必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Hainan Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
 TCP (SYN) 124.225.42.93:31198 -> port 80, len 44
2020-09-23 02:15:00
attackspam
 TCP (SYN) 124.225.42.93:31198 -> port 80, len 44
2020-09-22 18:17:42
相同子网IP讨论:
IP 类型 评论内容 时间
124.225.42.179 attackbotsspam
Web Server Scan. RayID: 55e0473e3d4ed362, UA: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E), Country: CN
2020-02-01 20:58:37
124.225.42.7 attack
Unauthorized connection attempt detected from IP address 124.225.42.7 to port 8908 [J]
2020-01-22 21:07:56
124.225.42.152 attackbotsspam
Unauthorized connection attempt detected from IP address 124.225.42.152 to port 8080
2019-12-31 06:24:00
124.225.42.39 attackbots
The IP has triggered Cloudflare WAF. CF-Ray: 543038dc19b1e4fa | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/4.038533357 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1) QQBrowser/6.0 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 03:27:05
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.225.42.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47589
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.225.42.93.			IN	A

;; AUTHORITY SECTION:
.			233	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092101 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 22 18:17:39 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 93.42.225.124.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 93.42.225.124.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
49.149.64.170 attack
1597204432 - 08/12/2020 05:53:52 Host: 49.149.64.170/49.149.64.170 Port: 445 TCP Blocked
2020-08-12 13:10:17
14.162.144.22 attackbots
1597204451 - 08/12/2020 05:54:11 Host: 14.162.144.22/14.162.144.22 Port: 445 TCP Blocked
...
2020-08-12 13:01:05
193.6.1.6 attack
193.6.1.6 - - [12/Aug/2020:05:04:33 +0100] "POST /wp-login.php HTTP/1.1" 200 1927 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
193.6.1.6 - - [12/Aug/2020:05:04:34 +0100] "POST /wp-login.php HTTP/1.1" 200 1858 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
193.6.1.6 - - [12/Aug/2020:05:04:34 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-12 12:56:09
123.207.237.146 attack
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-12T03:45:51Z and 2020-08-12T03:54:34Z
2020-08-12 12:41:12
178.120.127.28 attackspambots
Automatic report - XMLRPC Attack
2020-08-12 13:23:24
95.216.223.47 attackspam
95.216.223.47 - - \[12/Aug/2020:05:53:45 +0200\] "POST /wp-login.php HTTP/1.0" 200 6382 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
95.216.223.47 - - \[12/Aug/2020:05:54:18 +0200\] "POST /wp-login.php HTTP/1.0" 200 6518 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
95.216.223.47 - - \[12/Aug/2020:05:54:25 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 767 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-08-12 12:51:26
122.155.174.36 attackspambots
Aug 12 06:31:36 ip106 sshd[32541]: Failed password for root from 122.155.174.36 port 53176 ssh2
...
2020-08-12 12:47:01
219.142.149.210 attack
Aug 12 06:43:46 abendstille sshd\[4567\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.142.149.210  user=root
Aug 12 06:43:48 abendstille sshd\[4567\]: Failed password for root from 219.142.149.210 port 37080 ssh2
Aug 12 06:47:11 abendstille sshd\[7671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.142.149.210  user=root
Aug 12 06:47:13 abendstille sshd\[7671\]: Failed password for root from 219.142.149.210 port 41014 ssh2
Aug 12 06:50:58 abendstille sshd\[11281\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.142.149.210  user=root
...
2020-08-12 12:51:57
103.133.110.117 attackbotsspam
Aug 11 15:20:53 localhost sshd[30173]: Did not receive identification string from 103.133.110.117
Aug 11 18:23:50 localhost sshd[22028]: Did not receive identification string from 103.133.110.117
Aug 11 23:53:47 localhost sshd[1547]: Did not receive identification string from 103.133.110.117
2020-08-12 13:25:31
141.98.10.197 attackspambots
Invalid user admin from 141.98.10.197 port 42203
2020-08-12 13:00:39
185.217.1.246 attackbotsspam
Aug 12 06:15:22 srv2 sshd\[23279\]: Invalid user webmaster from 185.217.1.246 port 56440
Aug 12 06:16:11 srv2 sshd\[23355\]: Invalid user zabbix from 185.217.1.246 port 45831
Aug 12 06:16:48 srv2 sshd\[23430\]: Invalid user  from 185.217.1.246 port 33864
2020-08-12 13:16:59
1.71.140.71 attackspambots
$f2bV_matches
2020-08-12 13:08:02
119.236.238.93 attack
Aug 12 05:53:51 host-itldc-nl sshd[87132]: Invalid user guest from 119.236.238.93 port 44316
Aug 12 05:53:52 host-itldc-nl sshd[88123]: User root from 119.236.238.93 not allowed because not listed in AllowUsers
Aug 12 05:53:52 host-itldc-nl sshd[87438]: Invalid user pi from 119.236.238.93 port 44356
...
2020-08-12 13:22:15
49.235.74.226 attackbotsspam
Aug 12 07:55:32 lukav-desktop sshd\[2689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.74.226  user=root
Aug 12 07:55:34 lukav-desktop sshd\[2689\]: Failed password for root from 49.235.74.226 port 54544 ssh2
Aug 12 07:58:12 lukav-desktop sshd\[5664\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.74.226  user=root
Aug 12 07:58:14 lukav-desktop sshd\[5664\]: Failed password for root from 49.235.74.226 port 55452 ssh2
Aug 12 08:01:11 lukav-desktop sshd\[8597\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.74.226  user=root
2020-08-12 13:09:45
122.155.223.59 attackbotsspam
Aug 12 05:57:24 gospond sshd[24581]: Failed password for root from 122.155.223.59 port 53730 ssh2
Aug 12 05:57:22 gospond sshd[24581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.223.59  user=root
Aug 12 05:57:24 gospond sshd[24581]: Failed password for root from 122.155.223.59 port 53730 ssh2
...
2020-08-12 12:57:33

最近上报的IP列表

45.78.27.173 52.188.8.56 27.213.138.57 191.19.139.5
182.124.16.215 167.172.33.0 221.214.163.245 223.204.246.188
159.65.133.176 103.124.170.227 36.226.161.248 82.191.251.152
71.47.31.23 162.142.125.78 233.254.64.255 138.68.254.244
92.34.188.198 179.32.193.98 138.29.15.137 177.23.239.18