必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 166.45.144.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53715
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;166.45.144.139.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400

;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 10:22:39 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
Host 139.144.45.166.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
server can't find 166.45.144.139.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
110.139.126.130 attackbotsspam
Nov  5 06:46:02 olgosrv01 sshd[1101]: reveeclipse mapping checking getaddrinfo for 130.subnet110-139-126.speedy.telkom.net.id [110.139.126.130] failed - POSSIBLE BREAK-IN ATTEMPT!
Nov  5 06:46:02 olgosrv01 sshd[1101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.139.126.130  user=r.r
Nov  5 06:46:04 olgosrv01 sshd[1101]: Failed password for r.r from 110.139.126.130 port 16278 ssh2
Nov  5 06:46:05 olgosrv01 sshd[1101]: Received disconnect from 110.139.126.130: 11: Bye Bye [preauth]
Nov  5 06:51:03 olgosrv01 sshd[1462]: reveeclipse mapping checking getaddrinfo for 130.subnet110-139-126.speedy.telkom.net.id [110.139.126.130] failed - POSSIBLE BREAK-IN ATTEMPT!
Nov  5 06:51:03 olgosrv01 sshd[1462]: Invalid user apache from 110.139.126.130
Nov  5 06:51:03 olgosrv01 sshd[1462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.139.126.130 
Nov  5 06:51:06 olgosrv01 sshd[1462]: Failed pass........
-------------------------------
2019-11-10 05:12:11
192.99.128.239 attack
Nov  9 16:42:51 venus sshd\[8472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.128.239  user=root
Nov  9 16:42:53 venus sshd\[8472\]: Failed password for root from 192.99.128.239 port 46366 ssh2
Nov  9 16:46:57 venus sshd\[8517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.128.239  user=root
...
2019-11-10 05:08:28
106.54.220.178 attackspam
Nov  9 17:14:54 MK-Soft-VM5 sshd[10277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.220.178 
Nov  9 17:14:56 MK-Soft-VM5 sshd[10277]: Failed password for invalid user pivot from 106.54.220.178 port 54500 ssh2
...
2019-11-10 05:14:19
117.191.67.213 attackbotsspam
Nov  9 17:14:52 MK-Soft-Root1 sshd[11546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.191.67.213 
Nov  9 17:14:54 MK-Soft-Root1 sshd[11546]: Failed password for invalid user yj from 117.191.67.213 port 24645 ssh2
...
2019-11-10 05:15:19
188.193.128.134 attack
2019-11-09T21:19:46.9086171240 sshd\[18441\]: Invalid user test from 188.193.128.134 port 39818
2019-11-09T21:19:46.9315541240 sshd\[18441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.193.128.134
2019-11-09T21:19:48.9999571240 sshd\[18441\]: Failed password for invalid user test from 188.193.128.134 port 39818 ssh2
...
2019-11-10 05:18:47
207.180.198.241 attackbotsspam
207.180.198.241 - - \[09/Nov/2019:20:17:06 +0100\] "POST /wp-login.php HTTP/1.0" 200 4128 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
207.180.198.241 - - \[09/Nov/2019:20:17:07 +0100\] "POST /wp-login.php HTTP/1.0" 200 3955 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
207.180.198.241 - - \[09/Nov/2019:20:17:07 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-11-10 04:50:30
159.203.197.154 attackspam
proto=tcp  .  spt=48858  .  dpt=3389  .  src=159.203.197.154  .  dst=xx.xx.4.1  .     (Listed on    abuseat-org plus zen-spamhaus and rbldns-ru)     (884)
2019-11-10 05:08:52
212.68.208.120 attack
SSH Brute-Force attacks
2019-11-10 05:03:52
222.186.175.220 attackspambots
DATE:2019-11-09 18:21:14, IP:222.186.175.220, PORT:ssh SSH brute force auth on honeypot server (honey-neo-dc-bis)
2019-11-10 05:03:29
182.75.29.134 attackspambots
Unauthorized connection attempt from IP address 182.75.29.134 on Port 445(SMB)
2019-11-10 04:44:24
119.10.114.5 attackbots
Nov  9 18:13:51 lnxded64 sshd[583]: Failed password for root from 119.10.114.5 port 45491 ssh2
Nov  9 18:13:51 lnxded64 sshd[583]: Failed password for root from 119.10.114.5 port 45491 ssh2
2019-11-10 04:45:11
106.13.7.253 attackbots
Nov  9 15:22:54 plusreed sshd[25851]: Invalid user Raino from 106.13.7.253
...
2019-11-10 04:42:22
173.18.204.105 attackbotsspam
RDP Bruteforce
2019-11-10 05:17:36
51.75.32.141 attackbots
Nov  9 14:38:44 Tower sshd[36928]: Connection from 51.75.32.141 port 53198 on 192.168.10.220 port 22
Nov  9 14:38:46 Tower sshd[36928]: Invalid user test2 from 51.75.32.141 port 53198
Nov  9 14:38:46 Tower sshd[36928]: error: Could not get shadow information for NOUSER
Nov  9 14:38:46 Tower sshd[36928]: Failed password for invalid user test2 from 51.75.32.141 port 53198 ssh2
Nov  9 14:38:46 Tower sshd[36928]: Received disconnect from 51.75.32.141 port 53198:11: Bye Bye [preauth]
Nov  9 14:38:46 Tower sshd[36928]: Disconnected from invalid user test2 51.75.32.141 port 53198 [preauth]
2019-11-10 04:48:26
106.13.43.117 attackbots
no
2019-11-10 05:14:42

最近上报的IP列表

48.47.201.222 43.118.29.112 74.231.23.13 173.173.90.252
223.7.110.175 55.89.191.171 202.249.36.9 237.184.144.60
171.125.15.200 23.92.135.193 27.129.102.46 55.234.65.9
216.42.120.103 95.2.33.134 25.142.180.186 66.255.12.237
86.87.106.119 63.71.244.158 9.41.87.206 115.98.133.246