必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Unified Layer

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbotsspam
Automatic report - XMLRPC Attack
2020-09-05 21:06:46
attackbots
Automatic report - Banned IP Access
2020-09-05 05:31:10
attackspam
142.4.14.247 - - [26/Aug/2020:05:54:39 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.4.14.247 - - [26/Aug/2020:05:54:40 +0200] "POST /wp-login.php HTTP/1.1" 200 1811 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.4.14.247 - - [26/Aug/2020:05:54:41 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.4.14.247 - - [26/Aug/2020:05:54:42 +0200] "POST /wp-login.php HTTP/1.1" 200 1799 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.4.14.247 - - [26/Aug/2020:05:54:47 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.4.14.247 - - [26/Aug/2020:05:54:53 +0200] "POST /wp-login.php HTTP/1.1" 200 1798 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/6
...
2020-08-26 13:00:28
attack
142.4.14.247 - - [08/Aug/2020:14:07:00 +0100] "POST /wp-login.php HTTP/1.1" 200 1801 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.4.14.247 - - [08/Aug/2020:14:07:07 +0100] "POST /wp-login.php HTTP/1.1" 200 1798 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.4.14.247 - - [08/Aug/2020:14:07:07 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-08 23:23:48
attackspambots
142.4.14.247 - - [07/Aug/2020:21:27:26 +0100] "POST /wp-login.php HTTP/1.1" 200 1973 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.4.14.247 - - [07/Aug/2020:21:27:30 +0100] "POST /wp-login.php HTTP/1.1" 200 1954 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.4.14.247 - - [07/Aug/2020:21:27:33 +0100] "POST /wp-login.php HTTP/1.1" 200 1953 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-08 05:18:34
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.4.14.247
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12107
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.4.14.247.			IN	A

;; AUTHORITY SECTION:
.			534	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020080701 1800 900 604800 86400

;; Query time: 28 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Aug 08 05:18:31 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
247.14.4.142.in-addr.arpa domain name pointer server.advancedcomputing.ca.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
247.14.4.142.in-addr.arpa	name = server.advancedcomputing.ca.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
27.128.175.209 attackspam
Nov  5 09:25:32 MK-Soft-VM5 sshd[4887]: Failed password for root from 27.128.175.209 port 41462 ssh2
...
2019-11-05 17:20:44
187.177.130.238 attackbots
Automatic report - Port Scan Attack
2019-11-05 16:42:37
77.68.41.115 attackspam
TCP Port Scanning
2019-11-05 16:47:31
223.71.139.97 attackspambots
2019-11-05T07:28:26.706636abusebot-5.cloudsearch.cf sshd\[22992\]: Invalid user pn from 223.71.139.97 port 54190
2019-11-05 16:52:37
45.95.32.249 attackbots
Lines containing failures of 45.95.32.249
Nov  5 06:20:15 shared04 postfix/smtpd[1696]: connect from swear.protutoriais.com[45.95.32.249]
Nov  5 06:20:15 shared04 policyd-spf[6793]: prepend Received-SPF: Pass (mailfrom) identhostnamey=mailfrom; client-ip=45.95.32.249; helo=swear.rjredcreations.co; envelope-from=x@x
Nov x@x
Nov  5 06:20:15 shared04 postfix/smtpd[1696]: disconnect from swear.protutoriais.com[45.95.32.249] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.95.32.249
2019-11-05 17:04:42
5.9.77.62 attack
2019-11-05T09:59:40.362047mail01 postfix/smtpd[6616]: warning: static.62.77.9.5.clients.your-server.de[5.9.77.62]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-11-05T10:04:19.180851mail01 postfix/smtpd[2976]: warning: static.62.77.9.5.clients.your-server.de[5.9.77.62]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-11-05T10:04:19.181216mail01 postfix/smtpd[14137]: warning: static.62.77.9.5.clients.your-server.de[5.9.77.62]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-11-05 17:08:11
85.57.27.46 attackbotsspam
Nov  5 01:42:16 debian sshd\[29591\]: Invalid user backuppc from 85.57.27.46 port 52812
Nov  5 01:42:16 debian sshd\[29591\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.57.27.46
Nov  5 01:42:18 debian sshd\[29591\]: Failed password for invalid user backuppc from 85.57.27.46 port 52812 ssh2
...
2019-11-05 16:53:23
47.39.28.58 attackspam
TCP Port Scanning
2019-11-05 17:20:15
5.88.155.130 attackspambots
Nov  5 09:37:06 ks10 sshd[23764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.88.155.130 
Nov  5 09:37:07 ks10 sshd[23764]: Failed password for invalid user cpanel from 5.88.155.130 port 51102 ssh2
...
2019-11-05 16:42:17
198.108.67.86 attack
11/05/2019-01:27:36.284376 198.108.67.86 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-11-05 16:47:16
89.45.17.11 attackspam
Nov  5 02:29:37 debian sshd\[30064\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.45.17.11  user=www-data
Nov  5 02:29:38 debian sshd\[30064\]: Failed password for www-data from 89.45.17.11 port 49894 ssh2
Nov  5 02:33:48 debian sshd\[30108\]: Invalid user git from 89.45.17.11 port 40900
...
2019-11-05 17:22:20
45.143.221.11 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-05 16:57:55
218.17.56.50 attackbotsspam
Nov  5 06:52:01 mail sshd[26388]: Invalid user wynonna from 218.17.56.50
Nov  5 06:52:01 mail sshd[26388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.17.56.50
Nov  5 06:52:01 mail sshd[26388]: Invalid user wynonna from 218.17.56.50
Nov  5 06:52:02 mail sshd[26388]: Failed password for invalid user wynonna from 218.17.56.50 port 56052 ssh2
Nov  5 07:26:42 mail sshd[15260]: Invalid user teamspeak3 from 218.17.56.50
...
2019-11-05 17:18:08
128.199.142.138 attackbots
2019-11-05T06:39:45.966120shield sshd\[32703\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.138  user=root
2019-11-05T06:39:48.399242shield sshd\[32703\]: Failed password for root from 128.199.142.138 port 46554 ssh2
2019-11-05T06:44:03.815613shield sshd\[828\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.138  user=root
2019-11-05T06:44:05.666751shield sshd\[828\]: Failed password for root from 128.199.142.138 port 56026 ssh2
2019-11-05T06:48:29.421721shield sshd\[1454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.138  user=root
2019-11-05 17:21:05
144.91.67.12 attackspam
Nov  5 09:37:25 legacy sshd[11986]: Failed password for root from 144.91.67.12 port 33200 ssh2
Nov  5 09:38:02 legacy sshd[12011]: Failed password for root from 144.91.67.12 port 39960 ssh2
...
2019-11-05 16:54:36

最近上报的IP列表

49.150.2.138 111.38.22.27 88.250.124.65 2.140.77.211
84.41.37.222 220.28.36.225 109.97.35.46 250.76.189.64
86.98.200.61 86.4.103.137 69.176.104.246 234.148.150.146
210.55.101.24 40.223.75.22 148.68.208.138 75.120.11.4
77.190.252.56 209.182.232.154 50.81.111.166 189.130.202.131