必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
52.149.147.97 spam
they end spam mail
2021-03-04 12:51:01
52.149.146.81 attack
Brute forcing RDP port 3389
2020-07-22 01:38:05
52.149.146.81 attackspam
Jul 15 16:26:43 lnxmysql61 sshd[31435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.146.81
Jul 15 16:26:43 lnxmysql61 sshd[31434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.146.81
Jul 15 16:26:43 lnxmysql61 sshd[31436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.146.81
2020-07-15 22:33:08
52.149.146.81 attack
Jul 14 12:35:50 mx01 sshd[450]: Invalid user mailman from 52.149.146.81
Jul 14 12:35:50 mx01 sshd[453]: Invalid user mailman from 52.149.146.81
Jul 14 12:35:50 mx01 sshd[449]: Invalid user mailman from 52.149.146.81
Jul 14 12:35:50 mx01 sshd[452]: Invalid user mailman from 52.149.146.81
Jul 14 12:35:50 mx01 sshd[451]: Invalid user mailman from 52.149.146.81
Jul 14 12:35:50 mx01 sshd[458]: Invalid user mailman from 52.149.146.81
Jul 14 12:35:50 mx01 sshd[452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.146.81 
Jul 14 12:35:50 mx01 sshd[451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.146.81 
Jul 14 12:35:50 mx01 sshd[458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.146.81 
Jul 14 12:35:50 mx01 sshd[453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.146.81 
Jul 14 12:35........
-------------------------------
2020-07-15 01:49:59
52.149.148.109 attackspam
Jul  1 00:15:04 buvik sshd[27338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.148.109
Jul  1 00:15:05 buvik sshd[27338]: Failed password for invalid user apple from 52.149.148.109 port 36918 ssh2
Jul  1 00:18:32 buvik sshd[27743]: Invalid user smkwon from 52.149.148.109
...
2020-07-02 04:00:21
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.149.14.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52825
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;52.149.14.105.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 06:33:40 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 105.14.149.52.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 105.14.149.52.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
157.122.183.220 attackbots
'IP reached maximum auth failures for a one day block'
2019-11-01 06:28:45
68.109.216.194 attackspambots
proto=tcp  .  spt=4935  .  dpt=3389  .  src=68.109.216.194  .  dst=xx.xx.4.1  .     (Found on   Alienvault Oct 31)     (772)
2019-11-01 06:08:06
103.14.45.98 attackbots
proto=tcp  .  spt=36677  .  dpt=25  .     (Found on   Blocklist de  Oct 31)     (758)
2019-11-01 06:35:49
111.230.247.243 attackspam
Oct 31 22:38:44 meumeu sshd[32623]: Failed password for root from 111.230.247.243 port 49409 ssh2
Oct 31 22:45:09 meumeu sshd[1248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.247.243 
Oct 31 22:45:11 meumeu sshd[1248]: Failed password for invalid user felix from 111.230.247.243 port 57958 ssh2
...
2019-11-01 05:59:33
177.68.121.36 attackspambots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/177.68.121.36/ 
 
 BR - 1H : (399)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : BR 
 NAME ASN : ASN27699 
 
 IP : 177.68.121.36 
 
 CIDR : 177.68.0.0/17 
 
 PREFIX COUNT : 267 
 
 UNIQUE IP COUNT : 6569728 
 
 
 ATTACKS DETECTED ASN27699 :  
  1H - 13 
  3H - 29 
  6H - 61 
 12H - 109 
 24H - 186 
 
 DateTime : 2019-10-31 21:12:32 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-01 06:33:49
188.131.128.221 attackbotsspam
$f2bV_matches
2019-11-01 06:30:35
51.77.141.158 attackbots
Oct 31 10:26:06 web1 sshd\[25426\]: Invalid user deutsche from 51.77.141.158
Oct 31 10:26:06 web1 sshd\[25426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.141.158
Oct 31 10:26:08 web1 sshd\[25426\]: Failed password for invalid user deutsche from 51.77.141.158 port 48022 ssh2
Oct 31 10:29:18 web1 sshd\[25687\]: Invalid user sammy from 51.77.141.158
Oct 31 10:29:18 web1 sshd\[25687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.141.158
2019-11-01 06:02:42
192.241.249.19 attackbots
SSH bruteforce
2019-11-01 06:07:06
106.52.121.64 attackspam
Oct 31 23:07:15 server sshd\[23287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.121.64  user=root
Oct 31 23:07:17 server sshd\[23287\]: Failed password for root from 106.52.121.64 port 45346 ssh2
Oct 31 23:13:24 server sshd\[24604\]: Invalid user tania from 106.52.121.64
Oct 31 23:13:24 server sshd\[24604\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.121.64 
Oct 31 23:13:26 server sshd\[24604\]: Failed password for invalid user tania from 106.52.121.64 port 57922 ssh2
...
2019-11-01 06:00:20
89.248.174.215 attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 85 - port: 8089 proto: TCP cat: Misc Attack
2019-11-01 06:16:54
185.150.234.65 attackspambots
proto=tcp  .  spt=48897  .  dpt=25  .     (Found on   Dark List de Oct 31)     (767)
2019-11-01 06:17:11
51.68.192.106 attackspambots
Oct 31 23:20:45 SilenceServices sshd[23991]: Failed password for root from 51.68.192.106 port 59664 ssh2
Oct 31 23:24:29 SilenceServices sshd[26426]: Failed password for root from 51.68.192.106 port 53388 ssh2
2019-11-01 06:32:26
190.112.178.197 attackbotsspam
Oct 28 19:28:56 our-server-hostname postfix/smtpd[20560]: connect from unknown[190.112.178.197]
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=190.112.178.197
2019-11-01 06:07:39
66.172.33.144 attack
[ThuOct3120:23:49.4213442019][:error][pid24117:tid47536176129792][client66.172.33.144:55874][client66.172.33.144]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)"atREQUEST_FILENAME.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"211"][id"390709"][rev"30"][msg"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely"][data"/.env"][severity"CRITICAL"][hostname"ebtechnology.ch"][uri"/.env"][unique_id"Xbs0xfhrfWPxwIhhpoIWKgAAAAM"][ThuOct3120:39:26.2815012019][:error][pid24310:tid47536190838528][client66.172.33.144:52822][client66.172.33.144]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\
2019-11-01 05:59:13
193.112.23.81 attackspam
$f2bV_matches
2019-11-01 06:20:27

最近上报的IP列表

216.246.80.184 242.28.81.37 6.231.237.171 96.175.125.223
54.142.30.6 93.175.21.85 164.120.89.7 115.175.252.66
118.250.170.132 149.70.154.245 83.62.95.209 192.91.45.155
221.13.44.27 225.19.237.132 147.37.219.115 80.91.57.16
44.110.129.192 4.6.144.219 160.186.212.172 98.159.181.143