必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.238.146.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4665
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;212.238.146.22.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021901 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 03:03:10 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
22.146.238.212.in-addr.arpa domain name pointer 212-238-146-22.fixed.kpn.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
22.146.238.212.in-addr.arpa	name = 212-238-146-22.fixed.kpn.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
167.249.124.126 attackspambots
Unauthorised access (Sep 15) SRC=167.249.124.126 LEN=52 TTL=107 ID=17420 DF TCP DPT=445 WINDOW=8192 SYN
2020-09-16 19:08:59
191.53.238.139 attack
Sep 15 18:22:36 mail.srvfarm.net postfix/smtps/smtpd[2819940]: warning: unknown[191.53.238.139]: SASL PLAIN authentication failed: 
Sep 15 18:22:37 mail.srvfarm.net postfix/smtps/smtpd[2819940]: lost connection after AUTH from unknown[191.53.238.139]
Sep 15 18:23:51 mail.srvfarm.net postfix/smtpd[2805906]: warning: unknown[191.53.238.139]: SASL PLAIN authentication failed: 
Sep 15 18:23:52 mail.srvfarm.net postfix/smtpd[2805906]: lost connection after AUTH from unknown[191.53.238.139]
Sep 15 18:26:34 mail.srvfarm.net postfix/smtpd[2805902]: warning: unknown[191.53.238.139]: SASL PLAIN authentication failed:
2020-09-16 19:36:24
196.216.228.111 attackbots
Sep 15 10:16:36 xxx sshd[2928]: Failed password for r.r from 196.216.228.111 port 59882 ssh2
Sep 15 10:16:37 xxx sshd[2928]: Received disconnect from 196.216.228.111 port 59882:11: Bye Bye [preauth]
Sep 15 10:16:37 xxx sshd[2928]: Disconnected from 196.216.228.111 port 59882 [preauth]
Sep 15 10:24:00 xxx sshd[4120]: Failed password for r.r from 196.216.228.111 port 42808 ssh2
Sep 15 10:24:00 xxx sshd[4120]: Received disconnect from 196.216.228.111 port 42808:11: Bye Bye [preauth]
Sep 15 10:24:00 xxx sshd[4120]: Disconnected from 196.216.228.111 port 42808 [preauth]
Sep 15 10:27:31 xxx sshd[5171]: Failed password for r.r from 196.216.228.111 port 37122 ssh2
Sep 15 10:27:31 xxx sshd[5171]: Received disconnect from 196.216.228.111 port 37122:11: Bye Bye [preauth]
Sep 15 10:27:31 xxx sshd[5171]: Disconnected from 196.216.228.111 port 37122 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=196.216.228.111
2020-09-16 19:15:33
192.241.223.234 attackbotsspam
Port Scan
...
2020-09-16 19:19:11
181.121.134.55 attackspambots
Sep 16 10:23:59 master sshd[3815]: Failed password for invalid user grid from 181.121.134.55 port 50643 ssh2
Sep 16 10:41:47 master sshd[4631]: Failed password for root from 181.121.134.55 port 34743 ssh2
Sep 16 10:55:03 master sshd[4878]: Failed password for root from 181.121.134.55 port 40856 ssh2
Sep 16 11:07:52 master sshd[5546]: Failed password for root from 181.121.134.55 port 46971 ssh2
Sep 16 11:20:30 master sshd[5917]: Failed password for root from 181.121.134.55 port 53084 ssh2
Sep 16 11:32:58 master sshd[6487]: Failed password for root from 181.121.134.55 port 59197 ssh2
Sep 16 11:45:46 master sshd[6838]: Failed password for root from 181.121.134.55 port 37077 ssh2
Sep 16 11:58:06 master sshd[7087]: Failed password for root from 181.121.134.55 port 43190 ssh2
Sep 16 12:10:52 master sshd[7833]: Failed password for root from 181.121.134.55 port 49303 ssh2
Sep 16 12:23:20 master sshd[8077]: Failed password for root from 181.121.134.55 port 55416 ssh2
2020-09-16 19:19:55
36.94.64.138 attackspam
Unauthorized connection attempt from IP address 36.94.64.138 on Port 445(SMB)
2020-09-16 20:03:41
192.3.105.186 attack
Invalid user fake from 192.3.105.186 port 51378
2020-09-16 19:25:04
109.74.206.144 attackbotsspam
Fail2Ban Ban Triggered
2020-09-16 19:28:47
186.91.6.151 attackbotsspam
186.91.6.151 (VE/Venezuela/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 16 02:42:46 server2 sshd[10049]: Failed password for root from 51.255.47.133 port 44566 ssh2
Sep 16 02:42:09 server2 sshd[9792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.119.25  user=root
Sep 16 02:42:10 server2 sshd[9792]: Failed password for root from 159.65.119.25 port 57800 ssh2
Sep 16 02:41:58 server2 sshd[9475]: Failed password for root from 186.91.6.151 port 51060 ssh2
Sep 16 02:41:44 server2 sshd[9399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.43.148  user=root
Sep 16 02:41:46 server2 sshd[9399]: Failed password for root from 128.199.43.148 port 57754 ssh2

IP Addresses Blocked:

51.255.47.133 (FR/France/-)
159.65.119.25 (DE/Germany/-)
2020-09-16 20:04:20
138.197.152.148 attackspambots
TCP port : 24105
2020-09-16 19:24:34
45.248.194.157 attackspam
Sep 15 18:40:29 mail.srvfarm.net postfix/smtpd[2820538]: warning: unknown[45.248.194.157]: SASL PLAIN authentication failed: 
Sep 15 18:40:29 mail.srvfarm.net postfix/smtpd[2820538]: lost connection after AUTH from unknown[45.248.194.157]
Sep 15 18:42:24 mail.srvfarm.net postfix/smtpd[2828191]: warning: unknown[45.248.194.157]: SASL PLAIN authentication failed: 
Sep 15 18:42:24 mail.srvfarm.net postfix/smtpd[2828191]: lost connection after AUTH from unknown[45.248.194.157]
Sep 15 18:45:33 mail.srvfarm.net postfix/smtpd[2825415]: warning: unknown[45.248.194.157]: SASL PLAIN authentication failed:
2020-09-16 19:00:13
193.56.28.14 attack
Sep 16 12:49:36 galaxy event: galaxy/lswi: smtp: staff@uni-potsdam.de [193.56.28.14] authentication failure using internet password
Sep 16 12:50:24 galaxy event: galaxy/lswi: smtp: staff@uni-potsdam.de [193.56.28.14] authentication failure using internet password
Sep 16 12:54:13 galaxy event: galaxy/lswi: smtp: mike@uni-potsdam.de [193.56.28.14] authentication failure using internet password
Sep 16 12:55:00 galaxy event: galaxy/lswi: smtp: mike@uni-potsdam.de [193.56.28.14] authentication failure using internet password
Sep 16 12:58:48 galaxy event: galaxy/lswi: smtp: john@uni-potsdam.de [193.56.28.14] authentication failure using internet password
...
2020-09-16 19:16:18
103.63.108.25 attackbots
2020-09-15T22:29:46.654922abusebot-6.cloudsearch.cf sshd[30675]: Invalid user web from 103.63.108.25 port 41652
2020-09-15T22:29:46.662044abusebot-6.cloudsearch.cf sshd[30675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.63.108.25
2020-09-15T22:29:46.654922abusebot-6.cloudsearch.cf sshd[30675]: Invalid user web from 103.63.108.25 port 41652
2020-09-15T22:29:48.462233abusebot-6.cloudsearch.cf sshd[30675]: Failed password for invalid user web from 103.63.108.25 port 41652 ssh2
2020-09-15T22:33:02.939517abusebot-6.cloudsearch.cf sshd[30891]: Invalid user admin from 103.63.108.25 port 51132
2020-09-15T22:33:02.945667abusebot-6.cloudsearch.cf sshd[30891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.63.108.25
2020-09-15T22:33:02.939517abusebot-6.cloudsearch.cf sshd[30891]: Invalid user admin from 103.63.108.25 port 51132
2020-09-15T22:33:05.654032abusebot-6.cloudsearch.cf sshd[30891]: Failed passw
...
2020-09-16 19:21:21
61.177.79.186 attackspam
Sep 15 17:01:35 ssh2 sshd[61888]: User root from 61.177.79.186 not allowed because not listed in AllowUsers
Sep 15 17:01:35 ssh2 sshd[61888]: Failed password for invalid user root from 61.177.79.186 port 51308 ssh2
Sep 15 17:01:35 ssh2 sshd[61888]: Connection closed by invalid user root 61.177.79.186 port 51308 [preauth]
...
2020-09-16 20:11:48
82.81.230.112 attack
Automatic report - Banned IP Access
2020-09-16 19:12:28

最近上报的IP列表

236.126.200.254 174.7.62.233 118.63.50.107 212.254.19.55
59.200.69.75 124.138.233.230 118.70.205.55 187.244.211.57
49.51.85.192 22.199.15.226 40.104.83.24 191.67.233.34
121.245.123.159 217.91.115.180 142.81.197.231 72.30.243.41
252.203.114.246 232.186.115.87 108.90.93.46 36.72.253.175