必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): South Africa

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 198.54.34.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64738
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;198.54.34.31.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 03:14:01 CST 2025
;; MSG SIZE  rcvd: 105
HOST信息:
Host 31.34.54.198.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
server can't find 198.54.34.31.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
1.202.91.252 attack
Aug  1 16:10:43 debian sshd\[9443\]: Invalid user webhost from 1.202.91.252 port 14853
Aug  1 16:10:43 debian sshd\[9443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.202.91.252
...
2019-08-01 23:17:28
204.17.56.42 attack
Aug  1 15:25:32 SilenceServices sshd[21526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.17.56.42
Aug  1 15:25:34 SilenceServices sshd[21526]: Failed password for invalid user admin from 204.17.56.42 port 52434 ssh2
Aug  1 15:25:36 SilenceServices sshd[21526]: Failed password for invalid user admin from 204.17.56.42 port 52434 ssh2
2019-08-01 23:02:57
109.94.121.104 attackbotsspam
port scan and connect, tcp 80 (http)
2019-08-01 23:22:20
81.23.119.2 attackspambots
ssh failed login
2019-08-01 23:04:54
81.22.45.150 attackspam
Aug  1 16:47:50 h2177944 kernel: \[2994807.726073\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.150 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=50563 PROTO=TCP SPT=52686 DPT=9656 WINDOW=1024 RES=0x00 SYN URGP=0 
Aug  1 16:52:25 h2177944 kernel: \[2995082.551706\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.150 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=25705 PROTO=TCP SPT=52686 DPT=9447 WINDOW=1024 RES=0x00 SYN URGP=0 
Aug  1 16:55:11 h2177944 kernel: \[2995248.701147\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.150 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=54962 PROTO=TCP SPT=52686 DPT=9515 WINDOW=1024 RES=0x00 SYN URGP=0 
Aug  1 17:06:42 h2177944 kernel: \[2995939.482974\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.150 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=15233 PROTO=TCP SPT=52686 DPT=9575 WINDOW=1024 RES=0x00 SYN URGP=0 
Aug  1 17:12:28 h2177944 kernel: \[2996284.905544\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.150 DST=85.214.117.9 LEN=
2019-08-01 23:45:12
36.255.222.107 attackbotsspam
Aug  1 17:37:05 site3 sshd\[166410\]: Invalid user wnn from 36.255.222.107
Aug  1 17:37:05 site3 sshd\[166410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.255.222.107
Aug  1 17:37:07 site3 sshd\[166410\]: Failed password for invalid user wnn from 36.255.222.107 port 56630 ssh2
Aug  1 17:44:55 site3 sshd\[166581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.255.222.107  user=root
Aug  1 17:44:57 site3 sshd\[166581\]: Failed password for root from 36.255.222.107 port 57216 ssh2
...
2019-08-01 23:10:19
120.220.22.5 attack
Jul 30 10:47:16 shared09 sshd[20139]: Invalid user tino from 120.220.22.5
Jul 30 10:47:16 shared09 sshd[20139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.220.22.5
Jul 30 10:47:18 shared09 sshd[20139]: Failed password for invalid user tino from 120.220.22.5 port 38471 ssh2
Jul 30 10:47:18 shared09 sshd[20139]: Received disconnect from 120.220.22.5 port 38471:11: Bye Bye [preauth]
Jul 30 10:47:18 shared09 sshd[20139]: Disconnected from 120.220.22.5 port 38471 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=120.220.22.5
2019-08-01 23:48:32
77.247.181.162 attackbotsspam
[ssh] SSH attack
2019-08-01 23:24:23
23.96.235.27 attackbots
Aug  1 13:32:49 mxgate1 postfix/postscreen[5265]: CONNECT from [23.96.235.27]:41515 to [176.31.12.44]:25
Aug  1 13:32:55 mxgate1 postfix/postscreen[5265]: PASS NEW [23.96.235.27]:41515
Aug  1 13:32:57 mxgate1 postfix/smtpd[5271]: connect from unknown[23.96.235.27]
Aug x@x
Aug  1 13:32:58 mxgate1 postfix/smtpd[5271]: disconnect from unknown[23.96.235.27] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5
Aug  1 13:42:58 mxgate1 postfix/postscreen[5983]: CONNECT from [23.96.235.27]:57166 to [176.31.12.44]:25
Aug  1 13:42:58 mxgate1 postfix/postscreen[5983]: PASS OLD [23.96.235.27]:57166
Aug  1 13:42:58 mxgate1 postfix/smtpd[6093]: connect from unknown[23.96.235.27]
Aug x@x
Aug  1 13:43:02 mxgate1 postfix/smtpd[6093]: disconnect from unknown[23.96.235.27] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5
Aug  1 13:53:02 mxgate1 postfix/postscreen[5983]: CONNECT from [23.96.235.27]:55757 to [176.31.12.44]:25
Aug  1 13:53:03 mxgate1 postfix/postscreen[5983]: P........
-------------------------------
2019-08-02 00:54:26
114.142.168.15 attackspam
failed_logins
2019-08-01 23:06:34
181.211.148.26 attackspambots
Aug  1 08:15:08 mail postfix/postscreen[9806]: PREGREET 48 after 0.54 from [181.211.148.26]:45777: EHLO 26.148.211.181.static.anycast.cnt-grms.ec

...
2019-08-02 00:22:54
185.237.80.246 attackbots
proto=tcp  .  spt=42998  .  dpt=25  .     (listed on Blocklist de  Jul 31)     (506)
2019-08-01 23:46:34
199.195.251.84 attackbots
Aug  1 15:25:09 dev0-dcfr-rnet sshd[15766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.195.251.84
Aug  1 15:25:11 dev0-dcfr-rnet sshd[15766]: Failed password for invalid user default from 199.195.251.84 port 39038 ssh2
Aug  1 15:25:15 dev0-dcfr-rnet sshd[15768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.195.251.84
2019-08-01 23:21:41
152.204.128.190 attackspambots
proto=tcp  .  spt=52474  .  dpt=25  .     (listed on     Github Combined on 3 lists )     (508)
2019-08-01 23:41:30
84.201.134.56 attackspambots
Aug  1 17:35:39 site1 sshd\[53025\]: Invalid user ghost from 84.201.134.56Aug  1 17:35:40 site1 sshd\[53025\]: Failed password for invalid user ghost from 84.201.134.56 port 44618 ssh2Aug  1 17:40:38 site1 sshd\[53566\]: Invalid user 07 from 84.201.134.56Aug  1 17:40:40 site1 sshd\[53566\]: Failed password for invalid user 07 from 84.201.134.56 port 38202 ssh2Aug  1 17:45:28 site1 sshd\[54078\]: Invalid user sentry from 84.201.134.56Aug  1 17:45:30 site1 sshd\[54078\]: Failed password for invalid user sentry from 84.201.134.56 port 60264 ssh2
...
2019-08-01 23:13:15

最近上报的IP列表

236.214.210.195 66.219.48.74 62.81.19.99 50.191.172.196
204.58.223.27 177.142.45.171 178.206.17.96 70.26.74.220
235.188.145.21 239.81.162.187 12.84.94.33 80.116.248.72
119.158.26.198 90.128.60.6 7.221.225.41 163.191.140.89
37.90.172.78 205.249.114.22 113.65.242.146 43.238.12.132