必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.143.212.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44529
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;114.143.212.242.		IN	A

;; AUTHORITY SECTION:
.			594	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 14:53:32 CST 2022
;; MSG SIZE  rcvd: 108
HOST信息:
Host 242.212.143.114.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
server can't find 114.143.212.242.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
49.37.10.201 attackbots
Sep  2 18:52:07 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=49.37.10.201 
Sep  2 18:52:10 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=49.37.10.201 
Sep  2 18:52:14 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=49.37.10.201 
Sep  2 18:52:18 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=49.37.10.201 
Sep  2 18:52:22 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=49.37.10.201 
Sep  2 18:52:26 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=49.37.10.201 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=49.37.10.201
2020-09-04 08:29:18
180.249.167.118 attackbots
Lines containing failures of 180.249.167.118
Sep  2 04:43:26 newdogma sshd[29084]: Invalid user xqf from 180.249.167.118 port 10967
Sep  2 04:43:26 newdogma sshd[29084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.249.167.118 
Sep  2 04:43:27 newdogma sshd[29084]: Failed password for invalid user xqf from 180.249.167.118 port 10967 ssh2
Sep  2 04:43:29 newdogma sshd[29084]: Received disconnect from 180.249.167.118 port 10967:11: Bye Bye [preauth]
Sep  2 04:43:29 newdogma sshd[29084]: Disconnected from invalid user xqf 180.249.167.118 port 10967 [preauth]
Sep  2 04:45:11 newdogma sshd[29410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.249.167.118  user=r.r
Sep  2 04:45:14 newdogma sshd[29410]: Failed password for r.r from 180.249.167.118 port 6855 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=180.249.167.118
2020-09-04 07:50:46
79.143.188.234 attack
Sep  3 23:37:59 electroncash sshd[12245]: Invalid user pia from 79.143.188.234 port 36844
Sep  3 23:37:59 electroncash sshd[12245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.143.188.234 
Sep  3 23:37:59 electroncash sshd[12245]: Invalid user pia from 79.143.188.234 port 36844
Sep  3 23:38:01 electroncash sshd[12245]: Failed password for invalid user pia from 79.143.188.234 port 36844 ssh2
Sep  3 23:40:17 electroncash sshd[12917]: Invalid user ftptest from 79.143.188.234 port 47908
...
2020-09-04 08:18:54
182.61.133.172 attackspam
2020-09-03T18:42:28.056311correo.[domain] sshd[46223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.133.172 2020-09-03T18:42:28.048022correo.[domain] sshd[46223]: Invalid user sysadmin from 182.61.133.172 port 57914 2020-09-03T18:42:29.912076correo.[domain] sshd[46223]: Failed password for invalid user sysadmin from 182.61.133.172 port 57914 ssh2 ...
2020-09-04 08:18:32
45.142.120.183 attackspambots
2020-09-03T17:48:49.740790linuxbox-skyline auth[59561]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=epvjb6 rhost=45.142.120.183
...
2020-09-04 08:01:34
157.245.74.244 attackspambots
157.245.74.244 - - [04/Sep/2020:00:39:54 +0100] "POST /wp-login.php HTTP/1.1" 200 1948 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.74.244 - - [04/Sep/2020:00:39:55 +0100] "POST /wp-login.php HTTP/1.1" 200 1912 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.74.244 - - [04/Sep/2020:00:39:56 +0100] "POST /wp-login.php HTTP/1.1" 200 1909 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-04 07:59:48
106.13.226.112 attackbots
Total attacks: 2
2020-09-04 08:07:03
118.217.34.67 attack
Sep  3 18:46:40 mellenthin postfix/smtpd[20702]: NOQUEUE: reject: RCPT from unknown[118.217.34.67]: 554 5.7.1 Service unavailable; Client host [118.217.34.67] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/118.217.34.67 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[118.217.34.67]>
2020-09-04 08:22:13
185.220.102.254 attack
2020-09-03T23:40:39.065352abusebot.cloudsearch.cf sshd[25744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=tor-exit-relay-8.anonymizing-proxy.digitalcourage.de  user=root
2020-09-03T23:40:41.146311abusebot.cloudsearch.cf sshd[25744]: Failed password for root from 185.220.102.254 port 16666 ssh2
2020-09-03T23:40:44.303547abusebot.cloudsearch.cf sshd[25744]: Failed password for root from 185.220.102.254 port 16666 ssh2
2020-09-03T23:40:39.065352abusebot.cloudsearch.cf sshd[25744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=tor-exit-relay-8.anonymizing-proxy.digitalcourage.de  user=root
2020-09-03T23:40:41.146311abusebot.cloudsearch.cf sshd[25744]: Failed password for root from 185.220.102.254 port 16666 ssh2
2020-09-03T23:40:44.303547abusebot.cloudsearch.cf sshd[25744]: Failed password for root from 185.220.102.254 port 16666 ssh2
2020-09-03T23:40:39.065352abusebot.cloudsearch.cf sshd[25744]: pam_uni
...
2020-09-04 07:59:32
125.77.23.30 attackspambots
Sep  4 02:13:14 lnxmysql61 sshd[6008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.77.23.30
Sep  4 02:13:16 lnxmysql61 sshd[6008]: Failed password for invalid user chandan from 125.77.23.30 port 54620 ssh2
Sep  4 02:17:30 lnxmysql61 sshd[7218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.77.23.30
2020-09-04 08:23:10
94.230.125.41 attack
20/9/3@12:46:58: FAIL: Alarm-Network address from=94.230.125.41
...
2020-09-04 08:09:55
148.102.25.170 attack
2020-09-04T04:40:21.025306hostname sshd[23143]: Invalid user admin4 from 148.102.25.170 port 58466
2020-09-04T04:40:23.231589hostname sshd[23143]: Failed password for invalid user admin4 from 148.102.25.170 port 58466 ssh2
2020-09-04T04:41:40.584911hostname sshd[23695]: Invalid user scan from 148.102.25.170 port 37474
...
2020-09-04 08:08:53
157.41.65.62 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-04 08:03:34
176.202.129.66 attackbotsspam
1599151630 - 09/03/2020 18:47:10 Host: 176.202.129.66/176.202.129.66 Port: 445 TCP Blocked
2020-09-04 07:57:35
152.101.29.177 attack
(Sep  4)  LEN=40 TTL=48 ID=46038 TCP DPT=8080 WINDOW=22237 SYN 
 (Sep  3)  LEN=40 TTL=48 ID=40309 TCP DPT=8080 WINDOW=3015 SYN 
 (Sep  3)  LEN=40 TTL=48 ID=7023 TCP DPT=8080 WINDOW=22237 SYN 
 (Sep  3)  LEN=40 TTL=48 ID=15794 TCP DPT=8080 WINDOW=3015 SYN 
 (Sep  2)  LEN=40 TTL=48 ID=45201 TCP DPT=8080 WINDOW=22237 SYN 
 (Sep  2)  LEN=40 TTL=48 ID=32788 TCP DPT=8080 WINDOW=22237 SYN 
 (Sep  2)  LEN=40 TTL=48 ID=29067 TCP DPT=8080 WINDOW=22237 SYN 
 (Sep  1)  LEN=40 TTL=48 ID=28569 TCP DPT=8080 WINDOW=22237 SYN 
 (Aug 31)  LEN=40 TTL=48 ID=35791 TCP DPT=8080 WINDOW=22237 SYN 
 (Aug 31)  LEN=40 TTL=48 ID=4128 TCP DPT=8080 WINDOW=22237 SYN 
 (Aug 31)  LEN=40 TTL=48 ID=62624 TCP DPT=8080 WINDOW=3015 SYN 
 (Aug 31)  LEN=40 TTL=48 ID=55076 TCP DPT=23 WINDOW=11537 SYN 
 (Aug 30)  LEN=40 TTL=48 ID=56738 TCP DPT=8080 WINDOW=22237 SYN 
 (Aug 30)  LEN=40 TTL=48 ID=64872 TCP DPT=8080 WINDOW=3015 SYN
2020-09-04 08:16:09

最近上报的IP列表

114.143.235.106 114.143.218.230 113.53.120.99 114.170.121.157
114.170.122.57 114.170.66.11 114.170.121.190 114.170.19.133
114.170.71.168 114.170.69.18 114.170.69.12 114.170.122.203
113.53.121.118 114.170.81.204 114.170.82.100 114.170.123.67
114.170.82.148 114.170.87.247 114.171.12.3 114.173.173.87