必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 40.18.237.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33508
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;40.18.237.134.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012301 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 02:11:52 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 134.237.18.40.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 134.237.18.40.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
162.243.145.98 attack
Portscan or hack attempt detected by psad/fwsnort
2019-07-25 06:04:35
125.64.94.212 attack
firewall-block, port(s): 2323/tcp, 8291/tcp, 29999/tcp
2019-07-25 05:50:03
188.84.189.235 attackbots
Jul 24 18:05:21 TORMINT sshd\[7916\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.84.189.235  user=root
Jul 24 18:05:24 TORMINT sshd\[7916\]: Failed password for root from 188.84.189.235 port 56486 ssh2
Jul 24 18:09:41 TORMINT sshd\[9375\]: Invalid user fi from 188.84.189.235
Jul 24 18:09:41 TORMINT sshd\[9375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.84.189.235
...
2019-07-25 06:10:06
139.59.9.58 attack
Jul 24 22:37:42 debian sshd\[28426\]: Invalid user user from 139.59.9.58 port 59504
Jul 24 22:37:42 debian sshd\[28426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.9.58
...
2019-07-25 06:26:20
89.40.110.36 attackbots
Unauthorised access (Jul 24) SRC=89.40.110.36 LEN=40 PREC=0x20 TTL=242 ID=1790 DF TCP DPT=23 WINDOW=14600 SYN 
Unauthorised access (Jul 24) SRC=89.40.110.36 LEN=40 PREC=0x20 TTL=240 ID=58608 DF TCP DPT=23 WINDOW=14600 SYN 
Unauthorised access (Jul 24) SRC=89.40.110.36 LEN=40 PREC=0x20 TTL=242 ID=58589 DF TCP DPT=23 WINDOW=14600 SYN 
Unauthorised access (Jul 23) SRC=89.40.110.36 LEN=40 PREC=0x20 TTL=240 ID=46296 DF TCP DPT=23 WINDOW=14600 SYN 
Unauthorised access (Jul 23) SRC=89.40.110.36 LEN=40 PREC=0x20 TTL=240 ID=23537 DF TCP DPT=23 WINDOW=14600 SYN 
Unauthorised access (Jul 22) SRC=89.40.110.36 LEN=40 PREC=0x20 TTL=242 ID=36354 DF TCP DPT=23 WINDOW=14600 SYN
2019-07-25 06:36:00
85.209.0.41 attackspam
Blocked for port scanning.
Time: Wed Jul 24. 09:12:41 2019 +0200
IP: 85.209.0.41 (RU/Russia/-)

Sample of block hits:
Jul 24 09:12:00 vserv kernel: [13593938.048019] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=85.209.0.41 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=8371 PROTO=TCP SPT=52315 DPT=3499 WINDOW=1024 RES=0x00 SYN URGP=0
Jul 24 09:12:08 vserv kernel: [13593945.483774] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=85.209.0.41 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=62380 PROTO=TCP SPT=52315 DPT=5939 WINDOW=1024 RES=0x00 SYN URGP=0
Jul 24 09:12:15 vserv kernel: [13593952.427285] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=85.209.0.41 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=40758 PROTO=TCP SPT=52315 DPT=3489 WINDOW=1024 RES=0x00 SYN URGP=0
Jul 24 09:12:15 vserv kernel: [13593953.216063] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=85.209.0.41 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=56380 PROTO=TCP SPT=52315 DPT=8000 WINDOW=1024
2019-07-25 05:59:31
164.132.230.244 attackbots
Invalid user usuario from 164.132.230.244 port 50452
2019-07-25 05:57:12
45.13.39.167 attackbotsspam
Jul 24 23:21:37 mail postfix/smtpd\[26415\]: warning: unknown\[45.13.39.167\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul 24 23:52:09 mail postfix/smtpd\[27633\]: warning: unknown\[45.13.39.167\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul 24 23:52:44 mail postfix/smtpd\[28095\]: warning: unknown\[45.13.39.167\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul 24 23:53:22 mail postfix/smtpd\[28113\]: warning: unknown\[45.13.39.167\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2019-07-25 05:52:05
117.60.141.200 attack
Jul 24 19:19:26 lively sshd[7868]: Bad protocol version identification '' from 117.60.141.200 port 33318
Jul 24 19:19:28 lively sshd[7869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.60.141.200  user=r.r
Jul 24 19:19:30 lively sshd[7869]: Failed password for r.r from 117.60.141.200 port 33451 ssh2
Jul 24 19:19:31 lively sshd[7869]: Connection closed by authenticating user r.r 117.60.141.200 port 33451 [preauth]
Jul 24 19:19:34 lively sshd[7871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.60.141.200  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.60.141.200
2019-07-25 06:22:49
162.244.80.125 attack
" "
2019-07-25 05:49:16
54.37.18.31 attackbotsspam
WordPress login Brute force / Web App Attack on client site.
2019-07-25 06:24:44
222.190.151.98 attackspam
8080/tcp 8080/tcp
[2019-07-24]2pkt
2019-07-25 05:45:17
94.176.76.103 attack
(Jul 24)  LEN=40 TTL=245 ID=47270 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 24)  LEN=40 TTL=245 ID=47977 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 24)  LEN=40 TTL=245 ID=41944 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 24)  LEN=40 TTL=245 ID=36313 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 24)  LEN=40 TTL=245 ID=56421 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 23)  LEN=40 TTL=245 ID=55004 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 23)  LEN=40 TTL=245 ID=363 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 23)  LEN=40 TTL=245 ID=4028 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 23)  LEN=40 TTL=245 ID=11503 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 23)  LEN=40 TTL=245 ID=30114 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 22)  LEN=40 TTL=245 ID=41861 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 22)  LEN=40 TTL=245 ID=46104 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 22)  LEN=40 TTL=245 ID=35613 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 22)  LEN=40 TTL=245 ID=23467 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul 22)  LEN=40 TTL=245 ID=22163 DF TCP DPT=23 WINDOW=14600 SYN
2019-07-25 06:08:09
104.248.74.238 attackbotsspam
Jul 24 11:56:52 aat-srv002 sshd[17000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.74.238
Jul 24 11:56:54 aat-srv002 sshd[17000]: Failed password for invalid user tomcat from 104.248.74.238 port 52268 ssh2
Jul 24 12:01:34 aat-srv002 sshd[17075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.74.238
Jul 24 12:01:36 aat-srv002 sshd[17075]: Failed password for invalid user user from 104.248.74.238 port 48048 ssh2
...
2019-07-25 06:18:41
177.72.82.8 attack
2019-07-24 11:37:36 H=(177-72-82-8.hostnewlife.com.br) [177.72.82.8]:33789 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/177.72.82.8)
2019-07-24 11:37:36 H=(177-72-82-8.hostnewlife.com.br) [177.72.82.8]:33789 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/177.72.82.8)
2019-07-24 11:37:37 H=(177-72-82-8.hostnewlife.com.br) [177.72.82.8]:33789 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
...
2019-07-25 06:32:23

最近上报的IP列表

76.121.31.238 253.189.63.127 227.167.68.58 215.168.68.171
254.144.177.157 6.157.129.43 125.31.228.128 147.69.252.112
31.96.33.54 26.136.42.67 33.51.152.175 166.70.115.119
33.52.162.64 128.138.72.78 13.129.95.219 155.227.218.112
157.46.97.10 165.237.34.227 139.15.116.136 10.165.196.145