必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Detroit

省份(region): Michigan

国家(country): United States

运营商(isp): AT&T

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 99.166.40.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15510
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;99.166.40.161.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021902 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 13:09:14 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
Host 161.40.166.99.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 161.40.166.99.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
103.91.54.100 attackbots
Oct  4 05:34:19 reporting6 sshd[21842]: User r.r from 103.91.54.100 not allowed because not listed in AllowUsers
Oct  4 05:34:19 reporting6 sshd[21842]: Failed password for invalid user r.r from 103.91.54.100 port 48184 ssh2
Oct  4 05:42:55 reporting6 sshd[22537]: User r.r from 103.91.54.100 not allowed because not listed in AllowUsers
Oct  4 05:42:55 reporting6 sshd[22537]: Failed password for invalid user r.r from 103.91.54.100 port 49977 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.91.54.100
2019-10-04 16:40:30
41.204.191.53 attackbotsspam
Oct  4 08:15:35 game-panel sshd[8843]: Failed password for root from 41.204.191.53 port 39800 ssh2
Oct  4 08:20:04 game-panel sshd[8989]: Failed password for root from 41.204.191.53 port 50560 ssh2
2019-10-04 16:32:47
200.30.165.202 attack
Sep 30 23:49:04 our-server-hostname postfix/smtpd[15057]: connect from unknown[200.30.165.202]
Sep x@x
Sep x@x
Sep 30 23:49:10 our-server-hostname postfix/smtpd[15057]: lost connection after RCPT from unknown[200.30.165.202]
Sep 30 23:49:10 our-server-hostname postfix/smtpd[15057]: disconnect from unknown[200.30.165.202]
Oct  1 00:32:36 our-server-hostname postfix/smtpd[4855]: connect from unknown[200.30.165.202]
Oct x@x
Oct x@x
Oct x@x
Oct  1 00:32:49 our-server-hostname postfix/smtpd[4855]: lost connection after RCPT from unknown[200.30.165.202]
Oct  1 00:32:49 our-server-hostname postfix/smtpd[4855]: disconnect from unknown[200.30.165.202]
Oct  1 00:40:19 our-server-hostname postfix/smtpd[3026]: connect from unknown[200.30.165.202]
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct  1 00:40:37 our-server-hostname postfix/smtpd[3026]: lost connection after RCPT from unknown[200.30.165.202]
Oct  1 00:40:37 our-server-hostname postfix/smtpd[3026........
-------------------------------
2019-10-04 16:13:03
104.236.124.45 attack
Oct  4 06:06:09 reporting7 sshd[12657]: User r.r from 104.236.124.45 not allowed because not listed in AllowUsers
Oct  4 06:06:09 reporting7 sshd[12657]: Failed password for invalid user r.r from 104.236.124.45 port 50765 ssh2
Oct  4 06:20:18 reporting7 sshd[13845]: User r.r from 104.236.124.45 not allowed because not listed in AllowUsers
Oct  4 06:20:18 reporting7 sshd[13845]: Failed password for invalid user r.r from 104.236.124.45 port 40457 ssh2
Oct  4 06:28:13 reporting7 sshd[14556]: User r.r from 104.236.124.45 not allowed because not listed in AllowUsers
Oct  4 06:28:13 reporting7 sshd[14556]: Failed password for invalid user r.r from 104.236.124.45 port 47834 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.236.124.45
2019-10-04 16:15:44
18.140.165.118 attack
Oct  4 06:57:43 h2177944 sshd\[15865\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.140.165.118  user=root
Oct  4 06:57:45 h2177944 sshd\[15865\]: Failed password for root from 18.140.165.118 port 48117 ssh2
Oct  4 07:03:49 h2177944 sshd\[16784\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.140.165.118  user=root
Oct  4 07:03:50 h2177944 sshd\[16784\]: Failed password for root from 18.140.165.118 port 54233 ssh2
...
2019-10-04 16:43:13
85.194.90.118 attack
Unauthorised access (Oct  4) SRC=85.194.90.118 LEN=40 TTL=240 ID=20540 TCP DPT=445 WINDOW=1024 SYN
2019-10-04 16:45:03
190.14.37.194 attack
Oct  3 15:37:44 localhost kernel: [3869283.641146] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=190.14.37.194 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=60 ID=45742 DF PROTO=TCP SPT=55533 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 
Oct  3 15:37:44 localhost kernel: [3869283.641177] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=190.14.37.194 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=60 ID=45742 DF PROTO=TCP SPT=55533 DPT=22 SEQ=3313914017 ACK=0 WINDOW=29200 RES=0x00 SYN URGP=0 
Oct  3 23:53:52 localhost kernel: [3899051.918316] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=190.14.37.194 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=74 ID=17923 DF PROTO=TCP SPT=51088 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 
Oct  3 23:53:52 localhost kernel: [3899051.918322] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=190.14.37.194 DST=[mungedIP2] LEN=40 TOS=0x08 P
2019-10-04 16:19:46
161.117.181.251 attackbots
Oct  4 10:38:55 meumeu sshd[13270]: Failed password for root from 161.117.181.251 port 56596 ssh2
Oct  4 10:42:56 meumeu sshd[13830]: Failed password for root from 161.117.181.251 port 36778 ssh2
...
2019-10-04 16:50:55
80.11.200.161 attackspambots
Sep 30 10:28:24 our-server-hostname postfix/smtpd[10063]: connect from unknown[80.11.200.161]
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep 30 10:28:41 our-server-hostname postfix/smtpd[10063]: lost connection after RCPT from unknown[80.11.200.161]
Sep 30 10:28:41 our-server-hostname postfix/smtpd[10063]: disconnect from unknown[80.11.200.161]
Sep 30 10:28:55 our-server-hostname postfix/smtpd[20850]: connect from unknown[80.11.200.161]
Sep x@x
Sep x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=80.11.200.161
2019-10-04 16:53:17
37.204.118.194 attackspam
Oct  1 09:56:09 toyboy sshd[20953]: reveeclipse mapping checking getaddrinfo for broadband-37.204-118-194.ip.moscow.rt.ru [37.204.118.194] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct  1 09:56:09 toyboy sshd[20953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.204.118.194  user=r.r
Oct  1 09:56:12 toyboy sshd[20953]: Failed password for r.r from 37.204.118.194 port 50909 ssh2
Oct  1 09:56:14 toyboy sshd[20953]: Failed password for r.r from 37.204.118.194 port 50909 ssh2
Oct  1 09:56:16 toyboy sshd[20953]: Failed password for r.r from 37.204.118.194 port 50909 ssh2
Oct  1 09:56:18 toyboy sshd[20953]: Failed password for r.r from 37.204.118.194 port 50909 ssh2
Oct  1 09:56:21 toyboy sshd[20953]: Failed password for r.r from 37.204.118.194 port 50909 ssh2
Oct  1 09:56:23 toyboy sshd[20953]: Failed password for r.r from 37.204.118.194 port 50909 ssh2
Oct  1 09:56:23 toyboy sshd[20953]: Disconnecting: Too many authentication failures ........
-------------------------------
2019-10-04 16:17:53
42.157.130.18 attackbots
Oct  3 19:58:30 tdfoods sshd\[16708\]: Invalid user P4SSW0RD2020 from 42.157.130.18
Oct  3 19:58:30 tdfoods sshd\[16708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.130.18
Oct  3 19:58:32 tdfoods sshd\[16708\]: Failed password for invalid user P4SSW0RD2020 from 42.157.130.18 port 55364 ssh2
Oct  3 20:04:40 tdfoods sshd\[17204\]: Invalid user P4sswort1@1 from 42.157.130.18
Oct  3 20:04:40 tdfoods sshd\[17204\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.157.130.18
2019-10-04 16:45:41
177.185.221.17 attackbots
Lines containing failures of 177.185.221.17
Sep 30 03:20:13 shared03 postfix/smtpd[6386]: connect from host-177-185-221-17.globonet.net.br[177.185.221.17]
Sep 30 03:20:49 shared03 policyd-spf[9456]: prepend Received-SPF: None (mailfrom) identhostnamey=mailfrom; client-ip=177.185.221.17; helo=host-177-185-221-17.globonet.net.br; envelope-from=x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep 30 03:20:54 shared03 postfix/smtpd[6386]: lost connection after RCPT from host-177-185-221-17.globonet.net.br[177.185.221.17]
Sep 30 03:20:54 shared03 postfix/smtpd[6386]: disconnect from host-177-185-221-17.globonet.net.br[177.185.221.17] ehlo=1 mail=1 rcpt=0/5 commands=2/7


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=177.185.221.17
2019-10-04 16:22:40
104.139.5.180 attackbotsspam
Oct  4 10:11:12 MK-Soft-Root2 sshd[7828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.139.5.180 
Oct  4 10:11:14 MK-Soft-Root2 sshd[7828]: Failed password for invalid user 1QaZ2WsX3EdC4RfV from 104.139.5.180 port 37978 ssh2
...
2019-10-04 16:27:09
194.61.24.94 attack
Oct  4 05:52:49 h2177944 kernel: \[3037325.730176\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.61.24.94 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=122 ID=18981 DF PROTO=TCP SPT=49477 DPT=80 WINDOW=254 RES=0x00 ACK FIN URGP=0 
Oct  4 05:52:49 h2177944 kernel: \[3037325.730212\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.61.24.94 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=121 ID=18982 DF PROTO=TCP SPT=49514 DPT=80 WINDOW=254 RES=0x00 ACK FIN URGP=0 
Oct  4 05:52:53 h2177944 kernel: \[3037330.529319\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.61.24.94 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=122 ID=18993 DF PROTO=TCP SPT=49477 DPT=80 WINDOW=254 RES=0x00 ACK FIN URGP=0 
Oct  4 05:52:53 h2177944 kernel: \[3037330.529369\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.61.24.94 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=121 ID=18992 DF PROTO=TCP SPT=49514 DPT=80 WINDOW=254 RES=0x00 ACK FIN URGP=0 
Oct  4 05:53:03 h2177944 kernel: \[3037340.128599\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.61.24.94 DST=8
2019-10-04 16:43:38
118.122.196.104 attack
Oct  4 01:28:27 Tower sshd[2063]: Connection from 118.122.196.104 port 2106 on 192.168.10.220 port 22
Oct  4 01:28:29 Tower sshd[2063]: Failed password for root from 118.122.196.104 port 2106 ssh2
Oct  4 01:28:29 Tower sshd[2063]: Received disconnect from 118.122.196.104 port 2106:11: Bye Bye [preauth]
Oct  4 01:28:29 Tower sshd[2063]: Disconnected from authenticating user root 118.122.196.104 port 2106 [preauth]
2019-10-04 16:25:25

最近上报的IP列表

40.6.140.153 150.252.45.222 122.221.79.97 118.56.103.77
82.78.234.110 170.237.227.221 48.82.233.208 6.163.230.76
168.21.32.71 5.167.195.200 167.63.2.234 82.23.135.26
86.191.220.144 224.59.244.219 171.85.239.53 83.105.76.243
52.29.127.179 52.19.82.107 9.232.106.115 235.149.112.177