必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Ashburn

省份(region): Virginia

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.207.146.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33145
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;18.207.146.139.			IN	A

;; AUTHORITY SECTION:
.			321	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050103 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 02 07:23:23 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
139.146.207.18.in-addr.arpa domain name pointer ec2-18-207-146-139.compute-1.amazonaws.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
139.146.207.18.in-addr.arpa	name = ec2-18-207-146-139.compute-1.amazonaws.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
114.253.132.125 attack
Lines containing failures of 114.253.132.125
Feb 13 09:00:22 shared11 sshd[3291]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.253.132.125  user=r.r
Feb 13 09:00:24 shared11 sshd[3291]: Failed password for r.r from 114.253.132.125 port 22107 ssh2
Feb 13 09:00:25 shared11 sshd[3291]: Connection closed by authenticating user r.r 114.253.132.125 port 22107 [preauth]
Feb 13 10:23:20 shared11 sshd[27627]: Invalid user support from 114.253.132.125 port 48009
Feb 13 10:23:20 shared11 sshd[27627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.253.132.125
Feb 13 10:23:23 shared11 sshd[27627]: Failed password for invalid user support from 114.253.132.125 port 48009 ssh2
Feb 13 10:23:23 shared11 sshd[27627]: Connection closed by invalid user support 114.253.132.125 port 48009 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=114.253.132.125
2020-02-13 23:36:46
220.134.206.24 attackbots
Telnet/23 MH Probe, BF, Hack -
2020-02-13 23:43:52
87.250.224.104 attackspambots
[Thu Feb 13 20:49:22.813023 2020] [:error] [pid 5975:tid 140640851588864] [client 87.250.224.104:56739] [client 87.250.224.104] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XkVT4oIx@@lB79heZs-YWQAAAUw"]
...
2020-02-13 23:23:17
35.199.29.44 attack
ICMP MH Probe, Scan /Distributed -
2020-02-13 23:21:56
176.10.104.240 attack
Automatic report - XMLRPC Attack
2020-02-13 23:36:15
185.156.177.220 attack
RDP brute forcing (d)
2020-02-13 23:22:28
194.44.20.6 attack
Automatic report - Port Scan Attack
2020-02-13 23:02:42
138.246.253.21 attack
Port scan on 1 port(s): 53
2020-02-13 23:20:48
35.203.12.124 attack
ICMP MH Probe, Scan /Distributed -
2020-02-13 23:15:25
202.46.1.74 attackbots
Feb 13 14:48:59 vps647732 sshd[29070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.46.1.74
Feb 13 14:49:01 vps647732 sshd[29070]: Failed password for invalid user vagrant from 202.46.1.74 port 60445 ssh2
...
2020-02-13 23:54:09
193.29.13.28 attack
20 attempts against mh-misbehave-ban on sonic
2020-02-13 23:17:56
89.38.145.247 attackspam
Feb 13 10:25:12 mxgate1 postfix/postscreen[966]: CONNECT from [89.38.145.247]:55820 to [176.31.12.44]:25
Feb 13 10:25:12 mxgate1 postfix/dnsblog[1293]: addr 89.38.145.247 listed by domain zen.spamhaus.org as 127.0.0.3
Feb 13 10:25:12 mxgate1 postfix/dnsblog[1294]: addr 89.38.145.247 listed by domain b.barracudacentral.org as 127.0.0.2
Feb 13 10:25:18 mxgate1 postfix/postscreen[966]: DNSBL rank 3 for [89.38.145.247]:55820
Feb 13 10:25:18 mxgate1 postfix/postscreen[966]: NOQUEUE: reject: RCPT from [89.38.145.247]:55820: 550 5.7.1 Service unavailable; client [89.38.145.247] blocked using zen.spamhaus.org; from=x@x helo=
Feb 13 10:25:18 mxgate1 postfix/postscreen[966]: DISCONNECT [89.38.145.247]:55820


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=89.38.145.247
2020-02-13 23:55:13
218.92.0.171 attackbots
Feb 13 16:38:30 dedicated sshd[30026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.171  user=root
Feb 13 16:38:32 dedicated sshd[30026]: Failed password for root from 218.92.0.171 port 28619 ssh2
2020-02-13 23:47:08
202.43.168.72 attackbotsspam
IMAP brute force
...
2020-02-13 23:19:26
103.255.5.117 attackbotsspam
Feb 13 14:48:07  exim[29137]: [1\49] 1j2Eqa-0007Zx-FO H=(zong.com.pk) [103.255.5.117] F= rejected after DATA: This message scored 19.0 spam points.
2020-02-13 23:46:11

最近上报的IP列表

147.153.170.91 91.110.2.202 220.121.89.86 111.229.63.21
199.7.197.7 68.201.61.182 44.203.135.165 172.51.77.252
79.150.123.127 60.167.115.218 190.228.227.232 102.158.46.39
95.207.208.3 107.136.74.243 179.217.235.6 193.56.28.208
193.15.167.90 218.241.229.52 158.217.106.114 49.75.151.164