必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 180.172.3.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26416
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;180.172.3.112.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012900 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 14:42:12 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 112.3.172.180.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 112.3.172.180.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
114.141.50.171 attackspambots
Nov  2 22:25:07 vps01 sshd[20919]: Failed password for root from 114.141.50.171 port 34754 ssh2
2019-11-03 05:52:04
51.68.230.25 attack
Nov  2 22:59:39 server sshd\[1749\]: User root from 51.68.230.25 not allowed because listed in DenyUsers
Nov  2 22:59:39 server sshd\[1749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.230.25  user=root
Nov  2 22:59:41 server sshd\[1749\]: Failed password for invalid user root from 51.68.230.25 port 39026 ssh2
Nov  2 23:05:46 server sshd\[7792\]: User root from 51.68.230.25 not allowed because listed in DenyUsers
Nov  2 23:05:46 server sshd\[7792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.230.25  user=root
2019-11-03 05:24:12
40.73.116.245 attack
2019-11-02T21:02:06.146823shield sshd\[14736\]: Invalid user alifax from 40.73.116.245 port 50374
2019-11-02T21:02:06.151532shield sshd\[14736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.116.245
2019-11-02T21:02:08.409457shield sshd\[14736\]: Failed password for invalid user alifax from 40.73.116.245 port 50374 ssh2
2019-11-02T21:07:21.552234shield sshd\[16138\]: Invalid user saxz from 40.73.116.245 port 60738
2019-11-02T21:07:21.556779shield sshd\[16138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.116.245
2019-11-03 05:29:43
185.80.54.35 attackspambots
slow and persistent scanner
2019-11-03 05:23:26
170.52.89.90 attackbots
Hits on port : 5555
2019-11-03 05:36:11
106.54.114.208 attack
Oct 28 14:03:20 nxxxxxxx0 sshd[1598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.208  user=r.r
Oct 28 14:03:22 nxxxxxxx0 sshd[1598]: Failed password for r.r from 106.54.114.208 port 35356 ssh2
Oct 28 14:03:22 nxxxxxxx0 sshd[1598]: Received disconnect from 106.54.114.208: 11: Bye Bye [preauth]
Oct 28 14:16:28 nxxxxxxx0 sshd[3754]: Connection closed by 106.54.114.208 [preauth]
Oct 28 14:28:02 nxxxxxxx0 sshd[5185]: Connection closed by 106.54.114.208 [preauth]
Oct 28 14:33:23 nxxxxxxx0 sshd[6093]: Connection closed by 106.54.114.208 [preauth]
Oct 28 14:38:59 nxxxxxxx0 sshd[6656]: Invalid user postgres from 106.54.114.208
Oct 28 14:38:59 nxxxxxxx0 sshd[6656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.208 
Oct 28 14:39:01 nxxxxxxx0 sshd[6656]: Failed password for invalid user postgres from 106.54.114.208 port 55548 ssh2
Oct 28 14:39:01 nxxxxxxx0 sshd[6656]: Receiv........
-------------------------------
2019-11-03 05:51:00
46.101.249.232 attackbots
Nov  2 22:31:48 localhost sshd\[6917\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.249.232  user=root
Nov  2 22:31:50 localhost sshd\[6917\]: Failed password for root from 46.101.249.232 port 43703 ssh2
Nov  2 22:36:24 localhost sshd\[7380\]: Invalid user tom from 46.101.249.232 port 34533
Nov  2 22:36:24 localhost sshd\[7380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.249.232
2019-11-03 05:48:48
139.59.140.65 attackbots
Nov  2 21:17:46 vpn01 sshd[13800]: Failed password for root from 139.59.140.65 port 60800 ssh2
...
2019-11-03 05:53:55
68.201.199.200 attack
Hits on port : 8080
2019-11-03 05:37:01
88.241.44.243 attackbotsspam
SMB Server BruteForce Attack
2019-11-03 05:54:16
148.70.58.92 attackbotsspam
Nov  2 22:22:17 meumeu sshd[10042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.58.92 
Nov  2 22:22:19 meumeu sshd[10042]: Failed password for invalid user ir from 148.70.58.92 port 44568 ssh2
Nov  2 22:26:49 meumeu sshd[11063]: Failed password for root from 148.70.58.92 port 55004 ssh2
...
2019-11-03 05:33:10
188.159.238.143 attackspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/188.159.238.143/ 
 
 IR - 1H : (130)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : IR 
 NAME ASN : ASN39501 
 
 IP : 188.159.238.143 
 
 CIDR : 188.159.224.0/19 
 
 PREFIX COUNT : 91 
 
 UNIQUE IP COUNT : 203776 
 
 
 ATTACKS DETECTED ASN39501 :  
  1H - 1 
  3H - 4 
  6H - 6 
 12H - 10 
 24H - 29 
 
 DateTime : 2019-11-02 21:18:46 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-03 05:47:10
45.227.253.140 attackbotsspam
Oct 28 18:18:27 srv01 postfix/smtpd[8921]: warning: unknown[45.227.253.140]: SASL LOGIN authentication failed: authentication failure
Oct 28 18:18:27 srv01 postfix/smtpd[8921]: warning: unknown[45.227.253.140]: SASL LOGIN authentication failed: authentication failure
Oct 28 18:18:29 srv01 postfix/smtpd[8921]: warning: unknown[45.227.253.140]: SASL LOGIN authentication failed: authentication failure
Oct 28 18:18:29 srv01 postfix/smtpd[8921]: warning: unknown[45.227.253.140]: SASL LOGIN authentication failed: authentication failure


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.227.253.140
2019-11-03 05:59:20
191.222.36.115 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/191.222.36.115/ 
 
 AU - 1H : (29)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : AU 
 NAME ASN : ASN8167 
 
 IP : 191.222.36.115 
 
 CIDR : 191.222.0.0/18 
 
 PREFIX COUNT : 299 
 
 UNIQUE IP COUNT : 4493824 
 
 
 ATTACKS DETECTED ASN8167 :  
  1H - 1 
  3H - 5 
  6H - 6 
 12H - 15 
 24H - 26 
 
 DateTime : 2019-11-02 21:18:46 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-03 05:46:05
222.186.180.223 attackbots
Nov  2 22:30:26 SilenceServices sshd[11177]: Failed password for root from 222.186.180.223 port 57784 ssh2
Nov  2 22:30:43 SilenceServices sshd[11177]: Failed password for root from 222.186.180.223 port 57784 ssh2
Nov  2 22:30:43 SilenceServices sshd[11177]: error: maximum authentication attempts exceeded for root from 222.186.180.223 port 57784 ssh2 [preauth]
2019-11-03 05:48:17

最近上报的IP列表

145.88.13.22 216.143.141.97 231.192.45.216 254.207.214.51
187.201.107.210 130.150.243.198 103.161.213.182 86.58.218.103
87.116.56.45 75.120.178.156 15.68.45.76 104.178.23.89
152.204.150.97 91.122.151.131 90.209.80.139 77.215.2.98
17.19.8.47 130.130.184.123 187.159.89.140 50.7.6.118