必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.94.232.196
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62569
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;66.94.232.196.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 00:31:52 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 196.232.94.66.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 196.232.94.66.in-addr.arpa: SERVFAIL

相关IP信息:
最新评论:
IP 类型 评论内容 时间
45.129.33.152 attack
firewall-block, port(s): 9506/tcp, 9533/tcp, 9539/tcp, 9543/tcp
2020-08-16 08:31:04
185.124.184.195 attack
Aug 16 05:34:38 mail.srvfarm.net postfix/smtpd[1888509]: warning: unknown[185.124.184.195]: SASL PLAIN authentication failed: 
Aug 16 05:34:38 mail.srvfarm.net postfix/smtpd[1888509]: lost connection after AUTH from unknown[185.124.184.195]
Aug 16 05:40:13 mail.srvfarm.net postfix/smtpd[1907846]: warning: unknown[185.124.184.195]: SASL PLAIN authentication failed: 
Aug 16 05:40:13 mail.srvfarm.net postfix/smtpd[1907846]: lost connection after AUTH from unknown[185.124.184.195]
Aug 16 05:40:33 mail.srvfarm.net postfix/smtps/smtpd[1907611]: warning: unknown[185.124.184.195]: SASL PLAIN authentication failed:
2020-08-16 12:21:40
218.92.0.198 attack
2020-08-16T02:33:15.793388rem.lavrinenko.info sshd[14046]: refused connect from 218.92.0.198 (218.92.0.198)
2020-08-16T02:34:23.065284rem.lavrinenko.info sshd[14047]: refused connect from 218.92.0.198 (218.92.0.198)
2020-08-16T02:35:27.173371rem.lavrinenko.info sshd[14050]: refused connect from 218.92.0.198 (218.92.0.198)
2020-08-16T02:36:29.016061rem.lavrinenko.info sshd[14052]: refused connect from 218.92.0.198 (218.92.0.198)
2020-08-16T02:37:32.580889rem.lavrinenko.info sshd[14054]: refused connect from 218.92.0.198 (218.92.0.198)
...
2020-08-16 08:42:37
210.16.88.232 attackspam
Aug 16 05:41:19 mail.srvfarm.net postfix/smtps/smtpd[1890600]: warning: unknown[210.16.88.232]: SASL PLAIN authentication failed: 
Aug 16 05:41:19 mail.srvfarm.net postfix/smtps/smtpd[1890600]: lost connection after AUTH from unknown[210.16.88.232]
Aug 16 05:41:36 mail.srvfarm.net postfix/smtpd[1907800]: warning: unknown[210.16.88.232]: SASL PLAIN authentication failed: 
Aug 16 05:41:36 mail.srvfarm.net postfix/smtpd[1907800]: lost connection after AUTH from unknown[210.16.88.232]
Aug 16 05:43:42 mail.srvfarm.net postfix/smtps/smtpd[1890604]: warning: unknown[210.16.88.232]: SASL PLAIN authentication failed:
2020-08-16 12:15:39
140.143.195.181 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-08-16 08:44:39
112.120.211.200 attackspambots
Lines containing failures of 112.120.211.200
Aug 12 20:25:26 shared07 sshd[17650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.120.211.200  user=r.r
Aug 12 20:25:28 shared07 sshd[17650]: Failed password for r.r from 112.120.211.200 port 46410 ssh2
Aug 12 20:25:28 shared07 sshd[17650]: Received disconnect from 112.120.211.200 port 46410:11: Bye Bye [preauth]
Aug 12 20:25:28 shared07 sshd[17650]: Disconnected from authenticating user r.r 112.120.211.200 port 46410 [preauth]
Aug 12 20:35:28 shared07 sshd[21460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.120.211.200  user=r.r
Aug 12 20:35:30 shared07 sshd[21460]: Failed password for r.r from 112.120.211.200 port 55688 ssh2
Aug 12 20:35:31 shared07 sshd[21460]: Received disconnect from 112.120.211.200 port 55688:11: Bye Bye [preauth]
Aug 12 20:35:31 shared07 sshd[21460]: Disconnected from authenticating user r.r 112.120.211.200 p........
------------------------------
2020-08-16 12:12:58
106.12.59.23 attackbotsspam
SSH auth scanning - multiple failed logins
2020-08-16 12:13:17
198.1.67.59 attackspambots
Aug 16 06:11:08 server pure-ftpd: (?@198.1.67.59) [WARNING] Authentication failed for user [%user%]
Aug 16 06:11:16 server pure-ftpd: (?@198.1.67.59) [WARNING] Authentication failed for user [%user%]
Aug 16 06:11:24 server pure-ftpd: (?@198.1.67.59) [WARNING] Authentication failed for user [%user%]
...
2020-08-16 12:16:30
45.232.191.207 attack
php WP PHPmyadamin ABUSE blocked for 12h
2020-08-16 12:08:57
180.76.109.16 attackspambots
Aug 15 23:56:51 Host-KEWR-E sshd[32087]: User root from 180.76.109.16 not allowed because not listed in AllowUsers
...
2020-08-16 12:14:40
218.92.0.216 attackbotsspam
Aug 16 02:27:42 minden010 sshd[365]: Failed password for root from 218.92.0.216 port 37001 ssh2
Aug 16 02:27:58 minden010 sshd[419]: Failed password for root from 218.92.0.216 port 55324 ssh2
Aug 16 02:28:01 minden010 sshd[419]: Failed password for root from 218.92.0.216 port 55324 ssh2
...
2020-08-16 08:30:40
212.129.59.36 attackbotsspam
212.129.59.36 - - [16/Aug/2020:04:57:04 +0100] "POST /wp-login.php HTTP/1.1" 200 2369 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.129.59.36 - - [16/Aug/2020:04:57:05 +0100] "POST /wp-login.php HTTP/1.1" 200 2388 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.129.59.36 - - [16/Aug/2020:04:57:05 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-16 12:06:45
189.217.50.115 attackspam
[15/Aug/2020 x@x
[15/Aug/2020 x@x
[15/Aug/2020 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=189.217.50.115
2020-08-16 08:35:00
222.186.31.127 attackspam
Aug 15 23:47:59 ip-172-31-16-56 sshd\[4163\]: Failed password for root from 222.186.31.127 port 41148 ssh2\
Aug 15 23:48:49 ip-172-31-16-56 sshd\[4167\]: Failed password for root from 222.186.31.127 port 19348 ssh2\
Aug 15 23:48:52 ip-172-31-16-56 sshd\[4167\]: Failed password for root from 222.186.31.127 port 19348 ssh2\
Aug 15 23:48:54 ip-172-31-16-56 sshd\[4167\]: Failed password for root from 222.186.31.127 port 19348 ssh2\
Aug 15 23:49:39 ip-172-31-16-56 sshd\[4184\]: Failed password for root from 222.186.31.127 port 58257 ssh2\
2020-08-16 08:43:53
181.126.83.125 attackbotsspam
Aug 15 12:24:50 Tower sshd[31951]: refused connect from 61.148.90.118 (61.148.90.118)
Aug 15 19:21:29 Tower sshd[31951]: Connection from 181.126.83.125 port 34848 on 192.168.10.220 port 22 rdomain ""
Aug 15 19:21:30 Tower sshd[31951]: Failed password for root from 181.126.83.125 port 34848 ssh2
Aug 15 19:21:30 Tower sshd[31951]: Received disconnect from 181.126.83.125 port 34848:11: Bye Bye [preauth]
Aug 15 19:21:30 Tower sshd[31951]: Disconnected from authenticating user root 181.126.83.125 port 34848 [preauth]
2020-08-16 08:41:32

最近上报的IP列表

191.241.162.40 114.40.32.27 89.97.215.31 181.123.150.126
175.63.242.10 161.22.235.90 50.35.205.138 188.110.91.145
196.173.92.148 45.67.66.14 216.150.116.48 173.56.145.189
36.222.38.42 131.187.117.0 6.175.126.148 133.223.229.194
34.230.233.250 29.141.154.207 240.54.44.166 78.178.44.30