必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): IANA Special-Purpose Address

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 250.97.142.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38114
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;250.97.142.64.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025013000 1800 900 604800 86400

;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 21:16:19 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 64.142.97.250.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 64.142.97.250.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
51.158.118.70 attackbotsspam
Aug 21 14:30:10 rocket sshd[17683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.118.70
Aug 21 14:30:12 rocket sshd[17683]: Failed password for invalid user hc from 51.158.118.70 port 37902 ssh2
...
2020-08-21 21:45:00
157.230.216.203 attack
probing for access vulnerability
2020-08-21 21:56:54
106.13.232.197 attackspambots
Lines containing failures of 106.13.232.197
Aug 20 22:37:49 nxxxxxxx sshd[11308]: Invalid user ivete from 106.13.232.197 port 52556
Aug 20 22:37:49 nxxxxxxx sshd[11308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.232.197
Aug 20 22:37:51 nxxxxxxx sshd[11308]: Failed password for invalid user ivete from 106.13.232.197 port 52556 ssh2
Aug 20 22:37:51 nxxxxxxx sshd[11308]: Received disconnect from 106.13.232.197 port 52556:11: Bye Bye [preauth]
Aug 20 22:37:51 nxxxxxxx sshd[11308]: Disconnected from invalid user ivete 106.13.232.197 port 52556 [preauth]
Aug 20 22:47:04 nxxxxxxx sshd[13066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.232.197  user=r.r
Aug 20 22:47:06 nxxxxxxx sshd[13066]: Failed password for r.r from 106.13.232.197 port 56808 ssh2
Aug 20 22:47:06 nxxxxxxx sshd[13066]: Received disconnect from 106.13.232.197 port 56808:11: Bye Bye [preauth]
Aug 20 22:47:06 n........
------------------------------
2020-08-21 21:56:37
152.231.140.150 attackbots
Aug 21 15:44:49 electroncash sshd[1473]: Failed password for root from 152.231.140.150 port 50896 ssh2
Aug 21 15:49:30 electroncash sshd[2750]: Invalid user platform from 152.231.140.150 port 54711
Aug 21 15:49:30 electroncash sshd[2750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.231.140.150 
Aug 21 15:49:30 electroncash sshd[2750]: Invalid user platform from 152.231.140.150 port 54711
Aug 21 15:49:31 electroncash sshd[2750]: Failed password for invalid user platform from 152.231.140.150 port 54711 ssh2
...
2020-08-21 21:55:52
189.57.121.10 attackbotsspam
srvr1: (mod_security) mod_security (id:942100) triggered by 189.57.121.10 (BR/-/189-57-121-10.customer.tdatabrasil.net.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:06:10 [error] 482759#0: *840604 [client 189.57.121.10] ModSecurity: Access denied with code 406 (phase 2).  [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "159801157017.481997"] [ref ""], client: 189.57.121.10, [redacted] request: "GET /forum/viewthread.php?thread_id=1122%27%29%29%29+OR+++%28%28%285901%3D5901 HTTP/1.1" [redacted]
2020-08-21 22:14:47
37.139.9.23 attackbotsspam
Aug 21 07:54:12 server sshd\[13804\]: Invalid user nagios from 37.139.9.23 port 55440
Aug 21 07:55:11 server sshd\[14212\]: Invalid user prueba from 37.139.9.23 port 33236
2020-08-21 21:34:35
101.32.28.88 attack
Aug 21 10:35:54 firewall sshd[17528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.32.28.88
Aug 21 10:35:54 firewall sshd[17528]: Invalid user kirill from 101.32.28.88
Aug 21 10:35:56 firewall sshd[17528]: Failed password for invalid user kirill from 101.32.28.88 port 35688 ssh2
...
2020-08-21 21:46:41
222.186.175.212 attack
Aug 21 15:50:10 eventyay sshd[7343]: Failed password for root from 222.186.175.212 port 52868 ssh2
Aug 21 15:50:23 eventyay sshd[7343]: error: maximum authentication attempts exceeded for root from 222.186.175.212 port 52868 ssh2 [preauth]
Aug 21 15:50:30 eventyay sshd[7351]: Failed password for root from 222.186.175.212 port 28536 ssh2
...
2020-08-21 21:51:51
178.62.238.152 attackbots
Aug 21 02:56:13 vm1 sshd[8052]: Did not receive identification string from 178.62.238.152 port 38122
Aug 21 02:56:22 vm1 sshd[8053]: Received disconnect from 178.62.238.152 port 44138:11: Normal Shutdown, Thank you for playing [preauth]
Aug 21 02:56:22 vm1 sshd[8053]: Disconnected from 178.62.238.152 port 44138 [preauth]
Aug 21 02:56:35 vm1 sshd[8055]: Invalid user oracle from 178.62.238.152 port 43878
Aug 21 02:56:35 vm1 sshd[8055]: Received disconnect from 178.62.238.152 port 43878:11: Normal Shutdown, Thank you for playing [preauth]
Aug 21 02:56:35 vm1 sshd[8055]: Disconnected from 178.62.238.152 port 43878 [preauth]
Aug 21 02:56:48 vm1 sshd[8057]: Received disconnect from 178.62.238.152 port 43336:11: Normal Shutdown, Thank you for playing [preauth]
Aug 21 02:56:48 vm1 sshd[8057]: Disconnected from 178.62.238.152 port 43336 [preauth]
Aug 21 02:57:02 vm1 sshd[8059]: Invalid user postgres from 178.62.238.152 port 43036
Aug 21 02:57:02 vm1 sshd[8059]: Received disconne........
-------------------------------
2020-08-21 22:07:39
66.223.164.237 attackspambots
Aug 21 08:06:36 Tower sshd[3434]: Connection from 66.223.164.237 port 1202 on 192.168.10.220 port 22 rdomain ""
Aug 21 08:06:37 Tower sshd[3434]: Invalid user testuser from 66.223.164.237 port 1202
Aug 21 08:06:37 Tower sshd[3434]: error: Could not get shadow information for NOUSER
Aug 21 08:06:37 Tower sshd[3434]: Failed password for invalid user testuser from 66.223.164.237 port 1202 ssh2
Aug 21 08:06:37 Tower sshd[3434]: Received disconnect from 66.223.164.237 port 1202:11: Bye Bye [preauth]
Aug 21 08:06:37 Tower sshd[3434]: Disconnected from invalid user testuser 66.223.164.237 port 1202 [preauth]
2020-08-21 21:41:28
222.186.180.130 attack
Aug 21 15:30:08 theomazars sshd[5240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.130  user=root
Aug 21 15:30:10 theomazars sshd[5240]: Failed password for root from 222.186.180.130 port 45051 ssh2
2020-08-21 21:40:03
122.51.69.116 attack
k+ssh-bruteforce
2020-08-21 22:21:10
188.166.20.141 attackspambots
188.166.20.141 - - [21/Aug/2020:14:06:11 +0200] "GET /wp-login.php HTTP/1.1" 200 8775 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
188.166.20.141 - - [21/Aug/2020:14:06:12 +0200] "POST /wp-login.php HTTP/1.1" 200 9026 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
188.166.20.141 - - [21/Aug/2020:14:06:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-08-21 22:12:50
115.159.91.202 attackspambots
$f2bV_matches
2020-08-21 21:46:17
103.57.80.51 attack
srvr1: (mod_security) mod_security (id:942100) triggered by 103.57.80.51 (IN/-/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:06:41 [error] 482759#0: *840645 [client 103.57.80.51] ModSecurity: Access denied with code 406 (phase 2).  [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "159801160188.230054"] [ref ""], client: 103.57.80.51, [redacted] request: "GET /forum/viewthread.php?thread_id=1122%27%29+OR+++%28%27lwvX%27%3D%27XZXZ HTTP/1.1" [redacted]
2020-08-21 21:42:55

最近上报的IP列表

166.134.255.230 80.101.191.193 178.110.82.205 186.110.226.91
98.121.54.56 253.137.96.203 7.140.102.12 182.200.172.1
107.189.205.63 28.73.100.205 147.175.24.51 54.84.60.154
21.25.224.172 80.8.79.97 181.216.99.132 132.188.152.75
205.91.56.91 231.68.130.98 255.240.220.79 237.45.18.211