必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): IANA Special-Purpose Address

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 242.134.27.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52497
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;242.134.27.50.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022700 1800 900 604800 86400

;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 27 20:16:40 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 50.27.134.242.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 50.27.134.242.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
2001:8f8:1623:e0e:591f:e31f:30c:917e attackspam
2020/08/09 13:54:23 [error] 16955#16955: *974950 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 2001:8f8:1623:e0e:591f:e31f:30c:917e, server: _, request: "GET /wp-login.php HTTP/1.1", host: "smsman.de"
2020/08/09 13:54:23 [error] 16952#16952: *974952 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 2001:8f8:1623:e0e:591f:e31f:30c:917e, server: _, request: "POST /wp-login.php HTTP/1.1", host: "smsman.de"
2020/08/09 13:54:23 [error] 16955#16955: *974954 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 2001:8f8:1623:e0e:591f:e31f:30c:917e, server: _, request: "GET /wp-login.php HTTP/1.1", host: "smsman.de"
2020-08-10 03:35:01
213.32.40.155 attack
Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-08-10 03:26:21
5.188.84.95 attackspambots
fell into ViewStateTrap:paris
2020-08-10 03:19:35
81.163.8.6 attackspambots
Aug  9 13:48:50 mail.srvfarm.net postfix/smtpd[781496]: warning: unknown[81.163.8.6]: SASL PLAIN authentication failed: 
Aug  9 13:48:50 mail.srvfarm.net postfix/smtpd[781496]: lost connection after AUTH from unknown[81.163.8.6]
Aug  9 13:54:03 mail.srvfarm.net postfix/smtps/smtpd[783829]: warning: 81-163-8-6.net.lasnet.pl[81.163.8.6]: SASL PLAIN authentication failed: 
Aug  9 13:54:03 mail.srvfarm.net postfix/smtps/smtpd[783829]: lost connection after AUTH from 81-163-8-6.net.lasnet.pl[81.163.8.6]
Aug  9 13:58:34 mail.srvfarm.net postfix/smtps/smtpd[783087]: warning: unknown[81.163.8.6]: SASL PLAIN authentication failed:
2020-08-10 03:34:01
212.70.149.3 attackspam
Aug  9 21:31:24 galaxy event: galaxy/lswi: smtp: annnora@uni-potsdam.de [212.70.149.3] authentication failure using internet password
Aug  9 21:31:42 galaxy event: galaxy/lswi: smtp: annora@uni-potsdam.de [212.70.149.3] authentication failure using internet password
Aug  9 21:32:01 galaxy event: galaxy/lswi: smtp: anny@uni-potsdam.de [212.70.149.3] authentication failure using internet password
Aug  9 21:32:20 galaxy event: galaxy/lswi: smtp: anoushka@uni-potsdam.de [212.70.149.3] authentication failure using internet password
Aug  9 21:32:39 galaxy event: galaxy/lswi: smtp: ans@uni-potsdam.de [212.70.149.3] authentication failure using internet password
...
2020-08-10 03:36:42
81.161.67.150 attackspambots
Aug  9 13:47:49 mail.srvfarm.net postfix/smtpd[780536]: warning: unknown[81.161.67.150]: SASL PLAIN authentication failed: 
Aug  9 13:47:49 mail.srvfarm.net postfix/smtpd[780536]: lost connection after AUTH from unknown[81.161.67.150]
Aug  9 13:50:20 mail.srvfarm.net postfix/smtpd[781673]: warning: unknown[81.161.67.150]: SASL PLAIN authentication failed: 
Aug  9 13:50:20 mail.srvfarm.net postfix/smtpd[781673]: lost connection after AUTH from unknown[81.161.67.150]
Aug  9 13:54:21 mail.srvfarm.net postfix/smtpd[779993]: warning: unknown[81.161.67.150]: SASL PLAIN authentication failed:
2020-08-10 03:40:45
159.65.33.243 attackspambots
firewall-block, port(s): 24210/tcp
2020-08-10 03:09:54
5.248.227.129 attack
1596974751 - 08/09/2020 14:05:51 Host: 5.248.227.129/5.248.227.129 Port: 445 TCP Blocked
2020-08-10 03:23:31
171.220.177.13 attack
Port probing on unauthorized port 23
2020-08-10 03:06:37
171.244.129.66 attackbotsspam
WordPress wp-login brute force :: 171.244.129.66 0.068 BYPASS [09/Aug/2020:18:32:43  0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2003 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-08-10 03:27:48
23.101.226.155 attackspam
Aug  9 20:55:23 web02.agentur-b-2.de postfix/smtps/smtpd[2559208]: warning: unknown[23.101.226.155]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  9 20:57:33 web02.agentur-b-2.de postfix/smtps/smtpd[2559291]: warning: unknown[23.101.226.155]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  9 20:59:46 web02.agentur-b-2.de postfix/smtps/smtpd[2559473]: warning: unknown[23.101.226.155]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  9 21:01:57 web02.agentur-b-2.de postfix/smtps/smtpd[2572033]: warning: unknown[23.101.226.155]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  9 21:04:09 web02.agentur-b-2.de postfix/smtps/smtpd[2572259]: warning: unknown[23.101.226.155]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-08-10 03:35:17
120.229.1.167 attackspam
Lines containing failures of 120.229.1.167 (max 1000)
Aug  7 07:52:08 UTC__SANYALnet-Labs__cac12 sshd[9720]: Connection from 120.229.1.167 port 33504 on 64.137.176.96 port 22
Aug  7 07:52:34 UTC__SANYALnet-Labs__cac12 sshd[9720]: User r.r from 120.229.1.167 not allowed because not listed in AllowUsers
Aug  7 07:52:34 UTC__SANYALnet-Labs__cac12 sshd[9720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.229.1.167  user=r.r
Aug  7 07:52:36 UTC__SANYALnet-Labs__cac12 sshd[9720]: Failed password for invalid user r.r from 120.229.1.167 port 33504 ssh2
Aug  7 07:52:36 UTC__SANYALnet-Labs__cac12 sshd[9720]: Received disconnect from 120.229.1.167 port 33504:11: Bye Bye [preauth]
Aug  7 07:52:36 UTC__SANYALnet-Labs__cac12 sshd[9720]: Disconnected from 120.229.1.167 port 33504 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=120.229.1.167
2020-08-10 03:13:14
111.74.11.86 attackbots
SSH Brute Force
2020-08-10 03:32:26
212.33.203.196 attack
Aug  7 09:16:29 online-web-1 sshd[269787]: Did not receive identification string from 212.33.203.196 port 38614
Aug  7 09:16:40 online-web-1 sshd[269795]: Invalid user ansible from 212.33.203.196 port 38844
Aug  7 09:16:40 online-web-1 sshd[269795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.33.203.196
Aug  7 09:16:42 online-web-1 sshd[269795]: Failed password for invalid user ansible from 212.33.203.196 port 38844 ssh2
Aug  7 09:16:42 online-web-1 sshd[269795]: Received disconnect from 212.33.203.196 port 38844:11: Normal Shutdown, Thank you for playing [preauth]
Aug  7 09:16:42 online-web-1 sshd[269795]: Disconnected from 212.33.203.196 port 38844 [preauth]
Aug  7 09:16:50 online-web-1 sshd[269810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.33.203.196  user=r.r
Aug  7 09:16:51 online-web-1 sshd[269810]: Failed password for r.r from 212.33.203.196 port 51498 ssh2
Aug  7 0........
-------------------------------
2020-08-10 03:11:43
118.193.35.230 attack
[N10.H1.VM1] Port Scanner Detected Blocked by UFW
2020-08-10 03:07:12

最近上报的IP列表

78.169.7.69 189.113.246.52 225.125.124.7 227.189.124.101
50.40.171.42 88.129.252.182 136.61.162.129 164.7.248.71
192.170.159.181 195.163.192.9 20.81.95.93 103.76.88.172
44.28.40.202 41.133.219.158 160.223.144.150 143.62.77.106
207.159.130.163 9.147.76.176 34.218.253.33 86.168.211.49