必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 65.206.139.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11527
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;65.206.139.148.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022700 1800 900 604800 86400

;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 00:38:44 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
148.139.206.65.in-addr.arpa domain name pointer host148.excelminingsystems.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
148.139.206.65.in-addr.arpa	name = host148.excelminingsystems.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
82.223.8.44 attackspam
Mar 13 16:24:48 scivo sshd[14852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.223.8.44  user=r.r
Mar 13 16:24:49 scivo sshd[14852]: Failed password for r.r from 82.223.8.44 port 58704 ssh2
Mar 13 16:24:49 scivo sshd[14852]: Received disconnect from 82.223.8.44: 11: Bye Bye [preauth]
Mar 13 16:32:18 scivo sshd[15235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.223.8.44  user=r.r
Mar 13 16:32:20 scivo sshd[15235]: Failed password for r.r from 82.223.8.44 port 32930 ssh2
Mar 13 16:32:20 scivo sshd[15235]: Received disconnect from 82.223.8.44: 11: Bye Bye [preauth]
Mar 13 16:36:59 scivo sshd[15456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.223.8.44  user=r.r
Mar 13 16:37:01 scivo sshd[15456]: Failed password for r.r from 82.223.8.44 port 50562 ssh2
Mar 13 16:37:02 scivo sshd[15456]: Received disconnect from 82.223.8.44: 11: Bye By........
-------------------------------
2020-03-13 23:08:47
150.95.153.137 attack
Jan 20 06:36:30 pi sshd[4160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.153.137 
Jan 20 06:36:32 pi sshd[4160]: Failed password for invalid user keith from 150.95.153.137 port 54876 ssh2
2020-03-13 22:49:27
151.16.33.127 attack
Jan 27 17:15:51 pi sshd[8121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.16.33.127 
Jan 27 17:15:53 pi sshd[8121]: Failed password for invalid user enigma from 151.16.33.127 port 48140 ssh2
2020-03-13 22:47:22
182.53.133.32 attackbotsspam
Honeypot attack, port: 445, PTR: node-qao.pool-182-53.dynamic.totinternet.net.
2020-03-13 22:51:45
85.75.228.83 attackspambots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/85.75.228.83/ 
 
 GR - 1H : (6)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : GR 
 NAME ASN : ASN6799 
 
 IP : 85.75.228.83 
 
 CIDR : 85.75.224.0/20 
 
 PREFIX COUNT : 159 
 
 UNIQUE IP COUNT : 1819904 
 
 
 ATTACKS DETECTED ASN6799 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2020-03-13 13:47:30 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery
2020-03-13 23:17:14
220.157.182.205 attack
Honeypot attack, port: 5555, PTR: s182205.ppp.asahi-net.or.jp.
2020-03-13 22:56:57
162.241.216.26 attackspam
Brute force attempt
2020-03-13 22:43:09
106.12.155.162 attack
Mar 13 10:11:42 vps46666688 sshd[17966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.155.162
Mar 13 10:11:44 vps46666688 sshd[17966]: Failed password for invalid user redhat from 106.12.155.162 port 52932 ssh2
...
2020-03-13 22:45:46
95.217.73.247 attackspambots
"colly - https://github.com/gocolly/colly"
2020-03-13 23:15:31
87.250.224.72 attackspambots
[Fri Mar 13 19:47:36.050004 2020] [:error] [pid 21295:tid 140257727084288] [client 87.250.224.72:53575] [client 87.250.224.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XmuA6D9QqO5Ca32m832UxwAAAmA"]
...
2020-03-13 23:10:45
151.213.6.241 attackbotsspam
Mar 13 15:20:42 SilenceServices sshd[23600]: Failed password for root from 151.213.6.241 port 54365 ssh2
Mar 13 15:23:44 SilenceServices sshd[9696]: Failed password for root from 151.213.6.241 port 50672 ssh2
2020-03-13 22:45:04
77.247.108.77 attack
scans 3 times in preceeding hours on the ports (in chronological order) 5038 5038 5060 resulting in total of 7 scans from 77.247.108.0/24 block.
2020-03-13 22:49:59
185.36.81.57 attackspambots
Mar 13 15:40:28 srv01 postfix/smtpd\[2863\]: warning: unknown\[185.36.81.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar 13 15:56:31 srv01 postfix/smtpd\[8073\]: warning: unknown\[185.36.81.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar 13 15:58:36 srv01 postfix/smtpd\[2863\]: warning: unknown\[185.36.81.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar 13 15:59:20 srv01 postfix/smtpd\[8073\]: warning: unknown\[185.36.81.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar 13 15:59:36 srv01 postfix/smtpd\[2863\]: warning: unknown\[185.36.81.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-03-13 23:04:01
124.122.182.222 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/124.122.182.222/ 
 
 TH - 1H : (9)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TH 
 NAME ASN : ASN17552 
 
 IP : 124.122.182.222 
 
 CIDR : 124.122.128.0/18 
 
 PREFIX COUNT : 345 
 
 UNIQUE IP COUNT : 1515264 
 
 
 ATTACKS DETECTED ASN17552 :  
  1H - 2 
  3H - 2 
  6H - 2 
 12H - 2 
 24H - 2 
 
 DateTime : 2020-03-13 13:47:45 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery
2020-03-13 22:54:46
150.223.16.92 attackspam
Feb 18 02:14:52 pi sshd[25813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.223.16.92 
Feb 18 02:14:54 pi sshd[25813]: Failed password for invalid user hau from 150.223.16.92 port 48107 ssh2
2020-03-13 23:07:23

最近上报的IP列表

95.167.227.32 103.223.198.89 145.162.25.132 203.252.176.54
210.123.161.42 58.87.107.68 71.33.23.54 131.156.119.232
193.42.232.154 166.155.29.70 212.94.237.19 77.88.172.99
225.196.197.226 153.193.20.125 123.71.31.223 181.180.92.78
169.62.71.108 109.39.80.68 45.189.167.40 227.25.68.233