必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.42.1.160
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26075
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.42.1.160.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400

;; Query time: 77 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 18:12:26 CST 2025
;; MSG SIZE  rcvd: 105
HOST信息:
Host 160.1.42.138.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 160.1.42.138.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
212.64.95.187 attackspam
Oct  9 14:17:43 ourumov-web sshd\[25262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.95.187  user=root
Oct  9 14:17:45 ourumov-web sshd\[25262\]: Failed password for root from 212.64.95.187 port 46830 ssh2
Oct  9 14:32:41 ourumov-web sshd\[26224\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.95.187  user=root
...
2020-10-09 21:20:53
120.53.243.211 attackbotsspam
$f2bV_matches
2020-10-09 21:27:00
202.0.103.51 attackbots
202.0.103.51 - - [09/Oct/2020:07:57:34 +0100] "POST /wp-login.php HTTP/1.1" 200 2545 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
202.0.103.51 - - [09/Oct/2020:07:57:37 +0100] "POST /wp-login.php HTTP/1.1" 200 2540 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
202.0.103.51 - - [09/Oct/2020:07:57:39 +0100] "POST /wp-login.php HTTP/1.1" 200 2539 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-09 21:25:36
81.68.125.65 attack
Oct  9 06:20:46 mockhub sshd[895662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.125.65 
Oct  9 06:20:46 mockhub sshd[895662]: Invalid user cyrus from 81.68.125.65 port 48726
Oct  9 06:20:48 mockhub sshd[895662]: Failed password for invalid user cyrus from 81.68.125.65 port 48726 ssh2
...
2020-10-09 21:40:56
69.11.155.118 attackbots
Automatic report - Port Scan Attack
2020-10-09 21:49:16
194.87.138.151 attack
 UDP 194.87.138.151:62481 -> port 6881, len 97
2020-10-09 21:42:38
150.136.208.168 attackbotsspam
Oct  9 14:43:08  sshd\[4685\]: User root from 150.136.208.168 not allowed because not listed in AllowUsersOct  9 14:43:10  sshd\[4685\]: Failed password for invalid user root from 150.136.208.168 port 42020 ssh2
...
2020-10-09 21:52:09
121.204.141.232 attackbotsspam
SSH login attempts.
2020-10-09 21:29:51
159.65.30.66 attackspambots
Oct  9 12:57:55 vps639187 sshd\[7027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.30.66  user=root
Oct  9 12:57:57 vps639187 sshd\[7027\]: Failed password for root from 159.65.30.66 port 54912 ssh2
Oct  9 13:02:13 vps639187 sshd\[7198\]: Invalid user art1 from 159.65.30.66 port 60324
Oct  9 13:02:13 vps639187 sshd\[7198\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.30.66
...
2020-10-09 21:45:08
62.234.182.174 attackspambots
Tried sshing with brute force.
2020-10-09 21:51:08
45.143.221.41 attackbotsspam
[2020-10-09 08:57:34] NOTICE[1182] chan_sip.c: Registration from '"500" ' failed for '45.143.221.41:7835' - Wrong password
[2020-10-09 08:57:34] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-09T08:57:34.693-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="500",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/7835",Challenge="4d9886b8",ReceivedChallenge="4d9886b8",ReceivedHash="5214e316b6a6327690ec7f348ffff693"
[2020-10-09 08:57:34] NOTICE[1182] chan_sip.c: Registration from '"500" ' failed for '45.143.221.41:7835' - Wrong password
[2020-10-09 08:57:34] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-09T08:57:34.839-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="500",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.2
...
2020-10-09 21:28:00
118.25.183.69 attackbotsspam
(sshd) Failed SSH login from 118.25.183.69 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  9 06:26:56 optimus sshd[20378]: Invalid user testwww from 118.25.183.69
Oct  9 06:26:56 optimus sshd[20378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.183.69 
Oct  9 06:26:57 optimus sshd[20378]: Failed password for invalid user testwww from 118.25.183.69 port 50018 ssh2
Oct  9 06:31:30 optimus sshd[21787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.183.69  user=root
Oct  9 06:31:32 optimus sshd[21787]: Failed password for root from 118.25.183.69 port 46248 ssh2
2020-10-09 21:22:55
185.244.41.7 attackbotsspam
Oct  9 11:47:03 mail.srvfarm.net postfix/smtps/smtpd[290488]: warning: unknown[185.244.41.7]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  9 11:47:03 mail.srvfarm.net postfix/smtps/smtpd[290488]: lost connection after AUTH from unknown[185.244.41.7]
Oct  9 11:47:06 mail.srvfarm.net postfix/smtps/smtpd[286842]: lost connection after AUTH from unknown[185.244.41.7]
Oct  9 11:50:54 mail.srvfarm.net postfix/smtps/smtpd[291007]: warning: unknown[185.244.41.7]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  9 11:50:54 mail.srvfarm.net postfix/smtps/smtpd[291007]: lost connection after AUTH from unknown[185.244.41.7]
2020-10-09 21:48:02
134.175.249.84 attackbots
Oct  9 12:28:26 *** sshd[11960]: Did not receive identification string from 134.175.249.84
2020-10-09 21:39:27
122.170.109.61 attack
leo_www
2020-10-09 21:56:02

最近上报的IP列表

129.149.81.92 185.187.203.162 30.247.255.57 243.133.20.207
40.135.171.115 224.111.137.35 141.107.117.169 168.171.3.147
189.29.146.96 60.83.234.245 51.212.42.93 36.165.92.192
233.50.37.75 20.194.231.58 181.161.152.111 9.232.248.59
226.102.12.189 49.227.139.2 235.196.236.61 4.204.183.51