必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 170.19.42.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35156
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;170.19.42.42.			IN	A

;; AUTHORITY SECTION:
.			335	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022010600 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 06 20:49:35 CST 2022
;; MSG SIZE  rcvd: 105
HOST信息:
Host 42.42.19.170.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.42.19.170.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
49.0.41.54 attackbots
SSH brute-force attempt
2020-08-25 13:33:43
14.161.19.79 attack
1598327910 - 08/25/2020 05:58:30 Host: 14.161.19.79/14.161.19.79 Port: 445 TCP Blocked
...
2020-08-25 13:26:09
50.62.176.125 attack
50.62.176.125 - - [25/Aug/2020:05:57:56 +0200] "POST /xmlrpc.php HTTP/1.1" 403 31177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
50.62.176.125 - - [25/Aug/2020:05:57:56 +0200] "POST /xmlrpc.php HTTP/1.1" 403 31177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
...
2020-08-25 13:47:24
222.186.175.217 attackspam
2020-08-25T07:29:45.844062amanda2.illicoweb.com sshd\[18631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.217  user=root
2020-08-25T07:29:47.959472amanda2.illicoweb.com sshd\[18631\]: Failed password for root from 222.186.175.217 port 56580 ssh2
2020-08-25T07:29:51.983645amanda2.illicoweb.com sshd\[18631\]: Failed password for root from 222.186.175.217 port 56580 ssh2
2020-08-25T07:29:55.816468amanda2.illicoweb.com sshd\[18631\]: Failed password for root from 222.186.175.217 port 56580 ssh2
2020-08-25T07:29:59.129484amanda2.illicoweb.com sshd\[18631\]: Failed password for root from 222.186.175.217 port 56580 ssh2
...
2020-08-25 13:33:07
2.57.122.186 attackspam
$f2bV_matches
2020-08-25 13:54:23
222.186.175.182 attackspam
[MK-VM5] SSH login failed
2020-08-25 13:40:28
103.199.162.153 attack
Aug 24 16:19:21 sachi sshd\[17434\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.199.162.153  user=root
Aug 24 16:19:23 sachi sshd\[17434\]: Failed password for root from 103.199.162.153 port 56482 ssh2
Aug 24 16:22:42 sachi sshd\[19473\]: Invalid user rl from 103.199.162.153
Aug 24 16:22:42 sachi sshd\[19473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.199.162.153
Aug 24 16:22:44 sachi sshd\[19473\]: Failed password for invalid user rl from 103.199.162.153 port 34342 ssh2
2020-08-25 13:20:56
222.186.15.62 attackspam
Aug 25 08:21:08 server2 sshd\[16304\]: User root from 222.186.15.62 not allowed because not listed in AllowUsers
Aug 25 08:21:11 server2 sshd\[16302\]: User root from 222.186.15.62 not allowed because not listed in AllowUsers
Aug 25 08:21:11 server2 sshd\[16306\]: User root from 222.186.15.62 not allowed because not listed in AllowUsers
Aug 25 08:28:43 server2 sshd\[16916\]: User root from 222.186.15.62 not allowed because not listed in AllowUsers
Aug 25 08:28:43 server2 sshd\[16920\]: User root from 222.186.15.62 not allowed because not listed in AllowUsers
Aug 25 08:28:53 server2 sshd\[16928\]: User root from 222.186.15.62 not allowed because not listed in AllowUsers
2020-08-25 13:35:04
149.202.40.210 attack
invalid user
2020-08-25 13:53:37
167.71.216.37 attack
167.71.216.37 - - [25/Aug/2020:06:07:46 +0200] "GET /wp-login.php HTTP/1.1" 200 9040 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.71.216.37 - - [25/Aug/2020:06:07:49 +0200] "POST /wp-login.php HTTP/1.1" 200 9357 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.71.216.37 - - [25/Aug/2020:06:07:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-08-25 13:28:05
62.234.59.145 attack
Aug 24 21:17:38 mockhub sshd[22101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.59.145
Aug 24 21:17:40 mockhub sshd[22101]: Failed password for invalid user ctm from 62.234.59.145 port 45376 ssh2
...
2020-08-25 13:37:21
5.188.158.196 attackbots
(Aug 25)  LEN=40 TTL=249 ID=8080 TCP DPT=3389 WINDOW=1024 SYN 
 (Aug 25)  LEN=40 TTL=249 ID=54538 TCP DPT=3389 WINDOW=1024 SYN 
 (Aug 24)  LEN=40 TTL=249 ID=25910 TCP DPT=3389 WINDOW=1024 SYN 
 (Aug 24)  LEN=40 TTL=249 ID=10602 TCP DPT=3389 WINDOW=1024 SYN 
 (Aug 24)  LEN=40 TTL=249 ID=3819 TCP DPT=3389 WINDOW=1024 SYN 
 (Aug 24)  LEN=40 TTL=249 ID=3569 TCP DPT=3389 WINDOW=1024 SYN 
 (Aug 23)  LEN=40 TTL=249 ID=19524 TCP DPT=3389 WINDOW=1024 SYN 
 (Aug 23)  LEN=40 TTL=249 ID=18206 TCP DPT=3389 WINDOW=1024 SYN 
 (Aug 23)  LEN=40 TTL=249 ID=26799 TCP DPT=3389 WINDOW=1024 SYN 
 (Aug 23)  LEN=40 TTL=249 ID=46513 TCP DPT=3389 WINDOW=1024 SYN
2020-08-25 13:24:45
167.99.233.8 attackspam
Lines containing failures of 167.99.233.8
Aug 24 21:21:27 penfold sshd[4623]: Did not receive identification string from 167.99.233.8 port 38538
Aug 24 21:21:39 penfold sshd[4635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.233.8  user=r.r
Aug 24 21:21:41 penfold sshd[4635]: Failed password for r.r from 167.99.233.8 port 54086 ssh2
Aug 24 21:21:42 penfold sshd[4635]: Received disconnect from 167.99.233.8 port 54086:11: Normal Shutdown, Thank you for playing [preauth]
Aug 24 21:21:42 penfold sshd[4635]: Disconnected from authenticating user r.r 167.99.233.8 port 54086 [preauth]
Aug 24 21:21:45 penfold sshd[4639]: Invalid user oracle from 167.99.233.8 port 34236
Aug 24 21:21:45 penfold sshd[4639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.233.8 
Aug 24 21:21:47 penfold sshd[4639]: Failed password for invalid user oracle from 167.99.233.8 port 34236 ssh2


........
--------------------------------------------
2020-08-25 13:48:01
212.70.149.4 attackbots
Aug 25 07:41:53 srv01 postfix/smtpd\[3042\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 25 07:42:13 srv01 postfix/smtpd\[3042\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 25 07:44:50 srv01 postfix/smtpd\[5092\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 25 07:45:08 srv01 postfix/smtpd\[31576\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 25 07:45:13 srv01 postfix/smtpd\[3042\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-08-25 13:46:47
192.243.114.21 attackspambots
Aug 25 07:18:41 [host] sshd[27064]: Invalid user s
Aug 25 07:18:41 [host] sshd[27064]: pam_unix(sshd:
Aug 25 07:18:43 [host] sshd[27064]: Failed passwor
2020-08-25 13:55:07

最近上报的IP列表

71.234.237.123 65.129.52.188 232.154.229.177 25.7.32.136
38.68.53.160 111.40.196.153 41.249.129.132 134.236.224.18
229.85.149.204 98.29.124.104 248.159.49.157 145.112.139.151
57.46.26.235 197.223.223.20 75.201.205.8 11.182.135.116
178.118.151.138 83.36.70.124 63.197.128.77 61.42.48.185