必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
66.249.68.30 attackspam
404 NOT FOUND
2020-09-27 02:02:20
66.249.68.30 attack
404 NOT FOUND
2020-09-26 17:56:37
66.249.68.52 attackspam
[Tue Aug 25 03:14:51.658211 2020] [:error] [pid 26844:tid 139693576779520] [client 66.249.68.52:62139] [client 66.249.68.52] ModSecurity: Access denied with code 403 (phase 2). Pattern match "((?:[~!@#\\\\$%\\\\^&\\\\*\\\\(\\\\)\\\\-\\\\+=\\\\{\\\\}\\\\[\\\\]\\\\|:;\"'\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98`<>][^~!@#\\\\$%\\\\^&\\\\*\\\\(\\\\)\\\\-\\\\+=\\\\{\\\\}\\\\[\\\\]\\\\|:;\"'\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98`<>]*?){6})" at ARGS:id. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "1526"] [id "942431"] [msg "Restricted SQL Character Anomaly Detection (args): # of special characters exceeded (6)"] [data "Matched Data: :analisis-dinamika-atmosfer-dan-laut- found within ARGS:id: 656:analisis-dinamika-atmosfer-dan-laut-dasarian-i-agustus-2017"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB
...
2020-08-25 06:22:38
66.249.68.50 attack
Unauthorized connection attempt detected, IP banned.
2020-07-05 01:30:33
66.249.68.26 attack
MYH,DEF GET /_adminer/adminer.php
2020-06-24 14:04:37
66.249.68.16 attackbots
$f2bV_matches
2020-06-04 05:57:43
66.249.68.18 attackspambots
$f2bV_matches
2020-05-31 16:33:19
66.249.68.28 attack
MYH,DEF GET /adminer123.php
2020-03-03 15:44:47
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.249.68.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51120
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;66.249.68.12.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012301 1800 900 604800 86400

;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 06:21:11 CST 2025
;; MSG SIZE  rcvd: 105
HOST信息:
12.68.249.66.in-addr.arpa domain name pointer crawl-66-249-68-12.googlebot.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
12.68.249.66.in-addr.arpa	name = crawl-66-249-68-12.googlebot.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
106.14.69.93 attackspambots
Apr 12 05:50:11 zulu412 sshd\[30686\]: Invalid user admin from 106.14.69.93 port 16136
Apr 12 05:50:11 zulu412 sshd\[30686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.14.69.93
Apr 12 05:50:13 zulu412 sshd\[30686\]: Failed password for invalid user admin from 106.14.69.93 port 16136 ssh2
...
2020-04-12 18:12:30
141.98.81.84 attack
2020-04-11 UTC: (7x) - Admin(3x),admin(4x)
2020-04-12 17:59:43
200.89.178.12 attackspambots
Apr 12 03:45:43 124388 sshd[19383]: Invalid user veloz from 200.89.178.12 port 53752
Apr 12 03:45:43 124388 sshd[19383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.178.12
Apr 12 03:45:43 124388 sshd[19383]: Invalid user veloz from 200.89.178.12 port 53752
Apr 12 03:45:45 124388 sshd[19383]: Failed password for invalid user veloz from 200.89.178.12 port 53752 ssh2
Apr 12 03:49:45 124388 sshd[19533]: Invalid user maria from 200.89.178.12 port 56438
2020-04-12 18:27:21
184.105.139.67 attack
Unauthorized connection attempt detected from IP address 184.105.139.67 to port 3389
2020-04-12 18:13:00
111.231.59.112 attackspam
Apr 12 11:59:01 h2829583 sshd[13686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.59.112
2020-04-12 18:09:06
45.143.220.52 attackbotsspam
[2020-04-12 06:06:48] NOTICE[12114] chan_sip.c: Registration from '' failed for '45.143.220.52:40988' - Wrong password
[2020-04-12 06:06:48] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-12T06:06:48.472-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9706",SessionID="0x7f020c088288",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.52/40988",Challenge="14d1fa81",ReceivedChallenge="14d1fa81",ReceivedHash="67fea1ad7d28fa25a9a982024bc471ff"
[2020-04-12 06:06:56] NOTICE[12114] chan_sip.c: Registration from '' failed for '45.143.220.52:51776' - Wrong password
[2020-04-12 06:06:56] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-12T06:06:56.879-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="101101",SessionID="0x7f020c167898",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.14
...
2020-04-12 18:09:32
197.54.242.127 attack
/wp-admin/admin-ajax.php?nd_options_value_import_settings=users_can_register%5Bnd_opt…
2020-04-12 18:24:51
203.19.33.149 attack
firewall-block, port(s): 445/tcp
2020-04-12 18:11:12
103.91.84.126 attack
Automatic report - XMLRPC Attack
2020-04-12 18:04:41
185.132.53.152 attack
"SERVER-WEBAPP MVPower DVR Shell arbitrary command execution attempt"
2020-04-12 18:16:39
207.99.102.202 attackspambots
firewall-block, port(s): 23/tcp
2020-04-12 18:10:14
51.255.173.70 attack
Apr 12 05:49:48 plex sshd[30346]: Invalid user admin from 51.255.173.70 port 44574
2020-04-12 18:26:35
173.252.87.45 attackbots
[Sun Apr 12 10:50:14.537271 2020] [:error] [pid 3610:tid 140294988015360] [client 173.252.87.45:34642] [client 173.252.87.45] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/TableFilter/system-v98.css"] [unique_id "XpKP9seJ7QLCrtS-d9zLuQAAAAE"]
...
2020-04-12 18:08:22
173.252.87.50 attack
[Sun Apr 12 10:50:15.752591 2020] [:error] [pid 3625:tid 140295004800768] [client 173.252.87.50:50506] [client 173.252.87.50] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/disquss-v1.js"] [unique_id "XpKP96LL@8cf6BWsPUlIaAAAAAE"]
...
2020-04-12 18:04:21
43.226.35.67 attack
SSH Brute-Force reported by Fail2Ban
2020-04-12 18:43:11

最近上报的IP列表

82.153.108.46 116.124.96.249 12.1.47.64 95.53.206.19
175.255.170.104 4.121.158.18 86.127.115.132 92.106.63.129
141.50.2.185 39.114.129.221 67.38.232.174 192.178.173.32
204.206.29.192 209.28.125.115 250.27.92.176 154.87.129.152
249.64.178.213 138.247.59.194 17.147.220.93 200.68.146.167