必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Zhengzhou

省份(region): Henan

国家(country): China

运营商(isp): China Unicom

主机名(hostname): unknown

机构(organization): CHINA UNICOM China169 Backbone

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
125.42.4.7 attackspam
Found on   Alienvault    / proto=6  .  srcport=38058  .  dstport=23  .     (2292)
2020-09-22 03:18:35
125.42.4.7 attackspam
Found on   Alienvault    / proto=6  .  srcport=38058  .  dstport=23  .     (2292)
2020-09-21 19:03:27
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.42.4.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11461
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;125.42.4.102.			IN	A

;; AUTHORITY SECTION:
.			3455	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042000 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Apr 21 01:22:23 +08 2019
;; MSG SIZE  rcvd: 116

HOST信息:
102.4.42.125.in-addr.arpa domain name pointer hn.kd.ny.adsl.
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
102.4.42.125.in-addr.arpa	name = hn.kd.ny.adsl.

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
139.219.13.163 attackspam
May 16 02:46:48 scw-6657dc sshd[22726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.13.163
May 16 02:46:48 scw-6657dc sshd[22726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.13.163
May 16 02:46:50 scw-6657dc sshd[22726]: Failed password for invalid user contable from 139.219.13.163 port 35118 ssh2
...
2020-05-16 17:59:18
36.72.228.240 attack
Automatic report - SSH Brute-Force Attack
2020-05-16 18:29:41
217.125.110.139 attackspam
May 16 04:42:32 PorscheCustomer sshd[22134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.125.110.139
May 16 04:42:35 PorscheCustomer sshd[22134]: Failed password for invalid user temp from 217.125.110.139 port 49820 ssh2
May 16 04:48:05 PorscheCustomer sshd[22341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.125.110.139
...
2020-05-16 18:14:57
2604:a880:cad:d0::13a:b001 attackspam
xmlrpc attack
2020-05-16 18:21:41
73.200.119.131 attack
May 16 01:35:03 vps639187 sshd\[9965\]: Invalid user ts3sleep from 73.200.119.131 port 49234
May 16 01:35:03 vps639187 sshd\[9965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.200.119.131
May 16 01:35:05 vps639187 sshd\[9965\]: Failed password for invalid user ts3sleep from 73.200.119.131 port 49234 ssh2
...
2020-05-16 17:55:46
47.100.240.129 attack
47.100.240.129 - - [15/May/2020:16:17:06 +0200] "GET /wp-login.php HTTP/1.1" 200 6451 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
47.100.240.129 - - [15/May/2020:16:17:11 +0200] "POST /wp-login.php HTTP/1.1" 200 6702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
47.100.240.129 - - [15/May/2020:16:17:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-05-16 18:35:55
101.64.157.140 attackspambots
Spam sent to honeypot address
2020-05-16 18:12:25
94.191.111.115 attackspambots
May 16 04:08:58 srv-ubuntu-dev3 sshd[26281]: Invalid user office from 94.191.111.115
May 16 04:08:58 srv-ubuntu-dev3 sshd[26281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.111.115
May 16 04:08:58 srv-ubuntu-dev3 sshd[26281]: Invalid user office from 94.191.111.115
May 16 04:09:00 srv-ubuntu-dev3 sshd[26281]: Failed password for invalid user office from 94.191.111.115 port 38068 ssh2
May 16 04:11:42 srv-ubuntu-dev3 sshd[26743]: Invalid user cssserver from 94.191.111.115
May 16 04:11:42 srv-ubuntu-dev3 sshd[26743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.111.115
May 16 04:11:42 srv-ubuntu-dev3 sshd[26743]: Invalid user cssserver from 94.191.111.115
May 16 04:11:44 srv-ubuntu-dev3 sshd[26743]: Failed password for invalid user cssserver from 94.191.111.115 port 38622 ssh2
May 16 04:14:22 srv-ubuntu-dev3 sshd[27183]: Invalid user monitor from 94.191.111.115
...
2020-05-16 18:44:01
185.176.27.42 attack
May 16 04:27:06 debian-2gb-nbg1-2 kernel: \[11854873.295199\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.42 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=45703 PROTO=TCP SPT=53739 DPT=8966 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-16 18:23:37
103.80.36.34 attack
Invalid user roberto from 103.80.36.34 port 53958
2020-05-16 18:10:41
203.245.28.144 attackspambots
May 16 04:45:23 vpn01 sshd[32619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.245.28.144
May 16 04:45:25 vpn01 sshd[32619]: Failed password for invalid user timemachine from 203.245.28.144 port 35280 ssh2
...
2020-05-16 18:13:14
51.79.53.106 attack
Invalid user ut3server from 51.79.53.106 port 44446
2020-05-16 18:14:04
61.160.245.87 attackspam
May 16 05:29:08 lukav-desktop sshd\[16907\]: Invalid user deploy from 61.160.245.87
May 16 05:29:08 lukav-desktop sshd\[16907\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.160.245.87
May 16 05:29:10 lukav-desktop sshd\[16907\]: Failed password for invalid user deploy from 61.160.245.87 port 51392 ssh2
May 16 05:32:51 lukav-desktop sshd\[16994\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.160.245.87  user=root
May 16 05:32:53 lukav-desktop sshd\[16994\]: Failed password for root from 61.160.245.87 port 42318 ssh2
2020-05-16 18:30:56
167.71.38.64 attackspambots
May 16 03:35:18 root sshd[21245]: Invalid user luiz from 167.71.38.64
...
2020-05-16 18:33:11
182.48.101.178 attack
Invalid user cinema from 182.48.101.178 port 6506
2020-05-16 18:34:04

最近上报的IP列表

92.39.56.15 199.204.215.130 178.128.109.148 51.254.129.128
134.209.245.248 99.19.17.62 81.166.55.122 188.166.235.171
125.94.38.249 1.23.213.113 213.33.200.166 81.213.156.188
138.118.87.7 14.161.23.229 222.174.49.166 1.20.207.196
103.25.132.27 46.229.168.145 69.30.225.114 193.42.143.54