必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Sweden

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.190.42.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58601
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;159.190.42.159.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 22:49:53 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
Host 159.42.190.159.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 159.42.190.159.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
77.159.75.160 attackbots
Port probing on unauthorized port 8080
2020-09-07 21:22:22
218.245.1.169 attack
(sshd) Failed SSH login from 218.245.1.169 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  7 08:33:37 amsweb01 sshd[6756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.245.1.169  user=root
Sep  7 08:33:39 amsweb01 sshd[6756]: Failed password for root from 218.245.1.169 port 57818 ssh2
Sep  7 08:38:45 amsweb01 sshd[7474]: Invalid user helper from 218.245.1.169 port 49957
Sep  7 08:38:48 amsweb01 sshd[7474]: Failed password for invalid user helper from 218.245.1.169 port 49957 ssh2
Sep  7 08:41:59 amsweb01 sshd[8273]: Invalid user dbadmin from 218.245.1.169 port 52871
2020-09-07 21:11:33
103.133.105.65 attackbots
(smtpauth) Failed SMTP AUTH login from 103.133.105.65 (VN/Vietnam/-): 5 in the last 3600 secs
2020-09-07 20:59:50
162.158.165.46 attack
srv02 DDoS Malware Target(80:http) ..
2020-09-07 21:16:07
103.69.68.6 attack
Sep  6 18:20:59 cumulus sshd[19143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.69.68.6  user=r.r
Sep  6 18:21:01 cumulus sshd[19143]: Failed password for r.r from 103.69.68.6 port 41425 ssh2
Sep  6 18:21:01 cumulus sshd[19143]: Received disconnect from 103.69.68.6 port 41425:11: Bye Bye [preauth]
Sep  6 18:21:01 cumulus sshd[19143]: Disconnected from 103.69.68.6 port 41425 [preauth]
Sep  6 18:38:30 cumulus sshd[20660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.69.68.6  user=r.r
Sep  6 18:38:31 cumulus sshd[20660]: Failed password for r.r from 103.69.68.6 port 34637 ssh2
Sep  6 18:38:32 cumulus sshd[20660]: Received disconnect from 103.69.68.6 port 34637:11: Bye Bye [preauth]
Sep  6 18:38:32 cumulus sshd[20660]: Disconnected from 103.69.68.6 port 34637 [preauth]
Sep  6 18:39:32 cumulus sshd[20847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ........
-------------------------------
2020-09-07 21:08:51
180.76.169.198 attackbots
(sshd) Failed SSH login from 180.76.169.198 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  7 13:50:18 amsweb01 sshd[16274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.169.198  user=root
Sep  7 13:50:21 amsweb01 sshd[16274]: Failed password for root from 180.76.169.198 port 51334 ssh2
Sep  7 14:01:50 amsweb01 sshd[17933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.169.198  user=root
Sep  7 14:01:52 amsweb01 sshd[17933]: Failed password for root from 180.76.169.198 port 48068 ssh2
Sep  7 14:05:28 amsweb01 sshd[18462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.169.198  user=root
2020-09-07 21:14:31
212.70.149.20 attackbots
Sep  7 14:43:43 galaxy event: galaxy/lswi: smtp: osaka@uni-potsdam.de [212.70.149.20] authentication failure using internet password
Sep  7 14:44:08 galaxy event: galaxy/lswi: smtp: ors@uni-potsdam.de [212.70.149.20] authentication failure using internet password
Sep  7 14:44:33 galaxy event: galaxy/lswi: smtp: optima@uni-potsdam.de [212.70.149.20] authentication failure using internet password
Sep  7 14:44:59 galaxy event: galaxy/lswi: smtp: onlinelearning@uni-potsdam.de [212.70.149.20] authentication failure using internet password
Sep  7 14:45:25 galaxy event: galaxy/lswi: smtp: onedrive@uni-potsdam.de [212.70.149.20] authentication failure using internet password
...
2020-09-07 20:50:54
171.221.210.158 attackbotsspam
171.221.210.158 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep  7 06:07:18 server5 sshd[13322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.16.211.200  user=root
Sep  7 06:12:34 server5 sshd[15818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.221.210.158  user=root
Sep  7 06:06:23 server5 sshd[12620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.20.90.63  user=root
Sep  7 06:06:25 server5 sshd[12620]: Failed password for root from 14.20.90.63 port 35774 ssh2
Sep  7 06:10:57 server5 sshd[15029]: Failed password for root from 144.34.193.83 port 60898 ssh2
Sep  7 06:07:19 server5 sshd[13322]: Failed password for root from 112.16.211.200 port 51734 ssh2

IP Addresses Blocked:

112.16.211.200 (CN/China/-)
2020-09-07 20:52:38
88.121.22.235 attackspam
Failed password for invalid user vnc from 88.121.22.235 port 55323 ssh2
2020-09-07 21:26:13
122.51.89.18 attackbotsspam
(sshd) Failed SSH login from 122.51.89.18 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  7 06:59:32 server sshd[1241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.89.18  user=root
Sep  7 06:59:34 server sshd[1241]: Failed password for root from 122.51.89.18 port 42154 ssh2
Sep  7 07:04:16 server sshd[2391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.89.18  user=root
Sep  7 07:04:17 server sshd[2391]: Failed password for root from 122.51.89.18 port 56128 ssh2
Sep  7 07:06:58 server sshd[3407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.89.18  user=root
2020-09-07 21:16:55
118.69.82.233 attack
prod11
...
2020-09-07 20:59:33
222.186.190.2 attack
Failed password for root from 222.186.190.2 port 5024 ssh2
Failed password for root from 222.186.190.2 port 5024 ssh2
Failed password for root from 222.186.190.2 port 5024 ssh2
Failed password for root from 222.186.190.2 port 5024 ssh2
2020-09-07 21:13:30
200.94.21.27 attackbotsspam
Honeypot attack, port: 445, PTR: static-200-94-21-27.alestra.net.mx.
2020-09-07 21:01:37
37.48.8.209 attack
2020-09-06 18:53:47 1kExvG-000843-9s SMTP connection from 37-48-8-209.nat.epc.tmcz.cz \[37.48.8.209\]:56478 I=\[193.107.88.166\]:25 closed by DROP in ACL
2020-09-06 18:54:02 1kExvQ-00084F-8N SMTP connection from 37-48-8-209.nat.epc.tmcz.cz \[37.48.8.209\]:59469 I=\[193.107.88.166\]:25 closed by DROP in ACL
2020-09-06 18:54:10 1kExvc-00084g-Cy SMTP connection from 37-48-8-209.nat.epc.tmcz.cz \[37.48.8.209\]:1264 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
2020-09-07 21:20:54
217.182.192.217 attack
Sep  7 14:31:54 vm0 sshd[11617]: Failed password for root from 217.182.192.217 port 60762 ssh2
Sep  7 14:32:06 vm0 sshd[11617]: error: maximum authentication attempts exceeded for root from 217.182.192.217 port 60762 ssh2 [preauth]
...
2020-09-07 20:58:35

最近上报的IP列表

20.134.37.195 163.2.74.225 231.80.32.241 172.122.73.101
248.253.250.230 218.12.241.226 159.51.229.139 28.113.219.91
32.159.121.77 232.160.10.92 131.189.64.251 60.85.165.60
242.96.147.35 34.200.170.14 51.82.251.58 244.5.150.82
21.4.99.93 130.216.147.58 190.127.235.168 146.45.168.173