必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.109.142.230
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34716
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.109.142.230.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021901 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 04:10:46 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
b'Host 230.142.109.42.in-addr.arpa not found: 2(SERVFAIL)
'
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 230.142.109.42.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
13.72.67.11 attackbotsspam
BadRequests
2019-10-20 23:00:25
123.30.128.138 attack
Oct 20 14:01:47 rotator sshd\[4532\]: Failed password for root from 123.30.128.138 port 40970 ssh2Oct 20 14:01:50 rotator sshd\[4532\]: Failed password for root from 123.30.128.138 port 40970 ssh2Oct 20 14:01:53 rotator sshd\[4532\]: Failed password for root from 123.30.128.138 port 40970 ssh2Oct 20 14:01:56 rotator sshd\[4532\]: Failed password for root from 123.30.128.138 port 40970 ssh2Oct 20 14:02:00 rotator sshd\[4532\]: Failed password for root from 123.30.128.138 port 40970 ssh2Oct 20 14:02:03 rotator sshd\[4532\]: Failed password for root from 123.30.128.138 port 40970 ssh2
...
2019-10-20 23:01:19
195.140.224.4 attackbots
Unauthorized connection attempt from IP address 195.140.224.4 on Port 445(SMB)
2019-10-20 23:30:23
106.51.140.242 attackbots
Unauthorized connection attempt from IP address 106.51.140.242 on Port 445(SMB)
2019-10-20 23:09:05
142.93.47.171 attack
Oct 20 08:06:59 wildwolf wplogin[5536]: 142.93.47.171 prometheus.ngo [2019-10-20 08:06:59+0000] "POST /2017/wp-login.php HTTP/1.1" "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "admin" "1234567890"
Oct 20 08:07:03 wildwolf wplogin[5305]: 142.93.47.171 prometheus.ngo [2019-10-20 08:07:03+0000] "POST /2017/xmlrpc.php HTTP/1.1" "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "admin" ""
Oct 20 08:08:28 wildwolf wplogin[6439]: 142.93.47.171 prometheus.ngo [2019-10-20 08:08:28+0000] "POST /cms/wp-login.php HTTP/1.1" "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "" "1"
Oct 20 08:08:31 wildwolf wplogin[5176]: 142.93.47.171 prometheus.ngo [2019-10-20 08:08:31+0000] "POST /cms/xmlrpc.php HTTP/1.1" "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "admin" ""
Oct 20 09:33:47 wildwolf wplogin[3746]: 142.93.47.171 prometheus.ngo [2019-10-20 09:3........
------------------------------
2019-10-20 22:52:49
195.211.180.245 attack
Oct 20 13:53:34 mxgate1 postfix/postscreen[6839]: CONNECT from [195.211.180.245]:9236 to [176.31.12.44]:25
Oct 20 13:53:34 mxgate1 postfix/dnsblog[6951]: addr 195.211.180.245 listed by domain zen.spamhaus.org as 127.0.0.11
Oct 20 13:53:34 mxgate1 postfix/dnsblog[6951]: addr 195.211.180.245 listed by domain zen.spamhaus.org as 127.0.0.4
Oct 20 13:53:34 mxgate1 postfix/dnsblog[6949]: addr 195.211.180.245 listed by domain cbl.abuseat.org as 127.0.0.2
Oct 20 13:53:34 mxgate1 postfix/dnsblog[6950]: addr 195.211.180.245 listed by domain bl.spamcop.net as 127.0.0.2
Oct 20 13:53:34 mxgate1 postfix/dnsblog[6952]: addr 195.211.180.245 listed by domain b.barracudacentral.org as 127.0.0.2
Oct 20 13:53:34 mxgate1 postfix/postscreen[6839]: PREGREET 24 after 0.13 from [195.211.180.245]:9236: EHLO [195.211.180.245]

Oct 20 13:53:35 mxgate1 postfix/postscreen[6839]: DNSBL rank 5 for [195.211.180.245]:9236
Oct x@x
Oct 20 13:53:35 mxgate1 postfix/postscreen[6839]: HANGUP after 0.37 from [........
-------------------------------
2019-10-20 22:55:14
167.99.67.209 attackspambots
Oct 20 12:46:13 rb06 sshd[3338]: Failed password for invalid user test from 167.99.67.209 port 52192 ssh2
Oct 20 12:46:13 rb06 sshd[3338]: Received disconnect from 167.99.67.209: 11: Bye Bye [preauth]
Oct 20 12:58:41 rb06 sshd[13547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.67.209  user=r.r
Oct 20 12:58:43 rb06 sshd[13547]: Failed password for r.r from 167.99.67.209 port 49180 ssh2
Oct 20 12:58:43 rb06 sshd[13547]: Received disconnect from 167.99.67.209: 11: Bye Bye [preauth]
Oct 20 13:03:05 rb06 sshd[14583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.67.209  user=r.r
Oct 20 13:03:07 rb06 sshd[14583]: Failed password for r.r from 167.99.67.209 port 60810 ssh2
Oct 20 13:03:07 rb06 sshd[14583]: Received disconnect from 167.99.67.209: 11: Bye Bye [preauth]
Oct 20 13:07:40 rb06 sshd[15187]: Failed password for invalid user abhijhostnameh from 167.99.67.209 port 44212 s........
-------------------------------
2019-10-20 22:45:46
50.62.208.51 attackspambots
Automatic report - XMLRPC Attack
2019-10-20 22:48:25
104.131.128.245 attackbotsspam
[portscan] Port scan
2019-10-20 23:33:34
193.202.81.39 attackspambots
193.202.81.39 - - [20/Oct/2019:08:02:08 -0400] "GET /?page=products&action=/etc/passwd&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 17295 "https://newportbrassfaucets.com/?page=products&action=/etc/passwd&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
...
2019-10-20 22:53:12
113.22.86.190 attackbots
Oct x@x
Oct x@x
Oct x@x
Oct x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=113.22.86.190
2019-10-20 23:15:57
193.70.1.220 attackbotsspam
Oct 20 16:02:22 OPSO sshd\[2996\]: Invalid user Qw3rty2017 from 193.70.1.220 port 52288
Oct 20 16:02:22 OPSO sshd\[2996\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.1.220
Oct 20 16:02:23 OPSO sshd\[2996\]: Failed password for invalid user Qw3rty2017 from 193.70.1.220 port 52288 ssh2
Oct 20 16:06:20 OPSO sshd\[3758\]: Invalid user lana123 from 193.70.1.220 port 35454
Oct 20 16:06:20 OPSO sshd\[3758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.1.220
2019-10-20 22:56:25
113.190.252.27 attackbots
Unauthorized connection attempt from IP address 113.190.252.27 on Port 445(SMB)
2019-10-20 23:14:10
46.101.249.232 attackbotsspam
Oct 20 13:54:00 OPSO sshd\[11543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.249.232  user=root
Oct 20 13:54:02 OPSO sshd\[11543\]: Failed password for root from 46.101.249.232 port 48521 ssh2
Oct 20 13:57:50 OPSO sshd\[12216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.249.232  user=root
Oct 20 13:57:53 OPSO sshd\[12216\]: Failed password for root from 46.101.249.232 port 39831 ssh2
Oct 20 14:01:35 OPSO sshd\[13020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.249.232  user=root
2019-10-20 23:41:33
45.136.109.215 attack
Oct 20 17:00:53 mc1 kernel: \[2870010.372838\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.215 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=19280 PROTO=TCP SPT=43015 DPT=4087 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 20 17:00:59 mc1 kernel: \[2870015.793895\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.215 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=48355 PROTO=TCP SPT=43015 DPT=1578 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 20 17:07:50 mc1 kernel: \[2870426.767106\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.215 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=38185 PROTO=TCP SPT=43015 DPT=6981 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-10-20 23:16:35

最近上报的IP列表

213.198.236.7 200.53.30.84 132.202.114.80 100.246.72.149
116.8.20.53 61.128.169.144 168.59.15.100 31.139.246.166
86.215.210.13 87.54.22.244 46.41.235.155 42.103.67.179
71.6.146.0 139.210.65.53 220.38.139.178 38.166.168.192
148.156.200.80 159.213.173.62 66.87.60.145 94.53.127.244