必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Multicast Address

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 238.157.20.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47625
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;238.157.20.20.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022200 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 22 23:56:46 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 20.20.157.238.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.20.157.238.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
108.162.219.216 attackspambots
WEB SPAM: Invest $ 3269 and get $ 55866 every month: http://v.ht/nLxkJcu?X9Jja0a
2019-10-17 15:09:11
49.88.112.67 attack
Oct 17 08:47:03 v22018076622670303 sshd\[6751\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.67  user=root
Oct 17 08:47:05 v22018076622670303 sshd\[6751\]: Failed password for root from 49.88.112.67 port 31569 ssh2
Oct 17 08:47:07 v22018076622670303 sshd\[6751\]: Failed password for root from 49.88.112.67 port 31569 ssh2
...
2019-10-17 15:05:09
192.169.156.220 attackbotsspam
notenfalter.de 192.169.156.220 \[17/Oct/2019:05:53:26 +0200\] "POST /wp-login.php HTTP/1.1" 200 5594 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
notenfalter.de 192.169.156.220 \[17/Oct/2019:05:53:27 +0200\] "POST /wp-login.php HTTP/1.1" 200 5607 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-10-17 14:38:07
116.196.85.71 attackbots
ssh failed login
2019-10-17 14:56:28
125.130.110.20 attackbotsspam
Oct 17 06:38:08 markkoudstaal sshd[32526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.130.110.20
Oct 17 06:38:09 markkoudstaal sshd[32526]: Failed password for invalid user delynna from 125.130.110.20 port 58890 ssh2
Oct 17 06:42:19 markkoudstaal sshd[522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.130.110.20
2019-10-17 14:34:35
203.148.53.227 attackspam
Oct 15 01:07:26 uapps sshd[31261]: Address 203.148.53.227 maps to static-ip-227-53-148-203.rev.dyxnet.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Oct 15 01:07:28 uapps sshd[31261]: Failed password for invalid user finn from 203.148.53.227 port 58975 ssh2
Oct 15 01:07:28 uapps sshd[31261]: Received disconnect from 203.148.53.227: 11: Bye Bye [preauth]
Oct 15 01:13:03 uapps sshd[31375]: Address 203.148.53.227 maps to static-ip-227-53-148-203.rev.dyxnet.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Oct 15 01:13:03 uapps sshd[31375]: User r.r from 203.148.53.227 not allowed because not listed in AllowUsers
Oct 15 01:13:03 uapps sshd[31375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.148.53.227  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=203.148.53.227
2019-10-17 15:04:39
198.27.70.174 attack
Oct 17 08:21:50 SilenceServices sshd[19508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.27.70.174
Oct 17 08:21:52 SilenceServices sshd[19508]: Failed password for invalid user user from 198.27.70.174 port 54193 ssh2
Oct 17 08:25:39 SilenceServices sshd[20533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.27.70.174
2019-10-17 14:53:30
115.186.148.38 attack
2019-10-17T07:17:15.441771tmaserv sshd\[19371\]: Failed password for invalid user !q@w\#e from 115.186.148.38 port 22392 ssh2
2019-10-17T08:18:26.737552tmaserv sshd\[21913\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115-186-148-38.nayatel.pk  user=root
2019-10-17T08:18:28.946747tmaserv sshd\[21913\]: Failed password for root from 115.186.148.38 port 20273 ssh2
2019-10-17T08:23:13.010402tmaserv sshd\[22087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115-186-148-38.nayatel.pk  user=root
2019-10-17T08:23:14.482762tmaserv sshd\[22087\]: Failed password for root from 115.186.148.38 port 59211 ssh2
2019-10-17T08:28:45.177010tmaserv sshd\[22263\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115-186-148-38.nayatel.pk  user=root
...
2019-10-17 14:51:05
5.135.108.140 attack
Oct 17 05:50:03 cvbnet sshd[16200]: Failed password for root from 5.135.108.140 port 37434 ssh2
Oct 17 05:53:33 cvbnet sshd[16203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.108.140 
...
2019-10-17 14:37:02
177.95.75.114 attackspam
Oct 16 08:48:44 vayu sshd[307379]: reveeclipse mapping checking getaddrinfo for 177-95-75-114.dsl.telesp.net.br [177.95.75.114] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct 16 08:48:44 vayu sshd[307379]: Invalid user 00000 from 177.95.75.114
Oct 16 08:48:44 vayu sshd[307379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.95.75.114 
Oct 16 08:48:45 vayu sshd[307379]: Failed password for invalid user 00000 from 177.95.75.114 port 53920 ssh2
Oct 16 08:48:46 vayu sshd[307379]: Received disconnect from 177.95.75.114: 11: Bye Bye [preauth]
Oct 16 08:53:22 vayu sshd[309096]: reveeclipse mapping checking getaddrinfo for 177-95-75-114.dsl.telesp.net.br [177.95.75.114] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct 16 08:53:22 vayu sshd[309096]: Invalid user spargeosu from 177.95.75.114
Oct 16 08:53:22 vayu sshd[309096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.95.75.114 


........
-----------------------------------------------
https
2019-10-17 14:44:11
195.31.160.73 attack
Oct 16 20:23:28 web9 sshd\[2120\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.31.160.73  user=root
Oct 16 20:23:30 web9 sshd\[2120\]: Failed password for root from 195.31.160.73 port 58820 ssh2
Oct 16 20:27:18 web9 sshd\[2697\]: Invalid user qihaiyang from 195.31.160.73
Oct 16 20:27:18 web9 sshd\[2697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.31.160.73
Oct 16 20:27:20 web9 sshd\[2697\]: Failed password for invalid user qihaiyang from 195.31.160.73 port 44232 ssh2
2019-10-17 14:30:29
59.52.97.130 attack
Oct 17 08:57:47 DAAP sshd[17637]: Invalid user chinanetcenter from 59.52.97.130 port 59782
Oct 17 08:57:47 DAAP sshd[17637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.52.97.130
Oct 17 08:57:47 DAAP sshd[17637]: Invalid user chinanetcenter from 59.52.97.130 port 59782
Oct 17 08:57:48 DAAP sshd[17637]: Failed password for invalid user chinanetcenter from 59.52.97.130 port 59782 ssh2
...
2019-10-17 15:04:03
69.195.124.132 attackbotsspam
Sql/code injection probe
2019-10-17 14:39:27
92.118.38.37 attackspambots
Oct 17 08:26:10 relay postfix/smtpd\[10577\]: warning: unknown\[92.118.38.37\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 17 08:26:26 relay postfix/smtpd\[17872\]: warning: unknown\[92.118.38.37\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 17 08:26:45 relay postfix/smtpd\[12160\]: warning: unknown\[92.118.38.37\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 17 08:27:01 relay postfix/smtpd\[9198\]: warning: unknown\[92.118.38.37\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 17 08:27:20 relay postfix/smtpd\[12160\]: warning: unknown\[92.118.38.37\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2019-10-17 14:30:52
222.186.173.201 attackbotsspam
Oct 17 11:58:36 gw1 sshd[7159]: Failed password for root from 222.186.173.201 port 3016 ssh2
Oct 17 11:58:53 gw1 sshd[7159]: error: maximum authentication attempts exceeded for root from 222.186.173.201 port 3016 ssh2 [preauth]
...
2019-10-17 15:05:41

最近上报的IP列表

144.183.131.149 181.1.84.221 107.77.198.96 98.233.243.168
199.66.102.92 221.222.210.175 69.153.130.156 48.68.116.112
174.144.24.254 47.16.176.83 210.39.72.231 187.133.29.50
189.51.60.241 199.204.241.186 70.88.241.25 22.5.237.177
100.55.105.233 155.163.28.208 212.64.255.38 54.181.113.107