必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): South Africa

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.56.165.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64415
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;41.56.165.138.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022500 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 25 16:56:16 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 138.165.56.41.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.165.56.41.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
222.186.42.94 attackbots
Sep 10 23:17:46 kapalua sshd\[11901\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.94  user=root
Sep 10 23:17:48 kapalua sshd\[11901\]: Failed password for root from 222.186.42.94 port 40010 ssh2
Sep 10 23:17:54 kapalua sshd\[11911\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.94  user=root
Sep 10 23:17:56 kapalua sshd\[11911\]: Failed password for root from 222.186.42.94 port 16898 ssh2
Sep 10 23:18:01 kapalua sshd\[11917\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.94  user=root
2019-09-11 17:23:20
141.98.9.67 attackspambots
Sep 11 13:10:13 relay postfix/smtpd\[24064\]: warning: unknown\[141.98.9.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 11 13:10:44 relay postfix/smtpd\[24815\]: warning: unknown\[141.98.9.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 11 13:10:56 relay postfix/smtpd\[17886\]: warning: unknown\[141.98.9.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 11 13:11:26 relay postfix/smtpd\[16351\]: warning: unknown\[141.98.9.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 11 13:11:38 relay postfix/smtpd\[24064\]: warning: unknown\[141.98.9.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2019-09-11 19:17:06
36.72.212.20 attack
Sep 11 09:01:02 MK-Soft-VM6 sshd\[28354\]: Invalid user password from 36.72.212.20 port 26095
Sep 11 09:01:02 MK-Soft-VM6 sshd\[28354\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.72.212.20
Sep 11 09:01:04 MK-Soft-VM6 sshd\[28354\]: Failed password for invalid user password from 36.72.212.20 port 26095 ssh2
...
2019-09-11 17:28:03
193.93.193.67 attack
B: Magento admin pass test (wrong country)
2019-09-11 18:51:05
15.188.70.213 attackbots
Sep 11 11:22:21 www sshd\[240932\]: Invalid user minecraft from 15.188.70.213
Sep 11 11:22:21 www sshd\[240932\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=15.188.70.213
Sep 11 11:22:23 www sshd\[240932\]: Failed password for invalid user minecraft from 15.188.70.213 port 45272 ssh2
...
2019-09-11 19:04:44
124.165.224.158 attack
IMAP brute force
...
2019-09-11 18:59:10
189.78.106.198 attack
Sep 10 22:31:13 eddieflores sshd\[5514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.78.106.198  user=mysql
Sep 10 22:31:15 eddieflores sshd\[5514\]: Failed password for mysql from 189.78.106.198 port 41842 ssh2
Sep 10 22:38:12 eddieflores sshd\[6149\]: Invalid user postgres from 189.78.106.198
Sep 10 22:38:12 eddieflores sshd\[6149\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.78.106.198
Sep 10 22:38:14 eddieflores sshd\[6149\]: Failed password for invalid user postgres from 189.78.106.198 port 45490 ssh2
2019-09-11 17:41:53
185.102.189.128 attackbots
Sep 11 09:54:56 h2177944 kernel: \[1065010.816401\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.102.189.128 DST=85.214.117.9 LEN=44 TOS=0x00 PREC=0x00 TTL=55 ID=43582 PROTO=TCP SPT=54143 DPT=83 WINDOW=22362 RES=0x00 SYN URGP=0 
Sep 11 09:55:08 h2177944 kernel: \[1065022.886411\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.102.189.128 DST=85.214.117.9 LEN=44 TOS=0x00 PREC=0x00 TTL=55 ID=43582 PROTO=TCP SPT=54143 DPT=83 WINDOW=22362 RES=0x00 SYN URGP=0 
Sep 11 09:56:24 h2177944 kernel: \[1065098.926998\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.102.189.128 DST=85.214.117.9 LEN=44 TOS=0x00 PREC=0x00 TTL=55 ID=43582 PROTO=TCP SPT=54143 DPT=83 WINDOW=22362 RES=0x00 SYN URGP=0 
Sep 11 09:57:04 h2177944 kernel: \[1065139.601066\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.102.189.128 DST=85.214.117.9 LEN=44 TOS=0x00 PREC=0x00 TTL=55 ID=43582 PROTO=TCP SPT=54143 DPT=83 WINDOW=22362 RES=0x00 SYN URGP=0 
Sep 11 09:57:14 h2177944 kernel: \[1065149.736657\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.102.189.128 DST=85.214.117
2019-09-11 17:24:45
86.44.58.191 attackbotsspam
Sep 11 11:28:18 pornomens sshd\[10066\]: Invalid user sammy from 86.44.58.191 port 34198
Sep 11 11:28:18 pornomens sshd\[10066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.44.58.191
Sep 11 11:28:20 pornomens sshd\[10066\]: Failed password for invalid user sammy from 86.44.58.191 port 34198 ssh2
...
2019-09-11 17:32:46
182.147.243.50 attack
recursive dns scanner
2019-09-11 18:52:20
88.214.26.171 attack
Sep 11 11:22:11 core sshd[5803]: Invalid user admin from 88.214.26.171 port 40667
Sep 11 11:22:14 core sshd[5803]: Failed password for invalid user admin from 88.214.26.171 port 40667 ssh2
...
2019-09-11 17:25:12
123.207.40.70 attackbots
Sep 11 11:08:06 legacy sshd[13714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.40.70
Sep 11 11:08:08 legacy sshd[13714]: Failed password for invalid user debian from 123.207.40.70 port 60458 ssh2
Sep 11 11:13:03 legacy sshd[13832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.40.70
...
2019-09-11 17:32:13
146.88.240.4 attack
recursive dns scanner
2019-09-11 18:54:18
192.99.68.159 attack
Reported by AbuseIPDB proxy server.
2019-09-11 18:17:06
42.200.208.158 attack
Sep 11 00:52:32 eddieflores sshd\[19011\]: Invalid user git from 42.200.208.158
Sep 11 00:52:32 eddieflores sshd\[19011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42-200-208-158.static.imsbiz.com
Sep 11 00:52:35 eddieflores sshd\[19011\]: Failed password for invalid user git from 42.200.208.158 port 54392 ssh2
Sep 11 00:59:00 eddieflores sshd\[19578\]: Invalid user testuser from 42.200.208.158
Sep 11 00:59:00 eddieflores sshd\[19578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42-200-208-158.static.imsbiz.com
2019-09-11 19:11:01

最近上报的IP列表

32.251.66.138 241.214.103.193 240.104.87.183 127.209.213.140
214.135.149.148 144.183.61.26 99.145.251.128 30.197.176.91
251.198.175.14 197.139.135.247 139.56.212.115 128.20.151.79
229.137.22.193 247.83.22.210 187.73.169.92 45.50.187.181
94.3.86.99 7.182.205.31 241.201.186.113 150.105.143.25