必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Telkom Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
unauthorized connection attempt
2020-01-25 17:15:02
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 180.245.125.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47375
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;180.245.125.49.			IN	A

;; AUTHORITY SECTION:
.			247	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012500 1800 900 604800 86400

;; Query time: 83 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 25 17:14:58 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 49.125.245.180.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 49.125.245.180.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
37.53.91.78 attackspambots
proto=tcp  .  spt=45204  .  dpt=25  .     (listed on Blocklist de  Sep 15)     (29)
2019-09-16 13:15:06
45.136.109.33 attackspam
Sep 16 06:07:06 h2177944 kernel: \[1483265.599318\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.33 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=65373 PROTO=TCP SPT=47691 DPT=2281 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 16 06:18:18 h2177944 kernel: \[1483937.375257\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.33 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=13775 PROTO=TCP SPT=47691 DPT=2897 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 16 06:27:08 h2177944 kernel: \[1484467.245521\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.33 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=24811 PROTO=TCP SPT=47691 DPT=2032 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 16 06:46:46 h2177944 kernel: \[1485644.496139\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.33 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=30726 PROTO=TCP SPT=47691 DPT=2009 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 16 06:58:45 h2177944 kernel: \[1486363.566981\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.33 DST=85.214.117.9
2019-09-16 13:00:34
112.64.34.165 attack
Sep 15 14:05:34 hiderm sshd\[25190\]: Invalid user on from 112.64.34.165
Sep 15 14:05:34 hiderm sshd\[25190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.34.165
Sep 15 14:05:37 hiderm sshd\[25190\]: Failed password for invalid user on from 112.64.34.165 port 45649 ssh2
Sep 15 14:10:23 hiderm sshd\[25729\]: Invalid user aniko from 112.64.34.165
Sep 15 14:10:23 hiderm sshd\[25729\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.34.165
2019-09-16 13:06:03
176.121.227.58 attackspambots
proto=tcp  .  spt=49762  .  dpt=25  .     (listed on Blocklist de  Sep 15)     (32)
2019-09-16 13:04:53
106.52.174.139 attack
Sep 15 21:58:04 aat-srv002 sshd[1057]: Failed password for invalid user cisco from 106.52.174.139 port 36242 ssh2
Sep 15 22:13:46 aat-srv002 sshd[1624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.174.139
Sep 15 22:13:48 aat-srv002 sshd[1624]: Failed password for invalid user sistema from 106.52.174.139 port 35350 ssh2
Sep 15 22:18:04 aat-srv002 sshd[1712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.174.139
...
2019-09-16 13:04:00
89.22.251.224 attack
proto=tcp  .  spt=48416  .  dpt=25  .     (listed on Blocklist de  Sep 15)     (37)
2019-09-16 12:52:15
157.245.42.171 attackspambots
Sep 16 01:14:01 nextcloud sshd\[6673\]: Invalid user dev from 157.245.42.171
Sep 16 01:14:01 nextcloud sshd\[6673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.42.171
Sep 16 01:14:02 nextcloud sshd\[6673\]: Failed password for invalid user dev from 157.245.42.171 port 55994 ssh2
...
2019-09-16 13:28:34
121.162.131.223 attackbotsspam
[ssh] SSH attack
2019-09-16 13:03:33
191.243.143.170 attackspambots
Sep 15 22:44:15 plusreed sshd[30106]: Invalid user hdduser from 191.243.143.170
...
2019-09-16 13:39:39
51.38.57.78 attack
Sep 15 18:38:49 tdfoods sshd\[16153\]: Invalid user fork from 51.38.57.78
Sep 15 18:38:49 tdfoods sshd\[16153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3118043.ip-51-38-57.eu
Sep 15 18:38:52 tdfoods sshd\[16153\]: Failed password for invalid user fork from 51.38.57.78 port 54592 ssh2
Sep 15 18:42:30 tdfoods sshd\[16592\]: Invalid user john from 51.38.57.78
Sep 15 18:42:30 tdfoods sshd\[16592\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3118043.ip-51-38-57.eu
2019-09-16 12:54:31
62.210.5.9 attackbotsspam
Sep 16 06:29:54 ArkNodeAT sshd\[10109\]: Invalid user cxh from 62.210.5.9
Sep 16 06:29:54 ArkNodeAT sshd\[10109\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.210.5.9
Sep 16 06:29:56 ArkNodeAT sshd\[10109\]: Failed password for invalid user cxh from 62.210.5.9 port 40148 ssh2
2019-09-16 13:52:35
190.145.9.67 attackbots
Automatic report - Port Scan Attack
2019-09-16 13:26:43
163.172.39.160 attack
Sep 16 01:15:24 vtv3 sshd\[20990\]: Invalid user labor from 163.172.39.160 port 51380
Sep 16 01:15:24 vtv3 sshd\[20990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.39.160
Sep 16 01:15:26 vtv3 sshd\[20990\]: Failed password for invalid user labor from 163.172.39.160 port 51380 ssh2
Sep 16 01:23:45 vtv3 sshd\[24787\]: Invalid user changeme from 163.172.39.160 port 40096
Sep 16 01:23:45 vtv3 sshd\[24787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.39.160
Sep 16 01:36:52 vtv3 sshd\[31699\]: Invalid user warlock from 163.172.39.160 port 52370
Sep 16 01:36:52 vtv3 sshd\[31699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.39.160
Sep 16 01:36:54 vtv3 sshd\[31699\]: Failed password for invalid user warlock from 163.172.39.160 port 52370 ssh2
Sep 16 01:41:16 vtv3 sshd\[1480\]: Invalid user debian from 163.172.39.160 port 37638
Sep 16 01:41:16 vtv3 sshd
2019-09-16 12:48:23
141.255.79.230 attackspambots
Telnet Server BruteForce Attack
2019-09-16 13:16:50
130.61.121.105 attack
Sep 16 07:02:49 MK-Soft-Root1 sshd\[18796\]: Invalid user telegraf from 130.61.121.105 port 11562
Sep 16 07:02:49 MK-Soft-Root1 sshd\[18796\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.121.105
Sep 16 07:02:51 MK-Soft-Root1 sshd\[18796\]: Failed password for invalid user telegraf from 130.61.121.105 port 11562 ssh2
...
2019-09-16 13:22:42

最近上报的IP列表

225.178.4.65 63.44.236.112 27.62.138.32 235.75.55.17
171.1.233.225 86.246.181.94 157.122.38.177 184.77.16.100
230.216.49.248 242.117.255.229 80.120.72.186 125.224.106.125
97.31.68.190 231.61.124.44 159.228.251.204 12.132.32.209
114.119.133.66 98.73.101.60 37.183.74.61 49.232.140.146