必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Verizon

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 166.253.9.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65291
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;166.253.9.49.			IN	A

;; AUTHORITY SECTION:
.			406	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030601 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 07 04:56:47 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
49.9.253.166.in-addr.arpa domain name pointer 49.sub-166-253-9.myvzw.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
49.9.253.166.in-addr.arpa	name = 49.sub-166-253-9.myvzw.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
134.209.183.145 attackspam
Nov  1 06:53:12 jane sshd[20668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.183.145 
Nov  1 06:53:14 jane sshd[20668]: Failed password for invalid user twins1990 from 134.209.183.145 port 52870 ssh2
...
2019-11-01 17:30:56
121.202.7.13 attackspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/121.202.7.13/ 
 
 HK - 1H : (24)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : HK 
 NAME ASN : ASN17924 
 
 IP : 121.202.7.13 
 
 CIDR : 121.202.0.0/18 
 
 PREFIX COUNT : 113 
 
 UNIQUE IP COUNT : 464896 
 
 
 ATTACKS DETECTED ASN17924 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-11-01 04:50:36 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-01 17:23:28
113.53.210.136 attackspam
Nov  1 03:38:34 sanyalnet-cloud-vps2 sshd[29025]: Connection from 113.53.210.136 port 53610 on 45.62.253.138 port 22
Nov  1 03:38:34 sanyalnet-cloud-vps2 sshd[29025]: Did not receive identification string from 113.53.210.136 port 53610
Nov  1 03:38:37 sanyalnet-cloud-vps2 sshd[29026]: Connection from 113.53.210.136 port 53632 on 45.62.253.138 port 22
Nov  1 03:38:45 sanyalnet-cloud-vps2 sshd[29026]: Address 113.53.210.136 maps to node-3ns.pool-113-53.dynamic.totinternet.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Nov  1 03:38:45 sanyalnet-cloud-vps2 sshd[29026]: Invalid user Adminixxxr from 113.53.210.136 port 53632
Nov  1 03:38:45 sanyalnet-cloud-vps2 sshd[29026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.53.210.136
Nov  1 03:38:47 sanyalnet-cloud-vps2 sshd[29026]: Failed password for invalid user Adminixxxr from 113.53.210.136 port 53632 ssh2
Nov  1 03:38:47 sanyalnet-cloud-vps2 sshd[290........
-------------------------------
2019-11-01 17:30:30
113.164.79.177 attackspam
Nov  1 13:54:56 our-server-hostname postfix/smtpd[9443]: connect from unknown[113.164.79.177]
Nov x@x
Nov  1 13:54:58 our-server-hostname postfix/smtpd[9443]: lost connection after RCPT from unknown[113.164.79.177]
Nov  1 13:54:58 our-server-hostname postfix/smtpd[9443]: disconnect from unknown[113.164.79.177]
Nov  1 14:01:27 our-server-hostname postfix/smtpd[15485]: connect from unknown[113.164.79.177]
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=113.164.79.177
2019-11-01 17:09:02
124.107.213.229 attack
Honeypot attack, port: 445, PTR: 124.107.213.229.static.pldt.net.
2019-11-01 17:31:18
5.88.188.77 attack
Nov  1 09:21:47 cvbnet sshd[18299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.88.188.77 
Nov  1 09:21:49 cvbnet sshd[18299]: Failed password for invalid user akiyasu from 5.88.188.77 port 57058 ssh2
...
2019-11-01 17:14:00
62.210.149.30 attackspam
\[2019-11-01 04:42:27\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-01T04:42:27.979-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="80012342174734",SessionID="0x7fdf2c834818",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/54249",ACLName="no_extension_match"
\[2019-11-01 04:42:56\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-01T04:42:56.617-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="70012342174734",SessionID="0x7fdf2cd1cd48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/57164",ACLName="no_extension_match"
\[2019-11-01 04:43:23\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-01T04:43:23.246-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="60012342174734",SessionID="0x7fdf2ca2e638",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/63871",ACLName="no_extens
2019-11-01 17:03:45
186.151.170.222 attack
Nov  1 10:03:35 SilenceServices sshd[22206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.151.170.222
Nov  1 10:03:36 SilenceServices sshd[22206]: Failed password for invalid user rudolf from 186.151.170.222 port 60933 ssh2
Nov  1 10:09:00 SilenceServices sshd[25895]: Failed password for root from 186.151.170.222 port 52701 ssh2
2019-11-01 17:10:57
45.136.110.47 attackspam
Nov  1 09:59:24 mc1 kernel: \[3885081.417212\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.110.47 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=59475 PROTO=TCP SPT=54723 DPT=8111 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  1 10:06:16 mc1 kernel: \[3885492.933503\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.110.47 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=2646 PROTO=TCP SPT=54723 DPT=7863 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  1 10:09:08 mc1 kernel: \[3885664.760890\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.110.47 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=16931 PROTO=TCP SPT=54723 DPT=8299 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-11-01 17:24:57
122.252.241.130 attack
445/tcp 445/tcp 445/tcp
[2019-11-01]3pkt
2019-11-01 16:57:07
114.239.250.43 attackspambots
Nov  1 04:34:10 server2 sshd[30704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.239.250.43  user=r.r
Nov  1 04:34:12 server2 sshd[30704]: Failed password for r.r from 114.239.250.43 port 49553 ssh2
Nov  1 04:34:12 server2 sshd[30704]: Received disconnect from 114.239.250.43: 11: Bye Bye [preauth]
Nov  1 04:37:51 server2 sshd[30963]: Invalid user tw from 114.239.250.43
Nov  1 04:37:51 server2 sshd[30963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.239.250.43 
Nov  1 04:37:53 server2 sshd[30963]: Failed password for invalid user tw from 114.239.250.43 port 34236 ssh2
Nov  1 04:37:53 server2 sshd[30963]: Received disconnect from 114.239.250.43: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=114.239.250.43
2019-11-01 17:18:17
79.188.68.90 attack
Nov  1 04:15:30 master sshd[10337]: Failed password for root from 79.188.68.90 port 46766 ssh2
Nov  1 04:26:48 master sshd[10380]: Failed password for root from 79.188.68.90 port 35271 ssh2
Nov  1 04:32:04 master sshd[10776]: Failed password for invalid user maurta from 79.188.68.90 port 55056 ssh2
Nov  1 04:36:57 master sshd[10888]: Failed password for invalid user flow from 79.188.68.90 port 46626 ssh2
Nov  1 04:41:46 master sshd[10894]: Failed password for root from 79.188.68.90 port 38188 ssh2
Nov  1 04:46:27 master sshd[10907]: Failed password for root from 79.188.68.90 port 57974 ssh2
Nov  1 04:51:09 master sshd[10915]: Failed password for root from 79.188.68.90 port 49521 ssh2
Nov  1 04:56:01 master sshd[10921]: Failed password for root from 79.188.68.90 port 41079 ssh2
Nov  1 05:00:45 master sshd[11238]: Failed password for invalid user server from 79.188.68.90 port 60871 ssh2
Nov  1 05:05:33 master sshd[11250]: Failed password for root from 79.188.68.90 port 52453 ssh2
Nov  1 05:10:12 master sshd[112
2019-11-01 17:26:41
127.0.0.1 attack
Test Connectivity
2019-11-01 16:56:00
27.79.175.236 attack
Nov  1 04:32:19 mxgate1 postfix/postscreen[4338]: CONNECT from [27.79.175.236]:24449 to [176.31.12.44]:25
Nov  1 04:32:19 mxgate1 postfix/dnsblog[4581]: addr 27.79.175.236 listed by domain zen.spamhaus.org as 127.0.0.3
Nov  1 04:32:19 mxgate1 postfix/dnsblog[4581]: addr 27.79.175.236 listed by domain zen.spamhaus.org as 127.0.0.4
Nov  1 04:32:19 mxgate1 postfix/dnsblog[4581]: addr 27.79.175.236 listed by domain zen.spamhaus.org as 127.0.0.11
Nov  1 04:32:19 mxgate1 postfix/dnsblog[4578]: addr 27.79.175.236 listed by domain cbl.abuseat.org as 127.0.0.2
Nov  1 04:32:20 mxgate1 postfix/dnsblog[4579]: addr 27.79.175.236 listed by domain b.barracudacentral.org as 127.0.0.2
Nov  1 04:32:25 mxgate1 postfix/postscreen[4338]: DNSBL rank 4 for [27.79.175.236]:24449
Nov  1 04:32:26 mxgate1 postfix/postscreen[4338]: NOQUEUE: reject: RCPT from [27.79.175.236]:24449: 550 5.7.1 Service unavailable; client [27.79.175.236] blocked using zen.spamhaus.org; from=x@x helo=


........
-----------------------------------
2019-11-01 17:01:03
185.36.216.117 attack
slow and persistent scanner
2019-11-01 17:02:18

最近上报的IP列表

94.175.212.217 137.164.226.23 72.72.121.240 85.130.213.3
98.239.183.111 80.91.150.68 104.14.211.171 32.208.9.27
218.108.99.158 84.93.228.252 70.126.65.13 95.47.7.94
77.204.39.102 46.152.139.26 104.182.106.200 119.64.114.89
46.152.139.56 155.206.38.6 212.62.113.182 80.101.11.41