51:25
62.141.78.142 attackspambots
2020-03-06 15:30:01 H=(4citys.eu) [62.141.78.142] sender verify fail for : Unrouteable address
2020-03-06 15:30:01 H=(4citys.eu) [62.141.78.142] F= rejected RCPT : Sender verify failed
...
2020-03-07 02:41:01
223.205.232.245 attackspam
Unauthorized connection attempt from IP address 223.205.232.245 on Port 445(SMB)
2020-03-07 02:28:09
190.111.16.228 attackbotsspam
firewall-block, port(s): 1433/tcp
2020-03-07 02:50:49
103.216.156.130 attackbots
Unauthorized connection attempt from IP address 103.216.156.130 on Port 445(SMB)
2020-03-07 02:36:15
212.95.137.131 attackspambots
(sshd) Failed SSH login from 212.95.137.131 (HK/Hong Kong/-): 5 in the last 3600 secs
2020-03-07 02:19:21
213.226.112.99 attackbotsspam
Mar  6 13:51:05 src: 213.226.112.99 signature match: "MISC MS Terminal Server communication attempt" (sid: 100077) tcp port: 3389
2020-03-07 02:46:32

最近上报的IP列表

18.159.84.187 18.159.9.113 18.168.91.58 18.169.251.163
18.170.239.33 18.185.4.134 18.184.37.57 18.184.185.244
18.184.241.162 18.180.253.170 18.192.9.97 18.188.253.82
18.191.35.78 18.192.248.56 18.194.155.192 18.194.219.73
18.195.135.226 18.196.104.52 18.205.80.49 18.202.127.100