必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Canada

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.144.160.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55677
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.144.160.249.		IN	A

;; AUTHORITY SECTION:
.			588	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022800 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 16:01:20 CST 2022
;; MSG SIZE  rcvd: 108
HOST信息:
249.160.144.104.in-addr.arpa domain name pointer out-bound-mta-249.peak-host-castled.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
249.160.144.104.in-addr.arpa	name = out-bound-mta-249.peak-host-castled.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
5.188.86.216 attackspambots
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-09-11T10:16:24Z
2020-09-11 18:46:41
45.8.124.39 attackspambots
Sep 10 05:54:48 mail.srvfarm.net postfix/submission/smtpd[2927703]: lost connection after EHLO from unknown[45.8.124.39]
Sep 10 05:54:48 mail.srvfarm.net postfix/submission/smtpd[2927703]: lost connection after EHLO from unknown[45.8.124.39]
Sep 10 05:54:48 mail.srvfarm.net postfix/submission/smtpd[2927703]: lost connection after EHLO from unknown[45.8.124.39]
Sep 10 05:54:49 mail.srvfarm.net postfix/submission/smtpd[2927703]: lost connection after EHLO from unknown[45.8.124.39]
Sep 10 05:54:49 mail.srvfarm.net postfix/submission/smtpd[2927703]: lost connection after EHLO from unknown[45.8.124.39]
2020-09-11 18:59:24
185.124.186.41 attackbotsspam
Sep  7 12:24:10 mail.srvfarm.net postfix/smtpd[1053383]: warning: unknown[185.124.186.41]: SASL PLAIN authentication failed: 
Sep  7 12:24:10 mail.srvfarm.net postfix/smtpd[1053383]: lost connection after AUTH from unknown[185.124.186.41]
Sep  7 12:29:00 mail.srvfarm.net postfix/smtps/smtpd[1055414]: warning: unknown[185.124.186.41]: SASL PLAIN authentication failed: 
Sep  7 12:29:00 mail.srvfarm.net postfix/smtps/smtpd[1055414]: lost connection after AUTH from unknown[185.124.186.41]
Sep  7 12:31:35 mail.srvfarm.net postfix/smtps/smtpd[1055415]: warning: unknown[185.124.186.41]: SASL PLAIN authentication failed:
2020-09-11 18:34:15
177.154.238.53 attackspambots
Sep  7 12:12:37 mail.srvfarm.net postfix/smtpd[1039280]: warning: unknown[177.154.238.53]: SASL PLAIN authentication failed: 
Sep  7 12:12:37 mail.srvfarm.net postfix/smtpd[1039280]: lost connection after AUTH from unknown[177.154.238.53]
Sep  7 12:15:23 mail.srvfarm.net postfix/smtpd[1038120]: warning: unknown[177.154.238.53]: SASL PLAIN authentication failed: 
Sep  7 12:15:24 mail.srvfarm.net postfix/smtpd[1038120]: lost connection after AUTH from unknown[177.154.238.53]
Sep  7 12:20:28 mail.srvfarm.net postfix/smtpd[1053366]: warning: unknown[177.154.238.53]: SASL PLAIN authentication failed:
2020-09-11 18:35:28
157.245.101.31 attackspambots
Invalid user sshvpn from 157.245.101.31 port 59704
2020-09-11 18:31:51
219.134.218.28 attackspambots
Sep  7 12:30:36 mail.srvfarm.net postfix/smtpd[1053368]: lost connection after RSET from unknown[219.134.218.28]
Sep  7 12:30:46 mail.srvfarm.net postfix/smtpd[1050786]: lost connection after RSET from unknown[219.134.218.28]
Sep  7 12:30:48 mail.srvfarm.net postfix/smtpd[1053367]: lost connection after RSET from unknown[219.134.218.28]
Sep  7 12:30:49 mail.srvfarm.net postfix/smtpd[1053357]: lost connection after RSET from unknown[219.134.218.28]
Sep  7 12:30:51 mail.srvfarm.net postfix/smtpd[1039279]: lost connection after RSET from unknown[219.134.218.28]
2020-09-11 18:33:00
182.122.10.215 attackspam
Lines containing failures of 182.122.10.215
Sep 11 07:02:49 keyhelp sshd[31257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.122.10.215  user=r.r
Sep 11 07:02:51 keyhelp sshd[31257]: Failed password for r.r from 182.122.10.215 port 13400 ssh2
Sep 11 07:02:51 keyhelp sshd[31257]: Received disconnect from 182.122.10.215 port 13400:11: Bye Bye [preauth]
Sep 11 07:02:51 keyhelp sshd[31257]: Disconnected from authenticating user r.r 182.122.10.215 port 13400 [preauth]
Sep 11 07:05:16 keyhelp sshd[31868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.122.10.215  user=r.r
Sep 11 07:05:19 keyhelp sshd[31868]: Failed password for r.r from 182.122.10.215 port 42430 ssh2
Sep 11 07:05:19 keyhelp sshd[31868]: Received disconnect from 182.122.10.215 port 42430:11: Bye Bye [preauth]
Sep 11 07:05:19 keyhelp sshd[31868]: Disconnected from authenticating user r.r 182.122.10.215 port 42430 [preaut........
------------------------------
2020-09-11 18:44:26
218.94.136.176 attackbotsspam
port scan and connect, tcp 1433 (ms-sql-s)
2020-09-11 18:43:14
157.230.153.203 attackspam
Automatic report - Banned IP Access
2020-09-11 19:10:37
194.39.196.42 attackbots
Sep  7 11:20:13 mail.srvfarm.net postfix/smtpd[1028351]: warning: unknown[194.39.196.42]: SASL PLAIN authentication failed: 
Sep  7 11:20:14 mail.srvfarm.net postfix/smtpd[1028351]: lost connection after AUTH from unknown[194.39.196.42]
Sep  7 11:23:44 mail.srvfarm.net postfix/smtps/smtpd[1026476]: warning: unknown[194.39.196.42]: SASL PLAIN authentication failed: 
Sep  7 11:23:44 mail.srvfarm.net postfix/smtps/smtpd[1026476]: lost connection after AUTH from unknown[194.39.196.42]
Sep  7 11:29:45 mail.srvfarm.net postfix/smtpd[1028343]: warning: unknown[194.39.196.42]: SASL PLAIN authentication failed:
2020-09-11 18:59:50
113.161.79.191 attackspam
Invalid user oracle from 113.161.79.191 port 59616
2020-09-11 18:30:28
131.108.60.30 attackbotsspam
Sep 11 08:57:24 root sshd[12315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=131.108.60.30 
...
2020-09-11 18:49:12
68.116.41.6 attackspambots
Sep 11 10:59:16 ns382633 sshd\[28373\]: Invalid user apache from 68.116.41.6 port 34898
Sep 11 10:59:16 ns382633 sshd\[28373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.116.41.6
Sep 11 10:59:19 ns382633 sshd\[28373\]: Failed password for invalid user apache from 68.116.41.6 port 34898 ssh2
Sep 11 11:03:29 ns382633 sshd\[29179\]: Invalid user apache from 68.116.41.6 port 39306
Sep 11 11:03:29 ns382633 sshd\[29179\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.116.41.6
2020-09-11 18:48:02
157.245.108.35 attack
Sep 11 07:16:19 ns382633 sshd\[20987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.108.35  user=root
Sep 11 07:16:21 ns382633 sshd\[20987\]: Failed password for root from 157.245.108.35 port 46908 ssh2
Sep 11 07:20:50 ns382633 sshd\[21774\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.108.35  user=root
Sep 11 07:20:52 ns382633 sshd\[21774\]: Failed password for root from 157.245.108.35 port 37684 ssh2
Sep 11 07:23:06 ns382633 sshd\[21986\]: Invalid user denis from 157.245.108.35 port 41818
Sep 11 07:23:06 ns382633 sshd\[21986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.108.35
2020-09-11 19:12:53
45.154.255.70 attack
45.154.255.70 - - \[11/Sep/2020:03:12:37 +0200\] "GET /index.php\?id=ausland%27%29%29%2F%2A\&id=%2A%2FAS%2F%2A\&id=%2A%2FZQMg%2F%2A\&id=%2A%2FWHERE%2F%2A\&id=%2A%2F9857%3D9857%2F%2A\&id=%2A%2FOR%2F%2A\&id=%2A%2F4629%3DRAISE_ERROR%28CHR%2855%29%7C%7CCHR%2848%29%7C%7CCHR%2848%29%7C%7CCHR%2848%29%7C%7CCHR%2849%29\&id=CHR%28113%29%7C%7CCHR%28120%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%7C%7C%28SELECT%2F%2A\&id=%2A%2F%28CASE%2F%2A\&id=%2A%2FWHEN%2F%2A\&id=%2A%2F%284629%3D4629%29%2F%2A\&id=%2A%2FTHEN%2F%2A\&id=%2A%2F1%2F%2A\&id=%2A%2FELSE%2F%2A\&id=%2A%2F0%2F%2A\&id=%2A%2FEND%29%2F%2A\&id=%2A%2FFROM%2F%2A\&id=%2A%2FSYSIBM.SYSDUMMY1%29%7C%7CCHR%28113%29%7C%7CCHR%2898%29%7C%7CCHR%28113%29%7C%7CCHR%28113%29%7C%7CCHR%28113%29%29--%2F%2A\&id=%2A%2FfZIf HTTP/1.1" 200 12303 "http://www.firma-lsf.eu:80/index.php" "Googlebot \(compatible  Googlebot/2.1   http://www.google.com/bot.html\)"
...
2020-09-11 19:11:56

最近上报的IP列表

104.144.160.40 104.144.160.47 104.144.160.62 242.255.246.13
104.144.233.75 104.144.233.65 104.144.233.52 104.144.233.69
104.144.233.83 104.144.233.85 104.144.233.93 104.144.233.49
104.144.235.113 104.144.233.66 104.144.233.81 104.144.233.99
92.214.111.130 104.144.235.118 104.144.235.120 104.144.235.126