必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Multicast Address

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 238.52.20.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62124
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;238.52.20.148.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022001 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 02:46:58 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 148.20.52.238.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 148.20.52.238.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
148.70.84.130 attackspambots
$f2bV_matches
2019-09-15 10:42:38
104.238.111.193 attack
[SatSep1420:07:20.4883822019][:error][pid945:tid46947712947968][client104.238.111.193:39477][client104.238.111.193]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"211"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname"136.243.224.56"][uri"/console"][unique_id"XX0sWNLE8J1NsyVSBmuraAAAAA8"][SatSep1420:11:06.0176412019][:error][pid945:tid46947710846720][client104.238.111.193:60831][client104.238.111.193]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"211"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname"
2019-09-15 10:48:15
36.22.179.90 attackbotsspam
Unauthorized connection attempt from IP address 36.22.179.90 on Port 445(SMB)
2019-09-15 11:05:37
159.192.133.106 attack
Sep 15 04:30:27 vmanager6029 sshd\[1790\]: Invalid user louis from 159.192.133.106 port 49619
Sep 15 04:30:27 vmanager6029 sshd\[1790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.192.133.106
Sep 15 04:30:29 vmanager6029 sshd\[1790\]: Failed password for invalid user louis from 159.192.133.106 port 49619 ssh2
2019-09-15 10:59:46
89.22.201.221 attackbotsspam
Brute force attempt
2019-09-15 11:14:56
186.137.123.202 attackspam
Sep 15 04:01:35 XXX sshd[62320]: Invalid user olimex from 186.137.123.202 port 36690
2019-09-15 11:07:51
139.198.120.96 attackspambots
Sep 14 16:55:46 web9 sshd\[13016\]: Invalid user yp from 139.198.120.96
Sep 14 16:55:46 web9 sshd\[13016\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.120.96
Sep 14 16:55:48 web9 sshd\[13016\]: Failed password for invalid user yp from 139.198.120.96 port 42624 ssh2
Sep 14 17:00:00 web9 sshd\[13872\]: Invalid user ftpuser from 139.198.120.96
Sep 14 17:00:00 web9 sshd\[13872\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.120.96
2019-09-15 11:04:24
92.63.194.26 attackbots
Tried sshing with brute force.
2019-09-15 10:56:18
46.105.122.127 attackbots
Sep 14 09:47:59 eddieflores sshd\[30068\]: Invalid user zr from 46.105.122.127
Sep 14 09:47:59 eddieflores sshd\[30068\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns384346.ip-46-105-122.eu
Sep 14 09:48:02 eddieflores sshd\[30068\]: Failed password for invalid user zr from 46.105.122.127 port 38034 ssh2
Sep 14 09:52:11 eddieflores sshd\[30401\]: Invalid user rosine from 46.105.122.127
Sep 14 09:52:11 eddieflores sshd\[30401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns384346.ip-46-105-122.eu
2019-09-15 10:49:52
50.236.62.30 attackspambots
$f2bV_matches
2019-09-15 10:58:11
192.3.177.213 attack
Invalid user admin from 192.3.177.213 port 44090
2019-09-15 10:55:07
213.58.195.185 attackbotsspam
2019-09-15T02:56:22.240409abusebot.cloudsearch.cf sshd\[20025\]: Invalid user administrador from 213.58.195.185 port 4893
2019-09-15 11:00:47
18.136.234.30 attack
Sep 14 22:51:18 xtremcommunity sshd\[94643\]: Invalid user smecher from 18.136.234.30 port 58660
Sep 14 22:51:18 xtremcommunity sshd\[94643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.136.234.30
Sep 14 22:51:19 xtremcommunity sshd\[94643\]: Failed password for invalid user smecher from 18.136.234.30 port 58660 ssh2
Sep 14 22:59:48 xtremcommunity sshd\[94840\]: Invalid user adonis from 18.136.234.30 port 44388
Sep 14 22:59:48 xtremcommunity sshd\[94840\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.136.234.30
...
2019-09-15 11:15:25
13.231.52.226 attackspam
2019-09-14 19:28:18 H=em3-13-231-52-226.ap-northeast-1.compute.amazonaws.com (jsloan.xiubaby.com) [13.231.52.226]:54166 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=13.231.52.226)
2019-09-14 19:28:18 unexpected disconnection while reading SMTP command from em3-13-231-52-226.ap-northeast-1.compute.amazonaws.com (jsloan.xiubaby.com) [13.231.52.226]:54166 I=[10.100.18.22]:25 (error: Connection reset by peer)
2019-09-14 19:58:37 H=em3-13-231-52-226.ap-northeast-1.compute.amazonaws.com (jsloan.xiubaby.com) [13.231.52.226]:52350 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=13.231.52.226)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=13.231.52.226
2019-09-15 10:41:34
139.193.201.53 attackspam
TCP src-port=18499   dst-port=25    abuseat-org barracuda zen-spamhaus         (758)
2019-09-15 10:39:04

最近上报的IP列表

254.50.78.103 164.16.81.47 162.151.226.179 17.27.133.228
244.9.233.6 213.237.62.51 255.112.24.175 240.188.116.58
19.123.206.172 215.254.155.47 177.127.87.55 92.75.182.180
216.223.31.126 236.209.187.11 216.205.252.168 239.128.164.132
218.32.215.28 214.22.135.254 49.42.25.117 90.124.208.5