必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): IANA Special-Purpose Address

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 242.158.165.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46235
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;242.158.165.104.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024120700 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 07 18:34:31 CST 2024
;; MSG SIZE  rcvd: 108
HOST信息:
Host 104.165.158.242.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 104.165.158.242.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
164.132.197.108 attackspambots
2019-12-25T06:26:17.837281abusebot-7.cloudsearch.cf sshd[27934]: Invalid user benoit from 164.132.197.108 port 39304
2019-12-25T06:26:17.842499abusebot-7.cloudsearch.cf sshd[27934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.ip-164-132-197.eu
2019-12-25T06:26:17.837281abusebot-7.cloudsearch.cf sshd[27934]: Invalid user benoit from 164.132.197.108 port 39304
2019-12-25T06:26:20.281214abusebot-7.cloudsearch.cf sshd[27934]: Failed password for invalid user benoit from 164.132.197.108 port 39304 ssh2
2019-12-25T06:28:29.001368abusebot-7.cloudsearch.cf sshd[27936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.ip-164-132-197.eu  user=root
2019-12-25T06:28:30.254948abusebot-7.cloudsearch.cf sshd[27936]: Failed password for root from 164.132.197.108 port 32872 ssh2
2019-12-25T06:30:34.156775abusebot-7.cloudsearch.cf sshd[27940]: Invalid user backup from 164.132.197.108 port 54672
...
2019-12-25 16:52:29
139.59.172.23 attackspambots
WordPress login Brute force / Web App Attack on client site.
2019-12-25 16:42:08
196.196.39.199 attackbots
Automatic report - Banned IP Access
2019-12-25 16:51:23
190.246.205.208 attackspam
Dec 25 04:08:53 srv1 sshd[11811]: Address 190.246.205.208 maps to 208-205-246-190.fibertel.com.ar, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Dec 25 04:08:53 srv1 sshd[11811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.246.205.208  user=r.r
Dec 25 04:08:55 srv1 sshd[11811]: Failed password for r.r from 190.246.205.208 port 56270 ssh2
Dec 25 04:08:55 srv1 sshd[11812]: Received disconnect from 190.246.205.208: 11: Bye Bye
Dec 25 04:39:49 srv1 sshd[12137]: Address 190.246.205.208 maps to 208-205-246-190.fibertel.com.ar, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Dec 25 04:39:49 srv1 sshd[12137]: Invalid user home from 190.246.205.208
Dec 25 04:39:49 srv1 sshd[12137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.246.205.208 
Dec 25 04:39:51 srv1 sshd[12137]: Failed password for invalid user home from 190.246.205.208 port 547........
-------------------------------
2019-12-25 16:44:38
87.238.237.170 attackspam
Unauthorised access (Dec 25) SRC=87.238.237.170 LEN=44 TTL=57 ID=47978 TCP DPT=8080 WINDOW=37999 SYN 
Unauthorised access (Dec 24) SRC=87.238.237.170 LEN=44 TTL=57 ID=13681 TCP DPT=8080 WINDOW=37999 SYN 
Unauthorised access (Dec 23) SRC=87.238.237.170 LEN=44 TTL=57 ID=5894 TCP DPT=8080 WINDOW=37999 SYN
2019-12-25 16:42:38
92.63.196.10 attackspambots
Dec 25 09:13:20 h2177944 kernel: \[460345.738817\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.63.196.10 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=34637 PROTO=TCP SPT=59825 DPT=4370 WINDOW=1024 RES=0x00 SYN URGP=0 
Dec 25 09:13:20 h2177944 kernel: \[460345.738832\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.63.196.10 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=34637 PROTO=TCP SPT=59825 DPT=4370 WINDOW=1024 RES=0x00 SYN URGP=0 
Dec 25 09:16:33 h2177944 kernel: \[460539.182720\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.63.196.10 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=64283 PROTO=TCP SPT=59825 DPT=4392 WINDOW=1024 RES=0x00 SYN URGP=0 
Dec 25 09:16:33 h2177944 kernel: \[460539.182735\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.63.196.10 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=64283 PROTO=TCP SPT=59825 DPT=4392 WINDOW=1024 RES=0x00 SYN URGP=0 
Dec 25 09:29:24 h2177944 kernel: \[461309.501389\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.63.196.10 DST=85.214.117.9 LEN=40 TO
2019-12-25 16:33:39
134.175.123.16 attackspam
Fail2Ban Ban Triggered
2019-12-25 16:24:51
118.98.96.184 attackspam
Dec 25 08:12:12 sd-53420 sshd\[11681\]: Invalid user lerch from 118.98.96.184
Dec 25 08:12:12 sd-53420 sshd\[11681\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.98.96.184
Dec 25 08:12:14 sd-53420 sshd\[11681\]: Failed password for invalid user lerch from 118.98.96.184 port 36442 ssh2
Dec 25 08:15:24 sd-53420 sshd\[12883\]: Invalid user bugla from 118.98.96.184
Dec 25 08:15:24 sd-53420 sshd\[12883\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.98.96.184
...
2019-12-25 16:23:36
164.177.42.33 attack
$f2bV_matches
2019-12-25 16:28:53
180.180.28.64 attackbots
Unauthorized connection attempt detected from IP address 180.180.28.64 to port 445
2019-12-25 16:37:49
1.2.144.85 attackspam
/var/log/messages:Dec 25 06:08:18 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1577254098.699:76686): pid=9146 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aexxxxxxx28-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=9147 suid=74 rport=60580 laddr=104.167.106.93 lport=22  exe="/usr/sbin/sshd" hostname=? addr=1.2.144.85 terminal=? res=success'
/var/log/messages:Dec 25 06:08:18 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1577254098.703:76687): pid=9146 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aexxxxxxx28-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=9147 suid=74 rport=60580 laddr=104.167.106.93 lport=22  exe="/usr/sbin/sshd" hostname=? addr=1.2.144.85 terminal=? res=success'
/var/log/messages:Dec 25 06:08:20 sanyalnet-cloud-vps fail2ban.filter[1551]: INFO [ssh........
-------------------------------
2019-12-25 16:54:22
60.168.244.237 attackspambots
Dec 25 01:08:14 eola postfix/smtpd[30050]: connect from unknown[60.168.244.237]
Dec 25 01:08:15 eola postfix/smtpd[30050]: NOQUEUE: reject: RCPT from unknown[60.168.244.237]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Dec 25 01:08:15 eola postfix/smtpd[30050]: disconnect from unknown[60.168.244.237] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4
Dec 25 01:08:16 eola postfix/smtpd[30048]: connect from unknown[60.168.244.237]
Dec 25 01:08:17 eola postfix/smtpd[30048]: lost connection after AUTH from unknown[60.168.244.237]
Dec 25 01:08:17 eola postfix/smtpd[30048]: disconnect from unknown[60.168.244.237] ehlo=1 auth=0/1 commands=1/2
Dec 25 01:08:18 eola postfix/smtpd[30050]: connect from unknown[60.168.244.237]
Dec 25 01:08:19 eola postfix/smtpd[30050]: lost connection after AUTH from unknown[60.168.244.237]
Dec 25 01:08:19 eola postfix/smtpd[30050]: disconnect from unknown[60.168.244.237] ehlo=1 auth=0/1 commands=1/2
........
-------------------------------
2019-12-25 16:57:45
45.6.229.130 attackbotsspam
port scan and connect, tcp 80 (http)
2019-12-25 16:18:54
185.136.148.42 attackspambots
2019-12-25T07:27:46.182512centos sshd\[27040\]: Invalid user user from 185.136.148.42 port 44123
2019-12-25T07:27:46.318437centos sshd\[27040\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.136.148.42
2019-12-25T07:27:48.473314centos sshd\[27040\]: Failed password for invalid user user from 185.136.148.42 port 44123 ssh2
2019-12-25 16:18:05
119.79.234.12 attackspambots
[munged]::80 119.79.234.12 - - [25/Dec/2019:07:26:28 +0100] "POST /[munged]: HTTP/1.1" 200 7107 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::80 119.79.234.12 - - [25/Dec/2019:07:26:29 +0100] "POST /[munged]: HTTP/1.1" 200 7110 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::80 119.79.234.12 - - [25/Dec/2019:07:26:31 +0100] "POST /[munged]: HTTP/1.1" 200 7106 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::80 119.79.234.12 - - [25/Dec/2019:07:26:32 +0100] "POST /[munged]: HTTP/1.1" 200 7106 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::80 119.79.234.12 - - [25/Dec/2019:07:26:33 +0100] "POST /[munged]: HTTP/1.1" 200 7110 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::80 119.79.234.12 - - [25/Dec/2019:07:26:35 +0100]
2019-12-25 16:57:26

最近上报的IP列表

173.83.214.28 56.122.142.240 80.176.228.55 209.38.31.196
17.30.201.164 207.207.179.164 14.251.87.80 199.198.155.12
106.5.44.246 88.97.94.134 220.223.78.42 161.188.222.138
251.137.111.120 245.243.53.34 161.15.139.51 35.250.240.121
44.38.89.229 100.60.193.70 244.164.21.116 67.117.199.110