必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
120.42.132.232 attackspambots
Brute forcing email accounts
2020-10-01 07:05:30
120.42.132.232 attackspambots
Brute forcing email accounts
2020-09-30 23:31:26
120.42.132.232 attack
Brute forcing email accounts
2020-09-30 16:00:09
120.42.132.62 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-22 02:20:52
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.42.132.205
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57723
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;120.42.132.205.			IN	A

;; AUTHORITY SECTION:
.			326	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031102 1800 900 604800 86400

;; Query time: 46 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 12 12:36:51 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
205.132.42.120.in-addr.arpa domain name pointer 205.132.42.120.broad.qz.fj.dynamic.163data.com.cn.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
205.132.42.120.in-addr.arpa	name = 205.132.42.120.broad.qz.fj.dynamic.163data.com.cn.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
115.236.19.35 attackspambots
Aug  9 07:51:30 pixelmemory sshd[4142818]: Failed password for root from 115.236.19.35 port 3269 ssh2
Aug  9 07:53:56 pixelmemory sshd[164517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.236.19.35  user=root
Aug  9 07:53:58 pixelmemory sshd[164517]: Failed password for root from 115.236.19.35 port 3270 ssh2
Aug  9 07:56:29 pixelmemory sshd[350319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.236.19.35  user=root
Aug  9 07:56:31 pixelmemory sshd[350319]: Failed password for root from 115.236.19.35 port 3271 ssh2
...
2020-08-10 03:03:57
80.82.65.187 attack
Aug  9 20:31:09 WHD8 dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.65.187, lip=10.64.89.208, session=\
Aug  9 20:36:36 WHD8 dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.65.187, lip=10.64.89.208, session=\
Aug  9 20:42:00 WHD8 dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.65.187, lip=10.64.89.208, session=\
Aug  9 20:47:24 WHD8 dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.65.187, lip=10.64.89.208, session=\
Aug  9 20:52:47 WHD8 dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.65.187, lip=10.64.89.208,
...
2020-08-10 03:34:34
114.231.106.32 attackbots
Aug 10 06:03:09 pmg postfix/postscreen[1258]: PREGREET 14 after 0.43 from [114.231.106.32]:1821: EHLO VlomvRu

Aug 10 06:03:12 pmg postfix/postscreen[1258]: PREGREET 14 after 0.44 from [114.231.106.32]:4338: EHLO O4tL
...
2020-08-10 03:26:04
213.32.40.155 attack
Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-08-10 03:26:21
188.245.213.17 attackbotsspam
188.245.213.17 (IR/Iran/-), more than 60 Apache 403 hits in the last 3600 secs; Ports: 80,443; Direction: in; Trigger: LF_APACHE_403; Logs:
2020-08-10 03:06:57
144.217.70.190 attackbots
BURG,WP GET /wp-login.php
2020-08-10 03:28:18
5.248.227.129 attack
1596974751 - 08/09/2020 14:05:51 Host: 5.248.227.129/5.248.227.129 Port: 445 TCP Blocked
2020-08-10 03:23:31
181.114.211.123 attackspambots
Aug  9 13:50:02 mail.srvfarm.net postfix/smtps/smtpd[783087]: warning: unknown[181.114.211.123]: SASL PLAIN authentication failed: 
Aug  9 13:50:02 mail.srvfarm.net postfix/smtps/smtpd[783087]: lost connection after AUTH from unknown[181.114.211.123]
Aug  9 13:54:32 mail.srvfarm.net postfix/smtps/smtpd[778248]: warning: unknown[181.114.211.123]: SASL PLAIN authentication failed: 
Aug  9 13:54:33 mail.srvfarm.net postfix/smtps/smtpd[778248]: lost connection after AUTH from unknown[181.114.211.123]
Aug  9 13:57:02 mail.srvfarm.net postfix/smtpd[780650]: warning: unknown[181.114.211.123]: SASL PLAIN authentication failed:
2020-08-10 03:38:26
111.230.148.82 attackspambots
Aug  9 14:04:08 santamaria sshd\[24332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.148.82  user=root
Aug  9 14:04:09 santamaria sshd\[24332\]: Failed password for root from 111.230.148.82 port 41484 ssh2
Aug  9 14:06:22 santamaria sshd\[24339\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.148.82  user=root
...
2020-08-10 03:04:11
34.82.254.168 attackbots
Aug  9 18:44:17 localhost sshd[122619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.254.82.34.bc.googleusercontent.com  user=root
Aug  9 18:44:19 localhost sshd[122619]: Failed password for root from 34.82.254.168 port 40742 ssh2
Aug  9 18:49:58 localhost sshd[123215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.254.82.34.bc.googleusercontent.com  user=root
Aug  9 18:50:00 localhost sshd[123215]: Failed password for root from 34.82.254.168 port 52106 ssh2
Aug  9 18:54:02 localhost sshd[123654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.254.82.34.bc.googleusercontent.com  user=root
Aug  9 18:54:04 localhost sshd[123654]: Failed password for root from 34.82.254.168 port 35498 ssh2
...
2020-08-10 03:12:55
58.87.114.217 attackspambots
Aug  9 08:26:43 pixelmemory sshd[2192455]: Failed password for root from 58.87.114.217 port 57502 ssh2
Aug  9 08:29:46 pixelmemory sshd[2199725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.114.217  user=root
Aug  9 08:29:48 pixelmemory sshd[2199725]: Failed password for root from 58.87.114.217 port 57762 ssh2
Aug  9 08:32:46 pixelmemory sshd[2218777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.114.217  user=root
Aug  9 08:32:48 pixelmemory sshd[2218777]: Failed password for root from 58.87.114.217 port 58024 ssh2
...
2020-08-10 03:11:17
134.209.165.92 attackspambots
134.209.165.92 - - [09/Aug/2020:19:25:11 +0100] "POST /wp-login.php HTTP/1.1" 200 2046 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
134.209.165.92 - - [09/Aug/2020:19:25:12 +0100] "POST /wp-login.php HTTP/1.1" 200 2040 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
134.209.165.92 - - [09/Aug/2020:19:25:24 +0100] "POST /wp-login.php HTTP/1.1" 200 2037 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-10 03:10:19
128.199.227.155 attackbots
Aug  7 20:12:33 h2022099 sshd[22428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.227.155  user=r.r
Aug  7 20:12:35 h2022099 sshd[22428]: Failed password for r.r from 128.199.227.155 port 36686 ssh2
Aug  7 20:12:36 h2022099 sshd[22428]: Received disconnect from 128.199.227.155: 11: Bye Bye [preauth]
Aug  7 20:15:17 h2022099 sshd[22866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.227.155  user=r.r
Aug  7 20:15:19 h2022099 sshd[22866]: Failed password for r.r from 128.199.227.155 port 36200 ssh2
Aug  7 20:15:20 h2022099 sshd[22866]: Received disconnect from 128.199.227.155: 11: Bye Bye [preauth]
Aug  7 20:17:30 h2022099 sshd[22962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.227.155  user=r.r
Aug  7 20:17:32 h2022099 sshd[22962]: Failed password for r.r from 128.199.227.155 port 59208 ssh2
Aug  7 20:17:33 h2022099 ss........
-------------------------------
2020-08-10 03:18:51
113.110.225.186 attack
1596974745 - 08/09/2020 14:05:45 Host: 113.110.225.186/113.110.225.186 Port: 445 TCP Blocked
2020-08-10 03:39:53
206.189.22.230 attackspambots
Aug  6 16:44:22 myhostname sshd[6905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.22.230  user=r.r
Aug  6 16:44:25 myhostname sshd[6905]: Failed password for r.r from 206.189.22.230 port 37174 ssh2
Aug  6 16:44:25 myhostname sshd[6905]: Received disconnect from 206.189.22.230 port 37174:11: Bye Bye [preauth]
Aug  6 16:44:25 myhostname sshd[6905]: Disconnected from 206.189.22.230 port 37174 [preauth]
Aug  6 16:54:56 myhostname sshd[15835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.22.230  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=206.189.22.230
2020-08-10 03:12:09

最近上报的IP列表

120.42.132.200 120.42.132.207 120.42.132.208 120.42.132.21
120.42.132.212 120.42.132.224 120.42.132.227 120.42.132.230
120.42.132.241 120.42.132.249 120.42.132.29 120.42.132.30
120.42.132.32 120.42.132.35 120.42.132.36 120.42.132.48
120.42.132.54 120.42.132.59 120.42.132.66 230.128.18.160