必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Chile

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 190.196.189.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62306
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;190.196.189.49.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400

;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 18:14:54 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
49.189.196.190.in-addr.arpa domain name pointer static.190.196.189.49.gtdinternet.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
49.189.196.190.in-addr.arpa	name = static.190.196.189.49.gtdinternet.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
112.6.231.114 attack
2020-06-02T15:01:29.454433mail.standpoint.com.ua sshd[24792]: Invalid user Administartaor\r from 112.6.231.114 port 35710
2020-06-02T15:01:29.456864mail.standpoint.com.ua sshd[24792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.6.231.114
2020-06-02T15:01:29.454433mail.standpoint.com.ua sshd[24792]: Invalid user Administartaor\r from 112.6.231.114 port 35710
2020-06-02T15:01:31.184414mail.standpoint.com.ua sshd[24792]: Failed password for invalid user Administartaor\r from 112.6.231.114 port 35710 ssh2
2020-06-02T15:05:18.130758mail.standpoint.com.ua sshd[25379]: Invalid user 2WSX from 112.6.231.114 port 29050
...
2020-06-02 23:42:00
45.180.150.34 attackbotsspam
2020-06-0214:05:161jg5fP-0004wi-HN\<=info@whatsup2013.chH=\(localhost\)[45.180.150.34]:38086P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3009id=8745580b002bfef2d59026758146ccc0f300f6ec@whatsup2013.chT="tojosuem3215"forjosuem3215@gmail.comwesleywatson80@gmail.comalbertguerrero3606@icloud.com2020-06-0214:05:421jg5fp-0004y6-5z\<=info@whatsup2013.chH=\(localhost\)[113.57.110.154]:37622P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2978id=0ecf9f7c775c897a59a7510209dde4486b81b1ada2@whatsup2013.chT="tomealplan45"formealplan45@gmail.comprandall4225@gmail.commarkarjohn@yahoo.com2020-06-0214:05:071jg5fG-0004vv-EK\<=info@whatsup2013.chH=\(localhost\)[113.177.134.57]:40881P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3042id=a67fdd494269bc4f6c9264373ce8d17d5eb4fe7757@whatsup2013.chT="tochillip37"forchillip37@gmail.comdiancamilobravogarzon@gmail.combgodbey81@gmail.com2020-06-0214:05:1
2020-06-02 23:24:22
191.232.191.78 attackspam
Jun  2 12:42:31 km20725 sshd[8701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.232.191.78  user=r.r
Jun  2 12:42:33 km20725 sshd[8701]: Failed password for r.r from 191.232.191.78 port 42128 ssh2
Jun  2 12:42:33 km20725 sshd[8701]: Received disconnect from 191.232.191.78 port 42128:11: Bye Bye [preauth]
Jun  2 12:42:33 km20725 sshd[8701]: Disconnected from authenticating user r.r 191.232.191.78 port 42128 [preauth]
Jun  2 12:47:15 km20725 sshd[8973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.232.191.78  user=r.r
Jun  2 12:47:17 km20725 sshd[8973]: Failed password for r.r from 191.232.191.78 port 38746 ssh2
Jun  2 12:47:18 km20725 sshd[8973]: Received disconnect from 191.232.191.78 port 38746:11: Bye Bye [preauth]
Jun  2 12:47:18 km20725 sshd[8973]: Disconnected from authenticating user r.r 191.232.191.78 port 38746 [preauth]
Jun  2 12:48:48 km20725 sshd[9043]: pam_unix(ssh........
-------------------------------
2020-06-02 23:36:00
132.255.116.14 attack
Unauthorised connection attempt detected at AUO FR1 NODE2. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-06-02 23:36:51
178.93.42.166 attackspambots
Lines containing failures of 178.93.42.166
Jun  2 12:34:27 shared03 postfix/smtpd[10623]: connect from 166-42-93-178.pool.ukrtel.net[178.93.42.166]
Jun  2 12:34:29 shared03 policyd-spf[10659]: prepend Received-SPF: Softfail (mailfrom) identhostnamey=mailfrom; client-ip=178.93.42.166; helo=mx1.hostinger.com; envelope-from=x@x
Jun x@x
Jun x@x
Jun  2 12:34:30 shared03 postfix/smtpd[10623]: lost connection after RCPT from 166-42-93-178.pool.ukrtel.net[178.93.42.166]
Jun  2 12:34:30 shared03 postfix/smtpd[10623]: disconnect from 166-42-93-178.pool.ukrtel.net[178.93.42.166] ehlo=1 mail=1 rcpt=0/2 commands=2/4
Jun  2 13:50:27 shared03 postfix/smtpd[22401]: connect from 166-42-93-178.pool.ukrtel.net[178.93.42.166]
Jun  2 13:50:29 shared03 policyd-spf[7410]: prepend Received-SPF: None (mailfrom) identhostnamey=mailfrom; client-ip=178.93.42.166; helo=111iu.com; envelope-from=x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.ht
2020-06-03 00:08:40
117.50.21.253 attack
Jun  2 16:16:21 [host] sshd[32404]: pam_unix(sshd:
Jun  2 16:16:23 [host] sshd[32404]: Failed passwor
Jun  2 16:18:36 [host] sshd[32473]: pam_unix(sshd:
2020-06-03 00:03:39
46.4.60.249 attackbotsspam
20 attempts against mh-misbehave-ban on pole
2020-06-02 23:33:59
2.136.122.123 attackspambots
DATE:2020-06-02 14:05:40, IP:2.136.122.123, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2020-06-02 23:27:08
159.65.219.210 attack
May 24 10:04:03 v2202003116398111542 sshd[32084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.219.210
2020-06-03 00:04:02
149.72.81.11 attackbotsspam
Jun  2 13:52:24 mail.srvfarm.net postfix/smtpd[1211325]: NOQUEUE: reject: RCPT from unknown[149.72.81.11]: 554 5.7.1 Service unavailable; Client host [149.72.81.11] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?149.72.81.11; from= to= proto=ESMTP helo=
Jun  2 13:52:24 mail.srvfarm.net postfix/smtpd[1211323]: NOQUEUE: reject: RCPT from unknown[149.72.81.11]: 554 5.7.1 Service unavailable; Client host [149.72.81.11] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?149.72.81.11; from= to= proto=ESMTP helo=
Jun  2 13:52:24 mail.srvfarm.net postfix/smtpd[1211325]: lost connection after RCPT from unknown[149.72.81.11]
Jun  2 13:52:24 mail.srvfarm.net postfix/smtpd[1211323]: lost connection after R
2020-06-02 23:40:52
37.252.188.130 attackbots
Jun  2 15:49:25 ns382633 sshd\[31815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.252.188.130  user=root
Jun  2 15:49:27 ns382633 sshd\[31815\]: Failed password for root from 37.252.188.130 port 43150 ssh2
Jun  2 15:54:17 ns382633 sshd\[32765\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.252.188.130  user=root
Jun  2 15:54:18 ns382633 sshd\[32765\]: Failed password for root from 37.252.188.130 port 50482 ssh2
Jun  2 15:58:52 ns382633 sshd\[1254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.252.188.130  user=root
2020-06-03 00:05:45
222.249.235.234 attackspam
2020-06-02T15:24:09.121363+02:00  sshd[11874]: Failed password for root from 222.249.235.234 port 58612 ssh2
2020-06-02 23:22:26
201.235.19.122 attackspambots
Jun  2 12:50:14 localhost sshd[45253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122-19-235-201.fibertel.com.ar  user=root
Jun  2 12:50:16 localhost sshd[45253]: Failed password for root from 201.235.19.122 port 37031 ssh2
Jun  2 12:54:48 localhost sshd[45802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122-19-235-201.fibertel.com.ar  user=root
Jun  2 12:54:50 localhost sshd[45802]: Failed password for root from 201.235.19.122 port 39534 ssh2
Jun  2 12:59:21 localhost sshd[46391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122-19-235-201.fibertel.com.ar  user=root
Jun  2 12:59:23 localhost sshd[46391]: Failed password for root from 201.235.19.122 port 42028 ssh2
...
2020-06-02 23:39:44
206.189.87.108 attackspam
Jun  2 06:02:10 dignus sshd[3627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.87.108  user=root
Jun  2 06:02:12 dignus sshd[3627]: Failed password for root from 206.189.87.108 port 38420 ssh2
Jun  2 06:05:55 dignus sshd[3951]: Invalid user tie from 206.189.87.108 port 36004
Jun  2 06:05:55 dignus sshd[3951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.87.108
Jun  2 06:05:57 dignus sshd[3951]: Failed password for invalid user tie from 206.189.87.108 port 36004 ssh2
...
2020-06-02 23:50:24
195.54.160.135 attackspambots
Blocked until: 2020.07.21 04:28:32 TCPMSS DPT=2375 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=24780 PROTO=TCP WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-03 00:04:19

最近上报的IP列表

42.132.240.201 157.181.199.143 6.14.30.117 168.199.70.223
74.33.19.132 216.157.60.239 89.237.46.48 103.7.20.29
135.202.60.207 146.10.57.30 95.217.177.222 22.183.187.30
188.208.212.48 68.188.135.176 131.19.34.189 9.65.180.211
43.47.225.127 246.59.167.81 159.74.80.222 212.135.193.52