81.161.239.18 - IPInfo

基本信息:

城市(city): Kansas City

省份(region): Missouri

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
81.161.239.7	attack	k+ssh-bruteforce	2020-04-27 20:27:37

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.161.239.18
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19886
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;81.161.239.18.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025111500 1800 900 604800 86400

;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 15 18:31:12 CST 2025
;; MSG SIZE  rcvd: 106

HOST信息:

Host 18.239.161.81.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 18.239.161.81.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
159.89.13.139	attackbots	Sep 10 01:49:59 wbs sshd\[19627\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.13.139 user=www-data Sep 10 01:50:01 wbs sshd\[19627\]: Failed password for www-data from 159.89.13.139 port 51464 ssh2 Sep 10 01:55:58 wbs sshd\[20193\]: Invalid user steam from 159.89.13.139 Sep 10 01:55:58 wbs sshd\[20193\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.13.139 Sep 10 01:56:00 wbs sshd\[20193\]: Failed password for invalid user steam from 159.89.13.139 port 33122 ssh2	2019-09-10 22:36:42
203.110.160.55	attackbots	Unauthorized connection attempt from IP address 203.110.160.55 on Port 445(SMB)	2019-09-10 23:19:34
185.176.27.18	attackbotsspam	Sep 10 15:49:07 mc1 kernel: \[673916.519840\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.18 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=10301 PROTO=TCP SPT=44894 DPT=6713 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 10 15:51:30 mc1 kernel: \[674059.579785\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.18 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=62438 PROTO=TCP SPT=44894 DPT=13813 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 10 15:56:45 mc1 kernel: \[674374.549206\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.18 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=36866 PROTO=TCP SPT=44894 DPT=6013 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-09-10 22:30:42
160.238.74.14	attackbotsspam	Sep 10 13:28:22 lnxmail61 postfix/smtpd[3784]: lost connection after CONNECT from unknown[160.238.74.14] Sep 10 13:28:22 lnxmail61 postfix/smtps/smtpd[5418]: lost connection after CONNECT from unknown[160.238.74.14] Sep 10 13:28:40 lnxmail61 postfix/smtps/smtpd[5418]: warning: unknown[160.238.74.14]: SASL PLAIN authentication failed: Sep 10 13:28:46 lnxmail61 postfix/smtps/smtpd[5418]: warning: unknown[160.238.74.14]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 10 13:29:02 lnxmail61 postfix/smtps/smtpd[5411]: warning: unknown[160.238.74.14]: SASL PLAIN authentication failed:	2019-09-10 22:52:28
193.32.160.145	attackspambots	2019-09-10 16:26:40 H=$\[193.32.160.145\]$ \[193.32.160.145\] F=\ rejected RCPT \: Unrouteable address 2019-09-10 16:26:40 H=$\[193.32.160.145\]$ \[193.32.160.145\] F=\ rejected RCPT \: Unrouteable address 2019-09-10 16:26:40 H=$\[193.32.160.145\]$ \[193.32.160.145\] F=\ rejected RCPT \: Unrouteable address 2019-09-10 16:26:40 H=$\[193.32.160.145\]$ \[193.32.160.145\] F=\ rejected RCPT \: Unrouteable address 2019-09-10 16:26:40 H=$\[193.32.160.145\]$ \[193.32.160.145\] F=\ rejected RCPT \: Unrouteable address 2019-09-10 16:26:40 H=$\[193.32.160.145\]$ \[193.32.160.145\] F=\ rejected RCPT \: Unrouteable address 2019-09-10 16:26:40 H=$\[193.32.160.145\]$ \[193.32.160.145\] F=\ rejected RCPT \:	2019-09-10 22:51:15
95.0.185.19	attackbotsspam	Unauthorised access (Sep 10) SRC=95.0.185.19 LEN=52 TOS=0x10 PREC=0x40 TTL=108 ID=16292 DF TCP DPT=445 WINDOW=8192 SYN	2019-09-10 22:41:31
167.99.38.73	attack	Automatic report	2019-09-10 22:33:08
157.37.181.233	attack	Unauthorized connection attempt from IP address 157.37.181.233 on Port 445(SMB)	2019-09-10 23:11:46
112.85.42.237	attack	SSH Brute Force, server-1 sshd[18759]: Failed password for root from 112.85.42.237 port 16536 ssh2	2019-09-10 22:43:49
112.64.32.118	attackbotsspam	Sep 10 16:32:35 legacy sshd[2580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.32.118 Sep 10 16:32:38 legacy sshd[2580]: Failed password for invalid user tempo from 112.64.32.118 port 59538 ssh2 Sep 10 16:35:55 legacy sshd[2735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.32.118 ...	2019-09-10 22:40:51
92.58.156.5	attack	$f2bV_matches	2019-09-10 23:05:58
91.214.82.55	attack	Unauthorized connection attempt from IP address 91.214.82.55 on Port 445(SMB)	2019-09-10 22:37:51
115.192.92.44	attack	Sep 10 11:12:25 toyboy sshd[3714]: Invalid user user from 115.192.92.44 Sep 10 11:12:25 toyboy sshd[3714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.192.92.44 Sep 10 11:12:27 toyboy sshd[3714]: Failed password for invalid user user from 115.192.92.44 port 22448 ssh2 Sep 10 11:12:27 toyboy sshd[3714]: Received disconnect from 115.192.92.44: 11: Bye Bye [preauth] Sep 10 11:17:05 toyboy sshd[4219]: Invalid user user from 115.192.92.44 Sep 10 11:17:05 toyboy sshd[4219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.192.92.44 Sep 10 11:17:08 toyboy sshd[4219]: Failed password for invalid user user from 115.192.92.44 port 25147 ssh2 Sep 10 11:17:08 toyboy sshd[4219]: Received disconnect from 115.192.92.44: 11: Bye Bye [preauth] Sep 10 11:21:16 toyboy sshd[4706]: Invalid user admin from 115.192.92.44 Sep 10 11:21:16 toyboy sshd[4706]: pam_unix(sshd:auth): authentication failure; log........ -------------------------------	2019-09-10 23:26:11
206.189.202.165	attack	Sep 10 01:41:12 hiderm sshd\[11922\]: Invalid user tom from 206.189.202.165 Sep 10 01:41:12 hiderm sshd\[11922\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.202.165 Sep 10 01:41:14 hiderm sshd\[11922\]: Failed password for invalid user tom from 206.189.202.165 port 55312 ssh2 Sep 10 01:47:34 hiderm sshd\[12566\]: Invalid user csgo-server from 206.189.202.165 Sep 10 01:47:34 hiderm sshd\[12566\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.202.165	2019-09-10 23:25:06
104.248.32.164	attackspam	Sep 10 01:40:47 tdfoods sshd\[19712\]: Invalid user web from 104.248.32.164 Sep 10 01:40:47 tdfoods sshd\[19712\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.32.164 Sep 10 01:40:49 tdfoods sshd\[19712\]: Failed password for invalid user web from 104.248.32.164 port 43516 ssh2 Sep 10 01:46:45 tdfoods sshd\[20185\]: Invalid user user01 from 104.248.32.164 Sep 10 01:46:45 tdfoods sshd\[20185\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.32.164	2019-09-10 22:55:43

最近上报的IP列表

157.148.62.140	47.99.97.46	107.151.214.227	121.40.41.238
99.228.243.130	99.228.243.123	221.5.212.10	91.243.81.15
202.120.234.94	185.180.140.119	3.196.42.10	198.35.47.145
104.28.254.74	38.80.191.53	159.176.155.103	20.15.224.135
154.202.8.83	34.72.248.85	111.31.241.76	134.122.122.227