必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Porvoo

省份(region): Uusimaa [Finnish] / Nyland [Swedish]

国家(country): Finland

运营商(isp): Telia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 194.197.149.240
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60070
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;194.197.149.240.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400

;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 15:01:33 CST 2025
;; MSG SIZE  rcvd: 108
HOST信息:
Host 240.149.197.194.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 240.149.197.194.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
81.22.45.116 attackspambots
2019-11-03T06:54:44.218395+01:00 lumpi kernel: [2582872.231483] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.116 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=62348 PROTO=TCP SPT=47923 DPT=43906 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-11-03 14:56:07
198.108.67.133 attack
5984/tcp 591/tcp 8088/tcp...
[2019-10-02/11-03]135pkt,37pt.(tcp)
2019-11-03 15:11:02
179.104.239.120 attackspambots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/179.104.239.120/ 
 
 BR - 1H : (335)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : BR 
 NAME ASN : ASN53006 
 
 IP : 179.104.239.120 
 
 CIDR : 179.104.0.0/16 
 
 PREFIX COUNT : 15 
 
 UNIQUE IP COUNT : 599808 
 
 
 ATTACKS DETECTED ASN53006 :  
  1H - 1 
  3H - 1 
  6H - 2 
 12H - 3 
 24H - 13 
 
 DateTime : 2019-11-03 06:54:46 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-03 14:51:22
185.234.216.20 attackbots
191103  7:27:18 \[Warning\] Access denied for user 'root'@'185.234.216.20' \(using password: YES\)
191103  7:27:18 \[Warning\] Access denied for user 'server'@'185.234.216.20' \(using password: YES\)
191103  7:27:18 \[Warning\] Access denied for user 'mysqld'@'185.234.216.20' \(using password: YES\)
191103  7:27:18 \[Warning\] Access denied for user 'admina'@'185.234.216.20' \(using password: YES\)
191103  7:27:18 \[Warning\] Access denied for user 'websrvc'@'185.234.216.20' \(using password: YES\)
191103  7:27:19 \[Warning\] Access denied for user 'root'@'185.234.216.20' \(using password: YES\)
191103  7:27:19 \[Warning\] Access denied for user 'root'@'185.234.216.20' \(using password: YES\)
191103  7:27:19 \[Warning\] Access denied for user 'admin'@'185.234.216.20' \(using password: YES\)
...
2019-11-03 14:22:17
125.212.217.214 attackbots
Connection by 125.212.217.214 on port: 4445 got caught by honeypot at 11/3/2019 4:54:45 AM
2019-11-03 14:55:40
110.45.155.101 attackspambots
Nov  3 06:40:01 vtv3 sshd\[17474\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.45.155.101  user=root
Nov  3 06:40:04 vtv3 sshd\[17474\]: Failed password for root from 110.45.155.101 port 57836 ssh2
Nov  3 06:44:19 vtv3 sshd\[19649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.45.155.101  user=root
Nov  3 06:44:21 vtv3 sshd\[19649\]: Failed password for root from 110.45.155.101 port 40154 ssh2
Nov  3 06:48:41 vtv3 sshd\[21788\]: Invalid user ubnt from 110.45.155.101 port 50714
Nov  3 06:48:41 vtv3 sshd\[21788\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.45.155.101
Nov  3 07:01:26 vtv3 sshd\[28049\]: Invalid user ctupu from 110.45.155.101 port 54190
Nov  3 07:01:26 vtv3 sshd\[28049\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.45.155.101
Nov  3 07:01:28 vtv3 sshd\[28049\]: Failed password for invalid user
2019-11-03 14:48:07
138.197.98.251 attackspambots
Nov  3 07:46:37 server sshd\[15140\]: User root from 138.197.98.251 not allowed because listed in DenyUsers
Nov  3 07:46:38 server sshd\[15140\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.98.251  user=root
Nov  3 07:46:40 server sshd\[15140\]: Failed password for invalid user root from 138.197.98.251 port 40060 ssh2
Nov  3 07:50:17 server sshd\[5302\]: Invalid user 12345 from 138.197.98.251 port 49924
Nov  3 07:50:17 server sshd\[5302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.98.251
2019-11-03 14:23:56
118.160.93.122 attackbots
Lines containing failures of 118.160.93.122
Nov  3 06:25:07 shared10 postfix/smtpd[9161]: connect from 118-160-93-122.dynamic-ip.hinet.net[118.160.93.122]
Nov  3 06:25:08 shared10 policyd-spf[16056]: prepend Received-SPF: None (mailfrom) identhostnamey=mailfrom; client-ip=118.160.93.122; helo=118-160-93-122.dynamic-ip.hinet.net; envelope-from=x@x
Nov x@x
Nov  3 06:25:08 shared10 postfix/smtpd[9161]: lost connection after DATA from 118-160-93-122.dynamic-ip.hinet.net[118.160.93.122]
Nov  3 06:25:08 shared10 postfix/smtpd[9161]: disconnect from 118-160-93-122.dynamic-ip.hinet.net[118.160.93.122] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=118.160.93.122
2019-11-03 14:57:07
188.166.108.161 attack
Nov  2 19:40:40 web9 sshd\[21794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.108.161  user=root
Nov  2 19:40:42 web9 sshd\[21794\]: Failed password for root from 188.166.108.161 port 43712 ssh2
Nov  2 19:44:37 web9 sshd\[22412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.108.161  user=root
Nov  2 19:44:39 web9 sshd\[22412\]: Failed password for root from 188.166.108.161 port 55860 ssh2
Nov  2 19:48:39 web9 sshd\[23015\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.108.161  user=root
2019-11-03 14:20:57
81.164.144.125 attack
(ftpd) Failed FTP login from 81.164.144.125 (BE/Belgium/d51A4907D.access.telenet.be): 10 in the last 3600 secs
2019-11-03 15:02:59
185.153.197.116 attackspam
3389BruteforceFW21
2019-11-03 15:01:54
222.186.180.9 attackspam
Nov  3 06:54:53 nextcloud sshd\[7289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.9  user=root
Nov  3 06:54:55 nextcloud sshd\[7289\]: Failed password for root from 222.186.180.9 port 52514 ssh2
Nov  3 06:55:00 nextcloud sshd\[7289\]: Failed password for root from 222.186.180.9 port 52514 ssh2
...
2019-11-03 14:41:31
217.113.28.5 attackbotsspam
Nov  2 19:50:25 php1 sshd\[14777\]: Invalid user 12345 from 217.113.28.5
Nov  2 19:50:25 php1 sshd\[14777\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.113.28.5
Nov  2 19:50:27 php1 sshd\[14777\]: Failed password for invalid user 12345 from 217.113.28.5 port 41773 ssh2
Nov  2 19:54:48 php1 sshd\[15626\]: Invalid user sjen123 from 217.113.28.5
Nov  2 19:54:48 php1 sshd\[15626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.113.28.5
2019-11-03 14:50:36
185.175.93.21 attackbots
11/03/2019-01:54:42.974565 185.175.93.21 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-11-03 15:04:44
125.130.110.20 attack
2019-11-03T05:24:42.851274hub.schaetter.us sshd\[30181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.130.110.20  user=root
2019-11-03T05:24:44.669313hub.schaetter.us sshd\[30181\]: Failed password for root from 125.130.110.20 port 34858 ssh2
2019-11-03T05:28:43.450141hub.schaetter.us sshd\[30189\]: Invalid user sonny from 125.130.110.20 port 49780
2019-11-03T05:28:43.459584hub.schaetter.us sshd\[30189\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.130.110.20
2019-11-03T05:28:46.030186hub.schaetter.us sshd\[30189\]: Failed password for invalid user sonny from 125.130.110.20 port 49780 ssh2
...
2019-11-03 14:22:49

最近上报的IP列表

218.170.190.196 210.97.179.98 203.242.210.107 213.199.126.247
122.238.111.229 228.244.96.225 9.179.144.101 89.195.154.244
174.58.135.14 39.73.160.84 196.134.40.229 184.170.198.219
34.96.127.16 161.59.217.34 84.195.64.66 203.157.237.40
201.12.96.36 71.122.152.36 126.15.55.151 227.105.171.128