必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
202.53.139.58 attackbots
Unauthorized connection attempt detected from IP address 202.53.139.58 to port 80 [J]
2020-01-31 01:17:12
202.53.139.58 attackspambots
$f2bV_matches
2019-12-27 01:14:11
202.53.139.58 attackspam
$f2bV_matches
2019-11-29 18:13:08
202.53.139.150 attack
Scanning and Vuln Attempts
2019-10-15 15:04:32
202.53.139.65 attackbotsspam
PHP DIESCAN Information Disclosure Vulnerability
2019-07-23 15:03:11
202.53.139.49 attack
202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpma/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpMyAbmin/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpMyAdmin__/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.53.139.49 - - [06/Apr/2019:13:57:37 +0800] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
2019-04-06 13:59:10
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.53.139.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25294
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;202.53.139.107.			IN	A

;; AUTHORITY SECTION:
.			329	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022010801 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 09 10:32:15 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 107.139.53.202.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 107.139.53.202.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
177.1.214.207 attackbots
Aug 20 14:02:00 ns382633 sshd\[30880\]: Invalid user edt from 177.1.214.207 port 51232
Aug 20 14:02:00 ns382633 sshd\[30880\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.1.214.207
Aug 20 14:02:02 ns382633 sshd\[30880\]: Failed password for invalid user edt from 177.1.214.207 port 51232 ssh2
Aug 20 14:07:25 ns382633 sshd\[31867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.1.214.207  user=root
Aug 20 14:07:27 ns382633 sshd\[31867\]: Failed password for root from 177.1.214.207 port 2636 ssh2
2020-08-20 21:21:53
80.74.227.71 attackbots
3306/tcp
[2020-08-20]1pkt
2020-08-20 21:43:03
171.224.178.90 attackspam
1597925217 - 08/20/2020 14:06:57 Host: 171.224.178.90/171.224.178.90 Port: 445 TCP Blocked
2020-08-20 21:44:48
5.188.206.194 attackbotsspam
2020-08-20 16:03:28 dovecot_login authenticator failed for \(\[5.188.206.194\]\) \[5.188.206.194\]: 535 Incorrect authentication data \(set_id=info@pharmtox-j.org.ua\)2020-08-20 16:03:39 dovecot_login authenticator failed for \(\[5.188.206.194\]\) \[5.188.206.194\]: 535 Incorrect authentication data2020-08-20 16:03:51 dovecot_login authenticator failed for \(\[5.188.206.194\]\) \[5.188.206.194\]: 535 Incorrect authentication data
...
2020-08-20 21:11:13
92.38.169.148 attackspambots
Aug 20 08:42:30 Host-KEWR-E postfix/smtpd[29582]: NOQUEUE: reject: RCPT from unknown[92.38.169.148]: 554 5.7.1 <12602-377-2287-2828-baganco=vestibtech.com@mail.enstatech.icu>: Sender address rejected: We reject all .icu domains; from=<12602-377-2287-2828-baganco=vestibtech.com@mail.enstatech.icu> to= proto=ESMTP helo=
...
2020-08-20 21:56:19
159.89.115.74 attack
Aug 20 14:07:22 ncomp sshd[12635]: Invalid user simon from 159.89.115.74
Aug 20 14:07:22 ncomp sshd[12635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.115.74
Aug 20 14:07:22 ncomp sshd[12635]: Invalid user simon from 159.89.115.74
Aug 20 14:07:24 ncomp sshd[12635]: Failed password for invalid user simon from 159.89.115.74 port 33886 ssh2
2020-08-20 21:25:20
168.232.198.218 attack
Aug 20 15:16:14 ns381471 sshd[23906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.198.218
Aug 20 15:16:16 ns381471 sshd[23906]: Failed password for invalid user hengda from 168.232.198.218 port 33130 ssh2
2020-08-20 21:34:03
123.207.97.250 attackspambots
Aug 20 14:06:38 haigwepa sshd[16809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.97.250 
Aug 20 14:06:40 haigwepa sshd[16809]: Failed password for invalid user jira from 123.207.97.250 port 39152 ssh2
...
2020-08-20 21:51:09
117.211.70.70 attack
117.211.70.70 - [20/Aug/2020:16:22:56 +0300] "POST /xmlrpc.php HTTP/1.1" 404 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-"
117.211.70.70 - [20/Aug/2020:16:24:34 +0300] "POST /xmlrpc.php HTTP/1.1" 404 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-"
...
2020-08-20 21:26:17
78.92.58.191 attackspam
Aug 20 16:23:20 journals sshd\[65833\]: Invalid user ubuntu from 78.92.58.191
Aug 20 16:23:20 journals sshd\[65833\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.92.58.191
Aug 20 16:23:22 journals sshd\[65833\]: Failed password for invalid user ubuntu from 78.92.58.191 port 41366 ssh2
Aug 20 16:28:26 journals sshd\[66307\]: Invalid user kobis from 78.92.58.191
Aug 20 16:28:26 journals sshd\[66307\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.92.58.191
...
2020-08-20 21:38:48
111.229.160.86 attack
Aug 20 15:08:40 sso sshd[17876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.160.86
Aug 20 15:08:42 sso sshd[17876]: Failed password for invalid user ftpserver from 111.229.160.86 port 37820 ssh2
...
2020-08-20 21:53:12
117.107.213.244 attack
invalid login attempt (lab)
2020-08-20 21:50:12
90.214.93.247 attack
php WP PHPmyadamin ABUSE blocked for 12h
2020-08-20 21:42:46
200.165.48.203 attackspambots
1597925248 - 08/20/2020 14:07:28 Host: 200.165.48.203/200.165.48.203 Port: 445 TCP Blocked
2020-08-20 21:23:09
95.111.74.98 attackspam
2020-08-20T16:42:57.550076lavrinenko.info sshd[12831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.111.74.98
2020-08-20T16:42:57.542799lavrinenko.info sshd[12831]: Invalid user netflow from 95.111.74.98 port 57320
2020-08-20T16:42:59.388760lavrinenko.info sshd[12831]: Failed password for invalid user netflow from 95.111.74.98 port 57320 ssh2
2020-08-20T16:46:51.391862lavrinenko.info sshd[12894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.111.74.98  user=mysql
2020-08-20T16:46:53.687425lavrinenko.info sshd[12894]: Failed password for mysql from 95.111.74.98 port 36142 ssh2
...
2020-08-20 21:54:30

最近上报的IP列表

29.75.191.173 224.108.99.211 185.206.63.4 56.84.17.176
137.108.10.13 42.122.89.178 81.111.97.20 235.71.251.163
234.21.209.35 157.106.106.131 127.37.45.13 121.208.37.9
3.226.205.95 11.131.125.74 100.83.166.24 222.127.169.140
31.156.6.124 84.39.164.204 170.210.80.37 36.76.116.156