必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Medellín

省份(region): Antioquia

国家(country): Colombia

运营商(isp): Red Nacional Academica de Tecnologia Avanzada - Renata

主机名(hostname): unknown

机构(organization): Red Nacional Académica de Tecnología Avanzada - RENATA

使用类型(Usage Type): University/College/School

用户上报:
类型 评论内容 时间
attackspam
Unauthorized connection attempt from IP address 167.249.42.226 on Port 445(SMB)
2020-08-02 19:24:59
attackbotsspam
Unauthorized connection attempt from IP address 167.249.42.226 on Port 445(SMB)
2020-07-22 01:29:41
attackbotsspam
Unauthorized connection attempt from IP address 167.249.42.226 on Port 445(SMB)
2020-05-09 08:50:20
attackspam
20/2/25@03:40:09: FAIL: Alarm-Network address from=167.249.42.226
...
2020-02-25 22:36:57
attack
Unauthorized connection attempt from IP address 167.249.42.226 on Port 445(SMB)
2020-02-01 09:14:26
attackbots
Unauthorized connection attempt from IP address 167.249.42.226 on Port 445(SMB)
2019-11-11 09:01:38
attackbots
blogonese.net 167.249.42.226 \[30/Oct/2019:04:53:42 +0100\] "POST /wp-login.php HTTP/1.1" 200 5769 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
blogonese.net 167.249.42.226 \[30/Oct/2019:04:53:44 +0100\] "POST /wp-login.php HTTP/1.1" 200 5768 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-10-30 14:15:29
attackspambots
php WP PHPmyadamin ABUSE blocked for 12h
2019-07-21 14:49:28
相同子网IP讨论:
IP 类型 评论内容 时间
167.249.42.173 attackbots
445/tcp
[2019-09-23]1pkt
2019-09-24 09:21:35
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 167.249.42.226
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45847
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;167.249.42.226.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040902 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Wed Apr 10 03:28:43 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:
Host 226.42.249.167.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 226.42.249.167.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
201.139.88.22 attack
Nov  9 16:26:30 woltan sshd[15905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.139.88.22
Nov  9 16:26:33 woltan sshd[15905]: Failed password for invalid user sinusbot from 201.139.88.22 port 38060 ssh2
Nov  9 16:31:48 woltan sshd[16229]: Failed password for root from 201.139.88.22 port 47872 ssh2
2019-11-10 00:50:51
92.63.194.91 attackspam
Nov  9 17:20:40 h2177944 kernel: \[6192025.342345\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.63.194.91 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=10268 DF PROTO=TCP SPT=40023 DPT=1723 WINDOW=29200 RES=0x00 SYN URGP=0 
Nov  9 17:20:41 h2177944 kernel: \[6192026.364167\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.63.194.91 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=10269 DF PROTO=TCP SPT=40023 DPT=1723 WINDOW=29200 RES=0x00 SYN URGP=0 
Nov  9 17:20:43 h2177944 kernel: \[6192028.379778\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.63.194.91 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=10270 DF PROTO=TCP SPT=40023 DPT=1723 WINDOW=29200 RES=0x00 SYN URGP=0 
Nov  9 17:20:48 h2177944 kernel: \[6192032.571511\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.63.194.91 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=10271 DF PROTO=TCP SPT=40023 DPT=1723 WINDOW=29200 RES=0x00 SYN URGP=0 
Nov  9 17:20:56 h2177944 kernel: \[6192040.765846\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.63.194.91 DST=85.21
2019-11-10 00:34:34
80.82.78.104 attackbots
80.82.78.104 was recorded 28 times by 3 hosts attempting to connect to the following ports: 3401,3398,3403,3394,3390,3408,3393,3402,3409,3406,3396,3395,3392,3399,3407,3397,3400. Incident counter (4h, 24h, all-time): 28, 165, 821
2019-11-10 01:10:14
92.222.72.130 attackbots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/92.222.72.130/ 
 
 FR - 1H : (37)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : FR 
 NAME ASN : ASN16276 
 
 IP : 92.222.72.130 
 
 CIDR : 92.222.0.0/16 
 
 PREFIX COUNT : 132 
 
 UNIQUE IP COUNT : 3052544 
 
 
 ATTACKS DETECTED ASN16276 :  
  1H - 1 
  3H - 4 
  6H - 5 
 12H - 8 
 24H - 18 
 
 DateTime : 2019-11-09 17:20:52 
 
 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN  - data recovery
2019-11-10 00:37:37
223.247.213.245 attack
Nov  9 07:42:46 woltan sshd[7154]: Failed password for root from 223.247.213.245 port 55628 ssh2
2019-11-10 00:44:29
176.199.255.116 attack
SSH Brute Force, server-1 sshd[27040]: Failed password for sshd from 176.199.255.116 port 25544 ssh2
2019-11-10 01:12:48
151.80.140.166 attackbots
Nov  9 17:17:09 SilenceServices sshd[14960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.140.166
Nov  9 17:17:10 SilenceServices sshd[14960]: Failed password for invalid user ZAQ12wsx from 151.80.140.166 port 48748 ssh2
Nov  9 17:20:51 SilenceServices sshd[17364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.140.166
2019-11-10 00:41:30
138.68.212.113 attackspambots
Honeypot hit.
2019-11-10 01:07:35
222.186.173.183 attackspam
Nov  9 14:10:04 firewall sshd[14705]: Failed password for root from 222.186.173.183 port 62836 ssh2
Nov  9 14:10:08 firewall sshd[14705]: Failed password for root from 222.186.173.183 port 62836 ssh2
Nov  9 14:10:13 firewall sshd[14705]: Failed password for root from 222.186.173.183 port 62836 ssh2
...
2019-11-10 01:11:59
159.65.174.54 attackbots
/wp-admin/ attack
2019-11-10 01:09:35
165.22.186.178 attackspambots
Nov  9 19:12:13 server sshd\[20078\]: Invalid user administrator from 165.22.186.178
Nov  9 19:12:13 server sshd\[20078\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.186.178 
Nov  9 19:12:16 server sshd\[20078\]: Failed password for invalid user administrator from 165.22.186.178 port 56298 ssh2
Nov  9 19:20:30 server sshd\[22313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.186.178  user=root
Nov  9 19:20:32 server sshd\[22313\]: Failed password for root from 165.22.186.178 port 34330 ssh2
...
2019-11-10 01:03:34
180.150.189.206 attack
Nov  9 17:30:21 DAAP sshd[26487]: Invalid user fe from 180.150.189.206 port 56845
Nov  9 17:30:21 DAAP sshd[26487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.150.189.206
Nov  9 17:30:21 DAAP sshd[26487]: Invalid user fe from 180.150.189.206 port 56845
Nov  9 17:30:23 DAAP sshd[26487]: Failed password for invalid user fe from 180.150.189.206 port 56845 ssh2
Nov  9 17:35:14 DAAP sshd[26515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.150.189.206  user=root
Nov  9 17:35:16 DAAP sshd[26515]: Failed password for root from 180.150.189.206 port 44927 ssh2
...
2019-11-10 01:00:47
222.186.169.192 attackbots
Fail2Ban - SSH Bruteforce Attempt
2019-11-10 00:44:56
198.108.66.26 attackbotsspam
firewall-block, port(s): 502/tcp
2019-11-10 01:08:40
222.186.175.202 attackspambots
Nov  9 23:48:40 webhost01 sshd[32756]: Failed password for root from 222.186.175.202 port 25440 ssh2
Nov  9 23:48:57 webhost01 sshd[32756]: error: maximum authentication attempts exceeded for root from 222.186.175.202 port 25440 ssh2 [preauth]
...
2019-11-10 01:00:14

最近上报的IP列表

120.92.209.112 192.185.55.25 85.214.205.156 123.220.119.108
185.130.184.222 47.52.255.202 100.43.85.102 27.115.124.70
151.53.243.41 108.188.107.153 114.80.252.130 111.231.112.36
103.57.80.77 51.4.143.184 40.92.254.46 213.32.16.127
67.205.163.213 183.196.107.144 106.12.217.41 2.71.72.60