必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 44.138.209.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57480
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;44.138.209.30.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012301 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 02:37:10 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 30.209.138.44.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 30.209.138.44.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
190.77.236.95 attack
Icarus honeypot on github
2020-06-11 08:20:54
219.250.188.2 attack
Jun 11 01:07:12 h2779839 sshd[3130]: Invalid user ftpuser from 219.250.188.2 port 38582
Jun 11 01:07:12 h2779839 sshd[3130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.250.188.2
Jun 11 01:07:12 h2779839 sshd[3130]: Invalid user ftpuser from 219.250.188.2 port 38582
Jun 11 01:07:14 h2779839 sshd[3130]: Failed password for invalid user ftpuser from 219.250.188.2 port 38582 ssh2
Jun 11 01:11:01 h2779839 sshd[3218]: Invalid user admin from 219.250.188.2 port 40274
Jun 11 01:11:01 h2779839 sshd[3218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.250.188.2
Jun 11 01:11:01 h2779839 sshd[3218]: Invalid user admin from 219.250.188.2 port 40274
Jun 11 01:11:03 h2779839 sshd[3218]: Failed password for invalid user admin from 219.250.188.2 port 40274 ssh2
Jun 11 01:14:51 h2779839 sshd[3278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.250.188.2  user=root

...
2020-06-11 08:28:12
106.12.178.246 attack
Ssh brute force
2020-06-11 08:17:56
185.175.93.104 attackbots
=Multiport scan 360 ports : 3 81 135(x2) 139 222 443 445(x2) 678(x2) 999(x2) 1000(x2) 1001(x2) 1003 1021(x2) 1089(x2) 1110 1111 1122(x2) 1189(x2) 1213 1234(x2) 1313(x2) 1314(x2) 1338(x2) 1448 1616(x2) 1718(x2) 1818(x2) 2000 2001 2015 2017 2018 2090 2112(x2) 2222 2289 2300 2389 2512 2525 2828 3001 3003 3020 3073 3080 3090 3129 3192 3200 3202 3232 3262 3301 3302 3303 3306 3309 3322 3323 3331 3333(x2) 3334 3343 3344 3351 3366 3377 3380 3381 3382 3384 3385 3386 3388 3390 3393 3394 3398 3401(x2) 3402(x2) 3403(x2) 3405(x2) 3407(x2) 3409 3410(x2) 3444(x2) 3456 3473 3489 3500(x2) 3501(x2) 3535(x2) 3541 3555(x2) 3589(x2) 3636(x2) 3669(x2) 3777(x2) 3817 3820(x2) 3838(x2) 3839(x2) 3884 3900 3901(x2) 3922(x2) 3939(x2) 3940(x2) 3999(x2) 4000(x2) 4001 4002 4010 4041 4082 4100 4201 4243 4371 4450 4545 4567 4606 4742(x2) 4779 4785 4900 4950 5000 5017(x2) 5050 5051(x2) 5100 5311(x2) 5328 5353 5365(x2) 5432(x3) 5469(x2) 5500 5558 5560 5566 5577 5582(x2) 5775 5999(x2) 6000 6001 6006 6030 6121(x2) 6150(x2)....
2020-06-11 08:35:24
142.44.185.242 attackbots
'Fail2Ban'
2020-06-11 12:03:10
106.12.189.91 attackbots
2020-06-10T18:53:08.3459081495-001 sshd[14012]: Failed password for root from 106.12.189.91 port 52868 ssh2
2020-06-10T18:56:55.5623251495-001 sshd[14137]: Invalid user ubuntu from 106.12.189.91 port 47726
2020-06-10T18:56:55.5661721495-001 sshd[14137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.189.91
2020-06-10T18:56:55.5623251495-001 sshd[14137]: Invalid user ubuntu from 106.12.189.91 port 47726
2020-06-10T18:56:58.1226481495-001 sshd[14137]: Failed password for invalid user ubuntu from 106.12.189.91 port 47726 ssh2
2020-06-10T19:00:29.5979801495-001 sshd[14271]: Invalid user lidaninggao from 106.12.189.91 port 42576
...
2020-06-11 08:20:24
87.54.2.166 attackbotsspam
Trying ports that it shouldn't be.
2020-06-11 12:09:05
91.83.88.53 attackspambots
Jun 10 21:09:12 pl3server postfix/smtpd[6996]: connect from unknown[91.83.88.53]
Jun 10 21:09:12 pl3server postfix/smtpd[6996]: connect from unknown[91.83.88.53]
Jun 10 21:09:13 pl3server postfix/smtpd[6996]: warning: unknown[91.83.88.53]: SASL CRAM-MD5 authentication failed: authentication failure
Jun 10 21:09:13 pl3server postfix/smtpd[6996]: warning: unknown[91.83.88.53]: SASL CRAM-MD5 authentication failed: authentication failure
Jun 10 21:09:13 pl3server postfix/smtpd[6996]: warning: unknown[91.83.88.53]: SASL PLAIN authentication failed: authentication failure
Jun 10 21:09:13 pl3server postfix/smtpd[6996]: warning: unknown[91.83.88.53]: SASL PLAIN authentication failed: authentication failure


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=91.83.88.53
2020-06-11 08:39:15
49.234.47.124 attack
20 attempts against mh-ssh on cloud
2020-06-11 12:11:59
157.230.251.115 attackspam
$f2bV_matches
2020-06-11 12:15:11
173.252.87.116 attackbotsspam
[Thu Jun 11 02:21:23.632724 2020] [:error] [pid 6144:tid 140673151084288] [client 173.252.87.116:44918] [client 173.252.87.116] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/IcoMoon.woff"] [unique_id "XuEysyvgppKIBnaVaYZPPAABwgE"]
...
2020-06-11 08:30:19
52.130.93.119 attackbots
Invalid user pns from 52.130.93.119 port 1024
2020-06-11 08:22:23
219.137.52.144 attackspambots
Jun 11 06:56:18 journals sshd\[46318\]: Invalid user admin from 219.137.52.144
Jun 11 06:56:18 journals sshd\[46318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.137.52.144
Jun 11 06:56:19 journals sshd\[46318\]: Failed password for invalid user admin from 219.137.52.144 port 12586 ssh2
Jun 11 06:58:51 journals sshd\[46605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.137.52.144  user=root
Jun 11 06:58:53 journals sshd\[46605\]: Failed password for root from 219.137.52.144 port 33816 ssh2
...
2020-06-11 12:15:30
139.99.237.183 attackspambots
2020-06-10 14:27:14.779515-0500  localhost sshd[24948]: Failed password for invalid user admin from 139.99.237.183 port 39806 ssh2
2020-06-11 08:34:57
113.212.108.26 attackspam
Jun 10 21:21:42 debian-2gb-nbg1-2 kernel: \[14075631.980903\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=113.212.108.26 DST=195.201.40.59 LEN=163 TOS=0x00 PREC=0x00 TTL=115 ID=37240 PROTO=UDP SPT=54179 DPT=62471 LEN=143
2020-06-11 08:16:24

最近上报的IP列表

6.97.37.46 50.41.128.115 43.47.188.166 247.140.247.233
249.171.6.65 27.234.193.148 143.97.173.112 75.81.158.239
230.211.151.193 100.63.115.92 17.180.33.70 68.218.134.144
242.113.134.2 196.87.54.78 41.94.125.42 29.46.42.137
93.214.52.96 155.75.248.14 32.112.135.116 242.20.94.181