必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.157.166.39
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56102
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;48.157.166.39.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022001 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 06:34:40 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 39.166.157.48.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 39.166.157.48.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
114.67.76.166 attackspam
Jun 10 15:03:47 lukav-desktop sshd\[10809\]: Invalid user qma from 114.67.76.166
Jun 10 15:03:47 lukav-desktop sshd\[10809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.76.166
Jun 10 15:03:49 lukav-desktop sshd\[10809\]: Failed password for invalid user qma from 114.67.76.166 port 57842 ssh2
Jun 10 15:07:29 lukav-desktop sshd\[13767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.76.166  user=proxy
Jun 10 15:07:31 lukav-desktop sshd\[13767\]: Failed password for proxy from 114.67.76.166 port 54300 ssh2
2020-06-10 20:53:53
186.83.66.217 attackbotsspam
Jun 10 14:11:55 PorscheCustomer sshd[9417]: Failed password for root from 186.83.66.217 port 46198 ssh2
Jun 10 14:13:39 PorscheCustomer sshd[9456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.83.66.217
Jun 10 14:13:41 PorscheCustomer sshd[9456]: Failed password for invalid user teampspeak from 186.83.66.217 port 41880 ssh2
...
2020-06-10 20:37:38
115.78.1.102 attackbotsspam
Unauthorized connection attempt from IP address 115.78.1.102 on Port 445(SMB)
2020-06-10 21:03:10
223.80.100.87 attack
2020-06-10T12:46:09.787423shield sshd\[17670\]: Invalid user lockdown from 223.80.100.87 port 2594
2020-06-10T12:46:09.791174shield sshd\[17670\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.80.100.87
2020-06-10T12:46:11.824967shield sshd\[17670\]: Failed password for invalid user lockdown from 223.80.100.87 port 2594 ssh2
2020-06-10T12:51:29.142513shield sshd\[19320\]: Invalid user cloudstack from 223.80.100.87 port 2595
2020-06-10T12:51:29.146195shield sshd\[19320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.80.100.87
2020-06-10 20:52:15
46.166.143.102 attackbotsspam
[Wed Jun 10 19:06:01.056231 2020] [:error] [pid 19420:tid 140575985821440] [client 46.166.143.102:14837] [client 46.166.143.102] ModSecurity: Access denied with code 403 (phase 2). detected SQLi using libinjection with fingerprint 's&1UE' [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "67"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s&1UE found within ARGS:letter: 1\\x22 and 1=0 union select 1,concat(0x3c757365723e,username,0x3c757365723e3c706173733e,password,0x3c706173733e),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 from jos_users where gid=24 limit 0,1-- a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "staklim-malang.info"]
...
2020-06-10 20:41:45
222.186.30.35 attackbots
Jun 10 12:37:07 rush sshd[8261]: Failed password for root from 222.186.30.35 port 48399 ssh2
Jun 10 12:37:09 rush sshd[8261]: Failed password for root from 222.186.30.35 port 48399 ssh2
Jun 10 12:37:12 rush sshd[8261]: Failed password for root from 222.186.30.35 port 48399 ssh2
...
2020-06-10 20:40:02
82.64.60.90 attack
nft/Honeypot/22/73e86
2020-06-10 21:04:48
80.82.65.253 attackspam
Port-scan: detected 884 distinct ports within a 24-hour window.
2020-06-10 21:05:01
36.89.21.177 attackspam
Unauthorized connection attempt from IP address 36.89.21.177 on Port 445(SMB)
2020-06-10 21:10:09
125.72.26.69 attackbots
Unauthorized connection attempt from IP address 125.72.26.69 on Port 445(SMB)
2020-06-10 20:48:17
80.211.230.69 attackbots
Jun  8 07:41:38 ZTCN001 sshd[293667]: User r.r from 80.211.230.69 not allowed because not listed in AllowUsers
Jun  8 07:41:38 ZTCN001 sshd[293667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.230.69  user=r.r
Jun  8 07:41:38 ZTCN001 sshd[293667]: User r.r from 80.211.230.69 not allowed because not listed in AllowUsers
Jun  8 07:41:40 ZTCN001 sshd[293667]: Failed password for invalid user r.r from 80.211.230.69 port 39680 ssh2
Jun  8 07:49:18 ZTCN001 sshd[293772]: User r.r from 80.211.230.69 not allowed because not listed in AllowUsers


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=80.211.230.69
2020-06-10 20:33:56
139.59.12.65 attack
SSH bruteforce
2020-06-10 20:56:10
202.191.156.202 attackbots
Unauthorized connection attempt from IP address 202.191.156.202 on Port 445(SMB)
2020-06-10 20:35:40
164.160.141.95 attack
Automatic report - Port Scan Attack
2020-06-10 20:41:10
85.204.145.161 attackspambots
2020-06-10T12:57:52.918145amanda2.illicoweb.com sshd\[41156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.204.145.161  user=root
2020-06-10T12:57:55.359382amanda2.illicoweb.com sshd\[41156\]: Failed password for root from 85.204.145.161 port 36998 ssh2
2020-06-10T13:05:50.731713amanda2.illicoweb.com sshd\[41718\]: Invalid user admin from 85.204.145.161 port 50564
2020-06-10T13:05:50.737232amanda2.illicoweb.com sshd\[41718\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.204.145.161
2020-06-10T13:05:52.801763amanda2.illicoweb.com sshd\[41718\]: Failed password for invalid user admin from 85.204.145.161 port 50564 ssh2
...
2020-06-10 20:59:36

最近上报的IP列表

235.252.102.117 26.207.6.145 237.202.227.111 229.4.17.182
151.42.53.132 194.107.140.129 46.241.66.194 139.10.198.255
8.71.74.75 33.184.136.159 19.23.148.77 2.56.46.157
14.246.232.27 221.38.210.14 209.34.130.126 228.132.49.242
45.229.211.133 9.237.235.208 227.16.4.198 215.43.80.63