必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 166.189.231.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27955
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;166.189.231.142.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012101 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 02:28:08 CST 2025
;; MSG SIZE  rcvd: 108
HOST信息:
142.231.189.166.in-addr.arpa domain name pointer mobile-166-189-231-142.mycingular.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.231.189.166.in-addr.arpa	name = mobile-166-189-231-142.mycingular.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
168.0.148.174 attackspam
Unauthorized connection attempt from IP address 168.0.148.174 on Port 445(SMB)
2020-09-18 12:06:46
103.19.201.125 attackspam
Sep 17 18:32:50 mail.srvfarm.net postfix/smtpd[156674]: warning: unknown[103.19.201.125]: SASL PLAIN authentication failed: 
Sep 17 18:32:50 mail.srvfarm.net postfix/smtpd[156674]: lost connection after AUTH from unknown[103.19.201.125]
Sep 17 18:36:25 mail.srvfarm.net postfix/smtpd[161687]: warning: unknown[103.19.201.125]: SASL PLAIN authentication failed: 
Sep 17 18:36:25 mail.srvfarm.net postfix/smtpd[161687]: lost connection after AUTH from unknown[103.19.201.125]
Sep 17 18:39:51 mail.srvfarm.net postfix/smtpd[157369]: warning: unknown[103.19.201.125]: SASL PLAIN authentication failed:
2020-09-18 08:18:18
148.70.195.242 attackbots
Sep 18 05:33:51 *hidden* sshd[21839]: Failed password for *hidden* from 148.70.195.242 port 47348 ssh2 Sep 18 05:38:50 *hidden* sshd[22914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.195.242 user=root Sep 18 05:38:52 *hidden* sshd[22914]: Failed password for *hidden* from 148.70.195.242 port 56520 ssh2
2020-09-18 12:23:56
177.85.142.179 attackspambots
Sep 17 18:19:24 mail.srvfarm.net postfix/smtpd[143201]: warning: unknown[177.85.142.179]: SASL PLAIN authentication failed: 
Sep 17 18:19:25 mail.srvfarm.net postfix/smtpd[143201]: lost connection after AUTH from unknown[177.85.142.179]
Sep 17 18:25:13 mail.srvfarm.net postfix/smtps/smtpd[159171]: lost connection after CONNECT from unknown[177.85.142.179]
Sep 17 18:29:05 mail.srvfarm.net postfix/smtpd[157369]: warning: unknown[177.85.142.179]: SASL PLAIN authentication failed: 
Sep 17 18:29:06 mail.srvfarm.net postfix/smtpd[157369]: lost connection after AUTH from unknown[177.85.142.179]
2020-09-18 08:14:56
31.8.75.28 attack
Unauthorized connection attempt from IP address 31.8.75.28 on Port 445(SMB)
2020-09-18 12:20:29
177.53.110.229 attackspambots
Sep 17 18:23:18 mail.srvfarm.net postfix/smtps/smtpd[155679]: warning: unknown[177.53.110.229]: SASL PLAIN authentication failed: 
Sep 17 18:23:18 mail.srvfarm.net postfix/smtps/smtpd[155679]: lost connection after AUTH from unknown[177.53.110.229]
Sep 17 18:25:01 mail.srvfarm.net postfix/smtps/smtpd[157126]: warning: unknown[177.53.110.229]: SASL PLAIN authentication failed: 
Sep 17 18:25:01 mail.srvfarm.net postfix/smtps/smtpd[157126]: lost connection after AUTH from unknown[177.53.110.229]
Sep 17 18:30:34 mail.srvfarm.net postfix/smtpd[143206]: warning: unknown[177.53.110.229]: SASL PLAIN authentication failed:
2020-09-18 08:15:29
201.149.13.58 attack
Sep 18 06:13:03 sso sshd[19182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.149.13.58
Sep 18 06:13:05 sso sshd[19182]: Failed password for invalid user csgoserver from 201.149.13.58 port 18316 ssh2
...
2020-09-18 12:13:35
105.112.98.19 attackspam
Unauthorized connection attempt from IP address 105.112.98.19 on Port 445(SMB)
2020-09-18 12:25:15
114.246.34.147 attackspambots
114.246.34.147 (CN/China/-), 3 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 17 21:21:41 honeypot sshd[144277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.246.34.147  user=root
Sep 17 21:21:43 honeypot sshd[144277]: Failed password for root from 114.246.34.147 port 5193 ssh2
Sep 17 21:31:00 honeypot sshd[144370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.213.6  user=root

IP Addresses Blocked:
2020-09-18 12:11:55
13.68.158.99 attackspambots
2020-09-18T00:43:01.288531Z 8fd3ed8cf1d1 New connection: 13.68.158.99:49514 (172.17.0.2:2222) [session: 8fd3ed8cf1d1]
2020-09-18T00:51:04.055878Z f75d971dddd4 New connection: 13.68.158.99:49832 (172.17.0.2:2222) [session: f75d971dddd4]
2020-09-18 12:01:49
89.19.180.87 attackspambots
Unauthorized connection attempt from IP address 89.19.180.87 on Port 445(SMB)
2020-09-18 12:03:34
106.12.85.128 attackbotsspam
2020-09-18T00:10:37.144743randservbullet-proofcloud-66.localdomain sshd[15162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.85.128  user=root
2020-09-18T00:10:39.068993randservbullet-proofcloud-66.localdomain sshd[15162]: Failed password for root from 106.12.85.128 port 36144 ssh2
2020-09-18T00:27:20.961100randservbullet-proofcloud-66.localdomain sshd[15213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.85.128  user=root
2020-09-18T00:27:22.579162randservbullet-proofcloud-66.localdomain sshd[15213]: Failed password for root from 106.12.85.128 port 42018 ssh2
...
2020-09-18 12:28:36
46.63.107.217 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-09-18 12:12:26
80.113.12.34 attackbots
Sep 17 13:02:04 bilbo sshd[22693]: Invalid user admin from 80.113.12.34
Sep 17 13:02:15 bilbo sshd[22738]: User root from ip-80-113-12-34.ip.prioritytelecom.net not allowed because not listed in AllowUsers
Sep 17 13:02:24 bilbo sshd[22740]: Invalid user admin from 80.113.12.34
Sep 17 13:02:34 bilbo sshd[22742]: Invalid user admin from 80.113.12.34
...
2020-09-18 12:03:56
222.186.175.217 attackspambots
Sep 18 06:05:05 vps639187 sshd\[11709\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.217  user=root
Sep 18 06:05:07 vps639187 sshd\[11709\]: Failed password for root from 222.186.175.217 port 20500 ssh2
Sep 18 06:05:11 vps639187 sshd\[11709\]: Failed password for root from 222.186.175.217 port 20500 ssh2
...
2020-09-18 12:13:14

最近上报的IP列表

15.74.34.5 216.220.156.245 177.131.157.142 236.247.89.197
22.138.126.173 237.28.169.118 114.134.167.11 233.207.20.38
71.184.35.149 142.209.54.143 212.134.112.194 203.179.115.49
243.134.202.76 48.145.211.102 191.185.6.48 200.70.32.143
2.242.21.89 17.37.141.4 129.165.220.182 168.81.11.18