必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Capital Online Data Service HK Co Ltd

主机名(hostname): unknown

机构(organization): Capitalonline Data Service Co.,LTD

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
点此参与IP信息讨论
类型 评论内容 时间
attack 
May 24 05:41:23 web01.agentur-b-2.de postfix/smtpd[512662]: NOQUEUE: reject: RCPT from unknown[164.52.42.6]: 554 5.7.1 Service unavailable; Client host [164.52.42.6] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/164.52.42.6; from= to= proto=ESMTP helo=
May 24 05:41:24 web01.agentur-b-2.de postfix/smtpd[512662]: NOQUEUE: reject: RCPT from unknown[164.52.42.6]: 554 5.7.1 Service unavailable; Client host [164.52.42.6] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/164.52.42.6; from= to= proto=ESMTP helo=
May 24 05:41:30 web01.agentur-b-2.de postfix/smtpd[512662]: NOQUEUE: reject: RCPT from unknown[164.52.42.6]: 554 5.7.1 Service unavailable; Client host [164.52.42.6] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/16
 2020-05-24 20:08:10
attackbotsspam 
Unauthorized connection attempt from IP address 164.52.42.6 on Port 445(SMB)
 2019-10-26 02:11:26
相同子网IP讨论:
IP 类型 评论内容 时间
164.52.42.134 attack 
firewall-block, port(s): 1521/tcp
 2019-11-21 21:50:49
164.52.42.134 attackbotsspam 
11/11/2019-23:43:34.705122 164.52.42.134 Protocol: 6 ET SCAN Suspicious inbound to Oracle SQL port 1521
 2019-11-12 07:22:49
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.52.42.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19469
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;164.52.42.6.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019060200 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jun 02 22:05:07 CST 2019
;; MSG SIZE  rcvd: 115
HOST信息:
6.42.52.164.in-addr.arpa has no PTR record
NSLOOKUP信息:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 6.42.52.164.in-addr.arpa: SERVFAIL
相关IP信息:
164.52.42.237
164.52.42.98
164.52.42.121
164.52.42.107
164.52.42.215
164.52.42.47
164.52.42.23
164.52.42.233
164.52.42.49
164.52.42.50
164.52.42.184
164.52.42.229
164.52.42.176
164.52.42.167
164.52.42.24
164.52.42.227
164.52.42.192
164.52.42.103
164.52.42.138
164.52.42.240
164.52.42.68
164.52.42.246
164.52.42.218
164.52.42.169
164.52.42.200
164.52.42.75
164.52.42.157
164.52.42.252
164.52.42.51
164.52.42.212
164.52.42.148
164.52.42.183
164.52.42.143
164.52.42.146
164.52.42.45
164.52.42.80
164.52.42.99
164.52.42.181
164.52.42.92
164.52.42.7
164.52.42.5
164.52.42.16
164.52.42.6
164.52.42.70
164.52.42.188
164.52.42.130
164.52.42.216
164.52.42.87
164.52.42.191
164.52.42.110
164.52.42.202
164.52.42.119
164.52.42.42
164.52.42.159
164.52.42.190
164.52.42.131
164.52.42.226
164.52.42.9
164.52.42.189
164.52.42.33
164.52.42.235
164.52.42.166
164.52.42.116
164.52.42.160
164.52.42.78
164.52.42.76
164.52.42.141
164.52.42.144
164.52.42.254
164.52.42.52
164.52.42.35
164.52.42.134
164.52.42.1
164.52.42.178
164.52.42.61
164.52.42.248
164.52.42.15
164.52.42.122
164.52.42.195
164.52.42.154
164.52.42.29
164.52.42.22
164.52.42.73
164.52.42.26
164.52.42.4
164.52.42.198
164.52.42.27
164.52.42.28
164.52.42.17
164.52.42.164
164.52.42.20
164.52.42.172
164.52.42.31
164.52.42.85
164.52.42.132
164.52.42.41
164.52.42.242
164.52.42.66
164.52.42.174
164.52.42.63
164.52.42.238
164.52.42.223
164.52.42.86
164.52.42.115
164.52.42.34
164.52.42.151
164.52.42.253
164.52.42.79
164.52.42.83
164.52.42.224
164.52.42.113
164.52.42.30
164.52.42.127
164.52.42.44
164.52.42.93
164.52.42.197
164.52.42.220
164.52.42.232
164.52.42.94
164.52.42.129
164.52.42.147
164.52.42.59
164.52.42.64
164.52.42.126
164.52.42.249
164.52.42.135
164.52.42.251
164.52.42.95
164.52.42.158
164.52.42.222
164.52.42.209
164.52.42.228
164.52.42.120
164.52.42.25
164.52.42.62
164.52.42.89
164.52.42.165
164.52.42.77
164.52.42.175
164.52.42.2
164.52.42.97
164.52.42.123
164.52.42.250
164.52.42.152
164.52.42.193
164.52.42.101
164.52.42.54
164.52.42.74
164.52.42.187
164.52.42.205
164.52.42.150
164.52.42.243
164.52.42.55
164.52.42.173
164.52.42.163
164.52.42.117
164.52.42.96
164.52.42.161
164.52.42.21
164.52.42.149
164.52.42.139
164.52.42.67
164.52.42.72
164.52.42.3
164.52.42.168
164.52.42.236
164.52.42.105
164.52.42.196
164.52.42.245
164.52.42.65
164.52.42.221
164.52.42.247
164.52.42.112
164.52.42.39
164.52.42.90
164.52.42.219
164.52.42.231
164.52.42.156
164.52.42.207
164.52.42.234
164.52.42.213
164.52.42.208
164.52.42.137
164.52.42.82
164.52.42.10
164.52.42.177
164.52.42.155
164.52.42.230
164.52.42.171
164.52.42.145
164.52.42.182
164.52.42.109
164.52.42.204
164.52.42.37
164.52.42.179
164.52.42.69
164.52.42.91
164.52.42.111
164.52.42.14
164.52.42.210
164.52.42.57
164.52.42.142
164.52.42.201
164.52.42.206
164.52.42.40
164.52.42.199
164.52.42.211
164.52.42.194
164.52.42.18
164.52.42.71
164.52.42.53
164.52.42.244
164.52.42.48
164.52.42.58
164.52.42.88
164.52.42.170
164.52.42.128
164.52.42.36
164.52.42.239
164.52.42.225
164.52.42.162
164.52.42.106
164.52.42.153
164.52.42.56
164.52.42.118
164.52.42.180
164.52.42.104
164.52.42.11
164.52.42.125
164.52.42.81
164.52.42.108
164.52.42.185
164.52.42.217
164.52.42.102
164.52.42.140
164.52.42.43
164.52.42.241
164.52.42.136
164.52.42.100
164.52.42.46
164.52.42.8
164.52.42.60
164.52.42.214
164.52.42.84
164.52.42.133
164.52.42.186
164.52.42.19
164.52.42.12
164.52.42.32
164.52.42.38
164.52.42.13
164.52.42.114
164.52.42.203
164.52.42.124
最新评论:
IP 类型 评论内容 时间
68.183.137.173 attack 
...
 2020-09-06 16:50:33
5.188.62.140 attackbots 
5.188.62.140 - - [06/Sep/2020:06:19:32 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36"
5.188.62.140 - - [06/Sep/2020:06:19:33 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36"
5.188.62.140 - - [06/Sep/2020:06:19:34 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36"
...
 2020-09-06 16:07:03
186.7.90.72 attackspam 
Attempted connection to port 445.
 2020-09-06 16:39:02
141.98.9.163 attackspam 
Sep  6 07:42:48 scw-6657dc sshd[6152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.163
Sep  6 07:42:48 scw-6657dc sshd[6152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.163
Sep  6 07:42:50 scw-6657dc sshd[6152]: Failed password for invalid user admin from 141.98.9.163 port 41145 ssh2
...
 2020-09-06 16:29:43
218.92.0.138 attack 
Sep  5 22:41:09 web9 sshd\[9203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138  user=root
Sep  5 22:41:10 web9 sshd\[9203\]: Failed password for root from 218.92.0.138 port 15336 ssh2
Sep  5 22:41:13 web9 sshd\[9203\]: Failed password for root from 218.92.0.138 port 15336 ssh2
Sep  5 22:41:16 web9 sshd\[9203\]: Failed password for root from 218.92.0.138 port 15336 ssh2
Sep  5 22:41:40 web9 sshd\[9263\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138  user=root
 2020-09-06 16:48:54
68.183.51.204 attackbots 
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
 2020-09-06 16:18:57
109.167.38.1 attackspambots 
Dovecot Invalid User Login Attempt.
 2020-09-06 16:15:15
38.122.188.83 attack 
Honeypot attack, port: 445, PTR: PTR record not found
 2020-09-06 16:51:15
116.90.237.125 attack 
failed attempts to access the website, searching for vulnerabilities, also using following IPs: 27.37.246.129 , 94.231.218.223 , 116.90.237.125 ,  190.235.214.78 ,  190.98.53.86 , 45.170.129.135 ,  170.239.242.222 , 43.249.113.243 ,  103.140.4.87 ,  171.103.190.158 , 72.210.252.135
 2020-09-06 16:30:19
190.203.65.170 attack 
445/tcp
[2020-09-05]1pkt
 2020-09-06 16:36:38
37.49.225.144 attackspambots 
Merda
 2020-09-06 16:19:11
104.206.119.3 attack 
Aug 31 15:25:09 our-server-hostname postfix/smtpd[7575]: connect from unknown[104.206.119.3]
Aug 31 15:25:09 our-server-hostname postfix/smtpd[5270]: connect from unknown[104.206.119.3]
Aug 31 15:25:09 our-server-hostname postfix/smtpd[7549]: connect from unknown[104.206.119.3]
Aug 31 15:25:09 our-server-hostname postfix/smtpd[5255]: connect from unknown[104.206.119.3]
Aug 31 15:25:10 our-server-hostname postfix/smtpd[5253]: connect from unknown[104.206.119.3]
Aug 31 15:25:10 our-server-hostname postfix/smtpd[5271]: connect from unknown[104.206.119.3]
Aug 31 15:25:10 our-server-hostname postfix/smtpd[7576]: connect from unknown[104.206.119.3]
Aug x@x
.... truncated .... 
nown[104.206.119.3]
Aug 31 15:28:24 our-server-hostname postfix/smtpd[10864]: 73D37A40113: client=unknown[127.0.0.1], orig_client=unknown[104.206.119.3]
Aug 31 15:28:24 our-server-hostname amavis[11028]: (11028-02) Passed BAD-HEADER, [104.206.119.3] [104.206.119.3] , mail_id: 8lgroUw7lVht, Hhostnam........
-------------------------------
 2020-09-06 16:06:08
186.167.64.162 attack 
Attempted connection to port 445.
 2020-09-06 16:38:31
185.220.101.215 attack 
Sep  6 09:21:24 ns3164893 sshd[15249]: Failed password for root from 185.220.101.215 port 9872 ssh2
Sep  6 09:21:26 ns3164893 sshd[15249]: Failed password for root from 185.220.101.215 port 9872 ssh2
...
 2020-09-06 16:23:43
182.74.0.54 attackbotsspam 
Honeypot attack, port: 445, PTR: PTR record not found
 2020-09-06 16:47:44

最近上报的IP列表

171.44.15.107 120.228.128.128 131.90.12.158 66.143.73.230
37.230.117.218 96.194.167.189 218.13.13.20 60.43.243.189
59.46.69.145 45.82.196.88 123.114.185.37 157.80.29.196
160.146.25.15 110.242.95.179 108.30.104.117 210.16.188.84
98.95.92.88 206.54.203.88 14.170.222.190 202.69.9.200