必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.224.252.182
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34435
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.224.252.182.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024120700 1800 900 604800 86400

;; Query time: 220 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 07 15:09:11 CST 2024
;; MSG SIZE  rcvd: 107
HOST信息:
182.252.224.42.in-addr.arpa domain name pointer hn.kd.ny.adsl.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
182.252.224.42.in-addr.arpa	name = hn.kd.ny.adsl.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
1.175.71.68 attackbotsspam
Portscan detected
2019-10-11 05:35:50
69.171.206.254 attackbots
Oct 10 20:01:53 sshgateway sshd\[27600\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.171.206.254  user=root
Oct 10 20:01:56 sshgateway sshd\[27600\]: Failed password for root from 69.171.206.254 port 39329 ssh2
Oct 10 20:09:15 sshgateway sshd\[27623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.171.206.254  user=root
2019-10-11 05:47:19
103.136.179.212 attackbotsspam
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/103.136.179.212/ 
 KH - 1H : (7)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : KH 
 NAME ASN : ASN138690 
 
 IP : 103.136.179.212 
 
 CIDR : 103.136.179.0/24 
 
 PREFIX COUNT : 4 
 
 UNIQUE IP COUNT : 1024 
 
 
 WYKRYTE ATAKI Z ASN138690 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-10-10 22:10:05 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-11 05:25:46
94.177.161.168 attackbotsspam
Oct 10 23:32:59 vps01 sshd[2564]: Failed password for root from 94.177.161.168 port 35914 ssh2
2019-10-11 05:49:16
185.14.185.108 attack
Oct 10 15:35:29 ahost sshd[20041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.14.185.108  user=r.r
Oct 10 15:35:31 ahost sshd[20041]: Failed password for r.r from 185.14.185.108 port 49052 ssh2
Oct 10 15:35:31 ahost sshd[20041]: Received disconnect from 185.14.185.108: 11: Bye Bye [preauth]
Oct 10 15:47:21 ahost sshd[25665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.14.185.108  user=r.r
Oct 10 15:47:23 ahost sshd[25665]: Failed password for r.r from 185.14.185.108 port 53654 ssh2
Oct 10 15:47:23 ahost sshd[25665]: Received disconnect from 185.14.185.108: 11: Bye Bye [preauth]
Oct 10 15:51:28 ahost sshd[25709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.14.185.108  user=r.r
Oct 10 15:51:30 ahost sshd[25709]: Failed password for r.r from 185.14.185.108 port 40682 ssh2
Oct 10 15:51:30 ahost sshd[25709]: Received disconnect from ........
------------------------------
2019-10-11 05:50:45
23.129.64.158 attackspambots
2019-10-10T20:10:10.140035abusebot.cloudsearch.cf sshd\[26349\]: Invalid user visitor from 23.129.64.158 port 42932
2019-10-10T20:10:10.144131abusebot.cloudsearch.cf sshd\[26349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.129.64.158
2019-10-11 05:23:25
113.121.77.23 attackbotsspam
Oct 10 16:03:43 esmtp postfix/smtpd[354]: lost connection after AUTH from unknown[113.121.77.23]
Oct 10 16:03:46 esmtp postfix/smtpd[334]: lost connection after AUTH from unknown[113.121.77.23]
Oct 10 16:03:49 esmtp postfix/smtpd[336]: lost connection after AUTH from unknown[113.121.77.23]
Oct 10 16:03:51 esmtp postfix/smtpd[336]: lost connection after AUTH from unknown[113.121.77.23]
Oct 10 16:03:53 esmtp postfix/smtpd[336]: lost connection after AUTH from unknown[113.121.77.23]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=113.121.77.23
2019-10-11 05:36:16
149.56.254.107 attackbotsspam
firewall-block, port(s): 445/tcp
2019-10-11 05:24:02
200.3.189.116 attackspam
[Thu Oct 10 22:03:17 2019] Failed password for r.r from 200.3.189.116 port 53635 ssh2
[Thu Oct 10 22:03:21 2019] Failed password for r.r from 200.3.189.116 port 53635 ssh2
[Thu Oct 10 22:03:23 2019] Failed password for r.r from 200.3.189.116 port 53635 ssh2
[Thu Oct 10 22:03:26 2019] Failed password for r.r from 200.3.189.116 port 53635 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=200.3.189.116
2019-10-11 05:48:33
50.79.140.161 attack
Oct  8 19:24:36 DNS-2 sshd[18791]: User r.r from 50.79.140.161 not allowed because not listed in AllowUsers
Oct  8 19:24:36 DNS-2 sshd[18791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.79.140.161  user=r.r
Oct  8 19:24:38 DNS-2 sshd[18791]: Failed password for invalid user r.r from 50.79.140.161 port 34506 ssh2
Oct  8 19:24:38 DNS-2 sshd[18791]: Received disconnect from 50.79.140.161 port 34506:11: Bye Bye [preauth]
Oct  8 19:24:38 DNS-2 sshd[18791]: Disconnected from 50.79.140.161 port 34506 [preauth]
Oct  8 19:31:51 DNS-2 sshd[19073]: User r.r from 50.79.140.161 not allowed because not listed in AllowUsers
Oct  8 19:31:51 DNS-2 sshd[19073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.79.140.161  user=r.r
Oct  8 19:31:54 DNS-2 sshd[19073]: Failed password for invalid user r.r from 50.79.140.161 port 36299 ssh2
Oct  8 19:31:54 DNS-2 sshd[19073]: Received disconnect from 50.79........
-------------------------------
2019-10-11 05:53:23
218.70.174.23 attackbots
Oct 11 00:21:54 tuotantolaitos sshd[12966]: Failed password for root from 218.70.174.23 port 50769 ssh2
...
2019-10-11 05:26:41
80.211.80.154 attackspambots
Oct  8 08:05:49 h2022099 sshd[1466]: reveeclipse mapping checking getaddrinfo for host154-80-211-80.serverdedicati.aruba.hostname [80.211.80.154] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct  8 08:05:49 h2022099 sshd[1466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.80.154  user=r.r
Oct  8 08:05:51 h2022099 sshd[1466]: Failed password for r.r from 80.211.80.154 port 33248 ssh2
Oct  8 08:05:51 h2022099 sshd[1466]: Received disconnect from 80.211.80.154: 11: Bye Bye [preauth]
Oct  8 08:22:09 h2022099 sshd[4003]: reveeclipse mapping checking getaddrinfo for host154-80-211-80.serverdedicati.aruba.hostname [80.211.80.154] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct  8 08:22:09 h2022099 sshd[4003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.80.154  user=r.r
Oct  8 08:22:11 h2022099 sshd[4003]: Failed password for r.r from 80.211.80.154 port 57696 ssh2
Oct  8 08:22:11 h2022099 sshd[4........
-------------------------------
2019-10-11 05:50:23
216.244.66.240 attackspam
[Thu Oct 10 22:01:15.501690 2019] [authz_core:error] [pid 12702] [client 216.244.66.240:56634] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/archive/libsord-devel-0.16.0-15.rncbc.suse.x86_64.rpm
[Thu Oct 10 22:14:10.811828 2019] [authz_core:error] [pid 14269] [client 216.244.66.240:58189] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/robots.txt
[Thu Oct 10 22:14:10.827576 2019] [authz_core:error] [pid 15556] [client 216.244.66.240:58201] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/robots.txt
...
2019-10-11 05:41:27
51.68.123.192 attackspambots
2019-10-10T21:43:12.334131abusebot-7.cloudsearch.cf sshd\[965\]: Invalid user Elephant2017 from 51.68.123.192 port 53960
2019-10-11 05:51:37
137.59.45.16 attackspambots
[munged]::443 137.59.45.16 - - [10/Oct/2019:22:09:33 +0200] "POST /[munged]: HTTP/1.1" 200 8165 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 137.59.45.16 - - [10/Oct/2019:22:09:34 +0200] "POST /[munged]: HTTP/1.1" 200 4388 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 137.59.45.16 - - [10/Oct/2019:22:09:35 +0200] "POST /[munged]: HTTP/1.1" 200 4388 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 137.59.45.16 - - [10/Oct/2019:22:09:36 +0200] "POST /[munged]: HTTP/1.1" 200 4388 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 137.59.45.16 - - [10/Oct/2019:22:09:36 +0200] "POST /[munged]: HTTP/1.1" 200 4388 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 137.59.45.16 - - [10/Oct/2019:22:09:37 +0200]
2019-10-11 05:36:40

最近上报的IP列表

40.227.111.157 192.55.206.208 89.53.108.179 178.66.178.253
226.12.160.160 18.35.174.84 191.159.121.62 204.159.145.183
40.6.35.170 165.71.4.173 231.33.63.93 95.148.85.199
61.216.162.224 190.217.122.225 62.171.160.217 14.209.54.149
67.240.51.176 49.158.79.252 19.88.230.9 31.181.138.199