必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 230.28.23.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24567
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;230.28.23.20.			IN	A

;; AUTHORITY SECTION:
.			400	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020040500 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 05 17:50:42 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
Host 20.23.28.230.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.23.28.230.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
50.62.208.51 attackspambots
Automatic report - XMLRPC Attack
2019-10-20 22:48:25
202.179.17.7 attackspambots
Unauthorized connection attempt from IP address 202.179.17.7 on Port 445(SMB)
2019-10-20 23:06:41
193.202.80.142 attackbots
193.202.80.142 - - [20/Oct/2019:08:02:15 -0400] "GET /?page=products&action=%2fetc%2fpasswd&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 17146 "https://newportbrassfaucets.com/?page=products&action=%2fetc%2fpasswd&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
...
2019-10-20 22:47:38
129.250.206.86 attack
" "
2019-10-20 22:30:25
123.30.128.138 attack
Oct 20 14:01:47 rotator sshd\[4532\]: Failed password for root from 123.30.128.138 port 40970 ssh2Oct 20 14:01:50 rotator sshd\[4532\]: Failed password for root from 123.30.128.138 port 40970 ssh2Oct 20 14:01:53 rotator sshd\[4532\]: Failed password for root from 123.30.128.138 port 40970 ssh2Oct 20 14:01:56 rotator sshd\[4532\]: Failed password for root from 123.30.128.138 port 40970 ssh2Oct 20 14:02:00 rotator sshd\[4532\]: Failed password for root from 123.30.128.138 port 40970 ssh2Oct 20 14:02:03 rotator sshd\[4532\]: Failed password for root from 123.30.128.138 port 40970 ssh2
...
2019-10-20 23:01:19
45.148.235.108 attackbotsspam
45.148.235.108 - - [20/Oct/2019:08:02:29 -0400] "GET /?page=products&action=/etc/passwd%00&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 17147 "https://newportbrassfaucets.com/?page=products&action=/etc/passwd%00&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
...
2019-10-20 22:38:01
117.91.133.219 attack
Oct 20 07:55:29 esmtp postfix/smtpd[24423]: lost connection after AUTH from unknown[117.91.133.219]
Oct 20 07:55:30 esmtp postfix/smtpd[24423]: lost connection after AUTH from unknown[117.91.133.219]
Oct 20 07:55:32 esmtp postfix/smtpd[24423]: lost connection after AUTH from unknown[117.91.133.219]
Oct 20 07:55:33 esmtp postfix/smtpd[24423]: lost connection after AUTH from unknown[117.91.133.219]
Oct 20 07:55:34 esmtp postfix/smtpd[24423]: lost connection after AUTH from unknown[117.91.133.219]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.91.133.219
2019-10-20 23:01:45
63.141.244.186 attackspambots
fail2ban honeypot
2019-10-20 22:33:24
193.202.81.39 attackspambots
193.202.81.39 - - [20/Oct/2019:08:02:08 -0400] "GET /?page=products&action=/etc/passwd&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 17295 "https://newportbrassfaucets.com/?page=products&action=/etc/passwd&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
...
2019-10-20 22:53:12
1.20.102.54 attackbotsspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/1.20.102.54/ 
 
 TH - 1H : (31)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TH 
 NAME ASN : ASN23969 
 
 IP : 1.20.102.54 
 
 CIDR : 1.20.102.0/24 
 
 PREFIX COUNT : 1783 
 
 UNIQUE IP COUNT : 1183744 
 
 
 ATTACKS DETECTED ASN23969 :  
  1H - 2 
  3H - 3 
  6H - 5 
 12H - 6 
 24H - 9 
 
 DateTime : 2019-10-20 14:02:17 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery
2019-10-20 22:46:58
160.16.94.153 attackspam
2019-10-18T04:38:49.355372ldap.arvenenaske.de sshd[21397]: Connection from 160.16.94.153 port 43949 on 5.199.128.55 port 22
2019-10-18T04:38:51.066310ldap.arvenenaske.de sshd[21397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.16.94.153  user=r.r
2019-10-18T04:38:53.009202ldap.arvenenaske.de sshd[21397]: Failed password for r.r from 160.16.94.153 port 43949 ssh2
2019-10-18T04:42:47.458090ldap.arvenenaske.de sshd[21403]: Connection from 160.16.94.153 port 36004 on 5.199.128.55 port 22
2019-10-18T04:42:49.169635ldap.arvenenaske.de sshd[21403]: Invalid user user from 160.16.94.153 port 36004
2019-10-18T04:42:49.203110ldap.arvenenaske.de sshd[21403]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.16.94.153 user=user
2019-10-18T04:42:49.205147ldap.arvenenaske.de sshd[21403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.16.94.153
2019-10-18........
------------------------------
2019-10-20 22:59:59
142.11.205.123 attackbotsspam
Oct 20 13:50:36 mxgate1 postfix/postscreen[6839]: CONNECT from [142.11.205.123]:40992 to [176.31.12.44]:25
Oct 20 13:50:36 mxgate1 postfix/dnsblog[6952]: addr 142.11.205.123 listed by domain zen.spamhaus.org as 127.0.0.3
Oct 20 13:50:36 mxgate1 postfix/dnsblog[6950]: addr 142.11.205.123 listed by domain b.barracudacentral.org as 127.0.0.2
Oct 20 13:50:42 mxgate1 postfix/postscreen[6839]: DNSBL rank 3 for [142.11.205.123]:40992
Oct x@x
Oct 20 13:50:43 mxgate1 postfix/postscreen[6839]: DISCONNECT [142.11.205.123]:40992


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=142.11.205.123
2019-10-20 22:50:22
188.130.173.9 attackspam
[portscan] Port scan
2019-10-20 23:05:07
13.124.112.211 attack
Automatic report - XMLRPC Attack
2019-10-20 22:27:55
139.59.62.52 attackspam
Oct 20 13:40:25 mxgate1 postfix/postscreen[6535]: CONNECT from [139.59.62.52]:43488 to [176.31.12.44]:25
Oct 20 13:40:25 mxgate1 postfix/dnsblog[6664]: addr 139.59.62.52 listed by domain zen.spamhaus.org as 127.0.0.3
Oct 20 13:40:31 mxgate1 postfix/postscreen[6535]: DNSBL rank 2 for [139.59.62.52]:43488
Oct x@x
Oct 20 13:40:32 mxgate1 postfix/postscreen[6535]: DISCONNECT [139.59.62.52]:43488


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=139.59.62.52
2019-10-20 22:29:55

最近上报的IP列表

34.82.202.253 16.15.235.248 172.69.68.244 247.103.136.64
112.247.224.222 147.198.203.203 179.155.154.193 37.187.128.18
192.71.224.240 221.236.1.222 14.41.18.176 38.254.132.122
81.206.182.32 254.131.198.155 18.129.189.127 152.192.216.246
61.21.241.72 38.221.42.99 171.102.112.13 235.235.100.121