必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Rio Grande da Serra

省份(region): Sao Paulo

国家(country): Brazil

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 189.56.54.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29782
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;189.56.54.3.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025031303 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 14 13:25:36 CST 2025
;; MSG SIZE  rcvd: 104
HOST信息:
3.54.56.189.in-addr.arpa domain name pointer 189-56-54-3.customer.tdatabrasil.net.br.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
3.54.56.189.in-addr.arpa	name = 189-56-54-3.customer.tdatabrasil.net.br.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
181.65.252.10 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-10-05 13:10:58
188.94.32.51 attackspam
1601844053 - 10/04/2020 22:40:53 Host: 188.94.32.51/188.94.32.51 Port: 445 TCP Blocked
...
2020-10-05 13:20:08
46.172.222.39 attackspambots
445/tcp
[2020-10-04]1pkt
2020-10-05 13:07:26
192.255.199.227 attackspam
Registration form abuse
2020-10-05 13:08:16
220.186.132.200 attack
Failed password for invalid user root from 220.186.132.200 port 60982 ssh2
2020-10-05 13:21:52
79.166.208.25 attackbotsspam
79.166.208.25 - - [04/Oct/2020:22:37:00 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
79.166.208.25 - - [04/Oct/2020:22:37:02 +0100] "POST /wp-login.php HTTP/1.1" 200 10519 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
79.166.208.25 - - [04/Oct/2020:22:43:12 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
...
2020-10-05 12:51:26
211.194.25.91 attackbotsspam
8083/udp 5353/udp
[2020-10-02]2pkt
2020-10-05 13:02:39
45.143.221.135 attack
2020-10-04 12:20:16,578 fail2ban.actions        [28350]: NOTICE  [phone] Unban 45.143.221.135
2020-10-04 22:19:37,687 fail2ban.actions        [1205]: NOTICE  [phone] Unban 45.143.221.135
...
2020-10-05 12:53:20
52.225.231.169 attack
ygcve.fxua.edu; zoomof.de
2020-10-05 13:23:23
151.236.59.142 attack
2020-10-04T01:05:20.422209morrigan.ad5gb.com sshd[829083]: Failed password for invalid user nisec from 151.236.59.142 port 59398 ssh2
2020-10-05 13:23:55
107.204.217.126 attackbots
Lines containing failures of 107.204.217.126 (max 1000)
Oct  4 22:38:48 server sshd[24860]: Connection from 107.204.217.126 port 57354 on 62.116.165.82 port 22
Oct  4 22:38:48 server sshd[24860]: Did not receive identification string from 107.204.217.126 port 57354
Oct  4 22:38:51 server sshd[24863]: Connection from 107.204.217.126 port 57811 on 62.116.165.82 port 22
Oct  4 22:38:54 server sshd[24863]: Invalid user service from 107.204.217.126 port 57811
Oct  4 22:38:54 server sshd[24863]: Connection closed by 107.204.217.126 port 57811 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=107.204.217.126
2020-10-05 13:18:07
91.34.69.27 attack
Oct  4 22:34:51 pl3server sshd[3300]: Invalid user pi from 91.34.69.27 port 41862
Oct  4 22:34:51 pl3server sshd[3301]: Invalid user pi from 91.34.69.27 port 41864
Oct  4 22:34:51 pl3server sshd[3300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.34.69.27
Oct  4 22:34:51 pl3server sshd[3301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.34.69.27
Oct  4 22:34:53 pl3server sshd[3300]: Failed password for invalid user pi from 91.34.69.27 port 41862 ssh2
Oct  4 22:34:53 pl3server sshd[3301]: Failed password for invalid user pi from 91.34.69.27 port 41864 ssh2
Oct  4 22:34:53 pl3server sshd[3300]: Connection closed by 91.34.69.27 port 41862 [preauth]
Oct  4 22:34:53 pl3server sshd[3301]: Connection closed by 91.34.69.27 port 41864 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=91.34.69.27
2020-10-05 13:02:13
222.186.30.112 attackspam
Oct  5 01:27:42 vm0 sshd[25613]: Failed password for root from 222.186.30.112 port 64935 ssh2
Oct  5 07:14:14 vm0 sshd[29392]: Failed password for root from 222.186.30.112 port 52191 ssh2
...
2020-10-05 13:19:38
202.137.142.159 attackspambots
52869/tcp 52869/tcp 52869/tcp
[2020-10-02/03]3pkt
2020-10-05 12:59:32
35.153.140.226 attackbotsspam
Oct  4 22:16:34 CT721 sshd[31937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.153.140.226  user=r.r
Oct  4 22:16:35 CT721 sshd[31937]: Failed password for r.r from 35.153.140.226 port 42934 ssh2
Oct  4 22:16:35 CT721 sshd[31937]: Received disconnect from 35.153.140.226 port 42934:11: Bye Bye [preauth]
Oct  4 22:16:35 CT721 sshd[31937]: Disconnected from 35.153.140.226 port 42934 [preauth]
Oct  4 22:30:02 CT721 sshd[32159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.153.140.226  user=r.r
Oct  4 22:30:04 CT721 sshd[32159]: Failed password for r.r from 35.153.140.226 port 43942 ssh2
Oct  4 22:30:04 CT721 sshd[32159]: Received disconnect from 35.153.140.226 port 43942:11: Bye Bye [preauth]
Oct  4 22:30:04 CT721 sshd[32159]: Disconnected from 35.153.140.226 port 43942 [preauth]
Oct  4 22:34:30 CT721 sshd[32238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tt........
-------------------------------
2020-10-05 13:14:31

最近上报的IP列表

60.199.4.92 61.171.120.157 156.184.183.92 204.175.36.251
42.3.205.132 128.93.161.48 247.182.77.228 157.160.167.57
100.254.138.38 195.87.191.168 229.149.103.52 220.173.208.236
143.180.212.82 124.72.190.35 91.161.89.3 89.144.124.187
103.160.172.203 147.43.166.30 177.164.31.239 169.146.107.209