必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 16.166.20.58
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37808
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;16.166.20.58.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012102 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 09:38:16 CST 2025
;; MSG SIZE  rcvd: 105
HOST信息:
Host 58.20.166.16.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 58.20.166.16.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
178.128.217.135 attack
Oct 28 12:38:19 vps647732 sshd[27216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.217.135
Oct 28 12:38:20 vps647732 sshd[27216]: Failed password for invalid user u252588 from 178.128.217.135 port 54190 ssh2
...
2019-10-28 19:47:21
183.11.72.229 attackspam
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
2019-10-28 19:59:02
198.13.134.46 attackbots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/198.13.134.46/ 
 
 US - 1H : (295)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : US 
 NAME ASN : ASN19397 
 
 IP : 198.13.134.46 
 
 CIDR : 198.13.128.0/19 
 
 PREFIX COUNT : 133 
 
 UNIQUE IP COUNT : 181248 
 
 
 ATTACKS DETECTED ASN19397 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-10-28 04:45:31 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-28 19:21:18
87.239.85.169 attack
Oct 28 12:50:32 srv01 sshd[23054]: Invalid user admin from 87.239.85.169
Oct 28 12:50:32 srv01 sshd[23054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.239.85.169
Oct 28 12:50:32 srv01 sshd[23054]: Invalid user admin from 87.239.85.169
Oct 28 12:50:33 srv01 sshd[23054]: Failed password for invalid user admin from 87.239.85.169 port 39938 ssh2
Oct 28 12:54:25 srv01 sshd[23193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.239.85.169  user=root
Oct 28 12:54:28 srv01 sshd[23193]: Failed password for root from 87.239.85.169 port 49824 ssh2
...
2019-10-28 19:59:51
103.127.207.169 attackbotsspam
DATE:2019-10-28 12:54:29, IP:103.127.207.169, PORT:1433 - MSSQL brute force auth on a honeypot server (epe-dc)
2019-10-28 19:57:48
154.88.113.186 attackspambots
154.88.113.186 - - [28/Oct/2019:12:54:26 +0100] "GET //plus/erraddsave.php HTTP/1.1" 301 627
...
2019-10-28 20:00:27
118.24.143.110 attackspam
Oct 28 07:54:23 TORMINT sshd\[22623\]: Invalid user www from 118.24.143.110
Oct 28 07:54:23 TORMINT sshd\[22623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.143.110
Oct 28 07:54:25 TORMINT sshd\[22623\]: Failed password for invalid user www from 118.24.143.110 port 43998 ssh2
...
2019-10-28 20:01:39
115.77.189.142 attackbotsspam
10/27/2019-23:45:22.167884 115.77.189.142 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2019-10-28 19:27:13
103.141.138.133 attackspam
Oct 28 10:31:13 vpn01 sshd[30004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.141.138.133
Oct 28 10:31:15 vpn01 sshd[30004]: Failed password for invalid user ftp from 103.141.138.133 port 53559 ssh2
...
2019-10-28 19:49:42
51.38.51.108 attack
Oct 28 12:52:35 webhost01 sshd[20922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.51.108
Oct 28 12:52:37 webhost01 sshd[20922]: Failed password for invalid user password from 51.38.51.108 port 52752 ssh2
...
2019-10-28 19:45:54
103.45.105.236 attackspam
Oct 28 09:37:00 vps sshd[32398]: Failed password for root from 103.45.105.236 port 53124 ssh2
Oct 28 09:54:43 vps sshd[717]: Failed password for root from 103.45.105.236 port 47530 ssh2
...
2019-10-28 19:25:09
81.82.192.202 attack
RDP Bruteforce
2019-10-28 19:28:22
106.12.207.88 attackbotsspam
Oct 26 13:23:36 tuxlinux sshd[17055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.207.88  user=root
Oct 26 13:23:38 tuxlinux sshd[17055]: Failed password for root from 106.12.207.88 port 40779 ssh2
Oct 26 13:23:36 tuxlinux sshd[17055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.207.88  user=root
Oct 26 13:23:38 tuxlinux sshd[17055]: Failed password for root from 106.12.207.88 port 40779 ssh2
Oct 26 13:44:16 tuxlinux sshd[17411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.207.88  user=root
...
2019-10-28 19:29:16
45.146.202.207 attackbotsspam
Lines containing failures of 45.146.202.207
Oct 28 04:34:29 shared04 postfix/smtpd[9726]: connect from hole.mehrbilhostname.com[45.146.202.207]
Oct 28 04:34:29 shared04 policyd-spf[15239]: prepend Received-SPF: Pass (mailfrom) identhostnamey=mailfrom; client-ip=45.146.202.207; helo=hole.fbbffb.com; envelope-from=x@x
Oct x@x
Oct 28 04:34:29 shared04 postfix/smtpd[9726]: disconnect from hole.mehrbilhostname.com[45.146.202.207] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5
Oct 28 04:34:31 shared04 postfix/smtpd[11789]: connect from hole.mehrbilhostname.com[45.146.202.207]
Oct 28 04:34:31 shared04 policyd-spf[16257]: prepend Received-SPF: Pass (mailfrom) identhostnamey=mailfrom; client-ip=45.146.202.207; helo=hole.fbbffb.com; envelope-from=x@x
Oct x@x
Oct 28 04:34:31 shared04 postfix/smtpd[11789]: disconnect from hole.mehrbilhostname.com[45.146.202.207] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5
Oct 28 04:34:58 shared04 postfix/smtpd[9726]: connect........
------------------------------
2019-10-28 19:48:06
195.189.110.70 attackspam
[portscan] Port scan
2019-10-28 19:25:26

最近上报的IP列表

193.157.32.66 150.40.159.250 172.183.110.246 76.75.219.64
86.112.143.159 30.78.73.44 152.234.18.19 170.133.163.42
84.230.193.232 222.74.110.251 70.90.162.192 6.185.239.105
13.79.67.201 78.100.90.253 210.132.164.162 31.95.113.248
17.28.143.211 101.102.252.47 69.65.176.235 143.116.142.43