必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Poland

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 193.242.138.241
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43617
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;193.242.138.241.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020302 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 11:18:56 CST 2025
;; MSG SIZE  rcvd: 108
HOST信息:
Host 241.138.242.193.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 241.138.242.193.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
92.119.160.143 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-11 00:47:19
94.233.65.130 attackbotsspam
Nov 10 15:31:46 h2022099 sshd[1880]: reveeclipse mapping checking getaddrinfo for dsl-94-233-65-130.avtlg.ru [94.233.65.130] failed - POSSIBLE BREAK-IN ATTEMPT!
Nov 10 15:31:46 h2022099 sshd[1880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.233.65.130  user=r.r
Nov 10 15:31:48 h2022099 sshd[1880]: Failed password for r.r from 94.233.65.130 port 50315 ssh2
Nov 10 15:31:56 h2022099 sshd[1880]: Failed password for r.r from 94.233.65.130 port 50315 ssh2
Nov 10 15:31:57 h2022099 sshd[1880]: Failed password for r.r from 94.233.65.130 port 50315 ssh2
Nov 10 15:31:57 h2022099 sshd[1880]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.233.65.130  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=94.233.65.130
2019-11-11 00:08:07
45.8.228.187 attackspam
Nov 10 17:12:28 mc1 kernel: \[4688633.029993\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.8.228.187 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=53117 PROTO=TCP SPT=42077 DPT=3387 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov 10 17:17:53 mc1 kernel: \[4688958.762172\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.8.228.187 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=34264 PROTO=TCP SPT=42077 DPT=13388 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov 10 17:21:31 mc1 kernel: \[4689176.905799\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.8.228.187 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=42691 PROTO=TCP SPT=42077 DPT=3388 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-11-11 00:35:08
170.130.187.14 attackbotsspam
170.130.187.14 was recorded 5 times by 4 hosts attempting to connect to the following ports: 1433,161,5432. Incident counter (4h, 24h, all-time): 5, 6, 44
2019-11-11 00:40:23
112.94.161.141 attack
Nov  8 00:02:27 host sshd[17073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.94.161.141  user=r.r
Nov  8 00:02:29 host sshd[17073]: Failed password for r.r from 112.94.161.141 port 49484 ssh2
Nov  8 00:02:29 host sshd[17073]: Received disconnect from 112.94.161.141: 11: Bye Bye [preauth]
Nov  8 00:17:03 host sshd[31681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.94.161.141  user=r.r
Nov  8 00:17:06 host sshd[31681]: Failed password for r.r from 112.94.161.141 port 60558 ssh2
Nov  8 00:17:06 host sshd[31681]: Received disconnect from 112.94.161.141: 11: Bye Bye [preauth]
Nov  8 00:21:13 host sshd[12097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.94.161.141  user=r.r
Nov  8 00:21:15 host sshd[12097]: Failed password for r.r from 112.94.161.141 port 38696 ssh2
Nov  8 00:21:16 host sshd[12097]: Received disconnect from 112.94.1........
-------------------------------
2019-11-11 00:24:54
5.196.72.11 attackspam
Nov  7 23:34:15 dax sshd[25155]: Failed password for r.r from 5.196.72.11 port 40264 ssh2
Nov  7 23:34:15 dax sshd[25155]: Received disconnect from 5.196.72.11: 11: Bye Bye [preauth]
Nov  7 23:56:56 dax sshd[28418]: Invalid user arbgirl_phpbb1 from 5.196.72.11
Nov  7 23:56:58 dax sshd[28418]: Failed password for invalid user arbgirl_phpbb1 from 5.196.72.11 port 38110 ssh2
Nov  7 23:56:58 dax sshd[28418]: Received disconnect from 5.196.72.11: 11: Bye Bye [preauth]
Nov  8 00:01:26 dax sshd[29093]: Failed password for r.r from 5.196.72.11 port 50368 ssh2
Nov  8 00:01:26 dax sshd[29093]: Received disconnect from 5.196.72.11: 11: Bye Bye [preauth]
Nov  8 00:05:46 dax sshd[29750]: Invalid user web from 5.196.72.11
Nov  8 00:05:48 dax sshd[29750]: Failed password for invalid user web from 5.196.72.11 port 34348 ssh2
Nov  8 00:05:48 dax sshd[29750]: Received disconnect from 5.196.72.11: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=5.196.72.1
2019-11-11 00:19:06
79.137.28.187 attack
/var/log/messages:Nov  7 04:05:00 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1573099500.744:150531): pid=18448 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=18449 suid=74 rport=59984 laddr=104.167.106.93 lport=23  exe="/usr/sbin/sshd" hostname=? addr=79.137.28.187 terminal=? res=success'
/var/log/messages:Nov  7 04:05:00 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1573099500.749:150532): pid=18448 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=18449 suid=74 rport=59984 laddr=104.167.106.93 lport=23  exe="/usr/sbin/sshd" hostname=? addr=79.137.28.187 terminal=? res=success'
/var/log/messages:Nov  7 04:05:01 sanyalnet-cloud-vps fail2ban.filter[1538]: WARNING Determi........
-------------------------------
2019-11-11 00:30:56
67.85.105.1 attackspambots
Nov 10 21:36:30 vibhu-HP-Z238-Microtower-Workstation sshd\[27899\]: Invalid user tkayano from 67.85.105.1
Nov 10 21:36:30 vibhu-HP-Z238-Microtower-Workstation sshd\[27899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.85.105.1
Nov 10 21:36:33 vibhu-HP-Z238-Microtower-Workstation sshd\[27899\]: Failed password for invalid user tkayano from 67.85.105.1 port 41632 ssh2
Nov 10 21:40:14 vibhu-HP-Z238-Microtower-Workstation sshd\[28224\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.85.105.1  user=root
Nov 10 21:40:17 vibhu-HP-Z238-Microtower-Workstation sshd\[28224\]: Failed password for root from 67.85.105.1 port 50742 ssh2
...
2019-11-11 00:29:41
122.51.85.199 attack
$f2bV_matches
2019-11-11 00:20:26
192.3.135.166 attackspambots
Nov 10 17:22:08 markkoudstaal sshd[27531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.135.166
Nov 10 17:22:10 markkoudstaal sshd[27531]: Failed password for invalid user ireneusz from 192.3.135.166 port 52788 ssh2
Nov 10 17:26:14 markkoudstaal sshd[27858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.135.166
2019-11-11 00:32:19
106.53.19.186 attackspambots
Nov 10 06:02:34 php1 sshd\[7432\]: Invalid user saini from 106.53.19.186
Nov 10 06:02:34 php1 sshd\[7432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.19.186
Nov 10 06:02:36 php1 sshd\[7432\]: Failed password for invalid user saini from 106.53.19.186 port 36934 ssh2
Nov 10 06:06:26 php1 sshd\[7961\]: Invalid user netdump from 106.53.19.186
Nov 10 06:06:26 php1 sshd\[7961\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.19.186
2019-11-11 00:12:59
81.169.196.165 attack
2019-11-10T13:10:09.864157mizuno.rwx.ovh sshd[3477816]: Connection from 81.169.196.165 port 58121 on 78.46.61.178 port 22 rdomain ""
2019-11-10T13:10:11.676123mizuno.rwx.ovh sshd[3477816]: Invalid user btest1 from 81.169.196.165 port 58121
2019-11-10T13:10:11.683710mizuno.rwx.ovh sshd[3477816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.169.196.165
2019-11-10T13:10:09.864157mizuno.rwx.ovh sshd[3477816]: Connection from 81.169.196.165 port 58121 on 78.46.61.178 port 22 rdomain ""
2019-11-10T13:10:11.676123mizuno.rwx.ovh sshd[3477816]: Invalid user btest1 from 81.169.196.165 port 58121
2019-11-10T13:10:13.492519mizuno.rwx.ovh sshd[3477816]: Failed password for invalid user btest1 from 81.169.196.165 port 58121 ssh2
...
2019-11-11 00:33:06
211.78.92.73 attack
Automatic report - XMLRPC Attack
2019-11-11 00:39:39
188.131.169.24 attackspambots
Nov 10 17:22:06 mail sshd[19022]: Failed password for root from 188.131.169.24 port 40084 ssh2
Nov 10 17:22:28 mail sshd[19190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.169.24 
Nov 10 17:22:31 mail sshd[19190]: Failed password for invalid user admin from 188.131.169.24 port 41720 ssh2
2019-11-11 00:27:01
173.212.202.169 attackspam
Lines containing failures of 173.212.202.169 (max 1000)
Nov  9 00:57:09 Server sshd[6800]: Did not receive identification string from 173.212.202.169 port 37324
Nov  9 01:00:50 Server sshd[6805]: User r.r from 173.212.202.169 not allowed because not listed in AllowUsers
Nov  9 01:00:50 Server sshd[6805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.212.202.169  user=r.r
Nov  9 01:00:50 Server sshd[6803]: User r.r from 173.212.202.169 not allowed because not listed in AllowUsers
Nov  9 01:00:50 Server sshd[6803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.212.202.169  user=r.r
Nov  9 01:00:50 Server sshd[6814]: Invalid user jira from 173.212.202.169 port 42930
Nov  9 01:00:50 Server sshd[6809]: Invalid user test from 173.212.202.169 port 41166
Nov  9 01:00:50 Server sshd[6807]: User r.r from 173.212.202.169 not allowed because not listed in AllowUsers
Nov  9 01:00:50 Server ssh........
------------------------------
2019-11-11 00:29:27

最近上报的IP列表

21.111.28.152 190.185.23.227 164.148.39.59 162.52.218.15
22.43.216.118 53.126.178.66 101.102.57.137 141.11.199.81
150.168.38.90 244.124.64.90 175.248.25.78 167.14.66.108
199.154.0.223 214.76.115.59 63.5.103.25 100.255.68.16
132.140.246.111 220.180.64.19 232.198.193.90 232.213.169.195