必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Mongolia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): YOKOZUNANET LLC

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.0.169.204
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62789
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.0.169.204.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071601 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 17 03:14:29 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
Host 204.169.0.49.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 204.169.0.49.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
111.243.151.27 attackbots
Telnet Server BruteForce Attack
2019-09-24 22:20:00
92.222.216.81 attackspam
Sep 24 04:07:20 php1 sshd\[25280\]: Invalid user admin from 92.222.216.81
Sep 24 04:07:20 php1 sshd\[25280\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.216.81
Sep 24 04:07:22 php1 sshd\[25280\]: Failed password for invalid user admin from 92.222.216.81 port 56841 ssh2
Sep 24 04:11:34 php1 sshd\[25797\]: Invalid user User from 92.222.216.81
Sep 24 04:11:34 php1 sshd\[25797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.216.81
2019-09-24 22:11:58
91.121.110.97 attack
Sep 24 15:50:41 core sshd[15814]: Invalid user md from 91.121.110.97 port 40412
Sep 24 15:50:43 core sshd[15814]: Failed password for invalid user md from 91.121.110.97 port 40412 ssh2
...
2019-09-24 21:56:29
54.39.191.188 attack
Sep 24 15:48:11 bouncer sshd\[29502\]: Invalid user postgres from 54.39.191.188 port 48500
Sep 24 15:48:11 bouncer sshd\[29502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.191.188 
Sep 24 15:48:13 bouncer sshd\[29502\]: Failed password for invalid user postgres from 54.39.191.188 port 48500 ssh2
...
2019-09-24 21:55:32
185.193.126.33 attackspambots
Forbidden directory scan :: 2019/09/25 00:18:53 [error] 1103#1103: *185666 access forbidden by rule, client: 185.193.126.33, server: [censored_1], request: "GET /wpdump_db.sql HTTP/1.1", host: "[censored_1]", referrer: "http://[censored_1]/wpdump_db.sql"
2019-09-24 22:24:07
40.114.44.98 attackspambots
F2B jail: sshd. Time: 2019-09-24 15:21:01, Reported by: VKReport
2019-09-24 21:43:11
221.132.17.74 attack
Sep 24 03:28:53 wbs sshd\[10731\]: Invalid user ey from 221.132.17.74
Sep 24 03:28:53 wbs sshd\[10731\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.132.17.74
Sep 24 03:28:55 wbs sshd\[10731\]: Failed password for invalid user ey from 221.132.17.74 port 37016 ssh2
Sep 24 03:34:26 wbs sshd\[11209\]: Invalid user odoo from 221.132.17.74
Sep 24 03:34:26 wbs sshd\[11209\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.132.17.74
2019-09-24 21:42:17
49.88.112.78 attack
Sep 24 08:28:44 debian sshd[6157]: Unable to negotiate with 49.88.112.78 port 54163: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
Sep 24 09:42:11 debian sshd[11823]: Unable to negotiate with 49.88.112.78 port 27040: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
...
2019-09-24 21:50:25
41.89.94.30 attackbotsspam
Forbidden directory scan :: 2019/09/24 22:45:34 [error] 1103#1103: *179015 access forbidden by rule, client: 41.89.94.30, server: [censored_4], request: "GET /[censored_4]_mssql.sql HTTP/1.1", host: "[censored_4]", referrer: "http://[censored_4]/[censored_4]_mssql.sql"
2019-09-24 21:58:29
222.186.15.110 attack
v+ssh-bruteforce
2019-09-24 21:37:18
195.228.22.54 attackspambots
Sep 23 10:31:18 xb0 sshd[20365]: Failed password for invalid user apache from 195.228.22.54 port 25729 ssh2
Sep 23 10:31:18 xb0 sshd[20365]: Received disconnect from 195.228.22.54: 11: Bye Bye [preauth]
Sep 23 10:48:37 xb0 sshd[30472]: Failed password for invalid user ghost from 195.228.22.54 port 7521 ssh2
Sep 23 10:48:37 xb0 sshd[30472]: Received disconnect from 195.228.22.54: 11: Bye Bye [preauth]
Sep 23 10:52:44 xb0 sshd[29065]: Failed password for invalid user teamspeak from 195.228.22.54 port 13985 ssh2
Sep 23 10:52:44 xb0 sshd[29065]: Received disconnect from 195.228.22.54: 11: Bye Bye [preauth]
Sep 23 10:57:06 xb0 sshd[27381]: Failed password for invalid user juliana from 195.228.22.54 port 24450 ssh2
Sep 23 10:57:06 xb0 sshd[27381]: Received disconnect from 195.228.22.54: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=195.228.22.54
2019-09-24 22:17:13
222.186.42.241 attackspambots
19/9/24@09:45:55: FAIL: Alarm-SSH address from=222.186.42.241
...
2019-09-24 21:47:12
18.27.197.252 attack
mail auth brute force
2019-09-24 22:10:31
139.199.119.67 attack
212.218.19.43 139.199.119.67 \[24/Sep/2019:14:45:01 +0200\] "GET /scripts/setup.php HTTP/1.1" 301 546 "-" "Mozilla/4.0 \(compatible\; MSIE 8.0\; Windows NT 6.1\; Win64\; x64\; Trident/4.0\)"
212.218.19.43 139.199.119.67 \[24/Sep/2019:14:45:01 +0200\] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 301 568 "-" "Mozilla/4.0 \(compatible\; MSIE 8.0\; Windows NT 6.1\; Win64\; x64\; Trident/4.0\)"
212.218.19.43 139.199.119.67 \[24/Sep/2019:14:45:01 +0200\] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 301 568 "-" "Mozilla/4.0 \(compatible\; MSIE 8.0\; Windows NT 6.1\; Win64\; x64\; Trident/4.0\)"
2019-09-24 22:21:05
193.47.72.15 attackspam
Sep 24 04:05:18 lcdev sshd\[32168\]: Invalid user tamara from 193.47.72.15
Sep 24 04:05:18 lcdev sshd\[32168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.47.72.15
Sep 24 04:05:20 lcdev sshd\[32168\]: Failed password for invalid user tamara from 193.47.72.15 port 33082 ssh2
Sep 24 04:09:28 lcdev sshd\[32613\]: Invalid user tr from 193.47.72.15
Sep 24 04:09:28 lcdev sshd\[32613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.47.72.15
2019-09-24 22:21:19

最近上报的IP列表

88.103.22.218 68.63.197.24 41.232.175.141 191.127.121.99
129.244.60.97 37.6.172.58 200.4.225.39 201.86.218.132
125.198.185.49 178.32.58.182 2003:dd:af43:bbed:9c5e:11c3:12e4:a1a3 49.69.47.22
23.56.140.217 61.223.19.154 157.61.30.16 88.80.54.252
171.66.84.117 74.188.35.85 71.83.59.28 142.56.240.42