必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 50.221.0.78
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32414
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;50.221.0.78.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022200 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 23 01:10:08 CST 2025
;; MSG SIZE  rcvd: 104
HOST信息:
78.0.221.50.in-addr.arpa domain name pointer 50-221-0-78-static.hfc.comcastbusiness.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
78.0.221.50.in-addr.arpa	name = 50-221-0-78-static.hfc.comcastbusiness.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
78.85.18.163 attackspam
Jun 10 14:01:34 debian kernel: [689449.200918] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=78.85.18.163 DST=89.252.131.35 LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=58849 DF PROTO=TCP SPT=44053 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0
2020-06-10 21:17:52
46.166.143.102 attackbotsspam
[Wed Jun 10 19:06:01.056231 2020] [:error] [pid 19420:tid 140575985821440] [client 46.166.143.102:14837] [client 46.166.143.102] ModSecurity: Access denied with code 403 (phase 2). detected SQLi using libinjection with fingerprint 's&1UE' [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "67"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s&1UE found within ARGS:letter: 1\\x22 and 1=0 union select 1,concat(0x3c757365723e,username,0x3c757365723e3c706173733e,password,0x3c706173733e),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 from jos_users where gid=24 limit 0,1-- a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "staklim-malang.info"]
...
2020-06-10 20:41:45
178.128.13.87 attack
Jun 10 14:06:30 vps687878 sshd\[20323\]: Failed password for root from 178.128.13.87 port 43304 ssh2
Jun 10 14:09:25 vps687878 sshd\[20568\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.13.87  user=root
Jun 10 14:09:27 vps687878 sshd\[20568\]: Failed password for root from 178.128.13.87 port 39078 ssh2
Jun 10 14:12:22 vps687878 sshd\[20949\]: Invalid user dsvmadmin from 178.128.13.87 port 34852
Jun 10 14:12:22 vps687878 sshd\[20949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.13.87
...
2020-06-10 21:10:24
36.89.21.177 attackspam
Unauthorized connection attempt from IP address 36.89.21.177 on Port 445(SMB)
2020-06-10 21:10:09
45.227.255.206 attackbots
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-06-10T10:51:14Z and 2020-06-10T11:02:06Z
2020-06-10 20:34:12
117.247.188.251 attackspam
Unauthorized connection attempt from IP address 117.247.188.251 on Port 445(SMB)
2020-06-10 21:15:23
115.78.1.102 attackbotsspam
Unauthorized connection attempt from IP address 115.78.1.102 on Port 445(SMB)
2020-06-10 21:03:10
194.26.29.25 attackspam
Jun 10 14:34:30 debian-2gb-nbg1-2 kernel: \[14051200.895051\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.29.25 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=65312 PROTO=TCP SPT=52769 DPT=12321 WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-10 20:34:39
222.186.180.8 attack
Jun 10 14:56:19 PorscheCustomer sshd[10650]: Failed password for root from 222.186.180.8 port 11306 ssh2
Jun 10 14:56:23 PorscheCustomer sshd[10650]: Failed password for root from 222.186.180.8 port 11306 ssh2
Jun 10 14:56:35 PorscheCustomer sshd[10650]: Failed password for root from 222.186.180.8 port 11306 ssh2
Jun 10 14:56:35 PorscheCustomer sshd[10650]: error: maximum authentication attempts exceeded for root from 222.186.180.8 port 11306 ssh2 [preauth]
...
2020-06-10 21:15:57
211.147.216.19 attackspam
Jun 10 12:48:34 gestao sshd[3543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.147.216.19 
Jun 10 12:48:36 gestao sshd[3543]: Failed password for invalid user rej from 211.147.216.19 port 38470 ssh2
Jun 10 12:49:47 gestao sshd[3547]: Failed password for root from 211.147.216.19 port 53664 ssh2
...
2020-06-10 20:33:20
157.41.122.89 attackspam
Unauthorized connection attempt from IP address 157.41.122.89 on Port 445(SMB)
2020-06-10 21:06:16
114.67.76.166 attackspam
Jun 10 15:03:47 lukav-desktop sshd\[10809\]: Invalid user qma from 114.67.76.166
Jun 10 15:03:47 lukav-desktop sshd\[10809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.76.166
Jun 10 15:03:49 lukav-desktop sshd\[10809\]: Failed password for invalid user qma from 114.67.76.166 port 57842 ssh2
Jun 10 15:07:29 lukav-desktop sshd\[13767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.76.166  user=proxy
Jun 10 15:07:31 lukav-desktop sshd\[13767\]: Failed password for proxy from 114.67.76.166 port 54300 ssh2
2020-06-10 20:53:53
180.177.33.3 attackbots
Unauthorized connection attempt from IP address 180.177.33.3 on Port 445(SMB)
2020-06-10 20:49:14
80.211.230.69 attackbots
Jun  8 07:41:38 ZTCN001 sshd[293667]: User r.r from 80.211.230.69 not allowed because not listed in AllowUsers
Jun  8 07:41:38 ZTCN001 sshd[293667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.230.69  user=r.r
Jun  8 07:41:38 ZTCN001 sshd[293667]: User r.r from 80.211.230.69 not allowed because not listed in AllowUsers
Jun  8 07:41:40 ZTCN001 sshd[293667]: Failed password for invalid user r.r from 80.211.230.69 port 39680 ssh2
Jun  8 07:49:18 ZTCN001 sshd[293772]: User r.r from 80.211.230.69 not allowed because not listed in AllowUsers


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=80.211.230.69
2020-06-10 20:33:56
139.59.12.65 attack
SSH bruteforce
2020-06-10 20:56:10

最近上报的IP列表

79.253.231.224 193.147.73.247 173.127.126.111 80.154.206.189
83.190.203.144 236.255.128.72 238.231.69.181 41.154.168.94
240.34.135.65 236.115.133.109 49.135.5.200 249.113.203.60
238.205.14.45 242.40.4.199 214.33.29.135 154.179.203.228
65.247.189.36 141.44.191.35 151.160.218.216 228.99.227.201