必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 166.211.19.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29119
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;166.211.19.54.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400

;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 10:52:58 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
54.19.211.166.in-addr.arpa domain name pointer 54.sub-166-211-19.myvzw.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
54.19.211.166.in-addr.arpa	name = 54.sub-166-211-19.myvzw.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
95.188.71.19 attackspambots
Apr 10 05:50:18 mail.srvfarm.net postfix/smtpd[2952504]: NOQUEUE: reject: RCPT from unknown[95.188.71.19]: 554 5.7.1 Service unavailable; Client host [95.188.71.19] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?95.188.71.19; from= to= proto=ESMTP helo=
Apr 10 05:50:18 mail.srvfarm.net postfix/smtpd[2952504]: NOQUEUE: reject: RCPT from unknown[95.188.71.19]: 554 5.7.1 Service unavailable; Client host [95.188.71.19] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?95.188.71.19; from= to= proto=ESMTP helo=
Apr 10 05:50:18 mail.srvfarm.net postfix/smtpd[2952504]: NOQUEUE: reject: RCPT from unknown[95.188.71.19]: 554 5.7.1 Service unavailable; Client host [95.188.71.19] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?95.188.71.19; from=
2020-04-10 16:09:56
78.128.113.98 attackspam
Apr 10 09:55:40 mail.srvfarm.net postfix/smtps/smtpd[3041063]: warning: unknown[78.128.113.98]: SASL PLAIN authentication failed: 
Apr 10 09:55:41 mail.srvfarm.net postfix/smtps/smtpd[3041063]: lost connection after AUTH from unknown[78.128.113.98]
Apr 10 09:55:43 mail.srvfarm.net postfix/smtps/smtpd[3039255]: lost connection after AUTH from unknown[78.128.113.98]
Apr 10 09:55:50 mail.srvfarm.net postfix/smtps/smtpd[3038273]: lost connection after AUTH from unknown[78.128.113.98]
Apr 10 09:55:50 mail.srvfarm.net postfix/smtps/smtpd[3039254]: lost connection after AUTH from unknown[78.128.113.98]
2020-04-10 16:10:45
182.61.21.155 attackbotsspam
Apr 10 05:54:34 ncomp sshd[2939]: Invalid user user from 182.61.21.155
Apr 10 05:54:34 ncomp sshd[2939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.21.155
Apr 10 05:54:34 ncomp sshd[2939]: Invalid user user from 182.61.21.155
Apr 10 05:54:37 ncomp sshd[2939]: Failed password for invalid user user from 182.61.21.155 port 39976 ssh2
2020-04-10 16:24:37
159.89.188.167 attackbots
Apr 10 10:08:00 ift sshd\[31017\]: Invalid user subversion from 159.89.188.167Apr 10 10:08:02 ift sshd\[31017\]: Failed password for invalid user subversion from 159.89.188.167 port 42842 ssh2Apr 10 10:13:01 ift sshd\[31886\]: Invalid user deploy from 159.89.188.167Apr 10 10:13:03 ift sshd\[31886\]: Failed password for invalid user deploy from 159.89.188.167 port 51198 ssh2Apr 10 10:17:49 ift sshd\[32777\]: Invalid user test from 159.89.188.167
...
2020-04-10 16:18:05
52.179.191.227 attackspambots
Apr 10 09:24:39 [host] sshd[24083]: Invalid user t
Apr 10 09:24:39 [host] sshd[24083]: pam_unix(sshd:
Apr 10 09:24:40 [host] sshd[24083]: Failed passwor
2020-04-10 16:42:14
104.210.58.78 attack
(mod_security) mod_security (id:230011) triggered by 104.210.58.78 (US/United States/-): 5 in the last 3600 secs
2020-04-10 16:19:26
164.77.117.10 attackspam
2020-04-10 07:23:14,575 fail2ban.actions: WARNING [ssh] Ban 164.77.117.10
2020-04-10 16:32:45
45.40.198.93 attack
5x Failed Password
2020-04-10 16:23:21
45.133.99.11 attack
(smtpauth) Failed SMTP AUTH login from 45.133.99.11 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-04-10 09:36:38 login authenticator failed for ([45.133.99.11]) [45.133.99.11]: 535 Incorrect authentication data (set_id=travel@citytijger.com)
2020-04-10 09:36:43 login authenticator failed for ([45.133.99.11]) [45.133.99.11]: 535 Incorrect authentication data (set_id=travel)
2020-04-10 09:46:49 login authenticator failed for ([45.133.99.11]) [45.133.99.11]: 535 Incorrect authentication data (set_id=newsletter@citytijger.com)
2020-04-10 09:46:55 login authenticator failed for ([45.133.99.11]) [45.133.99.11]: 535 Incorrect authentication data (set_id=newsletter)
2020-04-10 10:11:03 login authenticator failed for ([45.133.99.11]) [45.133.99.11]: 535 Incorrect authentication data (set_id=info@citytijger.com)
2020-04-10 16:14:59
5.189.142.238 attackbots
Apr  9 20:42:15 cumulus sshd[1817]: Invalid user ts3server from 5.189.142.238 port 52884
Apr  9 20:42:15 cumulus sshd[1817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.189.142.238
Apr  9 20:42:16 cumulus sshd[1817]: Failed password for invalid user ts3server from 5.189.142.238 port 52884 ssh2
Apr  9 20:42:17 cumulus sshd[1817]: Received disconnect from 5.189.142.238 port 52884:11: Bye Bye [preauth]
Apr  9 20:42:17 cumulus sshd[1817]: Disconnected from 5.189.142.238 port 52884 [preauth]
Apr  9 20:55:26 cumulus sshd[2690]: Invalid user admin from 5.189.142.238 port 44870
Apr  9 20:55:26 cumulus sshd[2690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.189.142.238
Apr  9 20:55:28 cumulus sshd[2690]: Failed password for invalid user admin from 5.189.142.238 port 44870 ssh2
Apr  9 20:55:28 cumulus sshd[2690]: Received disconnect from 5.189.142.238 port 44870:11: Bye Bye [preauth]
Apr  ........
-------------------------------
2020-04-10 16:45:38
99.132.140.63 attackspam
Apr 10 07:15:39 ift sshd\[2197\]: Failed password for root from 99.132.140.63 port 43138 ssh2Apr 10 07:22:06 ift sshd\[3010\]: Invalid user postgres from 99.132.140.63Apr 10 07:22:08 ift sshd\[3010\]: Failed password for invalid user postgres from 99.132.140.63 port 60104 ssh2Apr 10 07:25:30 ift sshd\[3741\]: Invalid user deploy from 99.132.140.63Apr 10 07:25:32 ift sshd\[3741\]: Failed password for invalid user deploy from 99.132.140.63 port 38206 ssh2
...
2020-04-10 16:46:26
27.128.187.131 attackspambots
SSH bruteforce
2020-04-10 16:23:40
185.175.93.11 attack
Apr 10 10:44:28 debian-2gb-nbg1-2 kernel: \[8767276.604675\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.175.93.11 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=61634 PROTO=TCP SPT=58781 DPT=37113 WINDOW=1024 RES=0x00 SYN URGP=0
2020-04-10 16:52:27
103.63.109.74 attack
Triggered by Fail2Ban at Ares web server
2020-04-10 16:37:32
220.133.36.112 attack
Apr 10 00:01:17 server sshd\[4956\]: Failed password for invalid user elly from 220.133.36.112 port 54178 ssh2
Apr 10 09:50:50 server sshd\[29976\]: Invalid user git from 220.133.36.112
Apr 10 09:50:50 server sshd\[29976\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220-133-36-112.hinet-ip.hinet.net 
Apr 10 09:50:52 server sshd\[29976\]: Failed password for invalid user git from 220.133.36.112 port 39038 ssh2
Apr 10 09:57:42 server sshd\[31598\]: Invalid user bcb from 220.133.36.112
...
2020-04-10 16:28:31

最近上报的IP列表

251.209.8.192 9.179.153.241 101.205.140.12 87.152.142.144
238.31.50.172 162.234.112.123 4.240.248.175 139.250.76.114
14.180.5.25 47.175.134.18 44.68.128.215 38.28.64.44
137.200.31.180 48.60.217.220 45.140.206.167 178.105.189.25
121.29.69.199 180.17.37.223 34.191.243.199 219.51.93.216