必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.75.85.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31150
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;214.75.85.254.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021901 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 03:24:08 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 254.85.75.214.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
server can't find 214.75.85.254.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
5.188.206.197 attackbots
Aug  9 21:15:57 relay postfix/smtpd\[10686\]: warning: unknown\[5.188.206.197\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  9 21:16:18 relay postfix/smtpd\[10686\]: warning: unknown\[5.188.206.197\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  9 21:23:23 relay postfix/smtpd\[10723\]: warning: unknown\[5.188.206.197\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  9 21:23:45 relay postfix/smtpd\[10041\]: warning: unknown\[5.188.206.197\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  9 21:29:00 relay postfix/smtpd\[10723\]: warning: unknown\[5.188.206.197\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-08-10 03:36:01
187.12.167.85 attackbotsspam
(sshd) Failed SSH login from 187.12.167.85 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug  9 19:28:19 amsweb01 sshd[28514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.12.167.85  user=root
Aug  9 19:28:21 amsweb01 sshd[28514]: Failed password for root from 187.12.167.85 port 36114 ssh2
Aug  9 19:39:30 amsweb01 sshd[30037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.12.167.85  user=root
Aug  9 19:39:33 amsweb01 sshd[30037]: Failed password for root from 187.12.167.85 port 57410 ssh2
Aug  9 19:44:14 amsweb01 sshd[30737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.12.167.85  user=root
2020-08-10 03:27:15
138.197.131.66 attackbots
138.197.131.66 - - [09/Aug/2020:21:12:12 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.197.131.66 - - [09/Aug/2020:21:12:15 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.197.131.66 - - [09/Aug/2020:21:12:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-08-10 03:22:46
123.207.142.31 attackbots
Aug  9 15:59:00 buvik sshd[20981]: Failed password for root from 123.207.142.31 port 45193 ssh2
Aug  9 16:04:01 buvik sshd[22102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.142.31  user=root
Aug  9 16:04:03 buvik sshd[22102]: Failed password for root from 123.207.142.31 port 45225 ssh2
...
2020-08-10 03:41:36
107.6.169.253 attack
[Sat Aug 08 18:05:47 2020] - DDoS Attack From IP: 107.6.169.253 Port: 25053
2020-08-10 03:43:11
203.147.86.210 attackspam
(imapd) Failed IMAP login from 203.147.86.210 (NC/New Caledonia/host-203-147-86-210.h39.canl.nc): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug  9 21:09:58 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 9 secs): user=, method=PLAIN, rip=203.147.86.210, lip=5.63.12.44, TLS, session=
2020-08-10 03:56:38
212.70.149.67 attack
2020-08-09 21:31:00 dovecot_login authenticator failed for \(User\) \[212.70.149.67\]: 535 Incorrect authentication data \(set_id=mia@no-server.de\)
2020-08-09 21:31:00 dovecot_login authenticator failed for \(User\) \[212.70.149.67\]: 535 Incorrect authentication data \(set_id=mia@no-server.de\)
2020-08-09 21:32:45 dovecot_login authenticator failed for \(User\) \[212.70.149.67\]: 535 Incorrect authentication data \(set_id=michaels@no-server.de\)
2020-08-09 21:32:46 dovecot_login authenticator failed for \(User\) \[212.70.149.67\]: 535 Incorrect authentication data \(set_id=michaels@no-server.de\)
2020-08-09 21:34:30 dovecot_login authenticator failed for \(User\) \[212.70.149.67\]: 535 Incorrect authentication data \(set_id=michelle@no-server.de\)
2020-08-09 21:34:32 dovecot_login authenticator failed for \(User\) \[212.70.149.67\]: 535 Incorrect authentication data \(set_id=michelle@no-server.de\)
...
2020-08-10 03:36:23
81.163.8.6 attackspambots
Aug  9 13:48:50 mail.srvfarm.net postfix/smtpd[781496]: warning: unknown[81.163.8.6]: SASL PLAIN authentication failed: 
Aug  9 13:48:50 mail.srvfarm.net postfix/smtpd[781496]: lost connection after AUTH from unknown[81.163.8.6]
Aug  9 13:54:03 mail.srvfarm.net postfix/smtps/smtpd[783829]: warning: 81-163-8-6.net.lasnet.pl[81.163.8.6]: SASL PLAIN authentication failed: 
Aug  9 13:54:03 mail.srvfarm.net postfix/smtps/smtpd[783829]: lost connection after AUTH from 81-163-8-6.net.lasnet.pl[81.163.8.6]
Aug  9 13:58:34 mail.srvfarm.net postfix/smtps/smtpd[783087]: warning: unknown[81.163.8.6]: SASL PLAIN authentication failed:
2020-08-10 03:34:01
139.155.21.186 attack
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-09T16:44:02Z and 2020-08-09T16:54:14Z
2020-08-10 03:46:07
36.77.93.34 attack
1596974750 - 08/09/2020 14:05:50 Host: 36.77.93.34/36.77.93.34 Port: 445 TCP Blocked
2020-08-10 03:25:47
85.185.83.51 attackspambots
Attempts against SMTP/SSMTP
2020-08-10 03:33:11
60.166.83.136 attackbots
Lines containing failures of 60.166.83.136
Aug  8 04:43:55 shared02 sshd[13474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.166.83.136  user=r.r
Aug  8 04:43:57 shared02 sshd[13474]: Failed password for r.r from 60.166.83.136 port 4029 ssh2
Aug  8 04:43:57 shared02 sshd[13474]: Received disconnect from 60.166.83.136 port 4029:11: Bye Bye [preauth]
Aug  8 04:43:57 shared02 sshd[13474]: Disconnected from authenticating user r.r 60.166.83.136 port 4029 [preauth]
Aug  8 04:48:22 shared02 sshd[14837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.166.83.136  user=r.r
Aug  8 04:48:24 shared02 sshd[14837]: Failed password for r.r from 60.166.83.136 port 26496 ssh2
Aug  8 04:48:25 shared02 sshd[14837]: Received disconnect from 60.166.83.136 port 26496:11: Bye Bye [preauth]
Aug  8 04:48:25 shared02 sshd[14837]: Disconnected from authenticating user r.r 60.166.83.136 port 26496 [preauth]

........
------------------------------
2020-08-10 03:44:23
177.71.9.31 attack
Aug  9 13:56:20 mail.srvfarm.net postfix/smtpd[781677]: warning: unknown[177.71.9.31]: SASL PLAIN authentication failed: 
Aug  9 13:56:20 mail.srvfarm.net postfix/smtpd[781677]: lost connection after AUTH from unknown[177.71.9.31]
Aug  9 13:57:38 mail.srvfarm.net postfix/smtpd[780651]: warning: unknown[177.71.9.31]: SASL PLAIN authentication failed: 
Aug  9 13:57:38 mail.srvfarm.net postfix/smtpd[780651]: lost connection after AUTH from unknown[177.71.9.31]
Aug  9 14:02:54 mail.srvfarm.net postfix/smtpd[781548]: warning: unknown[177.71.9.31]: SASL PLAIN authentication failed:
2020-08-10 03:30:14
125.32.45.170 attack
[N10.H1.VM1] Port Scanner Detected Blocked by UFW
2020-08-10 03:47:28
111.74.11.86 attackbots
SSH Brute Force
2020-08-10 03:32:26

最近上报的IP列表

213.163.164.47 157.10.6.144 46.72.32.190 93.65.160.145
14.30.86.120 66.126.216.93 19.206.12.35 42.252.50.202
173.38.66.236 33.162.199.7 90.120.192.92 217.215.113.0
209.12.255.67 19.247.124.45 2.127.100.108 6.253.156.171
15.233.58.182 72.89.209.129 187.109.190.248 89.57.115.228