必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Ukraine

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.178.91.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26062
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.178.91.21.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 18:20:54 CST 2025
;; MSG SIZE  rcvd: 105
HOST信息:
21.91.178.94.in-addr.arpa domain name pointer 21-91-178-94.pool.ukrtel.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.91.178.94.in-addr.arpa	name = 21-91-178-94.pool.ukrtel.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
197.155.111.134 attackbots
2019-11-07T23:43:30.103037stark.klein-stark.info sshd\[16207\]: Invalid user pi from 197.155.111.134 port 33038
2019-11-07T23:43:30.103038stark.klein-stark.info sshd\[16205\]: Invalid user pi from 197.155.111.134 port 33024
2019-11-07T23:43:30.373874stark.klein-stark.info sshd\[16205\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.155.111.134
2019-11-07T23:43:30.376712stark.klein-stark.info sshd\[16207\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.155.111.134
...
2019-11-08 07:28:03
106.12.82.136 attackbots
2019-11-07T23:17:18.396682abusebot-7.cloudsearch.cf sshd\[29530\]: Invalid user HJKJHJGKHJK from 106.12.82.136 port 44224
2019-11-08 07:45:53
41.60.238.157 attackbotsspam
Nov  8 08:32:37 our-server-hostname postfix/smtpd[20755]: connect from unknown[41.60.238.157]
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov  8 08:32:45 our-server-hostname postfix/smtpd[20755]: lost connection after RCPT from unknown[41.60.238.157]
Nov  8 08:32:45 our-server-hostname postfix/smtpd[20755]: disconnect from unknown[41.60.238.157]
Nov  8 08:58:48 our-server-hostname postfix/smtpd[26344]: connect from unknown[41.60.238.157]
Nov x@x
Nov x@x
Nov x@x
Nov  8 08:58:52 our-server-hostname postfix/smtpd[26344]: lost connection after RCPT from unknown[41.60.238.157]
Nov  8 08:58:52 our-server-hostname postfix/smtpd[26344]: disconnect from unknown[41.60.238.157]
Nov  8 09:05:16 our-server-hostname postfix/smtpd[29863]: connect from unknown[41.60.238.157]
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov  8 09:05:24 our-server-hostname postfix/smtpd[29863]: lost connection after RCPT from unknown[41.60.238.157]
N........
-------------------------------
2019-11-08 07:47:29
92.118.38.38 attackspam
Nov  8 00:38:48 srv01 postfix/smtpd\[15144\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  8 00:39:04 srv01 postfix/smtpd\[15144\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  8 00:39:09 srv01 postfix/smtpd\[24861\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  8 00:39:26 srv01 postfix/smtpd\[24891\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  8 00:39:38 srv01 postfix/smtpd\[24861\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2019-11-08 07:46:11
106.13.46.165 attackbotsspam
ssh failed login
2019-11-08 07:34:58
157.245.122.30 attack
fail2ban honeypot
2019-11-08 07:22:48
220.249.9.90 attack
Portscan or hack attempt detected by psad/fwsnort
2019-11-08 07:32:31
92.136.197.83 attackspambots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/92.136.197.83/ 
 
 FR - 1H : (45)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : FR 
 NAME ASN : ASN3215 
 
 IP : 92.136.197.83 
 
 CIDR : 92.136.0.0/16 
 
 PREFIX COUNT : 1458 
 
 UNIQUE IP COUNT : 20128512 
 
 
 ATTACKS DETECTED ASN3215 :  
  1H - 1 
  3H - 1 
  6H - 5 
 12H - 7 
 24H - 17 
 
 DateTime : 2019-11-07 23:43:16 
 
 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN  - data recovery
2019-11-08 07:37:34
64.31.35.218 attackspam
\[2019-11-07 17:43:45\] NOTICE\[2601\] chan_sip.c: Registration from '"1018" \' failed for '64.31.35.218:5805' - Wrong password
\[2019-11-07 17:43:45\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-07T17:43:45.661-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1018",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/64.31.35.218/5805",Challenge="4b2eab0a",ReceivedChallenge="4b2eab0a",ReceivedHash="943faac8687f229781f392ce467a80af"
\[2019-11-07 17:43:45\] NOTICE\[2601\] chan_sip.c: Registration from '"1018" \' failed for '64.31.35.218:5805' - Wrong password
\[2019-11-07 17:43:45\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-07T17:43:45.753-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1018",SessionID="0x7fdf2c3f5928",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/6
2019-11-08 07:12:52
104.244.72.98 attackspam
frenzy
2019-11-08 07:24:19
1.186.45.250 attackspambots
SSH Brute Force, server-1 sshd[29830]: Failed password for root from 1.186.45.250 port 55833 ssh2
2019-11-08 07:11:33
195.76.107.105 attackspambots
Received: from mx12.diba.cat (mx12.diba.cat [195.76.107.105])
	by m0116956.mta.everyone.net (EON-INBOUND) with ESMTP id m0116956.5dc217d3.1de73c
	for <@antihotmail.com>; Thu, 7 Nov 2019 14:33:27 -0800
2019-11-08 07:27:45
138.68.89.76 attackbots
Nov  7 17:43:13 plusreed sshd[17821]: Invalid user tom from 138.68.89.76
...
2019-11-08 07:40:44
77.22.231.137 attack
2019-11-07T23:00:01.092952abusebot-5.cloudsearch.cf sshd\[25037\]: Invalid user admin from 77.22.231.137 port 35704
2019-11-08 07:23:28
95.58.28.28 attackbotsspam
Nov  7 23:33:57 xb0 sshd[32252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.58.28.28  user=r.r
Nov  7 23:33:59 xb0 sshd[32252]: Failed password for r.r from 95.58.28.28 port 59101 ssh2
Nov  7 23:33:59 xb0 sshd[32252]: Received disconnect from 95.58.28.28: 11: Client disconnecting normally [preauth]
Nov  7 23:34:02 xb0 sshd[32277]: Failed password for invalid user admin from 95.58.28.28 port 59455 ssh2
Nov  7 23:34:03 xb0 sshd[32277]: Received disconnect from 95.58.28.28: 11: Client disconnecting normally [preauth]
Nov  7 23:34:05 xb0 sshd[643]: Failed password for invalid user adminixxxr from 95.58.28.28 port 59807 ssh2
Nov  7 23:34:05 xb0 sshd[643]: Received disconnect from 95.58.28.28: 11: Client disconnecting normally [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=95.58.28.28
2019-11-08 07:16:54

最近上报的IP列表

27.15.96.48 160.145.9.92 16.137.92.85 29.198.230.196
5.134.192.28 150.72.86.56 61.190.114.194 138.23.9.205
138.34.112.48 49.3.221.193 138.66.48.146 235.182.218.241
234.77.188.94 22.215.18.28 90.37.23.143 65.104.29.69
88.148.224.121 153.15.55.217 200.254.218.237 89.55.115.83