必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Brazil

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.228.125.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22144
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;18.228.125.42.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012901 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 00:33:23 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
42.125.228.18.in-addr.arpa domain name pointer ec2-18-228-125-42.sa-east-1.compute.amazonaws.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
42.125.228.18.in-addr.arpa	name = ec2-18-228-125-42.sa-east-1.compute.amazonaws.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
49.235.69.9 attack
Aug  2 15:20:02 journals sshd\[16970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.69.9  user=root
Aug  2 15:20:03 journals sshd\[16970\]: Failed password for root from 49.235.69.9 port 42028 ssh2
Aug  2 15:23:06 journals sshd\[17548\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.69.9  user=root
Aug  2 15:23:08 journals sshd\[17548\]: Failed password for root from 49.235.69.9 port 50040 ssh2
Aug  2 15:26:18 journals sshd\[17888\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.69.9  user=root
...
2020-08-03 01:48:31
124.13.174.50 attackspam
Automatic report - Port Scan Attack
2020-08-03 02:07:11
83.146.109.79 attackbotsspam
1596369989 - 08/02/2020 14:06:29 Host: 83.146.109.79/83.146.109.79 Port: 445 TCP Blocked
2020-08-03 02:08:58
139.155.17.125 attack
Aug  2 19:55:48 lnxweb61 sshd[3600]: Failed password for root from 139.155.17.125 port 36230 ssh2
Aug  2 19:55:48 lnxweb61 sshd[3600]: Failed password for root from 139.155.17.125 port 36230 ssh2
2020-08-03 02:04:31
87.98.182.93 attackspambots
"fail2ban match"
2020-08-03 01:40:37
118.37.27.239 attack
prod8
...
2020-08-03 01:54:55
20.52.37.143 attackbotsspam
DATE:2020-08-02 15:44:46, IP:20.52.37.143, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc)
2020-08-03 01:45:45
188.166.246.158 attackbots
2020-08-02T12:46:11.6133681495-001 sshd[32035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.246.158  user=root
2020-08-02T12:46:13.8627021495-001 sshd[32035]: Failed password for root from 188.166.246.158 port 56288 ssh2
2020-08-02T12:51:04.9114621495-001 sshd[32225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.246.158  user=root
2020-08-02T12:51:06.3832051495-001 sshd[32225]: Failed password for root from 188.166.246.158 port 60595 ssh2
2020-08-02T12:55:51.0204351495-001 sshd[32477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.246.158  user=root
2020-08-02T12:55:52.7571471495-001 sshd[32477]: Failed password for root from 188.166.246.158 port 36670 ssh2
...
2020-08-03 02:11:10
106.54.202.131 attack
$f2bV_matches
2020-08-03 02:07:36
142.93.170.135 attackspam
Aug  2 15:03:13 hosting sshd[15812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.170.135  user=root
Aug  2 15:03:15 hosting sshd[15812]: Failed password for root from 142.93.170.135 port 54016 ssh2
Aug  2 15:07:03 hosting sshd[16714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.170.135  user=root
Aug  2 15:07:05 hosting sshd[16714]: Failed password for root from 142.93.170.135 port 36030 ssh2
...
2020-08-03 01:42:06
104.214.218.85 attack
 TCP (SYN) 104.214.218.85:4230 -> port 1433, len 52
2020-08-03 01:47:55
13.250.46.200 attack
This client attempted to login to an administrator account on a Website, or abused from another resource.
2020-08-03 01:59:48
139.59.71.74 attack
Aug  2 08:30:16 ny01 sshd[28663]: Failed password for root from 139.59.71.74 port 36544 ssh2
Aug  2 08:31:30 ny01 sshd[28833]: Failed password for root from 139.59.71.74 port 52436 ssh2
2020-08-03 02:11:34
156.96.45.198 attackspam
Aug  2 17:33:16 mail postfix/smtpd[58573]: warning: unknown[156.96.45.198]: SASL LOGIN authentication failed: generic failure
Aug  2 17:33:17 mail postfix/smtpd[58573]: warning: unknown[156.96.45.198]: SASL LOGIN authentication failed: generic failure
Aug  2 17:33:17 mail postfix/smtpd[58573]: warning: unknown[156.96.45.198]: SASL LOGIN authentication failed: generic failure
...
2020-08-03 01:50:45
190.196.147.219 attackbots
(imapd) Failed IMAP login from 190.196.147.219 (CL/Chile/static.190.196.147.219.gtdinternet.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug  2 16:37:08 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=, method=PLAIN, rip=190.196.147.219, lip=5.63.12.44, TLS, session=
2020-08-03 01:36:36

最近上报的IP列表

68.68.238.245 255.54.80.157 39.214.73.235 126.179.170.253
9.64.2.103 156.240.242.151 242.156.30.20 130.42.97.99
31.50.85.79 220.98.77.193 76.228.215.127 219.199.223.6
165.185.98.174 29.80.103.159 182.171.3.38 135.70.32.135
242.175.114.199 39.164.197.167 23.55.249.205 121.55.31.66