必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 53.157.81.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4405
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;53.157.81.138.			IN	A

;; AUTHORITY SECTION:
.			406	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020090601 1800 900 604800 86400

;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 07 04:48:25 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 138.81.157.53.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.81.157.53.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
116.212.131.90 attackbots
srvr3: (mod_security) mod_security (id:920350) triggered by 116.212.131.90 (AU/Australia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/09/03 18:43:28 [error] 365944#0: *1946 [client 116.212.131.90] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host'  [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "159915140894.207379"] [ref "o0,14v21,14"], client: 116.212.131.90, [redacted] request: "GET / HTTP/1.1" [redacted]
2020-09-04 19:08:47
207.154.236.97 attackbotsspam
207.154.236.97 - - [04/Sep/2020:04:24:04 +0100] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
207.154.236.97 - - [04/Sep/2020:04:24:05 +0100] "POST /wp-login.php HTTP/1.1" 200 1706 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
207.154.236.97 - - [04/Sep/2020:04:24:06 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-04 18:45:42
188.146.171.252 attackspam
Sep  3 18:43:39 mellenthin postfix/smtpd[20267]: NOQUEUE: reject: RCPT from 188.146.171.252.nat.umts.dynamic.t-mobile.pl[188.146.171.252]: 554 5.7.1 Service unavailable; Client host [188.146.171.252] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/188.146.171.252; from= to= proto=ESMTP helo=<188.146.171.252.nat.umts.dynamic.t-mobile.pl>
2020-09-04 19:04:21
49.233.162.198 attack
Sep  4 05:49:29 sip sshd[1505026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.162.198 
Sep  4 05:49:29 sip sshd[1505026]: Invalid user tom from 49.233.162.198 port 50532
Sep  4 05:49:31 sip sshd[1505026]: Failed password for invalid user tom from 49.233.162.198 port 50532 ssh2
...
2020-09-04 19:15:00
64.64.233.198 attackspam
2020-09-03 17:28:54,001 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 64.64.233.198
2020-09-03 17:52:05,067 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 64.64.233.198
2020-09-03 18:20:57,013 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 64.64.233.198
2020-09-03 18:43:35,784 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 64.64.233.198
2020-09-03 19:06:09,639 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 64.64.233.198
...
2020-09-04 19:06:10
2.47.136.66 attackspambots
Honeypot attack, port: 445, PTR: net-2-47-136-66.cust.vodafonedsl.it.
2020-09-04 19:17:47
62.28.222.221 attack
(sshd) Failed SSH login from 62.28.222.221 (PT/Portugal/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  4 04:03:59 server sshd[6294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.222.221  user=root
Sep  4 04:04:01 server sshd[6294]: Failed password for root from 62.28.222.221 port 39424 ssh2
Sep  4 04:08:13 server sshd[7503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.222.221  user=root
Sep  4 04:08:15 server sshd[7503]: Failed password for root from 62.28.222.221 port 23676 ssh2
Sep  4 04:11:14 server sshd[8549]: Invalid user nina from 62.28.222.221 port 9525
2020-09-04 19:12:27
36.89.18.217 attackspambots
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-04 19:13:42
190.74.164.58 attackbotsspam
Honeypot attack, port: 445, PTR: 190.74-164-58.dyn.dsl.cantv.net.
2020-09-04 19:15:28
49.234.96.210 attack
Sep  3 20:46:28 markkoudstaal sshd[27184]: Failed password for root from 49.234.96.210 port 47160 ssh2
Sep  3 20:51:52 markkoudstaal sshd[28627]: Failed password for root from 49.234.96.210 port 50690 ssh2
Sep  3 20:57:20 markkoudstaal sshd[30173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.96.210
...
2020-09-04 19:00:03
93.64.5.34 attackbots
2020-07-27 05:15:44,867 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 93.64.5.34
2020-07-27 05:28:20,098 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 93.64.5.34
2020-07-27 05:41:02,032 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 93.64.5.34
2020-07-27 05:53:41,316 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 93.64.5.34
2020-07-27 06:06:21,021 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 93.64.5.34
...
2020-09-04 19:01:02
42.118.242.189 attackspam
Time:     Fri Sep  4 07:01:04 2020 -0400
IP:       42.118.242.189 (VN/Vietnam/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep  4 06:54:47 pv-11-ams1 sshd[18957]: Invalid user student from 42.118.242.189 port 60934
Sep  4 06:54:50 pv-11-ams1 sshd[18957]: Failed password for invalid user student from 42.118.242.189 port 60934 ssh2
Sep  4 06:58:28 pv-11-ams1 sshd[19186]: Invalid user website from 42.118.242.189 port 51436
Sep  4 06:58:30 pv-11-ams1 sshd[19186]: Failed password for invalid user website from 42.118.242.189 port 51436 ssh2
Sep  4 07:00:59 pv-11-ams1 sshd[19358]: Invalid user lixiang from 42.118.242.189 port 60026
2020-09-04 19:14:22
62.12.81.55 attack
Honeypot attack, port: 5555, PTR: unassigned.maks.net.
2020-09-04 18:52:35
64.225.35.135 attack
Time:     Fri Sep  4 10:42:56 2020 +0000
IP:       64.225.35.135 (US/United States/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep  4 10:36:13 ca-29-ams1 sshd[18744]: Invalid user leticia from 64.225.35.135 port 48874
Sep  4 10:36:15 ca-29-ams1 sshd[18744]: Failed password for invalid user leticia from 64.225.35.135 port 48874 ssh2
Sep  4 10:39:33 ca-29-ams1 sshd[19234]: Invalid user maryam from 64.225.35.135 port 50378
Sep  4 10:39:35 ca-29-ams1 sshd[19234]: Failed password for invalid user maryam from 64.225.35.135 port 50378 ssh2
Sep  4 10:42:55 ca-29-ams1 sshd[19693]: Invalid user noc from 64.225.35.135 port 51382
2020-09-04 19:14:37
119.29.121.229 attackbots
Invalid user db from 119.29.121.229 port 33504
2020-09-04 19:23:06

最近上报的IP列表

37.91.151.19 104.122.172.161 24.56.250.61 138.68.100.212
112.28.172.63 106.52.90.84 87.109.195.86 93.103.153.194
179.254.51.222 177.96.42.229 73.176.242.136 112.119.33.54
206.189.206.194 117.61.241.147 14.231.117.71 203.168.20.126
23.34.33.127 200.84.250.201 91.111.168.47 59.107.14.127