必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Shenyang

省份(region): Liaoning

国家(country): China

运营商(isp): China Unicom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 218.61.187.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21965
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;218.61.187.139.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091700 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Sep 18 01:01:03 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 139.187.61.218.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 139.187.61.218.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
52.171.223.103 attack
Sql/code injection probe
2019-07-08 09:05:55
92.118.37.84 attackbotsspam
Jul  8 00:13:29 mail kernel: [3042658.165750] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.84 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=61242 PROTO=TCP SPT=41610 DPT=39402 WINDOW=1024 RES=0x00 SYN URGP=0 
Jul  8 00:13:33 mail kernel: [3042661.885059] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.84 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=48964 PROTO=TCP SPT=41610 DPT=32492 WINDOW=1024 RES=0x00 SYN URGP=0 
Jul  8 00:15:09 mail kernel: [3042758.708549] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.84 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=55492 PROTO=TCP SPT=41610 DPT=65150 WINDOW=1024 RES=0x00 SYN URGP=0 
Jul  8 00:16:34 mail kernel: [3042843.158705] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.84 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=63976 PROTO=TCP SPT=41610 DPT=22200 WINDOW=1024 RES=0x00 SYN
2019-07-08 08:36:14
1.30.28.195 attack
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x
2019-07-02 x@x

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=1.30.28.195
2019-07-08 09:10:31
167.99.251.18 attackbotsspam
Jul  4 06:52:19 our-server-hostname postfix/smtpd[18623]: connect from unknown[167.99.251.18]
Jul  4 06:52:20 our-server-hostname postfix/smtpd[18623]: NOQUEUE: reject: RCPT from unknown[167.99.251.18]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Jul  4 06:52:21 our-server-hostname postfix/smtpd[18623]: lost connection after RCPT from unknown[167.99.251.18]
Jul  4 06:52:21 our-server-hostname postfix/smtpd[18623]: disconnect from unknown[167.99.251.18]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=167.99.251.18
2019-07-08 08:30:11
51.15.1.221 attackbots
Jul  1 09:28:10 www sshd[22802]: Failed password for r.r from 51.15.1.221 port 45066 ssh2
Jul  1 09:28:12 www sshd[22802]: Failed password for r.r from 51.15.1.221 port 45066 ssh2
Jul  1 09:28:14 www sshd[22802]: Failed password for r.r from 51.15.1.221 port 45066 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=51.15.1.221
2019-07-08 08:50:41
165.22.251.129 attackbotsspam
Jul  8 01:50:20 debian sshd\[25032\]: Invalid user fachbereich from 165.22.251.129 port 40868
Jul  8 01:50:20 debian sshd\[25032\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.251.129
...
2019-07-08 08:53:20
222.239.10.134 attackspambots
Unauthorised access (Jul  8) SRC=222.239.10.134 LEN=40 TTL=244 ID=30696 TCP DPT=445 WINDOW=1024 SYN
2019-07-08 08:37:17
217.215.100.120 attackbotsspam
Jul  3 03:15:39 pl2server sshd[991191]: Invalid user admin from 217.215.100.120
Jul  3 03:15:39 pl2server sshd[991191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217-215-100-120-no2003.tbcn.telia.com
Jul  3 03:15:40 pl2server sshd[991191]: Failed password for invalid user admin from 217.215.100.120 port 54996 ssh2
Jul  3 03:15:41 pl2server sshd[991191]: Connection closed by 217.215.100.120 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=217.215.100.120
2019-07-08 08:51:56
27.114.189.226 attackspambots
Jul  7 22:30:19 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 27.114.189.226 port 37034 ssh2 (target: 158.69.100.154:22, password: 111111)
Jul  7 22:30:19 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 27.114.189.226 port 37034 ssh2 (target: 158.69.100.154:22, password: openelec)
Jul  7 22:30:19 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 27.114.189.226 port 37034 ssh2 (target: 158.69.100.154:22, password: system)
Jul  7 22:30:20 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 27.114.189.226 port 37034 ssh2 (target: 158.69.100.154:22, password: 0000)
Jul  7 22:30:20 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 27.114.189.226 port 37034 ssh2 (target: 158.69.100.154:22, password: admintrup)
Jul  7 22:30:20 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 27.114.189.226 port 37034 ssh2 (target: 158.69.100.154:22, password: admin)
Jul  7 22:30:21 wildwolf ssh-honeypotd[26164]: Failed password fo........
------------------------------
2019-07-08 08:47:05
178.128.177.180 attack
Jul  3 13:17:02 mxgate1 postfix/postscreen[19541]: CONNECT from [178.128.177.180]:37670 to [176.31.12.44]:25
Jul  3 13:17:02 mxgate1 postfix/dnsblog[19829]: addr 178.128.177.180 listed by domain zen.spamhaus.org as 127.0.0.3
Jul  3 13:17:02 mxgate1 postfix/dnsblog[19829]: addr 178.128.177.180 listed by domain zen.spamhaus.org as 127.0.0.4
Jul  3 13:17:02 mxgate1 postfix/dnsblog[19825]: addr 178.128.177.180 listed by domain cbl.abuseat.org as 127.0.0.2
Jul  3 13:17:02 mxgate1 postfix/dnsblog[19828]: addr 178.128.177.180 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jul  3 13:17:02 mxgate1 postfix/dnsblog[19827]: addr 178.128.177.180 listed by domain b.barracudacentral.org as 127.0.0.2
Jul  3 13:17:02 mxgate1 postfix/dnsblog[19826]: addr 178.128.177.180 listed by domain bl.spamcop.net as 127.0.0.2
Jul  3 13:17:08 mxgate1 postfix/postscreen[19541]: DNSBL rank 6 for [178.128.177.180]:37670
Jul x@x
Jul  3 13:17:09 mxgate1 postfix/postscreen[19541]: HANGUP after 0.67 from........
-------------------------------
2019-07-08 09:05:00
78.128.113.67 attackspambots
Jul  8 01:55:23 mail postfix/smtpd\[24354\]: warning: unknown\[78.128.113.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  8 01:55:31 mail postfix/smtpd\[24354\]: warning: unknown\[78.128.113.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  8 02:35:38 mail postfix/smtpd\[27537\]: warning: unknown\[78.128.113.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-07-08 08:39:00
217.112.128.138 attack
Postfix DNSBL listed. Trying to send SPAM.
2019-07-08 08:58:13
139.59.56.121 attack
Jul  8 01:11:46 ArkNodeAT sshd\[7253\]: Invalid user carol from 139.59.56.121
Jul  8 01:11:46 ArkNodeAT sshd\[7253\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.56.121
Jul  8 01:11:47 ArkNodeAT sshd\[7253\]: Failed password for invalid user carol from 139.59.56.121 port 40872 ssh2
2019-07-08 08:34:53
82.149.5.205 attack
Jul  3 22:05:47 mxgate1 postfix/postscreen[8069]: CONNECT from [82.149.5.205]:48195 to [176.31.12.44]:25
Jul  3 22:05:47 mxgate1 postfix/dnsblog[8072]: addr 82.149.5.205 listed by domain cbl.abuseat.org as 127.0.0.2
Jul  3 22:05:47 mxgate1 postfix/dnsblog[8074]: addr 82.149.5.205 listed by domain zen.spamhaus.org as 127.0.0.4
Jul  3 22:05:48 mxgate1 postfix/dnsblog[8071]: addr 82.149.5.205 listed by domain bl.spamcop.net as 127.0.0.2
Jul  3 22:05:53 mxgate1 postfix/postscreen[8069]: DNSBL rank 4 for [82.149.5.205]:48195
Jul x@x
Jul  3 22:05:53 mxgate1 postfix/postscreen[8069]: HANGUP after 0.44 from [82.149.5.205]:48195 in tests after SMTP handshake
Jul  3 22:05:53 mxgate1 postfix/postscreen[8069]: DISCONNECT [82.149.5.205]:48195


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=82.149.5.205
2019-07-08 09:14:34
178.32.136.127 attack
php WP PHPmyadamin ABUSE blocked for 12h
2019-07-08 09:12:23

最近上报的IP列表

90.118.74.90 84.95.105.142 129.70.247.15 35.92.87.209
72.56.207.92 111.29.253.101 27.137.152.75 133.217.30.14
14.228.171.0 109.98.196.17 42.126.67.154 111.66.0.28
85.195.234.41 201.216.138.20 99.62.226.159 125.161.112.181
166.134.237.42 82.37.11.139 81.244.130.247 109.43.219.171