必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 188.96.149.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53051
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;188.96.149.139.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012201 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 02:24:59 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
139.149.96.188.in-addr.arpa domain name pointer dslb-188-096-149-139.188.096.pools.vodafone-ip.de.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
139.149.96.188.in-addr.arpa	name = dslb-188-096-149-139.188.096.pools.vodafone-ip.de.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
178.62.107.141 attackbotsspam
Mar 20 19:08:54 legacy sshd[26519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.107.141
Mar 20 19:08:56 legacy sshd[26519]: Failed password for invalid user cosette from 178.62.107.141 port 52457 ssh2
Mar 20 19:13:05 legacy sshd[26617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.107.141
...
2020-03-21 02:15:01
109.61.2.166 attackspam
Sent mail to address hacked/leaked from Dailymotion
2020-03-21 02:15:57
61.28.108.122 attack
Mar 20 18:26:42 vps691689 sshd[12152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.28.108.122
Mar 20 18:26:44 vps691689 sshd[12152]: Failed password for invalid user bds from 61.28.108.122 port 3870 ssh2
Mar 20 18:32:30 vps691689 sshd[12303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.28.108.122
...
2020-03-21 02:26:45
103.80.55.19 attack
$f2bV_matches
2020-03-21 02:23:31
222.186.173.201 attack
Mar2019:21:14server6sshd[9160]:refusedconnectfrom222.186.173.201\(222.186.173.201\)Mar2019:21:14server6sshd[9161]:refusedconnectfrom222.186.173.201\(222.186.173.201\)Mar2019:21:14server6sshd[9162]:refusedconnectfrom222.186.173.201\(222.186.173.201\)Mar2019:50:37server6sshd[13390]:refusedconnectfrom222.186.173.201\(222.186.173.201\)Mar2019:50:37server6sshd[13391]:refusedconnectfrom222.186.173.201\(222.186.173.201\)
2020-03-21 02:52:12
125.165.19.147 attack
1584709754 - 03/20/2020 14:09:14 Host: 125.165.19.147/125.165.19.147 Port: 445 TCP Blocked
2020-03-21 02:32:42
222.186.175.167 attack
Mar 20 20:20:49 ift sshd\[9769\]: Failed password for root from 222.186.175.167 port 54912 ssh2Mar 20 20:20:52 ift sshd\[9769\]: Failed password for root from 222.186.175.167 port 54912 ssh2Mar 20 20:20:55 ift sshd\[9769\]: Failed password for root from 222.186.175.167 port 54912 ssh2Mar 20 20:21:08 ift sshd\[9810\]: Failed password for root from 222.186.175.167 port 9402 ssh2Mar 20 20:21:12 ift sshd\[9810\]: Failed password for root from 222.186.175.167 port 9402 ssh2
...
2020-03-21 02:21:36
141.8.132.35 attack
[Fri Mar 20 23:06:01.210367 2020] [:error] [pid 2262:tid 140147611977472] [client 141.8.132.35:61631] [client 141.8.132.35] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XnTp6aAlAPii2bELv6MmFgAAAcI"]
...
2020-03-21 02:55:02
185.39.10.54 attackspam
Port scan on 5 port(s): 41181 41191 41197 58684 58696
2020-03-21 02:55:41
141.8.132.24 attackbots
[Fri Mar 20 20:09:17.192662 2020] [:error] [pid 15887:tid 139661176485632] [client 141.8.132.24:65023] [client 141.8.132.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XnTAfXEhhvTdM6dYCcoxwgAAAcQ"]
...
2020-03-21 02:30:38
128.199.254.23 attackbots
128.199.254.23 - - [20/Mar/2020:16:39:42 +0100] "GET /wp-login.php HTTP/1.1" 200 6463 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
128.199.254.23 - - [20/Mar/2020:16:39:44 +0100] "POST /wp-login.php HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
128.199.254.23 - - [20/Mar/2020:16:39:47 +0100] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-03-21 02:29:47
49.247.207.56 attackspam
Mar 20 18:26:04 marvibiene sshd[63524]: Invalid user factorio from 49.247.207.56 port 57206
Mar 20 18:26:04 marvibiene sshd[63524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.247.207.56
Mar 20 18:26:04 marvibiene sshd[63524]: Invalid user factorio from 49.247.207.56 port 57206
Mar 20 18:26:06 marvibiene sshd[63524]: Failed password for invalid user factorio from 49.247.207.56 port 57206 ssh2
...
2020-03-21 02:47:40
182.61.109.105 attack
SIP/5060 Probe, BF, Hack -
2020-03-21 02:15:29
1.213.195.155 attack
Mar 20 10:45:11 plusreed sshd[29906]: Invalid user solaris from 1.213.195.155
...
2020-03-21 02:32:25
109.123.117.241 attack
Portscan or hack attempt detected by psad/fwsnort
2020-03-21 02:20:27

最近上报的IP列表

162.114.52.221 178.150.140.240 52.60.251.220 228.179.15.55
62.64.45.110 171.43.87.14 52.21.203.224 224.82.51.255
21.94.69.184 4.121.231.26 241.112.5.31 249.6.14.11
6.202.220.21 23.89.27.3 173.120.86.207 108.85.10.1
124.239.4.167 31.61.135.229 201.205.110.132 47.101.94.13