必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
49.7.20.28 attack
Automatic report - Banned IP Access
2020-09-04 00:48:59
49.7.20.28 attack
Port Scan: TCP/443
2020-09-03 16:13:27
49.7.20.28 attack
Port Scan: TCP/443
2020-09-03 08:21:48
49.7.20.86 attackbotsspam
Dangerous
2020-08-18 05:09:48
49.7.20.28 attackbots
404 NOT FOUND
2020-08-14 12:45:26
49.7.20.28 attack
Malicious brute force vulnerability hacking attacks
2020-06-24 21:19:56
49.7.20.28 attackbots
IP: 49.7.20.28
Ports affected
    http protocol over TLS/SSL (443) 
    World Wide Web HTTP (80) 
Abuse Confidence rating 35%
Found in DNSBL('s)
ASN Details
   AS23724 IDC China Telecommunications Corporation
   China (CN)
   CIDR 49.7.0.0/16
Log Date: 7/03/2020 5:59:58 AM UTC
2020-03-07 15:39:15
49.7.20.96 attackspambots
IP: 49.7.20.96
Ports affected
    World Wide Web HTTP (80) 
Found in DNSBL('s)
ASN Details
   AS23724 IDC China Telecommunications Corporation
   China (CN)
   CIDR 49.7.0.0/16
Log Date: 28/02/2020 4:42:31 PM UTC
2020-02-29 01:36:31
49.7.20.161 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 54330e29e9a3e819 | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: jschallenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 04:57:49
49.7.20.7 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5430747a7e05eb25 | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: jschallenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 04:06:55
49.7.20.22 attackbotsspam
The IP has triggered Cloudflare WAF. CF-Ray: 54340382ba31e7f9 | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: jschallenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 00:15:26
49.7.20.177 attack
The IP has triggered Cloudflare WAF. CF-Ray: 540fb9f34fb3e50e | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 03:22:51
49.7.20.173 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 540f7019ae38e82d | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 00:26:18
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.7.20.89
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12632
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.7.20.89.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400

;; Query time: 49 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 19 00:13:19 CST 2025
;; MSG SIZE  rcvd: 103
HOST信息:
89.20.7.49.in-addr.arpa domain name pointer sogouspider-49-7-20-89.crawl.sogou.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
89.20.7.49.in-addr.arpa	name = sogouspider-49-7-20-89.crawl.sogou.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
198.20.99.130 attackspam
198.20.99.130 was recorded 8 times by 6 hosts attempting to connect to the following ports: 7778,8585,2556,3119,3085,8766,805,3087. Incident counter (4h, 24h, all-time): 8, 32, 216
2019-11-09 19:55:53
120.136.167.74 attackspam
Nov  9 08:50:33 yesfletchmain sshd\[9747\]: User root from 120.136.167.74 not allowed because not listed in AllowUsers
Nov  9 08:50:33 yesfletchmain sshd\[9747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.136.167.74  user=root
Nov  9 08:50:35 yesfletchmain sshd\[9747\]: Failed password for invalid user root from 120.136.167.74 port 52170 ssh2
Nov  9 08:55:21 yesfletchmain sshd\[9834\]: User root from 120.136.167.74 not allowed because not listed in AllowUsers
Nov  9 08:55:21 yesfletchmain sshd\[9834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.136.167.74  user=root
...
2019-11-09 19:39:59
111.231.75.83 attack
Nov  9 13:23:05 server sshd\[20328\]: User root from 111.231.75.83 not allowed because listed in DenyUsers
Nov  9 13:23:05 server sshd\[20328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.75.83  user=root
Nov  9 13:23:07 server sshd\[20328\]: Failed password for invalid user root from 111.231.75.83 port 52074 ssh2
Nov  9 13:27:33 server sshd\[21836\]: User root from 111.231.75.83 not allowed because listed in DenyUsers
Nov  9 13:27:33 server sshd\[21836\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.75.83  user=root
2019-11-09 20:03:48
85.128.142.54 attackbotsspam
Automatic report - XMLRPC Attack
2019-11-09 19:34:53
103.72.144.23 attackspambots
Fail2Ban - SSH Bruteforce Attempt
2019-11-09 19:45:34
45.125.66.31 attack
\[2019-11-09 06:22:47\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-09T06:22:47.561-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="90748178599002",SessionID="0x7fdf2c8a8ab8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.66.31/57839",ACLName="no_extension_match"
\[2019-11-09 06:24:24\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-09T06:24:24.525-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="2011248178599002",SessionID="0x7fdf2c8a8ab8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.66.31/58734",ACLName="no_extension_match"
\[2019-11-09 06:25:58\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-09T06:25:58.590-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="80110148178599002",SessionID="0x7fdf2cd1cd48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.66.31/51282",ACLName="no_exte
2019-11-09 20:09:32
106.13.57.239 attackspam
Nov  9 11:51:32 srv-ubuntu-dev3 sshd[11625]: Invalid user !@#$%^abcdefg from 106.13.57.239
Nov  9 11:51:32 srv-ubuntu-dev3 sshd[11625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.239
Nov  9 11:51:32 srv-ubuntu-dev3 sshd[11625]: Invalid user !@#$%^abcdefg from 106.13.57.239
Nov  9 11:51:34 srv-ubuntu-dev3 sshd[11625]: Failed password for invalid user !@#$%^abcdefg from 106.13.57.239 port 36646 ssh2
Nov  9 11:56:28 srv-ubuntu-dev3 sshd[11983]: Invalid user tomcat2 from 106.13.57.239
Nov  9 11:56:28 srv-ubuntu-dev3 sshd[11983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.239
Nov  9 11:56:28 srv-ubuntu-dev3 sshd[11983]: Invalid user tomcat2 from 106.13.57.239
Nov  9 11:56:30 srv-ubuntu-dev3 sshd[11983]: Failed password for invalid user tomcat2 from 106.13.57.239 port 43832 ssh2
Nov  9 12:01:24 srv-ubuntu-dev3 sshd[12320]: Invalid user Qadmin*963 from 106.13.57.239
...
2019-11-09 19:54:30
202.172.18.83 attack
202.172.18.83 was recorded 5 times by 5 hosts attempting to connect to the following ports: 80. Incident counter (4h, 24h, all-time): 5, 9, 9
2019-11-09 19:37:41
42.56.92.142 attackspam
Port Scan 1433
2019-11-09 19:25:58
222.186.180.17 attackbotsspam
Nov  9 16:47:37 gw1 sshd[11683]: Failed password for root from 222.186.180.17 port 59016 ssh2
Nov  9 16:47:49 gw1 sshd[11683]: Failed password for root from 222.186.180.17 port 59016 ssh2
...
2019-11-09 19:48:01
37.59.100.22 attack
2019-11-09 08:07:54,364 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 37.59.100.22
2019-11-09 08:44:04,690 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 37.59.100.22
2019-11-09 09:17:20,819 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 37.59.100.22
2019-11-09 09:49:41,269 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 37.59.100.22
2019-11-09 10:21:56,784 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 37.59.100.22
...
2019-11-09 20:08:13
184.154.47.6 attack
3389BruteforceFW23
2019-11-09 19:29:17
42.51.194.4 attackbots
Nov  9 10:22:29 fr01 sshd[4380]: Invalid user p@ssw0rd from 42.51.194.4
Nov  9 10:22:29 fr01 sshd[4380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.194.4
Nov  9 10:22:29 fr01 sshd[4380]: Invalid user p@ssw0rd from 42.51.194.4
Nov  9 10:22:30 fr01 sshd[4380]: Failed password for invalid user p@ssw0rd from 42.51.194.4 port 47203 ssh2
...
2019-11-09 19:38:15
112.85.42.229 attack
2019-11-09T10:19:22.809813abusebot-2.cloudsearch.cf sshd\[13102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.229  user=root
2019-11-09 19:36:21
54.36.126.81 attack
Nov  9 06:18:39 game-panel sshd[1982]: Failed password for root from 54.36.126.81 port 35226 ssh2
Nov  9 06:22:04 game-panel sshd[2094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.126.81
Nov  9 06:22:07 game-panel sshd[2094]: Failed password for invalid user info from 54.36.126.81 port 17674 ssh2
2019-11-09 19:54:42

最近上报的IP列表

151.161.194.219 199.126.115.121 178.128.21.118 128.141.68.66
34.200.82.58 101.255.97.2 92.15.240.1 69.60.21.58
216.152.44.253 233.148.90.39 115.82.210.95 27.62.170.50
204.105.2.236 41.141.18.191 73.239.101.131 98.9.39.61
155.112.26.51 203.213.158.242 90.131.247.18 74.7.223.90