必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Amsterdam

省份(region): Noord Holland

国家(country): The Netherlands

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 193.34.49.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55613
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;193.34.49.249.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021902 1800 900 604800 86400

;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 09:07:35 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 249.49.34.193.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 249.49.34.193.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
123.31.45.35 attack
Jun  4 14:04:06 xeon sshd[38867]: Failed password for root from 123.31.45.35 port 24042 ssh2
2020-06-04 20:15:37
114.141.132.88 attackspambots
Jun  4 14:01:03 vps687878 sshd\[22142\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.141.132.88  user=root
Jun  4 14:01:05 vps687878 sshd\[22142\]: Failed password for root from 114.141.132.88 port 10196 ssh2
Jun  4 14:05:13 vps687878 sshd\[22389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.141.132.88  user=root
Jun  4 14:05:15 vps687878 sshd\[22389\]: Failed password for root from 114.141.132.88 port 10198 ssh2
Jun  4 14:09:15 vps687878 sshd\[22926\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.141.132.88  user=root
...
2020-06-04 20:24:13
14.207.17.172 attack
1591258217 - 06/04/2020 10:10:17 Host: 14.207.17.172/14.207.17.172 Port: 445 TCP Blocked
2020-06-04 20:02:41
40.76.40.117 attackspam
40.76.40.117 - - \[04/Jun/2020:14:09:59 +0200\] "POST //wp-login.php HTTP/1.0" 200 6848 "https://die-netzialisten.de//wp-login.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/78.0.3904.108 Safari/537.36"
40.76.40.117 - - \[04/Jun/2020:14:10:00 +0200\] "POST //wp-login.php HTTP/1.0" 200 6848 "https://die-netzialisten.de//wp-login.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/78.0.3904.108 Safari/537.36"
40.76.40.117 - - \[04/Jun/2020:14:10:01 +0200\] "POST //wp-login.php HTTP/1.0" 200 6848 "https://die-netzialisten.de//wp-login.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/78.0.3904.108 Safari/537.36"
2020-06-04 20:12:41
161.35.111.201 attack
[H1.VM7] Blocked by UFW
2020-06-04 19:57:08
188.170.249.203 attackspam
Unauthorized connection attempt from IP address 188.170.249.203 on Port 445(SMB)
2020-06-04 19:50:26
185.46.213.93 attackbots
Unauthorized connection attempt from IP address 185.46.213.93 on Port 445(SMB)
2020-06-04 19:46:44
200.7.126.189 attack
Unauthorized connection attempt from IP address 200.7.126.189 on Port 445(SMB)
2020-06-04 19:56:22
14.242.3.203 attackbots
Lines containing failures of 14.242.3.203 (max 1000)
Jun  1 12:33:54 UTC__SANYALnet-Labs__cac12 sshd[26991]: Connection from 14.242.3.203 port 55659 on 64.137.176.96 port 22
Jun  1 12:33:58 UTC__SANYALnet-Labs__cac12 sshd[26991]: Address 14.242.3.203 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jun  1 12:33:58 UTC__SANYALnet-Labs__cac12 sshd[26991]: User r.r from 14.242.3.203 not allowed because not listed in AllowUsers
Jun  1 12:33:58 UTC__SANYALnet-Labs__cac12 sshd[26991]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.242.3.203  user=r.r
Jun  1 12:34:00 UTC__SANYALnet-Labs__cac12 sshd[26991]: Failed password for invalid user r.r from 14.242.3.203 port 55659 ssh2
Jun  1 12:34:00 UTC__SANYALnet-Labs__cac12 sshd[26991]: Received disconnect from 14.242.3.203 port 55659:11: Bye Bye [preauth]
Jun  1 12:34:00 UTC__SANYALnet-Labs__cac12 sshd[26991]: Disconnected from 14.242.3.203 por........
------------------------------
2020-06-04 20:20:17
66.35.96.241 attackspambots
Brute forcing email accounts
2020-06-04 20:17:04
94.102.51.28 attackspam
Jun  4 13:37:15 debian-2gb-nbg1-2 kernel: \[13529393.614836\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.51.28 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=57168 PROTO=TCP SPT=51444 DPT=34233 WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-04 20:06:29
185.244.39.166 attack
Lines containing failures of 185.244.39.166
Jun  1 15:36:26 shared06 sshd[19177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.244.39.166  user=r.r
Jun  1 15:36:28 shared06 sshd[19177]: Failed password for r.r from 185.244.39.166 port 48714 ssh2
Jun  1 15:36:28 shared06 sshd[19177]: Received disconnect from 185.244.39.166 port 48714:11: Bye Bye [preauth]
Jun  1 15:36:28 shared06 sshd[19177]: Disconnected from authenticating user r.r 185.244.39.166 port 48714 [preauth]
Jun  1 15:40:44 shared06 sshd[20391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.244.39.166  user=r.r
Jun  1 15:40:46 shared06 sshd[20391]: Failed password for r.r from 185.244.39.166 port 35426 ssh2
Jun  1 15:40:46 shared06 sshd[20391]: Received disconnect from 185.244.39.166 port 35426:11: Bye Bye [preauth]
Jun  1 15:40:46 shared06 sshd[20391]: Disconnected from authenticating user r.r 185.244.39.166 port 35426........
------------------------------
2020-06-04 20:27:57
113.161.128.128 attackspambots
Unauthorized connection attempt from IP address 113.161.128.128 on Port 445(SMB)
2020-06-04 20:04:42
118.172.47.26 attackbotsspam
Unauthorized connection attempt from IP address 118.172.47.26 on Port 445(SMB)
2020-06-04 20:03:44
116.108.39.243 attackspambots
Unauthorized connection attempt from IP address 116.108.39.243 on Port 445(SMB)
2020-06-04 20:04:14

最近上报的IP列表

147.198.187.224 9.221.144.44 80.45.236.63 154.30.35.62
246.141.75.106 222.123.190.196 234.204.24.90 179.218.233.241
197.234.78.4 60.113.77.177 185.84.120.186 240.29.49.137
210.71.248.235 55.151.88.23 44.230.243.254 131.85.115.80
64.211.39.165 186.23.75.79 222.83.220.87 242.72.249.123