必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Censys Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
 TCP (SYN) 162.142.125.21:21423 -> port 81, len 44
2020-09-18 01:59:25
attackspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-09-17 18:01:39
attack
Sep 16 14:19:24 : SSH login attempts with invalid user
2020-09-17 09:14:18
attackbotsspam
firewall-block, port(s): 3389/tcp
2020-09-13 02:29:44
attack
 TCP (SYN) 162.142.125.21:55472 -> port 623, len 44
2020-09-12 18:32:41
attackbots
 TCP (SYN) 162.142.125.21:59806 -> port 2323, len 44
2020-09-08 21:37:06
attackbots
Port scanning [5 denied]
2020-09-08 13:28:43
attack
 TCP (SYN) 162.142.125.21:14984 -> port 80, len 44
2020-09-08 06:02:50
attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-08-24 23:19:08
attack
Unwanted checking 80 or 443 port
...
2020-08-23 13:29:05
相同子网IP讨论:
IP 类型 评论内容 时间
162.142.125.86 botsattack
Bad IP
2025-03-06 19:09:23
162.142.125.197 attackproxy
Fraud connect
2024-09-05 12:48:39
162.142.125.12 proxy
Scan
2023-06-05 16:37:12
162.142.125.11 proxy
VPN fraud
2023-06-05 12:59:49
162.142.125.223 proxy
VPN fraud
2023-05-31 21:46:50
162.142.125.225 proxy
VPN fraud
2023-05-29 12:47:59
162.142.125.84 proxy
VPN scan
2023-05-22 12:51:31
162.142.125.224 proxy
VPN fraud
2023-05-18 12:47:47
162.142.125.89 proxy
VPN f
2023-05-13 12:57:08
162.142.125.217 proxy
VPN fraud
2023-05-13 12:54:50
162.142.125.14 proxy
VPN fraud
2023-05-12 14:21:18
162.142.125.214 proxy
VPN fraud
2023-03-31 12:54:37
162.142.125.87 proxy
VPN fraud
2023-03-29 12:58:45
162.142.125.13 proxy
VPN fraud
2023-03-29 12:56:42
162.142.125.10 attack
DANGER DUDE ATTACK
2022-02-18 10:02:36
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.142.125.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57040
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.142.125.21.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082300 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 23 13:28:59 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
21.125.142.162.in-addr.arpa domain name pointer scanner-01.ch1.censys-scanner.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.125.142.162.in-addr.arpa	name = scanner-01.ch1.censys-scanner.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
180.113.86.177 attackspam
Mar 26 01:22:53 legacy sshd[21892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.113.86.177
Mar 26 01:22:56 legacy sshd[21892]: Failed password for invalid user zd from 180.113.86.177 port 37086 ssh2
Mar 26 01:26:55 legacy sshd[22004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.113.86.177
...
2020-03-26 08:30:52
49.235.85.117 attackspam
Lines containing failures of 49.235.85.117
Mar 25 22:26:12 shared02 sshd[28931]: Invalid user wg from 49.235.85.117 port 52578
Mar 25 22:26:12 shared02 sshd[28931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.85.117
Mar 25 22:26:14 shared02 sshd[28931]: Failed password for invalid user wg from 49.235.85.117 port 52578 ssh2
Mar 25 22:26:14 shared02 sshd[28931]: Received disconnect from 49.235.85.117 port 52578:11: Bye Bye [preauth]
Mar 25 22:26:14 shared02 sshd[28931]: Disconnected from invalid user wg 49.235.85.117 port 52578 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=49.235.85.117
2020-03-26 08:29:59
64.225.99.7 attack
2020-03-26T01:00:53.854333librenms sshd[12310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.99.7
2020-03-26T01:00:53.848079librenms sshd[12310]: Invalid user xr from 64.225.99.7 port 48002
2020-03-26T01:00:56.065619librenms sshd[12310]: Failed password for invalid user xr from 64.225.99.7 port 48002 ssh2
...
2020-03-26 08:43:33
84.204.168.242 attack
Mar 26 00:08:08 silence02 sshd[17125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.204.168.242
Mar 26 00:08:10 silence02 sshd[17125]: Failed password for invalid user vidya from 84.204.168.242 port 42033 ssh2
Mar 26 00:14:37 silence02 sshd[17532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.204.168.242
2020-03-26 08:43:02
175.214.73.191 attackbotsspam
Automatic report - Port Scan Attack
2020-03-26 08:46:37
142.93.42.177 attack
2020-03-26T01:28:35.732140vps751288.ovh.net sshd\[17612\]: Invalid user kevin from 142.93.42.177 port 56422
2020-03-26T01:28:35.747306vps751288.ovh.net sshd\[17612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.42.177
2020-03-26T01:28:37.788630vps751288.ovh.net sshd\[17612\]: Failed password for invalid user kevin from 142.93.42.177 port 56422 ssh2
2020-03-26T01:37:19.838841vps751288.ovh.net sshd\[17673\]: Invalid user telnetd from 142.93.42.177 port 50708
2020-03-26T01:37:19.849580vps751288.ovh.net sshd\[17673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.42.177
2020-03-26 09:02:41
210.14.69.76 attack
Invalid user Michelle from 210.14.69.76 port 59735
2020-03-26 08:59:15
106.13.63.253 attackspambots
Mar 25 10:23:44 Tower sshd[30065]: refused connect from 190.145.254.138 (190.145.254.138)
Mar 25 17:41:22 Tower sshd[30065]: Connection from 106.13.63.253 port 48162 on 192.168.10.220 port 22 rdomain ""
Mar 25 17:41:24 Tower sshd[30065]: Invalid user futures from 106.13.63.253 port 48162
Mar 25 17:41:24 Tower sshd[30065]: error: Could not get shadow information for NOUSER
Mar 25 17:41:24 Tower sshd[30065]: Failed password for invalid user futures from 106.13.63.253 port 48162 ssh2
Mar 25 17:41:24 Tower sshd[30065]: Received disconnect from 106.13.63.253 port 48162:11: Bye Bye [preauth]
Mar 25 17:41:24 Tower sshd[30065]: Disconnected from invalid user futures 106.13.63.253 port 48162 [preauth]
2020-03-26 08:25:28
80.82.77.189 attackbotsspam
Mar 26 01:36:12 debian-2gb-nbg1-2 kernel: \[7442049.796051\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.77.189 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=16749 PROTO=TCP SPT=44478 DPT=35890 WINDOW=1024 RES=0x00 SYN URGP=0
2020-03-26 08:53:38
180.100.213.63 attackspam
Mar 25 15:34:12 mockhub sshd[7930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.100.213.63
Mar 25 15:34:14 mockhub sshd[7930]: Failed password for invalid user pms from 180.100.213.63 port 42561 ssh2
...
2020-03-26 08:57:52
213.160.143.146 attackbotsspam
SSH Invalid Login
2020-03-26 09:00:21
34.85.33.241 attackbotsspam
2020-03-25T14:41:40.651457-07:00 suse-nuc sshd[7705]: Invalid user zkb from 34.85.33.241 port 58062
...
2020-03-26 08:29:22
168.232.189.138 attackspambots
Mar 25 22:32:17 mxgate1 postfix/postscreen[1616]: CONNECT from [168.232.189.138]:54730 to [176.31.12.44]:25
Mar 25 22:32:17 mxgate1 postfix/dnsblog[1617]: addr 168.232.189.138 listed by domain zen.spamhaus.org as 127.0.0.3
Mar 25 22:32:17 mxgate1 postfix/dnsblog[1617]: addr 168.232.189.138 listed by domain zen.spamhaus.org as 127.0.0.11
Mar 25 22:32:17 mxgate1 postfix/dnsblog[1617]: addr 168.232.189.138 listed by domain zen.spamhaus.org as 127.0.0.4
Mar 25 22:32:17 mxgate1 postfix/dnsblog[1618]: addr 168.232.189.138 listed by domain cbl.abuseat.org as 127.0.0.2
Mar 25 22:32:17 mxgate1 postfix/dnsblog[1621]: addr 168.232.189.138 listed by domain b.barracudacentral.org as 127.0.0.2
Mar 25 22:32:18 mxgate1 postfix/postscreen[1616]: PREGREET 18 after 0.65 from [168.232.189.138]:54730: HELO hotmail.com

Mar 25 22:32:18 mxgate1 postfix/postscreen[1616]: DNSBL rank 4 for [168.232.189.138]:54730
Mar x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=168.232.189.138
2020-03-26 08:55:11
101.231.124.6 attack
SSH Invalid Login
2020-03-26 08:53:18
118.24.248.17 attack
Mar 26 00:10:14 mars sshd[42968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.248.17
Mar 26 00:10:16 mars sshd[42968]: Failed password for invalid user l1nux from 118.24.248.17 port 45652 ssh2
...
2020-03-26 09:04:05

最近上报的IP列表

151.233.52.89 107.158.202.162 79.92.30.131 3.227.217.65
109.108.53.30 137.74.192.62 190.245.95.122 181.215.88.146
207.244.118.125 96.35.110.212 5.206.227.225 198.74.51.217
191.13.5.246 178.128.167.139 242.196.163.109 185.127.9.95
1.244.46.33 74.41.65.238 122.215.157.227 51.89.25.74