必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 222.204.196.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61894
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;222.204.196.158.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400

;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 09:39:29 CST 2025
;; MSG SIZE  rcvd: 108
HOST信息:
Host 158.196.204.222.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
server can't find 222.204.196.158.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
80.211.237.180 attack
Nov  5 08:46:48 toyboy sshd[12892]: reveeclipse mapping checking getaddrinfo for host180-237-211-80.serverdedicati.aruba.hostname [80.211.237.180] failed - POSSIBLE BREAK-IN ATTEMPT!
Nov  5 08:46:48 toyboy sshd[12892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.237.180  user=r.r
Nov  5 08:46:50 toyboy sshd[12892]: Failed password for r.r from 80.211.237.180 port 43287 ssh2
Nov  5 08:46:50 toyboy sshd[12892]: Received disconnect from 80.211.237.180: 11: Bye Bye [preauth]
Nov  5 09:19:49 toyboy sshd[13851]: reveeclipse mapping checking getaddrinfo for host180-237-211-80.serverdedicati.aruba.hostname [80.211.237.180] failed - POSSIBLE BREAK-IN ATTEMPT!
Nov  5 09:19:49 toyboy sshd[13851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.237.180  user=r.r
Nov  5 09:19:51 toyboy sshd[13851]: Failed password for r.r from 80.211.237.180 port 47041 ssh2
Nov  5 09:19:51 toyboy sshd[1........
-------------------------------
2019-11-07 16:47:12
49.234.25.11 attackspam
Nov  7 02:21:43 srv2 sshd\[16990\]: Invalid user ZXC from 49.234.25.11
Nov  7 02:21:43 srv2 sshd\[16990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.25.11
Nov  7 02:21:46 srv2 sshd\[16990\]: Failed password for invalid user ZXC from 49.234.25.11 port 42930 ssh2
...
2019-11-07 16:58:26
5.15.152.53 attackspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/5.15.152.53/ 
 
 RO - 1H : (26)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : RO 
 NAME ASN : ASN8708 
 
 IP : 5.15.152.53 
 
 CIDR : 5.12.0.0/14 
 
 PREFIX COUNT : 236 
 
 UNIQUE IP COUNT : 2129408 
 
 
 ATTACKS DETECTED ASN8708 :  
  1H - 1 
  3H - 1 
  6H - 5 
 12H - 8 
 24H - 18 
 
 DateTime : 2019-11-07 07:27:39 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-07 16:52:51
189.8.68.56 attackbots
k+ssh-bruteforce
2019-11-07 16:49:56
46.101.151.51 attackbotsspam
Nov  6 22:08:41 tdfoods sshd\[6611\]: Invalid user passw0rd06 from 46.101.151.51
Nov  6 22:08:41 tdfoods sshd\[6611\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.151.51
Nov  6 22:08:43 tdfoods sshd\[6611\]: Failed password for invalid user passw0rd06 from 46.101.151.51 port 33378 ssh2
Nov  6 22:12:22 tdfoods sshd\[7008\]: Invalid user dexmond from 46.101.151.51
Nov  6 22:12:22 tdfoods sshd\[7008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.151.51
2019-11-07 16:35:20
180.183.142.206 attackbotsspam
Automatic report - XMLRPC Attack
2019-11-07 16:30:53
116.196.81.5 attackspambots
Nov  7 13:22:41 webhost01 sshd[1063]: Failed password for root from 116.196.81.5 port 39366 ssh2
...
2019-11-07 16:55:26
112.166.68.193 attackbotsspam
SSH brute-force: detected 19 distinct usernames within a 24-hour window.
2019-11-07 16:41:37
103.134.201.139 attackspam
Nov  4 11:32:34 our-server-hostname postfix/smtpd[5334]: connect from unknown[103.134.201.139]
Nov x@x
Nov  4 11:32:38 our-server-hostname postfix/smtpd[5334]: lost connection after RCPT from unknown[103.134.201.139]
Nov  4 11:32:38 our-server-hostname postfix/smtpd[5334]: disconnect from unknown[103.134.201.139]
Nov  4 18:20:23 our-server-hostname postfix/smtpd[4736]: connect from unknown[103.134.201.139]
Nov x@x
Nov  4 18:20:25 our-server-hostname postfix/smtpd[4736]: lost connection after RCPT from unknown[103.134.201.139]
Nov  4 18:20:25 our-server-hostname postfix/smtpd[4736]: disconnect from unknown[103.134.201.139]
Nov  4 20:56:48 our-server-hostname postfix/smtpd[21648]: connect from unknown[103.134.201.139]
Nov x@x
Nov x@x
Nov  4 20:56:51 our-server-hostname postfix/smtpd[21648]: lost connection after RCPT from unknown[103.134.201.139]
Nov  4 20:56:51 our-server-hostname postfix/smtpd[21648]: disconnect from unknown[103.134.201.139]
Nov  4 21:03:28 our-server-h........
-------------------------------
2019-11-07 16:31:45
222.186.175.140 attackspam
Nov  7 09:31:51 legacy sshd[1443]: Failed password for root from 222.186.175.140 port 15894 ssh2
Nov  7 09:31:57 legacy sshd[1443]: Failed password for root from 222.186.175.140 port 15894 ssh2
Nov  7 09:32:02 legacy sshd[1443]: Failed password for root from 222.186.175.140 port 15894 ssh2
Nov  7 09:32:07 legacy sshd[1443]: Failed password for root from 222.186.175.140 port 15894 ssh2
...
2019-11-07 16:35:04
222.186.169.192 attack
Nov  7 09:40:16 legacy sshd[1724]: Failed password for root from 222.186.169.192 port 62528 ssh2
Nov  7 09:40:29 legacy sshd[1724]: error: maximum authentication attempts exceeded for root from 222.186.169.192 port 62528 ssh2 [preauth]
Nov  7 09:40:42 legacy sshd[1731]: Failed password for root from 222.186.169.192 port 52288 ssh2
...
2019-11-07 16:51:05
218.77.107.84 attackspam
Nov  3 22:06:58 pl3server sshd[2366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.77.107.84  user=r.r
Nov  3 22:07:01 pl3server sshd[2366]: Failed password for r.r from 218.77.107.84 port 58934 ssh2
Nov  3 22:07:01 pl3server sshd[2366]: Received disconnect from 218.77.107.84: 11: Bye Bye [preauth]
Nov  3 22:14:35 pl3server sshd[16879]: Invalid user ub from 218.77.107.84
Nov  3 22:14:35 pl3server sshd[16879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.77.107.84
Nov  3 22:14:37 pl3server sshd[16879]: Failed password for invalid user ub from 218.77.107.84 port 49333 ssh2
Nov  7 06:54:32 pl3server sshd[29960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.77.107.84  user=r.r
Nov  7 06:54:34 pl3server sshd[29960]: Failed password for r.r from 218.77.107.84 port 28045 ssh2
Nov  7 06:54:34 pl3server sshd[29960]: Received disconnect from........
-------------------------------
2019-11-07 17:01:47
185.156.73.52 attackspam
Scanning (more than 2 packets) random ports - tries to find possible vulnerable services
2019-11-07 16:33:03
5.251.177.219 attackspambots
namecheap spam
2019-11-07 16:29:12
123.132.10.102 attackspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/123.132.10.102/ 
 
 CN - 1H : (645)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN4837 
 
 IP : 123.132.10.102 
 
 CIDR : 123.128.0.0/13 
 
 PREFIX COUNT : 1262 
 
 UNIQUE IP COUNT : 56665856 
 
 
 ATTACKS DETECTED ASN4837 :  
  1H - 14 
  3H - 38 
  6H - 76 
 12H - 125 
 24H - 227 
 
 DateTime : 2019-11-07 07:28:03 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-07 16:34:05

最近上报的IP列表

218.27.78.71 5.57.145.126 37.118.34.125 249.47.139.160
230.219.39.185 14.92.115.118 70.57.118.254 238.254.148.64
152.13.114.38 211.115.99.116 78.78.230.18 99.162.139.110
230.80.71.254 121.108.167.179 133.196.31.74 198.63.165.240
121.198.39.89 156.40.28.37 234.249.54.87 197.218.217.227