必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Canada

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.119.203.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1692
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;142.119.203.42.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020302 1800 900 604800 86400

;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 11:18:46 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
Host 42.203.119.142.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.203.119.142.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
37.72.175.120 attackbots
B: Magento admin pass test (abusive)
2019-09-26 07:34:20
192.0.87.159 attackbots
xmlrpc attack
2019-09-26 07:33:23
187.189.111.136 attackbots
SSH brutforce
2019-09-26 07:35:24
109.197.249.207 attackbotsspam
SSH brutforce
2019-09-26 07:32:37
185.46.121.194 attack
php WP PHPmyadamin ABUSE blocked for 12h
2019-09-26 07:41:14
104.211.242.189 attackbotsspam
Sep 25 13:21:37 sachi sshd\[10758\]: Invalid user wai from 104.211.242.189
Sep 25 13:21:37 sachi sshd\[10758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.242.189
Sep 25 13:21:39 sachi sshd\[10758\]: Failed password for invalid user wai from 104.211.242.189 port 1984 ssh2
Sep 25 13:26:26 sachi sshd\[11094\]: Invalid user tf from 104.211.242.189
Sep 25 13:26:26 sachi sshd\[11094\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.242.189
2019-09-26 07:36:21
112.169.9.150 attackbotsspam
Sep 25 13:37:15 hpm sshd\[23253\]: Invalid user weixin from 112.169.9.150
Sep 25 13:37:15 hpm sshd\[23253\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.169.9.150
Sep 25 13:37:17 hpm sshd\[23253\]: Failed password for invalid user weixin from 112.169.9.150 port 38969 ssh2
Sep 25 13:41:58 hpm sshd\[23724\]: Invalid user ftpuser from 112.169.9.150
Sep 25 13:41:58 hpm sshd\[23724\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.169.9.150
2019-09-26 08:04:03
62.219.11.165 attackbotsspam
Automatic report - Port Scan Attack
2019-09-26 07:58:19
185.142.236.35 attackbotsspam
3389BruteforceStormFW22
2019-09-26 08:08:19
77.247.110.213 attackspambots
\[2019-09-25 19:22:31\] NOTICE\[1970\] chan_sip.c: Registration from '"2288" \' failed for '77.247.110.213:6214' - Wrong password
\[2019-09-25 19:22:31\] SECURITY\[1978\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-25T19:22:31.660-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2288",SessionID="0x7f9b3402de58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.213/6214",Challenge="37f18dae",ReceivedChallenge="37f18dae",ReceivedHash="5745f3c3c5bb7d69bd8f0ab38bf25f22"
\[2019-09-25 19:22:31\] NOTICE\[1970\] chan_sip.c: Registration from '"2288" \' failed for '77.247.110.213:6214' - Wrong password
\[2019-09-25 19:22:31\] SECURITY\[1978\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-25T19:22:31.762-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2288",SessionID="0x7f9b3403d098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4
2019-09-26 07:47:24
103.230.241.39 attackbotsspam
[Thu Sep 26 03:53:40.417924 2019] [:error] [pid 27914:tid 140467660363520] [client 103.230.241.39:35167] [client 103.230.241.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.1.1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "792"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.1.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XYvT1F4MXwsM0Koah3AOawAAAM0"]
...
2019-09-26 07:49:33
155.64.38.121 attackspam
19/9/25@19:08:57: FAIL: Alarm-SSH address from=155.64.38.121
...
2019-09-26 07:35:52
10.70.4.4 attack
Blocked
2019-09-26 07:50:38
108.179.219.114 attack
php WP PHPmyadamin ABUSE blocked for 12h
2019-09-26 07:59:22
139.170.149.161 attackbotsspam
Sep 25 13:52:01 kapalua sshd\[28609\]: Invalid user nk from 139.170.149.161
Sep 25 13:52:01 kapalua sshd\[28609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.170.149.161
Sep 25 13:52:03 kapalua sshd\[28609\]: Failed password for invalid user nk from 139.170.149.161 port 58382 ssh2
Sep 25 13:57:08 kapalua sshd\[28990\]: Invalid user ncs from 139.170.149.161
Sep 25 13:57:08 kapalua sshd\[28990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.170.149.161
2019-09-26 07:57:51

最近上报的IP列表

24.222.50.28 139.79.192.223 98.108.81.224 52.52.130.148
242.239.34.151 66.195.42.29 113.69.201.217 229.115.76.125
21.111.28.152 193.242.138.241 190.185.23.227 164.148.39.59
162.52.218.15 22.43.216.118 53.126.178.66 101.102.57.137
141.11.199.81 150.168.38.90 244.124.64.90 175.248.25.78