必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Krathum Baen

省份(region): Samut Sakhon

国家(country): Thailand

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
119.42.71.79 attackspam
Automatic report - Port Scan Attack
2020-01-02 01:16:58
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.42.71.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42886
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;119.42.71.92.			IN	A

;; AUTHORITY SECTION:
.			283	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031201 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 13 08:08:14 CST 2022
;; MSG SIZE  rcvd: 105
HOST信息:
Host 92.71.42.119.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 92.71.42.119.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
145.239.70.158 attackspambots
Oct 18 00:32:32 SilenceServices sshd[30827]: Failed password for root from 145.239.70.158 port 35362 ssh2
Oct 18 00:36:13 SilenceServices sshd[31781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.70.158
Oct 18 00:36:15 SilenceServices sshd[31781]: Failed password for invalid user amssys from 145.239.70.158 port 51072 ssh2
2019-10-18 06:41:08
149.202.144.181 attack
Lines containing failures of 149.202.144.181
Oct 17 21:26:40 shared05 sshd[16194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.144.181  user=r.r
Oct 17 21:26:42 shared05 sshd[16194]: Failed password for r.r from 149.202.144.181 port 57948 ssh2
Oct 17 21:26:42 shared05 sshd[16194]: Received disconnect from 149.202.144.181 port 57948:11: Bye Bye [preauth]
Oct 17 21:26:42 shared05 sshd[16194]: Disconnected from authenticating user r.r 149.202.144.181 port 57948 [preauth]
Oct 17 21:33:16 shared05 sshd[17871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.144.181  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=149.202.144.181
2019-10-18 06:50:35
23.129.64.153 attack
Oct 18 00:23:11 rotator sshd\[3555\]: Failed password for root from 23.129.64.153 port 45050 ssh2Oct 18 00:23:14 rotator sshd\[3555\]: Failed password for root from 23.129.64.153 port 45050 ssh2Oct 18 00:23:17 rotator sshd\[3555\]: Failed password for root from 23.129.64.153 port 45050 ssh2Oct 18 00:23:20 rotator sshd\[3555\]: Failed password for root from 23.129.64.153 port 45050 ssh2Oct 18 00:23:23 rotator sshd\[3555\]: Failed password for root from 23.129.64.153 port 45050 ssh2Oct 18 00:23:26 rotator sshd\[3555\]: Failed password for root from 23.129.64.153 port 45050 ssh2
...
2019-10-18 06:39:16
59.56.74.165 attackbots
Oct 18 00:30:45 hosting sshd[26666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.56.74.165  user=root
Oct 18 00:30:47 hosting sshd[26666]: Failed password for root from 59.56.74.165 port 59687 ssh2
...
2019-10-18 06:21:32
159.255.152.161 attackspambots
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/159.255.152.161/ 
 IT - 1H : (102)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : IT 
 NAME ASN : ASN47927 
 
 IP : 159.255.152.161 
 
 CIDR : 159.255.152.0/22 
 
 PREFIX COUNT : 5 
 
 UNIQUE IP COUNT : 8192 
 
 
 WYKRYTE ATAKI Z ASN47927 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 2 
 
 DateTime : 2019-10-17 21:50:22 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery
2019-10-18 06:45:14
47.74.190.56 attack
Oct 15 05:51:13 odroid64 sshd\[16956\]: User root from 47.74.190.56 not allowed because not listed in AllowUsers
Oct 15 05:51:13 odroid64 sshd\[16956\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.74.190.56  user=root
Oct 15 05:51:15 odroid64 sshd\[16956\]: Failed password for invalid user root from 47.74.190.56 port 45940 ssh2
Oct 15 06:20:16 odroid64 sshd\[4004\]: Invalid user qwert from 47.74.190.56
Oct 15 06:20:16 odroid64 sshd\[4004\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.74.190.56
Oct 15 06:20:17 odroid64 sshd\[4004\]: Failed password for invalid user qwert from 47.74.190.56 port 46184 ssh2
Oct 15 06:24:27 odroid64 sshd\[6248\]: Invalid user git from 47.74.190.56
Oct 15 06:24:27 odroid64 sshd\[6248\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.74.190.56
Oct 15 06:24:29 odroid64 sshd\[6248\]: Failed password for invalid user 
...
2019-10-18 06:36:38
64.88.145.152 attack
Lines containing failures of 64.88.145.152
Oct 17 21:40:48 server01 postfix/smtpd[4735]: connect from emv13.ilifinousy.com[64.88.145.152]
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct 17 21:40:49 server01 postfix/smtpd[4735]: disconnect from emv13.ilifinousy.com[64.88.145.152]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=64.88.145.152
2019-10-18 06:36:17
106.12.215.130 attack
Oct 17 20:04:08 hcbbdb sshd\[9449\]: Invalid user a from 106.12.215.130
Oct 17 20:04:08 hcbbdb sshd\[9449\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.215.130
Oct 17 20:04:10 hcbbdb sshd\[9449\]: Failed password for invalid user a from 106.12.215.130 port 38586 ssh2
Oct 17 20:08:39 hcbbdb sshd\[9933\]: Invalid user fuwuqiXP\* from 106.12.215.130
Oct 17 20:08:39 hcbbdb sshd\[9933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.215.130
2019-10-18 06:27:47
49.88.112.116 attackspambots
SSH-BruteForce
2019-10-18 06:40:47
49.88.112.114 attack
Oct 17 12:40:54 hpm sshd\[5004\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114  user=root
Oct 17 12:40:55 hpm sshd\[5004\]: Failed password for root from 49.88.112.114 port 37306 ssh2
Oct 17 12:40:57 hpm sshd\[5004\]: Failed password for root from 49.88.112.114 port 37306 ssh2
Oct 17 12:40:59 hpm sshd\[5004\]: Failed password for root from 49.88.112.114 port 37306 ssh2
Oct 17 12:41:48 hpm sshd\[5098\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114  user=root
2019-10-18 06:47:04
201.174.41.89 attackspambots
Feb  3 08:42:44 odroid64 sshd\[15748\]: Invalid user belmonte from 201.174.41.89
Feb  3 08:42:44 odroid64 sshd\[15748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.174.41.89
Feb  3 08:42:46 odroid64 sshd\[15748\]: Failed password for invalid user belmonte from 201.174.41.89 port 48260 ssh2
Feb  4 08:59:24 odroid64 sshd\[30775\]: Invalid user ghost from 201.174.41.89
Feb  4 08:59:24 odroid64 sshd\[30775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.174.41.89
Feb  4 08:59:25 odroid64 sshd\[30775\]: Failed password for invalid user ghost from 201.174.41.89 port 38654 ssh2
...
2019-10-18 06:42:18
40.114.72.209 attackspam
Oct 17 20:49:15 ihdb003 sshd[13554]: Connection from 40.114.72.209 port 47592 on 178.128.173.140 port 22
Oct 17 20:49:15 ihdb003 sshd[13554]: Did not receive identification string from 40.114.72.209 port 47592
Oct 17 20:49:53 ihdb003 sshd[13559]: Connection from 40.114.72.209 port 35906 on 178.128.173.140 port 22
Oct 17 20:49:54 ihdb003 sshd[13559]: Invalid user hyg from 40.114.72.209 port 35906
Oct 17 20:49:54 ihdb003 sshd[13559]: Received disconnect from 40.114.72.209 port 35906:11: Normal Shutdown, Thank you for playing [preauth]
Oct 17 20:49:54 ihdb003 sshd[13559]: Disconnected from 40.114.72.209 port 35906 [preauth]
Oct 17 20:50:13 ihdb003 sshd[13562]: Connection from 40.114.72.209 port 38886 on 178.128.173.140 port 22
Oct 17 20:50:13 ihdb003 sshd[13562]: Invalid user topicisdb2 from 40.114.72.209 port 38886
Oct 17 20:50:13 ihdb003 sshd[13562]: Received disconnect from 40.114.72.209 port 38886:11: Normal Shutdown, Thank you for playing [preauth]
Oct 17 20:50:13 ihd........
-------------------------------
2019-10-18 06:38:58
201.177.142.240 attackspam
Jan  4 08:28:32 odroid64 sshd\[6216\]: User root from 201.177.142.240 not allowed because not listed in AllowUsers
Jan  4 08:28:32 odroid64 sshd\[6216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.177.142.240  user=root
Jan  4 08:28:34 odroid64 sshd\[6216\]: Failed password for invalid user root from 201.177.142.240 port 37001 ssh2
...
2019-10-18 06:38:45
49.89.103.24 attackbots
Oct 17 21:38:34 smtp sshd[21751]: Failed password for r.r from 49.89.103.24 port 59158 ssh2
Oct 17 21:41:02 smtp sshd[22208]: Invalid user rq from 49.89.103.24
Oct 17 21:41:03 smtp sshd[22208]: Failed password for invalid user rq from 49.89.103.24 port 40570 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=49.89.103.24
2019-10-18 06:30:35
54.91.71.153 attack
Lines containing failures of 54.91.71.153
Oct 17 21:19:47 hwd04 sshd[2821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.91.71.153  user=r.r
Oct 17 21:19:49 hwd04 sshd[2821]: Failed password for r.r from 54.91.71.153 port 45935 ssh2
Oct 17 21:19:50 hwd04 sshd[2821]: Received disconnect from 54.91.71.153 port 45935:11: Bye Bye [preauth]
Oct 17 21:19:50 hwd04 sshd[2821]: Disconnected from authenticating user r.r 54.91.71.153 port 45935 [preauth]
Oct 17 21:37:07 hwd04 sshd[3582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.91.71.153  user=r.r
Oct 17 21:37:09 hwd04 sshd[3582]: Failed password for r.r from 54.91.71.153 port 52187 ssh2
Oct 17 21:37:09 hwd04 sshd[3582]: Received disconnect from 54.91.71.153 port 52187:11: Bye Bye [preauth]
Oct 17 21:37:09 hwd04 sshd[3582]: Disconnected from authenticating user r.r 54.91.71.153 port 52187 [preauth]
Oct 17 21:40:50 hwd04 sshd[3837]: Inval........
------------------------------
2019-10-18 06:32:34

最近上报的IP列表

119.42.123.8 119.41.200.92 119.42.109.32 119.42.70.185
119.42.110.162 119.42.67.38 119.42.70.220 119.42.115.28
217.67.40.11 119.41.203.177 119.42.115.232 119.42.70.208
119.42.115.24 119.42.70.173 191.141.105.116 119.41.163.133
119.42.115.26 119.41.163.171 119.41.161.42 119.42.70.141