必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 220.196.50.185
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24378
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;220.196.50.185.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021401 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 12:09:02 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
Host 185.50.196.220.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 185.50.196.220.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
51.75.123.107 attackbotsspam
Aug  7 15:00:37 lukav-desktop sshd\[15894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.107  user=root
Aug  7 15:00:40 lukav-desktop sshd\[15894\]: Failed password for root from 51.75.123.107 port 42906 ssh2
Aug  7 15:04:23 lukav-desktop sshd\[15914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.107  user=root
Aug  7 15:04:25 lukav-desktop sshd\[15914\]: Failed password for root from 51.75.123.107 port 56184 ssh2
Aug  7 15:08:01 lukav-desktop sshd\[7820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.107  user=root
2020-08-07 21:11:20
45.129.33.17 attack
08/07/2020-09:11:55.455748 45.129.33.17 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-08-07 21:25:59
116.228.37.90 attack
Aug  7 16:05:02 journals sshd\[40444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.228.37.90  user=root
Aug  7 16:05:04 journals sshd\[40444\]: Failed password for root from 116.228.37.90 port 35044 ssh2
Aug  7 16:09:41 journals sshd\[40849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.228.37.90  user=root
Aug  7 16:09:43 journals sshd\[40849\]: Failed password for root from 116.228.37.90 port 43428 ssh2
Aug  7 16:14:10 journals sshd\[41294\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.228.37.90  user=root
...
2020-08-07 21:30:37
103.219.112.1 attackspambots
Attempted to establish connection to non opened port 17774
2020-08-07 21:05:08
109.94.119.168 attackspam
Telnet Honeypot -> Telnet Bruteforce / Login
2020-08-07 21:01:18
164.132.98.75 attack
Aug  7 02:39:19 web1 sshd\[22563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.98.75  user=root
Aug  7 02:39:21 web1 sshd\[22563\]: Failed password for root from 164.132.98.75 port 53762 ssh2
Aug  7 02:43:18 web1 sshd\[23007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.98.75  user=root
Aug  7 02:43:19 web1 sshd\[23007\]: Failed password for root from 164.132.98.75 port 58461 ssh2
Aug  7 02:47:11 web1 sshd\[23298\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.98.75  user=root
2020-08-07 21:03:58
109.244.35.42 attackspambots
Aug  3 05:56:00 ns sshd[31565]: Connection from 109.244.35.42 port 39250 on 134.119.36.27 port 22
Aug  3 05:56:03 ns sshd[31565]: User r.r from 109.244.35.42 not allowed because not listed in AllowUsers
Aug  3 05:56:03 ns sshd[31565]: Failed password for invalid user r.r from 109.244.35.42 port 39250 ssh2
Aug  3 05:56:03 ns sshd[31565]: Received disconnect from 109.244.35.42 port 39250:11: Bye Bye [preauth]
Aug  3 05:56:03 ns sshd[31565]: Disconnected from 109.244.35.42 port 39250 [preauth]
Aug  3 06:05:33 ns sshd[9368]: Connection from 109.244.35.42 port 55982 on 134.119.36.27 port 22
Aug  3 06:05:41 ns sshd[9368]: User r.r from 109.244.35.42 not allowed because not listed in AllowUsers
Aug  3 06:05:41 ns sshd[9368]: Failed password for invalid user r.r from 109.244.35.42 port 55982 ssh2
Aug  3 06:05:41 ns sshd[9368]: Received disconnect from 109.244.35.42 port 55982:11: Bye Bye [preauth]
Aug  3 06:05:41 ns sshd[9368]: Disconnected from 109.244.35.42 port 55982 [preaut........
-------------------------------
2020-08-07 21:21:17
18.144.21.52 attackbots
Automatic report - XMLRPC Attack
2020-08-07 21:06:07
212.64.12.236 attackbots
Aug  7 13:52:36 ovpn sshd\[15235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.12.236  user=root
Aug  7 13:52:38 ovpn sshd\[15235\]: Failed password for root from 212.64.12.236 port 51584 ssh2
Aug  7 14:04:31 ovpn sshd\[20226\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.12.236  user=root
Aug  7 14:04:33 ovpn sshd\[20226\]: Failed password for root from 212.64.12.236 port 54282 ssh2
Aug  7 14:07:30 ovpn sshd\[21257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.12.236  user=root
2020-08-07 21:42:20
37.6.138.142 attackbots
DATE:2020-08-07 14:07:40, IP:37.6.138.142, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-08-07 21:23:19
37.59.56.124 attackbotsspam
37.59.56.124 - - [07/Aug/2020:14:08:01 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
37.59.56.124 - - [07/Aug/2020:14:08:02 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
37.59.56.124 - - [07/Aug/2020:14:08:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-08-07 21:09:19
192.35.169.19 attackbotsspam
 TCP (SYN) 192.35.169.19:63317 -> port 465, len 44
2020-08-07 21:11:58
217.165.23.53 attackspam
Aug  3 09:57:18 vestacp sshd[24243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.165.23.53  user=r.r
Aug  3 09:57:20 vestacp sshd[24243]: Failed password for r.r from 217.165.23.53 port 60400 ssh2
Aug  3 09:57:21 vestacp sshd[24243]: Received disconnect from 217.165.23.53 port 60400:11: Bye Bye [preauth]
Aug  3 09:57:21 vestacp sshd[24243]: Disconnected from authenticating user r.r 217.165.23.53 port 60400 [preauth]
Aug  3 09:59:12 vestacp sshd[24313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.165.23.53  user=r.r
Aug  3 09:59:14 vestacp sshd[24313]: Failed password for r.r from 217.165.23.53 port 56720 ssh2
Aug  3 09:59:15 vestacp sshd[24313]: Received disconnect from 217.165.23.53 port 56720:11: Bye Bye [preauth]
Aug  3 09:59:15 vestacp sshd[24313]: Disconnected from authenticating user r.r 217.165.23.53 port 56720 [preauth]
Aug  3 10:00:44 vestacp sshd[24825]: pam_unix(ss........
-------------------------------
2020-08-07 21:27:22
211.57.153.250 attackbots
SSH brutforce
2020-08-07 21:34:54
67.199.133.12 attackbots
Aug  4 08:52:32 h1946882 sshd[32103]: reveeclipse mapping checking getaddri=
nfo for 12.133.199.67.belairinternet.com [67.199.133.12] failed - POSSI=
BLE BREAK-IN ATTEMPT!
Aug  4 08:52:32 h1946882 sshd[32103]: pam_unix(sshd:auth): authenticati=
on failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D67.1=
99.133.12=20
Aug  4 08:52:34 h1946882 sshd[32103]: Failed password for invalid user =
admin from 67.199.133.12 port 53075 ssh2
Aug  4 08:52:34 h1946882 sshd[32103]: Received disconnect from 67.199.1=
33.12: 11: Bye Bye [preauth]
Aug  4 08:52:35 h1946882 sshd[32106]: reveeclipse mapping checking getaddri=
nfo for 12.133.199.67.belairinternet.com [67.199.133.12] failed - POSSI=
BLE BREAK-IN ATTEMPT!
Aug  4 08:52:35 h1946882 sshd[32106]: pam_unix(sshd:auth): authenticati=
on failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D67.1=
99.133.12=20


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=67.199.133.12
2020-08-07 21:44:18

最近上报的IP列表

67.72.211.150 171.39.18.48 170.238.239.0 48.35.131.165
202.116.121.171 99.59.253.165 150.224.122.109 49.185.48.149
33.7.147.230 221.106.20.252 136.212.95.242 201.129.165.72
159.46.28.148 202.70.102.16 248.255.30.109 60.221.70.198
16.236.255.41 210.139.105.128 174.62.61.69 149.69.84.97