必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 146.138.110.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51445
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;146.138.110.66.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012101 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 01:49:43 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
Host 66.110.138.146.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 66.110.138.146.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
193.56.28.220 attackspam
2020-02-08T05:58:55.281282www postfix/smtpd[15809]: warning: unknown[193.56.28.220]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-02-08T05:59:03.179108www postfix/smtpd[15809]: warning: unknown[193.56.28.220]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-02-08T05:59:06.052942www postfix/smtpd[15811]: warning: unknown[193.56.28.220]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-02-08 13:44:19
144.76.35.121 attackspambots
Feb  8 05:49:19 km20725 sshd[6065]: reveeclipse mapping checking getaddrinfo for 121.hsmdns.co.za [144.76.35.121] failed - POSSIBLE BREAK-IN ATTEMPT!
Feb  8 05:49:19 km20725 sshd[6065]: Invalid user bwn from 144.76.35.121
Feb  8 05:49:19 km20725 sshd[6065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.76.35.121
Feb  8 05:49:21 km20725 sshd[6065]: Failed password for invalid user bwn from 144.76.35.121 port 35490 ssh2
Feb  8 05:49:21 km20725 sshd[6065]: Received disconnect from 144.76.35.121: 11: Bye Bye [preauth]
Feb  8 05:58:54 km20725 sshd[6373]: reveeclipse mapping checking getaddrinfo for 121.hsmdns.co.za [144.76.35.121] failed - POSSIBLE BREAK-IN ATTEMPT!
Feb  8 05:58:54 km20725 sshd[6373]: Invalid user wkm from 144.76.35.121
Feb  8 05:58:54 km20725 sshd[6373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.76.35.121
Feb  8 05:58:56 km20725 sshd[6373]: Failed password for in........
-------------------------------
2020-02-08 13:49:21
92.118.161.13 attackspam
Honeypot attack, port: 445, PTR: 92.118.161.13.netsystemsresearch.com.
2020-02-08 14:25:30
185.39.11.28 attackbotsspam
Feb 08 05:22:27 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=185.39.11.28, lip=192.168.100.101, session=\\
Feb 08 05:24:14 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=185.39.11.28, lip=192.168.100.101, session=\<6XjW4AieLAC5Jwsc\>\
Feb 08 05:33:27 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=185.39.11.28, lip=192.168.100.101, session=\\
Feb 08 05:35:47 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=185.39.11.28, lip=192.168.100.101, session=\\
Feb 08 05:48:54 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=185.39.11.28, lip=192.168.100.101, session=\\
Feb 08 06:05:45 pop3-login: I
2020-02-08 13:48:52
106.12.55.131 attack
Repeated brute force against a port
2020-02-08 14:15:22
222.186.30.209 attackspambots
Feb  8 07:21:35 163-172-32-151 sshd[7381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.209  user=root
Feb  8 07:21:37 163-172-32-151 sshd[7381]: Failed password for root from 222.186.30.209 port 12020 ssh2
...
2020-02-08 14:22:49
223.205.242.75 attack
Lines containing failures of 223.205.242.75
Feb  8 06:03:33 keyhelp sshd[22306]: Did not receive identification string from 223.205.242.75 port 63428
Feb  8 06:03:44 keyhelp sshd[22307]: Invalid user nagesh from 223.205.242.75 port 50857
Feb  8 06:03:45 keyhelp sshd[22307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.205.242.75
Feb  8 06:03:47 keyhelp sshd[22307]: Failed password for invalid user nagesh from 223.205.242.75 port 50857 ssh2
Feb  8 06:03:47 keyhelp sshd[22307]: Connection closed by invalid user nagesh 223.205.242.75 port 50857 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=223.205.242.75
2020-02-08 14:04:34
106.75.74.225 attackspambots
02/07/2020-23:58:41.647752 106.75.74.225 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-02-08 13:59:47
222.186.42.7 attack
Feb  8 00:07:48 debian sshd[19314]: Unable to negotiate with 222.186.42.7 port 16770: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
Feb  8 00:33:52 debian sshd[20973]: Unable to negotiate with 222.186.42.7 port 56647: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
...
2020-02-08 13:42:10
91.224.60.75 attackspambots
SSH Brute Force
2020-02-08 14:11:39
125.18.79.123 attackbots
23/tcp
[2020-02-08]1pkt
2020-02-08 14:09:15
111.231.246.218 attackspambots
Apache Struts CVE-2017-5638 and malicious OGNL expression upload
2020-02-08 13:40:24
178.62.79.227 attackbotsspam
$f2bV_matches
2020-02-08 14:15:51
139.199.59.31 attackspam
Feb  8 05:58:33 MK-Soft-VM5 sshd[9573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 
Feb  8 05:58:35 MK-Soft-VM5 sshd[9573]: Failed password for invalid user rlr from 139.199.59.31 port 40188 ssh2
...
2020-02-08 14:02:07
212.118.253.115 attackbotsspam
TCP Port Scanning
2020-02-08 14:27:46

最近上报的IP列表

85.25.104.64 117.123.92.79 42.74.251.65 208.46.90.220
58.96.175.241 238.202.28.137 250.126.71.229 194.144.128.213
85.25.52.165 176.160.90.58 45.169.111.224 9.215.125.127
30.105.217.198 82.185.11.245 249.183.160.89 174.128.71.207
126.14.77.251 205.172.63.9 18.39.190.182 220.34.170.243