必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 160.109.29.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18660
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;160.109.29.114.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012301 1800 900 604800 86400

;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 06:48:10 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
Host 114.29.109.160.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 114.29.109.160.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
139.59.85.41 attack
139.59.85.41 - - [03/Aug/2020:00:38:07 +0200] "GET /wp-login.php HTTP/1.1" 200 6398 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.85.41 - - [03/Aug/2020:00:38:08 +0200] "POST /wp-login.php HTTP/1.1" 200 6649 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.85.41 - - [03/Aug/2020:00:38:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-08-03 07:36:59
42.233.249.225 attackspambots
B: Abusive ssh attack
2020-08-03 07:50:59
112.85.42.172 attackbotsspam
Aug  3 01:35:03 vps1 sshd[30899]: Failed none for invalid user root from 112.85.42.172 port 49818 ssh2
Aug  3 01:35:04 vps1 sshd[30899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172  user=root
Aug  3 01:35:05 vps1 sshd[30899]: Failed password for invalid user root from 112.85.42.172 port 49818 ssh2
Aug  3 01:35:09 vps1 sshd[30899]: Failed password for invalid user root from 112.85.42.172 port 49818 ssh2
Aug  3 01:35:14 vps1 sshd[30899]: Failed password for invalid user root from 112.85.42.172 port 49818 ssh2
Aug  3 01:35:18 vps1 sshd[30899]: Failed password for invalid user root from 112.85.42.172 port 49818 ssh2
Aug  3 01:35:22 vps1 sshd[30899]: Failed password for invalid user root from 112.85.42.172 port 49818 ssh2
Aug  3 01:35:24 vps1 sshd[30899]: error: maximum authentication attempts exceeded for invalid user root from 112.85.42.172 port 49818 ssh2 [preauth]
...
2020-08-03 07:38:18
46.166.151.73 attack
[2020-08-02 19:39:02] NOTICE[1248][C-00002f8d] chan_sip.c: Call from '' (46.166.151.73:60583) to extension '011442037697512' rejected because extension not found in context 'public'.
[2020-08-02 19:39:02] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-02T19:39:02.938-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442037697512",SessionID="0x7f2720091b18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.73/60583",ACLName="no_extension_match"
[2020-08-02 19:39:15] NOTICE[1248][C-00002f8e] chan_sip.c: Call from '' (46.166.151.73:58971) to extension '011442037695397' rejected because extension not found in context 'public'.
[2020-08-02 19:39:15] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-02T19:39:15.258-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442037695397",SessionID="0x7f272007c5b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/
...
2020-08-03 07:59:13
223.71.167.163 attackspambots
[MK-VM2] Blocked by UFW
2020-08-03 07:43:36
175.24.48.113 attackspam
Aug  2 22:43:41 amit sshd\[32394\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.48.113  user=root
Aug  2 22:43:43 amit sshd\[32394\]: Failed password for root from 175.24.48.113 port 55046 ssh2
Aug  2 22:47:36 amit sshd\[16208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.48.113  user=root
...
2020-08-03 07:47:09
51.91.123.119 attack
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-02T20:34:56Z and 2020-08-02T20:45:03Z
2020-08-03 07:58:59
118.24.102.148 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-08-03 07:37:26
111.231.132.94 attackspam
Aug  3 00:08:59 [host] sshd[25102]: Invalid user Q
Aug  3 00:08:59 [host] sshd[25102]: pam_unix(sshd:
Aug  3 00:09:01 [host] sshd[25102]: Failed passwor
2020-08-03 07:56:10
154.221.26.222 attackbots
Aug  2 23:34:03 django-0 sshd[5567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.221.26.222  user=root
Aug  2 23:34:05 django-0 sshd[5567]: Failed password for root from 154.221.26.222 port 59862 ssh2
...
2020-08-03 08:06:52
134.175.170.87 attackbotsspam
Aug  2 15:42:48 cumulus sshd[1542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.170.87  user=r.r
Aug  2 15:42:50 cumulus sshd[1542]: Failed password for r.r from 134.175.170.87 port 45114 ssh2
Aug  2 15:42:51 cumulus sshd[1542]: Received disconnect from 134.175.170.87 port 45114:11: Bye Bye [preauth]
Aug  2 15:42:51 cumulus sshd[1542]: Disconnected from 134.175.170.87 port 45114 [preauth]
Aug  2 15:49:35 cumulus sshd[2314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.170.87  user=r.r
Aug  2 15:49:37 cumulus sshd[2314]: Failed password for r.r from 134.175.170.87 port 37822 ssh2
Aug  2 15:49:38 cumulus sshd[2314]: Received disconnect from 134.175.170.87 port 37822:11: Bye Bye [preauth]
Aug  2 15:49:38 cumulus sshd[2314]: Disconnected from 134.175.170.87 port 37822 [preauth]
Aug  2 15:53:51 cumulus sshd[2712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ........
-------------------------------
2020-08-03 08:10:05
192.3.139.56 attackspam
SSH bruteforce
2020-08-03 07:54:56
171.6.162.61 attack
Aug  2 18:45:23 UTC__SANYALnet-Labs__cac14 sshd[17466]: Connection from 171.6.162.61 port 30302 on 64.137.176.112 port 22
Aug  2 18:45:25 UTC__SANYALnet-Labs__cac14 sshd[17466]: User r.r from mx-ll-171.6.162-61.dynamic.3bb.co.th not allowed because not listed in AllowUsers
Aug  2 18:45:25 UTC__SANYALnet-Labs__cac14 sshd[17466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mx-ll-171.6.162-61.dynamic.3bb.co.th  user=r.r
Aug  2 18:45:29 UTC__SANYALnet-Labs__cac14 sshd[17466]: Failed password for invalid user r.r from 171.6.162.61 port 30302 ssh2
Aug  2 18:45:30 UTC__SANYALnet-Labs__cac14 sshd[17466]: Received disconnect from 171.6.162.61: 11: Bye Bye [preauth]
Aug  2 20:11:19 UTC__SANYALnet-Labs__cac14 sshd[19150]: Connection from 171.6.162.61 port 30188 on 64.137.176.112 port 22
Aug  2 20:11:21 UTC__SANYALnet-Labs__cac14 sshd[19150]: Address 171.6.162.61 maps to mx-ll-171.6.162-61.dynamic.3bb.in.th, but this does not map back to ........
-------------------------------
2020-08-03 08:15:46
167.71.201.137 attackbots
Aug  3 01:26:57  sshd\[6022\]: User root from 167.71.201.137 not allowed because not listed in AllowUsersAug  3 01:26:59  sshd\[6022\]: Failed password for invalid user root from 167.71.201.137 port 50284 ssh2
...
2020-08-03 07:54:14
185.86.164.101 attackbotsspam
CMS (WordPress or Joomla) login attempt.
2020-08-03 08:14:56

最近上报的IP列表

240.166.191.56 138.93.180.73 194.134.1.171 46.54.222.212
133.26.207.117 57.88.27.134 56.0.117.215 248.29.91.24
66.37.231.83 122.72.163.62 82.138.14.103 53.164.134.187
133.120.203.250 130.248.76.247 94.92.33.238 194.96.4.231
49.12.27.158 232.112.227.83 165.49.133.88 121.251.141.12