必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Unicom Liaoning Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackbots
Unauthorized connection attempt detected from IP address 42.180.125.166 to port 1433 [T]
2020-08-10 19:47:51
attackbotsspam
Unauthorised access (May  3) SRC=42.180.125.166 LEN=52 TTL=109 ID=12764 DF TCP DPT=1433 WINDOW=8192 SYN
2020-05-03 20:02:52
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.180.125.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40206
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.180.125.166.			IN	A

;; AUTHORITY SECTION:
.			436	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050300 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 03 20:02:48 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 166.125.180.42.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 166.125.180.42.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
113.12.175.155 attackbotsspam
Honeypot attack, port: 23, PTR: PTR record not found
2019-12-22 13:33:48
114.25.23.91 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 22-12-2019 04:55:14.
2019-12-22 13:28:47
58.213.128.106 attack
Dec 22 05:59:40 ns381471 sshd[9404]: Failed password for nobody from 58.213.128.106 port 12193 ssh2
Dec 22 06:06:01 ns381471 sshd[9721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.128.106
2019-12-22 13:32:09
49.88.112.63 attackspam
Dec 21 19:14:53 sachi sshd\[23333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.63  user=root
Dec 21 19:14:56 sachi sshd\[23333\]: Failed password for root from 49.88.112.63 port 19177 ssh2
Dec 21 19:14:58 sachi sshd\[23333\]: Failed password for root from 49.88.112.63 port 19177 ssh2
Dec 21 19:15:02 sachi sshd\[23333\]: Failed password for root from 49.88.112.63 port 19177 ssh2
Dec 21 19:15:12 sachi sshd\[23362\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.63  user=root
2019-12-22 13:21:39
107.190.35.106 attackbotsspam
Dec 22 00:48:08 plusreed sshd[24120]: Invalid user adminchen from 107.190.35.106
...
2019-12-22 13:55:34
113.173.130.87 attackspambots
"SMTP brute force auth login attempt."
2019-12-22 13:42:43
167.114.251.164 attackbotsspam
Dec 22 11:47:07 itv-usvr-01 sshd[21414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.251.164  user=root
Dec 22 11:47:08 itv-usvr-01 sshd[21414]: Failed password for root from 167.114.251.164 port 43120 ssh2
Dec 22 11:54:55 itv-usvr-01 sshd[21662]: Invalid user svdata from 167.114.251.164
Dec 22 11:54:55 itv-usvr-01 sshd[21662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.251.164
Dec 22 11:54:55 itv-usvr-01 sshd[21662]: Invalid user svdata from 167.114.251.164
Dec 22 11:54:57 itv-usvr-01 sshd[21662]: Failed password for invalid user svdata from 167.114.251.164 port 60929 ssh2
2019-12-22 13:44:34
112.85.42.172 attackspambots
2019-12-22T05:35:18.264878abusebot-8.cloudsearch.cf sshd[11837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172  user=root
2019-12-22T05:35:20.607296abusebot-8.cloudsearch.cf sshd[11837]: Failed password for root from 112.85.42.172 port 14903 ssh2
2019-12-22T05:35:23.939721abusebot-8.cloudsearch.cf sshd[11837]: Failed password for root from 112.85.42.172 port 14903 ssh2
2019-12-22T05:35:18.264878abusebot-8.cloudsearch.cf sshd[11837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172  user=root
2019-12-22T05:35:20.607296abusebot-8.cloudsearch.cf sshd[11837]: Failed password for root from 112.85.42.172 port 14903 ssh2
2019-12-22T05:35:23.939721abusebot-8.cloudsearch.cf sshd[11837]: Failed password for root from 112.85.42.172 port 14903 ssh2
2019-12-22T05:35:18.264878abusebot-8.cloudsearch.cf sshd[11837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruse
...
2019-12-22 13:40:02
69.94.131.44 attack
Autoban   69.94.131.44 AUTH/CONNECT
2019-12-22 13:46:40
222.186.175.155 attackbots
2019-12-22T06:34:19.244881scmdmz1 sshd[31777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155  user=root
2019-12-22T06:34:21.486847scmdmz1 sshd[31777]: Failed password for root from 222.186.175.155 port 33258 ssh2
2019-12-22T06:34:24.712628scmdmz1 sshd[31777]: Failed password for root from 222.186.175.155 port 33258 ssh2
2019-12-22T06:34:19.244881scmdmz1 sshd[31777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155  user=root
2019-12-22T06:34:21.486847scmdmz1 sshd[31777]: Failed password for root from 222.186.175.155 port 33258 ssh2
2019-12-22T06:34:24.712628scmdmz1 sshd[31777]: Failed password for root from 222.186.175.155 port 33258 ssh2
2019-12-22T06:34:19.244881scmdmz1 sshd[31777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155  user=root
2019-12-22T06:34:21.486847scmdmz1 sshd[31777]: Failed password for root from 222.186.175.155 port 3325
2019-12-22 13:37:49
164.131.131.238 attackbotsspam
SSH Brute Force
2019-12-22 13:56:26
134.209.203.238 attackbots
134.209.203.238 - - [22/Dec/2019:05:54:56 +0100] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
134.209.203.238 - - [22/Dec/2019:05:54:56 +0100] "POST /wp-login.php HTTP/1.1" 200 2298 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
134.209.203.238 - - [22/Dec/2019:05:54:56 +0100] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
134.209.203.238 - - [22/Dec/2019:05:54:57 +0100] "POST /wp-login.php HTTP/1.1" 200 2272 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
134.209.203.238 - - [22/Dec/2019:05:54:57 +0100] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
134.209.203.238 - - [22/Dec/2019:05:54:57 +0100] "POST /wp-login.php HTTP/1.1" 200 2273 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
.
2019-12-22 13:44:50
203.147.64.147 attackspambots
ILLEGAL ACCESS imap
2019-12-22 13:22:09
116.87.134.48 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-12-22 13:41:14
185.215.63.197 attackbotsspam
Honeypot attack, port: 23, PTR: E4186B01C4FD.mldns.ru.
2019-12-22 13:23:12

最近上报的IP列表

82.202.161.195 114.69.238.68 42.115.206.237 171.247.195.125
197.44.228.148 64.219.31.194 103.210.238.153 236.115.135.0
130.43.35.45 158.10.34.240 35.213.12.180 235.206.211.223
142.68.102.87 246.8.246.150 113.214.175.121 52.144.94.181
42.25.45.185 56.217.162.135 203.133.56.14 140.213.59.14