必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Multicast Address

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 225.164.138.207
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48202
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;225.164.138.207.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022800 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 22:46:53 CST 2025
;; MSG SIZE  rcvd: 108
HOST信息:
Host 207.138.164.225.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 207.138.164.225.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
89.44.201.217 attackbotsspam
Multiport scan 28 ports :  82 83 85 86 87 89 90 91 92 443(x5) 2200 3128 5000 5004 8001 8080 8082 8083 8084 8881 8999 9000 9010 9080 10000 10001 10003 25461
2020-09-08 08:04:27
173.225.103.130 attack
Fail2Ban Ban Triggered
2020-09-08 08:32:58
192.241.184.22 attackspambots
Sep  7 18:43:53 inter-technics sshd[1770]: Invalid user tecmin from 192.241.184.22 port 43158
Sep  7 18:43:53 inter-technics sshd[1770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.184.22
Sep  7 18:43:53 inter-technics sshd[1770]: Invalid user tecmin from 192.241.184.22 port 43158
Sep  7 18:43:55 inter-technics sshd[1770]: Failed password for invalid user tecmin from 192.241.184.22 port 43158 ssh2
Sep  7 18:50:56 inter-technics sshd[2201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.184.22  user=root
Sep  7 18:50:58 inter-technics sshd[2201]: Failed password for root from 192.241.184.22 port 48486 ssh2
...
2020-09-08 08:13:42
185.108.182.94 attackbots
Sep  8 01:00:05 mail sshd[14633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.108.182.94
Sep  8 01:00:07 mail sshd[14633]: Failed password for invalid user nagios from 185.108.182.94 port 27414 ssh2
...
2020-09-08 08:07:44
84.238.46.216 attackspam
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-09-07T17:22:27Z
2020-09-08 08:11:53
138.197.213.134 attackspambots
Lines containing failures of 138.197.213.134 (max 1000)
Sep  7 12:31:44 localhost sshd[7999]: User r.r from 138.197.213.134 not allowed because listed in DenyUsers
Sep  7 12:31:44 localhost sshd[7999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.213.134  user=r.r
Sep  7 12:31:46 localhost sshd[7999]: Failed password for invalid user r.r from 138.197.213.134 port 37984 ssh2
Sep  7 12:31:48 localhost sshd[7999]: Received disconnect from 138.197.213.134 port 37984:11: Bye Bye [preauth]
Sep  7 12:31:48 localhost sshd[7999]: Disconnected from invalid user r.r 138.197.213.134 port 37984 [preauth]
Sep  7 12:34:24 localhost sshd[9325]: User r.r from 138.197.213.134 not allowed because listed in DenyUsers
Sep  7 12:34:24 localhost sshd[9325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.213.134  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=138.197.213.13
2020-09-08 07:56:08
180.214.237.98 attack
Sep  7 23:08:23 relay postfix/smtpd\[7169\]: warning: unknown\[180.214.237.98\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  7 23:08:30 relay postfix/smtpd\[15518\]: warning: unknown\[180.214.237.98\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  7 23:08:41 relay postfix/smtpd\[10555\]: warning: unknown\[180.214.237.98\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  7 23:09:07 relay postfix/smtpd\[15526\]: warning: unknown\[180.214.237.98\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  7 23:09:14 relay postfix/smtpd\[14928\]: warning: unknown\[180.214.237.98\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-09-08 08:05:08
212.154.85.215 attack
20/9/7@12:50:59: FAIL: Alarm-Intrusion address from=212.154.85.215
...
2020-09-08 08:20:13
222.212.171.237 attackbotsspam
222.212.171.237 is unauthorized and has been banned by fail2ban
2020-09-08 08:13:09
151.255.234.212 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-08 08:35:05
117.69.159.58 attack
Sep  7 20:06:21 srv01 postfix/smtpd\[19167\]: warning: unknown\[117.69.159.58\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  7 20:06:32 srv01 postfix/smtpd\[19167\]: warning: unknown\[117.69.159.58\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  7 20:06:48 srv01 postfix/smtpd\[19167\]: warning: unknown\[117.69.159.58\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  7 20:07:06 srv01 postfix/smtpd\[19167\]: warning: unknown\[117.69.159.58\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  7 20:07:17 srv01 postfix/smtpd\[19167\]: warning: unknown\[117.69.159.58\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-09-08 08:06:44
162.247.74.200 attackbotsspam
162.247.74.200 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep  7 20:23:18 server2 sshd[6342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.113.18.109  user=root
Sep  7 20:23:20 server2 sshd[6342]: Failed password for root from 186.113.18.109 port 33560 ssh2
Sep  7 20:26:15 server2 sshd[8591]: Failed password for root from 162.247.74.200 port 36466 ssh2
Sep  7 20:26:08 server2 sshd[8568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.210.50.85  user=root
Sep  7 20:26:10 server2 sshd[8568]: Failed password for root from 104.210.50.85 port 35266 ssh2
Sep  7 20:27:45 server2 sshd[9558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.90.149  user=root

IP Addresses Blocked:

186.113.18.109 (CO/Colombia/-)
2020-09-08 08:28:28
46.146.240.185 attack
Sep  7 17:40:59 online-web-vs-1 sshd[633469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.146.240.185  user=r.r
Sep  7 17:41:01 online-web-vs-1 sshd[633469]: Failed password for r.r from 46.146.240.185 port 44747 ssh2
Sep  7 17:41:02 online-web-vs-1 sshd[633469]: Received disconnect from 46.146.240.185 port 44747:11: Bye Bye [preauth]
Sep  7 17:41:02 online-web-vs-1 sshd[633469]: Disconnected from 46.146.240.185 port 44747 [preauth]
Sep  7 17:47:55 online-web-vs-1 sshd[633960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.146.240.185  user=r.r
Sep  7 17:47:57 online-web-vs-1 sshd[633960]: Failed password for r.r from 46.146.240.185 port 36242 ssh2
Sep  7 17:47:57 online-web-vs-1 sshd[633960]: Received disconnect from 46.146.240.185 port 36242:11: Bye Bye [preauth]
Sep  7 17:47:57 online-web-vs-1 sshd[633960]: Disconnected from 46.146.240.185 port 36242 [preauth]
Sep  7 17:51:36 ........
-------------------------------
2020-09-08 08:30:15
176.192.126.27 attackspam
Ssh brute force
2020-09-08 08:31:28
186.219.216.56 attack
Honeypot attack, port: 445, PTR: 56-216-219-186.static.redeidlnet.com.br.
2020-09-08 08:04:46

最近上报的IP列表

80.67.165.89 193.35.4.229 21.248.131.25 84.77.206.15
40.176.25.103 192.135.9.134 235.55.61.105 105.154.216.138
47.59.142.15 140.94.98.253 86.93.171.191 253.100.40.68
175.133.228.211 187.7.119.240 245.121.107.248 177.53.23.53
147.247.239.178 165.55.179.159 56.204.134.161 186.69.127.12