必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Italy

运营商(isp): Wind

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.157.30.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21643
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.157.30.109.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090900 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Sep 10 01:07:30 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
Host 109.30.157.2.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 109.30.157.2.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
179.241.250.122 attack
Sep 27 19:57:07 localhost postfix/smtpd[32186]: disconnect from 179-241-250-122.3g.claro.net.br[179.241.250.122] ehlo=1 quhostname=1 commands=2
Sep 27 19:57:10 localhost postfix/smtpd[32186]: disconnect from 179-241-250-122.3g.claro.net.br[179.241.250.122] ehlo=1 quhostname=1 commands=2
Sep 27 19:57:24 localhost postfix/smtpd[32186]: disconnect from 179-241-250-122.3g.claro.net.br[179.241.250.122] ehlo=1 quhostname=1 commands=2
Sep 27 19:57:24 localhost postfix/smtpd[32186]: disconnect from 179-241-250-122.3g.claro.net.br[179.241.250.122] ehlo=1 quhostname=1 commands=2
Sep 27 19:57:24 localhost postfix/smtpd[32186]: disconnect from 179-241-250-122.3g.claro.net.br[179.241.250.122] ehlo=1 quhostname=1 commands=2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=179.241.250.122
2019-10-02 02:27:51
192.3.162.10 attackbotsspam
Lines containing failures of 192.3.162.10
Sep 30 09:41:09 shared01 sshd[11182]: Invalid user sonar from 192.3.162.10 port 32880
Sep 30 09:41:09 shared01 sshd[11182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.162.10
Sep 30 09:41:12 shared01 sshd[11182]: Failed password for invalid user sonar from 192.3.162.10 port 32880 ssh2
Sep 30 09:41:12 shared01 sshd[11182]: Received disconnect from 192.3.162.10 port 32880:11: Bye Bye [preauth]
Sep 30 09:41:12 shared01 sshd[11182]: Disconnected from invalid user sonar 192.3.162.10 port 32880 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=192.3.162.10
2019-10-02 02:47:34
49.88.112.114 attack
Oct  1 08:42:58 php1 sshd\[19147\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114  user=root
Oct  1 08:43:00 php1 sshd\[19147\]: Failed password for root from 49.88.112.114 port 59974 ssh2
Oct  1 08:43:02 php1 sshd\[19147\]: Failed password for root from 49.88.112.114 port 59974 ssh2
Oct  1 08:43:04 php1 sshd\[19147\]: Failed password for root from 49.88.112.114 port 59974 ssh2
Oct  1 08:43:57 php1 sshd\[19261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114  user=root
2019-10-02 02:47:04
118.187.5.163 attack
Oct  1 20:23:19 vps647732 sshd[2061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.187.5.163
Oct  1 20:23:21 vps647732 sshd[2061]: Failed password for invalid user rkassim from 118.187.5.163 port 34211 ssh2
...
2019-10-02 02:44:28
195.88.66.108 attackspam
Oct  1 19:01:49 MK-Soft-Root2 sshd[17815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.88.66.108 
Oct  1 19:01:51 MK-Soft-Root2 sshd[17815]: Failed password for invalid user worlddomination from 195.88.66.108 port 56562 ssh2
...
2019-10-02 02:24:30
128.206.119.143 attack
Oct  1 18:42:06 arianus sshd\[2065\]: User ***user*** from 128.206.119.143 not allowed because none of user's groups are listed in AllowGroups
...
2019-10-02 02:18:31
173.221.144.50 attackbotsspam
Sep 29 19:54:52 localhost postfix/smtpd[6293]: lost connection after eclipseT from 173.221.144.50.nw.nuvox.net[173.221.144.50]
Sep 29 19:55:53 localhost postfix/smtpd[6293]: lost connection after eclipseT from 173.221.144.50.nw.nuvox.net[173.221.144.50]
Sep 29 19:56:54 localhost postfix/smtpd[6293]: lost connection after eclipseT from 173.221.144.50.nw.nuvox.net[173.221.144.50]
Sep 29 20:11:55 localhost postfix/smtpd[11301]: lost connection after eclipseT from 173.221.144.50.nw.nuvox.net[173.221.144.50]
Sep 29 20:41:56 localhost postfix/smtpd[18827]: lost connection after eclipseT from 173.221.144.50.nw.nuvox.net[173.221.144.50]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=173.221.144.50
2019-10-02 02:48:25
184.68.129.235 attackspam
Unauthorised access (Oct  1) SRC=184.68.129.235 LEN=40 TTL=240 ID=7654 TCP DPT=445 WINDOW=1024 SYN
2019-10-02 02:30:24
129.28.126.107 attack
Telnetd brute force attack detected by fail2ban
2019-10-02 02:37:26
155.94.254.46 attack
2019-09-30T23:23:11.499370ts3.arvenenaske.de sshd[6552]: Invalid user srv from 155.94.254.46 port 47368
2019-09-30T23:23:11.505823ts3.arvenenaske.de sshd[6552]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=155.94.254.46 user=srv
2019-09-30T23:23:11.506724ts3.arvenenaske.de sshd[6552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=155.94.254.46
2019-09-30T23:23:11.499370ts3.arvenenaske.de sshd[6552]: Invalid user srv from 155.94.254.46 port 47368
2019-09-30T23:23:13.094069ts3.arvenenaske.de sshd[6552]: Failed password for invalid user srv from 155.94.254.46 port 47368 ssh2
2019-09-30T23:26:46.021234ts3.arvenenaske.de sshd[6558]: Invalid user deploy from 155.94.254.46 port 60608
2019-09-30T23:26:46.027862ts3.arvenenaske.de sshd[6558]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=155.94.254.46 user=deploy
2019-09-30T23:26:46.028792ts3.arvenenaske.de ........
------------------------------
2019-10-02 02:24:53
2.191.91.238 attackbots
2019-10-0114:12:201iFH0u-0006kt-2j\<=info@imsuisse-sa.chH=\(imsuisse-sa.ch\)[5.120.64.42]:16988P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_plain:info@imsuisse-sa.chS=2702id=327CFFF6-AEBC-4ACF-B163-DDAC5D8D970D@imsuisse-sa.chT=""forcadel@rabco.comredbarbarian@comcast.netgareiter@yahoo.comsrenaud@mintz.comrevolver@alum.dartmouth.orgreyesd99@yahoo.comrook@foxbase-alpha.orgrosadioro@yahoo.comaureliarufina@yahoo.comMisterMyopic@aol.com2019-10-0114:12:211iFH0u-0006mw-Ee\<=info@imsuisse-sa.chH=\(imsuisse-sa.ch\)[154.121.54.17]:15635P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_plain:info@imsuisse-sa.chS=2175id=E006A87D-F90D-4173-BFC0-CEA1952C4D98@imsuisse-sa.chT=""fortfcjr13@aol.comvictoriaevs@aol.com2019-10-0114:12:211iFH0u-0006jW-Iz\<=info@imsuisse-sa.chH=\(imsuisse-sa.ch\)[137.97.122.213]:51031P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_plain:info@imsuisse-sa.chS=2478id=F9E4852C-C31A-48DD-B311-1127D049070D@imsuisse-sa.chT=""formckedwards@aol.comme
2019-10-02 03:03:41
139.59.90.40 attackbotsspam
Oct  1 02:26:26 web1 sshd\[11451\]: Invalid user admin from 139.59.90.40
Oct  1 02:26:26 web1 sshd\[11451\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.90.40
Oct  1 02:26:28 web1 sshd\[11451\]: Failed password for invalid user admin from 139.59.90.40 port 52521 ssh2
Oct  1 02:31:00 web1 sshd\[11843\]: Invalid user garry from 139.59.90.40
Oct  1 02:31:00 web1 sshd\[11843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.90.40
2019-10-02 02:36:55
222.186.175.182 attack
Oct  1 08:35:16 web1 sshd\[12371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182  user=root
Oct  1 08:35:18 web1 sshd\[12371\]: Failed password for root from 222.186.175.182 port 7750 ssh2
Oct  1 08:35:42 web1 sshd\[12408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182  user=root
Oct  1 08:35:44 web1 sshd\[12408\]: Failed password for root from 222.186.175.182 port 20854 ssh2
Oct  1 08:36:04 web1 sshd\[12408\]: Failed password for root from 222.186.175.182 port 20854 ssh2
2019-10-02 02:37:58
74.63.253.38 attackspambots
\[2019-10-01 14:16:44\] SECURITY\[2006\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-01T14:16:44.405-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="948221530117",SessionID="0x7f1e1c3735b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/74.63.253.38/56041",ACLName="no_extension_match"
\[2019-10-01 14:18:22\] SECURITY\[2006\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-01T14:18:22.267-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="0048221530117",SessionID="0x7f1e1c3735b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/74.63.253.38/59519",ACLName="no_extension_match"
\[2019-10-01 14:19:08\] SECURITY\[2006\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-01T14:19:08.004-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00048221530117",SessionID="0x7f1e1c4d5768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/74.63.253.38/58245",ACLName="no_extension_ma
2019-10-02 02:31:30
181.40.119.130 attackbots
445/tcp 445/tcp 445/tcp...
[2019-08-01/10-01]4pkt,1pt.(tcp)
2019-10-02 02:36:16

最近上报的IP列表

216.81.148.46 188.123.57.205 24.161.89.53 99.64.196.199
54.170.254.40 87.63.37.65 91.66.218.154 137.215.245.242
34.194.211.234 50.19.17.231 62.32.193.116 32.5.175.148
74.141.100.92 158.93.82.1 92.38.209.186 175.210.145.102
13.35.36.187 62.250.132.4 216.226.53.123 66.44.187.111