必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Turkey

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 57.94.61.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23291
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;57.94.61.112.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021902 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 10:01:58 CST 2025
;; MSG SIZE  rcvd: 105
HOST信息:
Host 112.61.94.57.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 112.61.94.57.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
111.95.141.34 attackspambots
Aug 23 19:08:38 php1 sshd\[2448\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.95.141.34  user=root
Aug 23 19:08:39 php1 sshd\[2448\]: Failed password for root from 111.95.141.34 port 40221 ssh2
Aug 23 19:12:49 php1 sshd\[2958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.95.141.34  user=root
Aug 23 19:12:51 php1 sshd\[2958\]: Failed password for root from 111.95.141.34 port 42876 ssh2
Aug 23 19:16:55 php1 sshd\[3347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.95.141.34  user=root
2020-08-24 13:40:55
192.99.4.59 attackbots
192.99.4.59 - - [24/Aug/2020:06:22:02 +0100] "POST /wp-login.php HTTP/1.1" 200 5985 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
192.99.4.59 - - [24/Aug/2020:06:24:38 +0100] "POST /wp-login.php HTTP/1.1" 200 5985 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
192.99.4.59 - - [24/Aug/2020:06:27:30 +0100] "POST /wp-login.php HTTP/1.1" 200 5985 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
...
2020-08-24 13:27:47
218.56.160.82 attackspambots
Aug 24 05:42:57 ns382633 sshd\[8595\]: Invalid user postgres from 218.56.160.82 port 23217
Aug 24 05:42:57 ns382633 sshd\[8595\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.56.160.82
Aug 24 05:42:59 ns382633 sshd\[8595\]: Failed password for invalid user postgres from 218.56.160.82 port 23217 ssh2
Aug 24 05:55:53 ns382633 sshd\[11199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.56.160.82  user=root
Aug 24 05:55:56 ns382633 sshd\[11199\]: Failed password for root from 218.56.160.82 port 40978 ssh2
2020-08-24 12:57:38
134.17.94.214 attackspam
Bruteforce detected by fail2ban
2020-08-24 13:03:26
118.27.43.124 attackspam
SpamScore above: 10.0
2020-08-24 13:10:51
212.70.149.20 attack
Aug 24 07:14:22 cho postfix/smtpd[1486900]: warning: unknown[212.70.149.20]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 24 07:14:48 cho postfix/smtpd[1486900]: warning: unknown[212.70.149.20]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 24 07:15:14 cho postfix/smtpd[1485814]: warning: unknown[212.70.149.20]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 24 07:15:40 cho postfix/smtpd[1486900]: warning: unknown[212.70.149.20]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 24 07:16:05 cho postfix/smtpd[1485814]: warning: unknown[212.70.149.20]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-08-24 13:16:19
211.143.255.70 attackspambots
Aug 24 05:58:44 rocket sshd[11352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.143.255.70
Aug 24 05:58:46 rocket sshd[11352]: Failed password for invalid user usuario from 211.143.255.70 port 49144 ssh2
...
2020-08-24 13:22:23
222.186.31.83 attackbotsspam
Aug 24 10:12:16 gw1 sshd[6039]: Failed password for root from 222.186.31.83 port 26423 ssh2
...
2020-08-24 13:14:03
2.57.122.185 attackspambots
fail2ban will do the job
2020-08-24 12:56:03
212.70.149.68 attackspambots
2020-08-24T06:58:03.459857web.dutchmasterserver.nl postfix/smtps/smtpd[1907088]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-08-24T07:00:15.137737web.dutchmasterserver.nl postfix/smtps/smtpd[1907120]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-08-24T07:02:29.122101web.dutchmasterserver.nl postfix/smtps/smtpd[1907120]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-08-24T07:04:41.485389web.dutchmasterserver.nl postfix/smtps/smtpd[1907779]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-08-24T07:06:55.341324web.dutchmasterserver.nl postfix/smtps/smtpd[1907779]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-08-24 13:08:28
46.101.248.180 attackspambots
*Port Scan* detected from 46.101.248.180 (DE/Germany/Hesse/Frankfurt am Main/django.ubuntu.18.04). 4 hits in the last 230 seconds
2020-08-24 13:29:07
94.191.23.15 attackspambots
Aug 24 07:00:11 ns381471 sshd[15349]: Failed password for postgres from 94.191.23.15 port 44136 ssh2
Aug 24 07:04:44 ns381471 sshd[15464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.23.15
2020-08-24 13:32:07
106.13.228.33 attack
Aug 23 21:55:16 Host-KLAX-C sshd[28064]: User root from 106.13.228.33 not allowed because not listed in AllowUsers
...
2020-08-24 13:28:40
51.83.41.120 attackspambots
2020-08-24T05:58:14.499610centos sshd[6486]: Invalid user guest from 51.83.41.120 port 39482
2020-08-24T05:58:16.253896centos sshd[6486]: Failed password for invalid user guest from 51.83.41.120 port 39482 ssh2
2020-08-24T06:02:12.134321centos sshd[6763]: Invalid user timmy from 51.83.41.120 port 52762
...
2020-08-24 13:35:53
103.229.124.68 attack
RDP Brute-Force (honeypot 2)
2020-08-24 13:38:20

最近上报的IP列表

228.222.150.73 131.253.138.211 117.107.11.167 171.5.111.163
107.246.39.6 212.87.91.228 34.181.55.39 255.189.63.210
226.101.11.163 176.8.139.240 199.248.77.78 143.202.16.57
14.128.153.235 197.37.231.24 241.3.181.171 235.27.171.92
164.126.214.72 94.194.4.251 107.158.10.38 199.166.27.16