必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Korea (the Republic of)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.147.125.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24271
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;52.147.125.139.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022701 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 03:24:07 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
Host 139.125.147.52.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.125.147.52.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
129.28.155.113 attackspambots
2020-10-09T16:54:52.853579abusebot-6.cloudsearch.cf sshd[3448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.155.113  user=root
2020-10-09T16:54:55.260564abusebot-6.cloudsearch.cf sshd[3448]: Failed password for root from 129.28.155.113 port 59078 ssh2
2020-10-09T16:57:48.571007abusebot-6.cloudsearch.cf sshd[3458]: Invalid user lynn from 129.28.155.113 port 35398
2020-10-09T16:57:48.577629abusebot-6.cloudsearch.cf sshd[3458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.155.113
2020-10-09T16:57:48.571007abusebot-6.cloudsearch.cf sshd[3458]: Invalid user lynn from 129.28.155.113 port 35398
2020-10-09T16:57:50.482328abusebot-6.cloudsearch.cf sshd[3458]: Failed password for invalid user lynn from 129.28.155.113 port 35398 ssh2
2020-10-09T17:00:54.583020abusebot-6.cloudsearch.cf sshd[3465]: Invalid user admin from 129.28.155.113 port 39956
...
2020-10-10 02:58:27
13.94.245.44 attackbotsspam
xmlrpc attack
2020-10-10 02:41:26
45.148.122.20 attack
Invalid user fake from 45.148.122.20 port 39788
2020-10-10 02:28:00
105.235.137.111 attackbotsspam
105.235.137.111
wrong_password
23 times
2020-10-10 02:58:13
58.16.204.238 attackbots
SSH brute-force attempt
2020-10-10 02:34:03
72.167.190.203 attackspam
72.167.190.203 - - \[09/Oct/2020:00:03:55 +0300\] "POST /WORDPRESS/xmlrpc.php HTTP/1.1" 404 564 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/60.0.3112.113 Safari/537.36" "-"
72.167.190.203 - - \[09/Oct/2020:00:03:56 +0300\] "POST /wordpress/xmlrpc.php HTTP/1.1" 200 443 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/60.0.3112.113 Safari/537.36" "-"
...
2020-10-10 02:29:39
167.114.114.107 attackspam
Oct  9 17:25:38 *** sshd[1629]: User root from 167.114.114.107 not allowed because not listed in AllowUsers
2020-10-10 02:28:19
181.167.197.206 attackbots
php WP PHPmyadamin ABUSE blocked for 12h
2020-10-10 02:47:43
116.85.64.100 attackspam
116.85.64.100 (CN/China/-), 7 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct  9 06:23:47 jbs1 sshd[23194]: Failed password for root from 58.185.183.60 port 59898 ssh2
Oct  9 06:26:45 jbs1 sshd[24140]: Failed password for root from 58.185.183.60 port 46414 ssh2
Oct  9 06:30:11 jbs1 sshd[25196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.85.64.100  user=root
Oct  9 06:29:34 jbs1 sshd[24965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.152.124.24  user=root
Oct  9 06:24:46 jbs1 sshd[23347]: Failed password for root from 3.22.223.189 port 34346 ssh2
Oct  9 06:29:35 jbs1 sshd[24965]: Failed password for root from 177.152.124.24 port 39668 ssh2
Oct  9 06:29:40 jbs1 sshd[25024]: Failed password for root from 58.185.183.60 port 32926 ssh2

IP Addresses Blocked:

58.185.183.60 (SG/Singapore/-)
2020-10-10 02:39:03
105.235.137.144 attackbots
105.235.137.144 wrong_password 29times
2020-10-10 02:25:07
89.64.29.119 attackbotsspam
Brute Force attack - banned by Fail2Ban
2020-10-10 02:44:03
128.199.251.10 attack
Oct  8 13:11:50 foo sshd[10620]: Did not receive identification string from 128.199.251.10
Oct  8 13:14:32 foo sshd[10662]: Invalid user Boss321 from 128.199.251.10
Oct  8 13:14:32 foo sshd[10662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.251.10 
Oct  8 13:14:34 foo sshd[10662]: Failed password for invalid user Boss321 from 128.199.251.10 port 47264 ssh2
Oct  8 13:14:34 foo sshd[10662]: Received disconnect from 128.199.251.10: 11: Normal Shutdown, Thank you for playing [preauth]
Oct  8 13:15:06 foo sshd[10690]: Invalid user RiiRii from 128.199.251.10
Oct  8 13:15:06 foo sshd[10690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.251.10 
Oct  8 13:15:08 foo sshd[10690]: Failed password for invalid user RiiRii from 128.199.251.10 port 39708 ssh2
Oct  8 13:15:08 foo sshd[10690]: Received disconnect from 128.199.251.10: 11: Normal Shutdown, Thank you for playing [preauth]........
-------------------------------
2020-10-10 02:36:21
174.228.135.81 attackspam
Ports 80,443,465 : ET EXPLOIT Possible VXWORKS Urgent11 RCE Attempt - Urgent Flag
2020-10-10 02:49:32
157.230.243.22 attackbots
[munged]::443 157.230.243.22 - - [09/Oct/2020:15:39:38 +0200] "POST /[munged]: HTTP/1.1" 200 8146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 157.230.243.22 - - [09/Oct/2020:15:39:46 +0200] "POST /[munged]: HTTP/1.1" 200 8151 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 157.230.243.22 - - [09/Oct/2020:15:39:55 +0200] "POST /[munged]: HTTP/1.1" 200 8089 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 157.230.243.22 - - [09/Oct/2020:15:40:04 +0200] "POST /[munged]: HTTP/1.1" 200 8150 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 157.230.243.22 - - [09/Oct/2020:15:40:06 +0200] "POST /[munged]: HTTP/1.1" 200 8135 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 157.230.243.22 - - [09/Oct/2020:15:40:19 +0200] "POST /[munged]: HTTP/1.1" 200 8135 "-" "Mozilla/5.0 (X11
2020-10-10 02:40:18
193.70.0.42 attackspambots
IP blocked
2020-10-10 02:54:13

最近上报的IP列表

232.31.97.169 99.246.181.145 52.39.38.42 204.99.214.19
132.231.159.207 122.228.62.39 64.184.26.58 97.246.116.232
109.72.16.214 92.143.77.206 187.23.29.29 179.235.4.175
168.213.239.200 46.68.80.232 243.186.87.182 63.124.135.117
9.180.223.254 5.219.236.128 235.121.46.40 114.162.55.68