必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.139.74.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44421
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;5.139.74.94.			IN	A

;; AUTHORITY SECTION:
.			467	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122500 1800 900 604800 86400

;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 25 22:37:32 CST 2019
;; MSG SIZE  rcvd: 115
HOST信息:
94.74.139.5.in-addr.arpa domain name pointer 94.74.139.5.donpac.ru.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
94.74.139.5.in-addr.arpa	name = 94.74.139.5.donpac.ru.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
167.71.45.35 attack
167.71.45.35 - - [11/Aug/2020:09:22:33 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.71.45.35 - - [11/Aug/2020:09:22:34 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.71.45.35 - - [11/Aug/2020:09:22:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-08-11 18:39:20
201.137.206.206 attackbots
Automatic report - Port Scan Attack
2020-08-11 18:42:14
49.233.183.15 attackbotsspam
Aug 11 09:59:30 eventyay sshd[3084]: Failed password for root from 49.233.183.15 port 36170 ssh2
Aug 11 10:02:43 eventyay sshd[3141]: Failed password for root from 49.233.183.15 port 39240 ssh2
...
2020-08-11 18:23:21
91.121.162.198 attackbots
Aug 11 07:16:25 ws24vmsma01 sshd[231096]: Failed password for root from 91.121.162.198 port 55482 ssh2
...
2020-08-11 18:48:05
128.199.88.188 attack
Aug 11 05:43:15 inter-technics sshd[31441]: Invalid user test!@#$%^ from 128.199.88.188 port 56074
Aug 11 05:43:15 inter-technics sshd[31441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.88.188
Aug 11 05:43:15 inter-technics sshd[31441]: Invalid user test!@#$%^ from 128.199.88.188 port 56074
Aug 11 05:43:17 inter-technics sshd[31441]: Failed password for invalid user test!@#$%^ from 128.199.88.188 port 56074 ssh2
Aug 11 05:49:33 inter-technics sshd[31765]: Invalid user opendoor2019 from 128.199.88.188 port 48183
...
2020-08-11 18:16:13
195.154.43.232 attack
195.154.43.232 - - [11/Aug/2020:11:06:30 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
195.154.43.232 - - [11/Aug/2020:11:06:31 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
195.154.43.232 - - [11/Aug/2020:11:06:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-08-11 18:27:03
86.34.240.35 attackbotsspam
Automatic report - Banned IP Access
2020-08-11 18:32:49
87.251.74.30 attack
 TCP (SYN) 87.251.74.30:43354 -> port 1080, len 60
2020-08-11 18:48:29
123.176.35.74 attack
RDP Bruteforce
2020-08-11 18:17:21
112.85.42.186 attack
2020-08-11T13:13:36.146160lavrinenko.info sshd[10433]: Failed password for root from 112.85.42.186 port 24588 ssh2
2020-08-11T13:13:31.849214lavrinenko.info sshd[10435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.186  user=root
2020-08-11T13:13:33.659214lavrinenko.info sshd[10435]: Failed password for root from 112.85.42.186 port 28268 ssh2
2020-08-11T13:13:35.675661lavrinenko.info sshd[10435]: Failed password for root from 112.85.42.186 port 28268 ssh2
2020-08-11T13:13:38.563589lavrinenko.info sshd[10435]: Failed password for root from 112.85.42.186 port 28268 ssh2
...
2020-08-11 18:30:12
69.171.251.119 attack
[Tue Aug 11 10:49:25.609140 2020] [:error] [pid 19073:tid 140057356908288] [client 69.171.251.119:61404] [client 69.171.251.119] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "XzIVRQItzlV1MKh79GOpigABEAM"], referer: https://karangploso.jatim.bmkg.go.id/
...
2020-08-11 18:24:49
117.79.152.238 attack
Brute forcing RDP port 3389
2020-08-11 18:19:45
222.186.52.78 attack
Too many connections or unauthorized access detected from Arctic banned ip
2020-08-11 18:50:24
182.23.3.226 attackspambots
Aug 10 20:10:56 php1 sshd\[22234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.23.3.226  user=root
Aug 10 20:10:58 php1 sshd\[22234\]: Failed password for root from 182.23.3.226 port 43838 ssh2
Aug 10 20:15:53 php1 sshd\[22794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.23.3.226  user=root
Aug 10 20:15:55 php1 sshd\[22794\]: Failed password for root from 182.23.3.226 port 52600 ssh2
Aug 10 20:20:49 php1 sshd\[23298\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.23.3.226  user=root
2020-08-11 18:35:26
146.88.240.4 attackspambots
146.88.240.4 was recorded 16 times by 4 hosts attempting to connect to the following ports: 27017,27018,28015,500,6881,51413,5060. Incident counter (4h, 24h, all-time): 16, 74, 84069
2020-08-11 18:31:15

最近上报的IP列表

14.185.25.104 92.253.92.95 60.217.49.145 60.216.199.18
196.50.4.94 35.233.37.172 134.73.31.223 91.109.118.124
200.194.37.98 91.223.105.208 180.158.10.2 2.179.216.109
45.77.42.233 118.70.131.219 220.163.66.124 221.1.157.181
125.126.208.117 14.203.224.120 104.31.206.43 46.239.139.16