必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.66.142.253
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59879
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;149.66.142.253.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012800 1800 900 604800 86400

;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 28 23:33:29 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
Host 253.142.66.149.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 253.142.66.149.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
219.233.194.178 attack
Jul 13 15:00:19 dallas01 sshd[17323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.233.194.178
Jul 13 15:00:21 dallas01 sshd[17323]: Failed password for invalid user wp from 219.233.194.178 port 40969 ssh2
Jul 13 15:04:59 dallas01 sshd[17817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.233.194.178
Jul 13 15:05:02 dallas01 sshd[17817]: Failed password for invalid user anastasia from 219.233.194.178 port 36423 ssh2
2019-10-09 02:06:01
167.114.98.169 attackbotsspam
Oct  8 18:06:22 sauna sshd[23615]: Failed password for root from 167.114.98.169 port 42146 ssh2
...
2019-10-09 02:12:43
128.171.166.20 attackbots
/var/log/messages:Oct  8 06:40:18 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1570516818.636:137635): pid=32701 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=32702 suid=74 rport=34748 laddr=104.167.106.93 lport=23  exe="/usr/sbin/sshd" hostname=? addr=128.171.166.20 terminal=? res=success'
/var/log/messages:Oct  8 06:40:18 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1570516818.640:137636): pid=32701 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=32702 suid=74 rport=34748 laddr=104.167.106.93 lport=23  exe="/usr/sbin/sshd" hostname=? addr=128.171.166.20 terminal=? res=success'
/var/log/messages:Oct  8 06:40:22 sanyalnet-cloud-vps fail2ban.filter[1378]: WARNING Deter........
-------------------------------
2019-10-09 01:56:39
185.143.223.135 attackspambots
Oct  8 14:47:00 dcd-gentoo sshd[13422]: User operator from 185.143.223.135 not allowed because none of user's groups are listed in AllowGroups
Oct  8 14:47:02 dcd-gentoo sshd[13422]: error: PAM: Authentication failure for illegal user operator from 185.143.223.135
Oct  8 14:47:00 dcd-gentoo sshd[13422]: User operator from 185.143.223.135 not allowed because none of user's groups are listed in AllowGroups
Oct  8 14:47:02 dcd-gentoo sshd[13422]: error: PAM: Authentication failure for illegal user operator from 185.143.223.135
Oct  8 14:47:00 dcd-gentoo sshd[13422]: User operator from 185.143.223.135 not allowed because none of user's groups are listed in AllowGroups
Oct  8 14:47:02 dcd-gentoo sshd[13422]: error: PAM: Authentication failure for illegal user operator from 185.143.223.135
Oct  8 14:47:02 dcd-gentoo sshd[13422]: Failed keyboard-interactive/pam for invalid user operator from 185.143.223.135 port 51587 ssh2
...
2019-10-09 02:10:35
37.139.2.218 attackspambots
2019-10-08T09:34:42.5340431495-001 sshd\[10395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.2.218  user=root
2019-10-08T09:34:44.5329741495-001 sshd\[10395\]: Failed password for root from 37.139.2.218 port 54268 ssh2
2019-10-08T09:39:02.3697471495-001 sshd\[10658\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.2.218  user=root
2019-10-08T09:39:03.7266911495-001 sshd\[10658\]: Failed password for root from 37.139.2.218 port 36952 ssh2
2019-10-08T09:43:17.0511051495-001 sshd\[10991\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.2.218  user=root
2019-10-08T09:43:18.7491221495-001 sshd\[10991\]: Failed password for root from 37.139.2.218 port 47874 ssh2
...
2019-10-09 02:10:59
80.211.80.154 attack
Oct  8 08:05:49 h2022099 sshd[1466]: reveeclipse mapping checking getaddrinfo for host154-80-211-80.serverdedicati.aruba.hostname [80.211.80.154] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct  8 08:05:49 h2022099 sshd[1466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.80.154  user=r.r
Oct  8 08:05:51 h2022099 sshd[1466]: Failed password for r.r from 80.211.80.154 port 33248 ssh2
Oct  8 08:05:51 h2022099 sshd[1466]: Received disconnect from 80.211.80.154: 11: Bye Bye [preauth]
Oct  8 08:22:09 h2022099 sshd[4003]: reveeclipse mapping checking getaddrinfo for host154-80-211-80.serverdedicati.aruba.hostname [80.211.80.154] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct  8 08:22:09 h2022099 sshd[4003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.80.154  user=r.r
Oct  8 08:22:11 h2022099 sshd[4003]: Failed password for r.r from 80.211.80.154 port 57696 ssh2
Oct  8 08:22:11 h2022099 sshd[4........
-------------------------------
2019-10-09 01:53:01
183.154.54.103 attack
Unauthorised access (Oct  8) SRC=183.154.54.103 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=20432 TCP DPT=8080 WINDOW=64870 SYN 
Unauthorised access (Oct  8) SRC=183.154.54.103 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=22711 TCP DPT=8080 WINDOW=17862 SYN 
Unauthorised access (Oct  7) SRC=183.154.54.103 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=19282 TCP DPT=8080 WINDOW=57742 SYN
2019-10-09 02:04:33
149.202.56.194 attack
Oct  8 19:25:24 pornomens sshd\[14172\]: Invalid user Red123 from 149.202.56.194 port 54662
Oct  8 19:25:24 pornomens sshd\[14172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.56.194
Oct  8 19:25:25 pornomens sshd\[14172\]: Failed password for invalid user Red123 from 149.202.56.194 port 54662 ssh2
...
2019-10-09 01:56:22
222.186.169.192 attack
frenzy
2019-10-09 02:05:39
14.20.235.171 attack
Oct  8 21:58:22 our-server-hostname postfix/smtpd[1054]: connect from unknown[14.20.235.171]
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=14.20.235.171
2019-10-09 02:31:33
77.40.3.223 attack
2019-10-08 dovecot_login authenticator failed for \(localhost.localdomain\) \[77.40.3.223\]: 535 Incorrect authentication data \(set_id=invoices@**REMOVED**.de\)
2019-10-08 dovecot_login authenticator failed for \(localhost.localdomain\) \[77.40.3.223\]: 535 Incorrect authentication data \(set_id=invoices@**REMOVED**.de\)
2019-10-08 dovecot_login authenticator failed for \(localhost.localdomain\) \[77.40.3.223\]: 535 Incorrect authentication data \(set_id=kontakt@**REMOVED**.de\)
2019-10-09 02:30:40
178.212.49.187 attack
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/178.212.49.187/ 
 PL - 1H : (145)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : PL 
 NAME ASN : ASN197025 
 
 IP : 178.212.49.187 
 
 CIDR : 178.212.49.0/24 
 
 PREFIX COUNT : 8 
 
 UNIQUE IP COUNT : 2048 
 
 
 WYKRYTE ATAKI Z ASN197025 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 3 
 
 DateTime : 2019-10-08 13:48:42 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-09 02:24:12
104.248.115.231 attackspam
Oct  8 19:42:53 arianus sshd\[15019\]: Unable to negotiate with 104.248.115.231 port 44406: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 \[preauth\]
...
2019-10-09 02:19:18
151.80.217.219 attackbots
Oct  8 11:31:19 xtremcommunity sshd\[315672\]: Invalid user Test@2017 from 151.80.217.219 port 38822
Oct  8 11:31:19 xtremcommunity sshd\[315672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.217.219
Oct  8 11:31:20 xtremcommunity sshd\[315672\]: Failed password for invalid user Test@2017 from 151.80.217.219 port 38822 ssh2
Oct  8 11:35:56 xtremcommunity sshd\[315736\]: Invalid user Test@2017 from 151.80.217.219 port 34450
Oct  8 11:35:56 xtremcommunity sshd\[315736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.217.219
...
2019-10-09 02:08:42
191.232.249.186 attack
Oct  8 06:41:28 foo sshd[11314]: Did not receive identification string from 191.232.249.186
Oct  8 06:44:04 foo sshd[11336]: Invalid user kafka from 191.232.249.186
Oct  8 06:44:04 foo sshd[11336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.232.249.186 
Oct  8 06:44:06 foo sshd[11336]: Failed password for invalid user kafka from 191.232.249.186 port 56888 ssh2
Oct  8 06:44:06 foo sshd[11336]: Received disconnect from 191.232.249.186: 11: Normal Shutdown, Thank you for playing [preauth]
Oct  8 06:45:23 foo sshd[11397]: Invalid user kafka from 191.232.249.186
Oct  8 06:45:23 foo sshd[11397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.232.249.186 
Oct  8 06:45:25 foo sshd[11397]: Failed password for invalid user kafka from 191.232.249.186 port 60282 ssh2
Oct  8 06:45:25 foo sshd[11397]: Received disconnect from 191.232.249.186: 11: Normal Shutdown, Thank you for playing [preau........
-------------------------------
2019-10-09 02:23:08

最近上报的IP列表

8.60.184.51 140.108.160.16 65.65.7.10 66.166.160.9
143.65.143.155 124.104.229.20 27.158.123.88 233.220.141.0
7.198.155.215 55.96.237.175 14.158.57.44 223.170.41.70
167.240.235.198 203.26.196.232 176.1.172.194 61.124.31.233
250.162.134.75 45.49.253.200 200.119.64.243 117.99.10.127