必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 208.158.142.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33420
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;208.158.142.117.		IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012401 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 25 03:32:03 CST 2025
;; MSG SIZE  rcvd: 108
HOST信息:
Host 117.142.158.208.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 117.142.158.208.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
120.194.7.10 attack
Email IMAP login failure
2019-09-27 05:40:26
118.70.229.169 attack
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/118.70.229.169/ 
 VN - 1H : (221)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : VN 
 NAME ASN : ASN18403 
 
 IP : 118.70.229.169 
 
 CIDR : 118.70.228.0/22 
 
 PREFIX COUNT : 2592 
 
 UNIQUE IP COUNT : 1397760 
 
 
 WYKRYTE ATAKI Z ASN18403 :  
  1H - 1 
  3H - 8 
  6H - 21 
 12H - 38 
 24H - 92 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-09-27 05:58:18
157.245.203.161 attackspam
2019-09-26T21:23:06Z - RDP login failed multiple times. (157.245.203.161)
2019-09-27 06:03:55
139.155.83.106 attackspam
Sep 27 00:39:24 pkdns2 sshd\[64190\]: Invalid user 0000 from 139.155.83.106Sep 27 00:39:27 pkdns2 sshd\[64190\]: Failed password for invalid user 0000 from 139.155.83.106 port 54932 ssh2Sep 27 00:42:48 pkdns2 sshd\[64350\]: Invalid user asdf from 139.155.83.106Sep 27 00:42:50 pkdns2 sshd\[64350\]: Failed password for invalid user asdf from 139.155.83.106 port 53532 ssh2Sep 27 00:46:05 pkdns2 sshd\[64532\]: Invalid user 123456 from 139.155.83.106Sep 27 00:46:06 pkdns2 sshd\[64532\]: Failed password for invalid user 123456 from 139.155.83.106 port 52106 ssh2
...
2019-09-27 06:05:08
5.62.155.88 attack
B: Magento admin pass test (wrong country)
2019-09-27 05:50:55
5.88.195.212 attackspam
[ThuSep2623:23:20.1288172019][:error][pid2360:tid47886274406144][client5.88.195.212:57598][client5.88.195.212]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][severity"CRITICAL"][hostname"boltonholding.com"][uri"/xdb.sql"][unique_id"XY0sSAYTVFjTRQJYMHcWPgAAABU"][ThuSep2623:23:27.8279162019][:error][pid2368:tid47886276507392][client5.88.195.212:58073][client5.88.195.212]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][severity"CRITICAL"]
2019-09-27 05:43:15
201.251.156.11 attackspam
Sep 26 23:53:26 vps01 sshd[16768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.251.156.11
Sep 26 23:53:28 vps01 sshd[16768]: Failed password for invalid user git-admin from 201.251.156.11 port 44153 ssh2
2019-09-27 06:09:34
46.38.144.17 attackbotsspam
Sep 26 23:55:58 webserver postfix/smtpd\[26510\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 26 23:57:15 webserver postfix/smtpd\[27330\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 26 23:58:32 webserver postfix/smtpd\[27330\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 26 23:59:49 webserver postfix/smtpd\[27330\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 27 00:01:05 webserver postfix/smtpd\[27330\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2019-09-27 06:10:39
37.20.237.120 attackspam
Lines containing failures of 37.20.237.120
Sep 26 23:15:28 shared05 sshd[26419]: Invalid user admin from 37.20.237.120 port 33472
Sep 26 23:15:28 shared05 sshd[26419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.20.237.120
Sep 26 23:15:29 shared05 sshd[26419]: Failed password for invalid user admin from 37.20.237.120 port 33472 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=37.20.237.120
2019-09-27 05:37:20
93.189.101.5 attack
Sep 26 23:15:53 iago sshd[30600]: Invalid user admin from 93.189.101.5
Sep 26 23:15:53 iago sshd[30600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.189.101.5 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=93.189.101.5
2019-09-27 05:40:56
145.239.86.21 attack
Sep 27 01:18:18 microserver sshd[29949]: Invalid user stewart from 145.239.86.21 port 59514
Sep 27 01:18:18 microserver sshd[29949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.86.21
Sep 27 01:18:19 microserver sshd[29949]: Failed password for invalid user stewart from 145.239.86.21 port 59514 ssh2
Sep 27 01:22:21 microserver sshd[30580]: Invalid user jerom from 145.239.86.21 port 44438
Sep 27 01:22:21 microserver sshd[30580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.86.21
Sep 27 01:34:35 microserver sshd[32159]: Invalid user calin from 145.239.86.21 port 55688
Sep 27 01:34:35 microserver sshd[32159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.86.21
Sep 27 01:34:38 microserver sshd[32159]: Failed password for invalid user calin from 145.239.86.21 port 55688 ssh2
Sep 27 01:38:49 microserver sshd[32799]: Invalid user ax400 from 145.239.86.21 port 40614
S
2019-09-27 05:49:14
175.19.218.230 attackspambots
Unauthorised access (Sep 27) SRC=175.19.218.230 LEN=40 TTL=49 ID=50439 TCP DPT=8080 WINDOW=31753 SYN 
Unauthorised access (Sep 26) SRC=175.19.218.230 LEN=40 TTL=49 ID=55068 TCP DPT=8080 WINDOW=42292 SYN
2019-09-27 05:45:19
103.9.77.220 attack
Sep 26 11:43:19 auw2 sshd\[26744\]: Invalid user kayla from 103.9.77.220
Sep 26 11:43:19 auw2 sshd\[26744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.9.77.220
Sep 26 11:43:20 auw2 sshd\[26744\]: Failed password for invalid user kayla from 103.9.77.220 port 12816 ssh2
Sep 26 11:48:08 auw2 sshd\[27110\]: Invalid user porno from 103.9.77.220
Sep 26 11:48:08 auw2 sshd\[27110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.9.77.220
2019-09-27 05:52:30
45.142.195.5 attack
Sep 26 23:37:07 andromeda postfix/smtpd\[8729\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure
Sep 26 23:37:12 andromeda postfix/smtpd\[54763\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure
Sep 26 23:37:53 andromeda postfix/smtpd\[8729\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure
Sep 26 23:38:01 andromeda postfix/smtpd\[53526\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure
Sep 26 23:38:07 andromeda postfix/smtpd\[53525\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure
2019-09-27 05:46:38
184.30.210.217 attack
09/27/2019-00:13:45.163078 184.30.210.217 Protocol: 6 SURICATA TLS invalid record/traffic
2019-09-27 06:16:37

最近上报的IP列表

229.65.188.167 163.131.179.117 129.172.149.235 5.202.41.220
33.49.90.12 41.129.39.74 84.171.197.51 87.254.151.88
58.135.249.134 247.81.41.168 192.232.17.244 236.232.104.12
89.42.204.1 145.63.157.157 187.117.105.169 189.77.95.159
94.33.226.240 124.153.3.245 188.63.212.18 136.120.253.217