必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): South Africa

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.21.254.197
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23655
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;41.21.254.197.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022001 1800 900 604800 86400

;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 05:26:08 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
197.254.21.41.in-addr.arpa domain name pointer vc-vb-41-21-254-197.ens.vodacom.co.za.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
197.254.21.41.in-addr.arpa	name = vc-vb-41-21-254-197.ens.vodacom.co.za.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
122.51.89.18 attack
Jul  4 15:11:09 jane sshd[30853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.89.18 
Jul  4 15:11:11 jane sshd[30853]: Failed password for invalid user public from 122.51.89.18 port 57134 ssh2
...
2020-07-05 01:14:50
113.180.195.165 attackbots
Port scan on 1 port(s): 445
2020-07-05 01:42:33
185.108.106.251 attackbotsspam
[2020-07-04 13:32:16] NOTICE[1197] chan_sip.c: Registration from '' failed for '185.108.106.251:49535' - Wrong password
[2020-07-04 13:32:16] SECURITY[1214] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-04T13:32:16.296-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3037",SessionID="0x7f6d28136c98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.108.106.251/49535",Challenge="25377108",ReceivedChallenge="25377108",ReceivedHash="166ed5224ef4b84fb2756e638bcc8936"
[2020-07-04 13:32:43] NOTICE[1197] chan_sip.c: Registration from '' failed for '185.108.106.251:61257' - Wrong password
[2020-07-04 13:32:43] SECURITY[1214] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-04T13:32:43.510-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3037",SessionID="0x7f6d28742108",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.108
...
2020-07-05 01:40:53
103.92.26.252 attackspam
Jul  4 15:11:03 ArkNodeAT sshd\[29492\]: Invalid user installer from 103.92.26.252
Jul  4 15:11:03 ArkNodeAT sshd\[29492\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.92.26.252
Jul  4 15:11:04 ArkNodeAT sshd\[29492\]: Failed password for invalid user installer from 103.92.26.252 port 40630 ssh2
2020-07-05 01:10:02
106.12.146.9 attackbotsspam
Jul  4 17:21:49 *** sshd[29673]: Invalid user m from 106.12.146.9
2020-07-05 01:23:38
60.251.42.155 attackbotsspam
20 attempts against mh-ssh on cloud
2020-07-05 01:18:02
82.132.88.195 attack
07/04/2020-08:55:01.991016 82.132.88.195 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-07-05 01:10:18
94.102.49.82 attackbots
 TCP (SYN) 94.102.49.82:46828 -> port 41101, len 44
2020-07-05 01:40:08
112.85.42.180 attackbots
$f2bV_matches
2020-07-05 01:41:55
106.13.167.3 attackbots
(sshd) Failed SSH login from 106.13.167.3 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul  4 18:05:55 srv sshd[26253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.167.3  user=root
Jul  4 18:05:58 srv sshd[26253]: Failed password for root from 106.13.167.3 port 57242 ssh2
Jul  4 18:11:29 srv sshd[26420]: Invalid user wenyan from 106.13.167.3 port 40412
Jul  4 18:11:31 srv sshd[26420]: Failed password for invalid user wenyan from 106.13.167.3 port 40412 ssh2
Jul  4 18:15:41 srv sshd[26555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.167.3  user=root
2020-07-05 01:31:02
68.183.65.4 attack
Jul  4 13:42:30 django-0 sshd[27636]: Invalid user ts3 from 68.183.65.4
...
2020-07-05 01:15:53
46.38.145.248 attackbots
Jul  4 19:28:04 [snip] postfix/submission/smtpd[18901]: warning: unknown[46.38.145.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  4 19:28:48 [snip] postfix/submission/smtpd[18901]: warning: unknown[46.38.145.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  4 19:29:33 [snip] postfix/submission/smtpd[18901]: warning: unknown[46.38.145.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  4 19:30:17 [snip] postfix/submission/smtpd[18901]: warning: unknown[46.38.145.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  4 19:31:00 [snip] postfix/submission/smtpd[18901]: warning: unknown[46.38.145.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6[...]
2020-07-05 01:31:21
128.199.121.11 attackspambots
Jul  4 16:55:52 rush sshd[1700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.121.11
Jul  4 16:55:54 rush sshd[1700]: Failed password for invalid user carla from 128.199.121.11 port 20829 ssh2
Jul  4 16:59:26 rush sshd[1809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.121.11
...
2020-07-05 01:22:14
120.5.40.222 attackspambots
DATE:2020-07-04 14:09:40, IP:120.5.40.222, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-07-05 01:32:51
139.155.24.139 attackspambots
(sshd) Failed SSH login from 139.155.24.139 (CN/China/-): 5 in the last 3600 secs
2020-07-05 01:41:24

最近上报的IP列表

225.73.118.145 101.52.168.169 125.7.175.183 21.140.201.229
38.14.159.163 33.109.3.176 96.211.88.175 25.122.70.150
115.97.207.253 42.65.252.62 9.222.231.116 218.124.120.244
94.91.155.229 53.7.166.84 246.106.73.92 144.34.152.122
141.58.122.80 100.54.30.203 108.99.233.61 25.143.92.47