必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.190.159.111
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37734
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.190.159.111.			IN	A

;; AUTHORITY SECTION:
.			532	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 11:28:54 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 111.159.190.42.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 111.159.190.42.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
115.238.97.2 attackspam
Lines containing failures of 115.238.97.2
May  4 03:10:46 ghostnameioc sshd[5907]: Invalid user gbase from 115.238.97.2 port 15624
May  4 03:10:46 ghostnameioc sshd[5907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.97.2 
May  4 03:10:47 ghostnameioc sshd[5907]: Failed password for invalid user gbase from 115.238.97.2 port 15624 ssh2
May  4 03:10:49 ghostnameioc sshd[5907]: Received disconnect from 115.238.97.2 port 15624:11: Bye Bye [preauth]
May  4 03:10:49 ghostnameioc sshd[5907]: Disconnected from invalid user gbase 115.238.97.2 port 15624 [preauth]
May  4 03:25:17 ghostnameioc sshd[6359]: Invalid user ftpuser from 115.238.97.2 port 17252
May  4 03:25:17 ghostnameioc sshd[6359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.97.2 
May  4 03:25:19 ghostnameioc sshd[6359]: Failed password for invalid user ftpuser from 115.238.97.2 port 17252 ssh2
May  4 03:25:21 ghostna........
------------------------------
2020-05-05 05:39:10
213.202.168.102 attackbots
2020-05-04T15:51:58.677613linuxbox-skyline sshd[171610]: Invalid user umesh from 213.202.168.102 port 41348
...
2020-05-05 05:52:56
124.156.199.234 attackbotsspam
2020-05-04T16:20:29.9356481495-001 sshd[45699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.199.234
2020-05-04T16:20:29.9284391495-001 sshd[45699]: Invalid user admin from 124.156.199.234 port 53118
2020-05-04T16:20:31.9968611495-001 sshd[45699]: Failed password for invalid user admin from 124.156.199.234 port 53118 ssh2
2020-05-04T16:38:17.7685621495-001 sshd[46494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.199.234  user=root
2020-05-04T16:38:19.7798981495-001 sshd[46494]: Failed password for root from 124.156.199.234 port 35568 ssh2
2020-05-04T16:55:41.7636951495-001 sshd[47301]: Invalid user kyle from 124.156.199.234 port 46226
...
2020-05-05 05:49:34
120.224.113.23 attack
May  4 16:25:29 Tower sshd[42427]: Connection from 120.224.113.23 port 2491 on 192.168.10.220 port 22 rdomain ""
May  4 16:25:31 Tower sshd[42427]: Invalid user haydon from 120.224.113.23 port 2491
May  4 16:25:31 Tower sshd[42427]: error: Could not get shadow information for NOUSER
May  4 16:25:31 Tower sshd[42427]: Failed password for invalid user haydon from 120.224.113.23 port 2491 ssh2
May  4 16:25:31 Tower sshd[42427]: Received disconnect from 120.224.113.23 port 2491:11: Bye Bye [preauth]
May  4 16:25:31 Tower sshd[42427]: Disconnected from invalid user haydon 120.224.113.23 port 2491 [preauth]
2020-05-05 06:08:41
185.50.149.11 attack
May  4 23:07:56 mail.srvfarm.net postfix/smtpd[3398768]: warning: unknown[185.50.149.11]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  4 23:07:58 mail.srvfarm.net postfix/smtpd[3398768]: lost connection after AUTH from unknown[185.50.149.11]
May  4 23:07:59 mail.srvfarm.net postfix/smtpd[3398870]: warning: unknown[185.50.149.11]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  4 23:08:00 mail.srvfarm.net postfix/smtpd[3398870]: lost connection after AUTH from unknown[185.50.149.11]
May  4 23:08:00 mail.srvfarm.net postfix/smtpd[3398851]: lost connection after AUTH from unknown[185.50.149.11]
2020-05-05 05:39:53
149.56.142.47 attackspambots
SSH Invalid Login
2020-05-05 05:56:40
213.230.117.206 attack
xmlrpc attack
2020-05-05 05:54:31
83.36.48.61 attackbotsspam
SASL PLAIN auth failed: ruser=...
2020-05-05 06:10:29
222.186.52.39 attack
May  4 17:59:03 plusreed sshd[18020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.39  user=root
May  4 17:59:05 plusreed sshd[18020]: Failed password for root from 222.186.52.39 port 31277 ssh2
...
2020-05-05 05:59:13
77.68.73.152 attackbotsspam
SSH Invalid Login
2020-05-05 06:14:00
13.71.24.82 attackspam
SSH Invalid Login
2020-05-05 06:00:45
170.79.10.22 attack
xmlrpc attack
2020-05-05 06:12:29
222.186.30.35 attack
2020-04-22T17:00:45.214218finland sshd[23697]: Unable to negotiate with 222.186.30.35 port 33255: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
2020-04-22T17:38:47.606171finland sshd[23743]: Unable to negotiate with 222.186.30.35 port 48039: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
2020-04-22T18:07:12.791236finland sshd[23773]: Unable to negotiate with 222.186.30.35 port 18969: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffi
...
2020-05-05 05:40:57
178.201.208.126 attackspambots
May  4 17:25:58 dns1 sshd[27581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.201.208.126 
May  4 17:25:58 dns1 sshd[27582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.201.208.126 
May  4 17:26:00 dns1 sshd[27581]: Failed password for invalid user pi from 178.201.208.126 port 54500 ssh2
2020-05-05 05:57:24
117.173.67.119 attackspam
May  4 17:40:56 NPSTNNYC01T sshd[9896]: Failed password for root from 117.173.67.119 port 3639 ssh2
May  4 17:43:18 NPSTNNYC01T sshd[10038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.173.67.119
May  4 17:43:20 NPSTNNYC01T sshd[10038]: Failed password for invalid user calloni from 117.173.67.119 port 3640 ssh2
...
2020-05-05 06:09:39

最近上报的IP列表

42.188.58.165 42.119.238.185 42.115.200.173 42.192.59.146
42.192.145.205 42.2.86.22 42.116.169.217 42.224.183.181
42.193.227.196 42.224.186.20 42.224.42.139 42.224.123.70
42.224.64.31 42.193.253.152 42.225.243.145 42.224.80.51
42.225.243.146 42.225.255.213 42.227.193.153 42.226.83.104