必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands

运营商(isp): Not SURF Net

主机名(hostname): unknown

机构(organization): SURFnet bv

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspam
Automatic report - Banned IP Access
2020-09-15 00:51:51
attackspam
Bruteforce detected by fail2ban
2020-09-14 16:35:13
attackbotsspam
Sep  7 09:59:12 vpn01 sshd[30034]: Failed password for root from 192.42.116.19 port 40150 ssh2
Sep  7 09:59:23 vpn01 sshd[30034]: error: maximum authentication attempts exceeded for root from 192.42.116.19 port 40150 ssh2 [preauth]
...
2020-09-07 17:55:52
attackbots
Aug 28 09:55:50 server sshd[15793]: Invalid user admin from 192.42.116.19 port 44274
Aug 28 09:55:52 server sshd[15793]: Failed password for invalid user admin from 192.42.116.19 port 44274 ssh2
...
2020-08-29 01:58:20
attackspam
Aug 18 15:43:30 localhost sshd\[15754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.42.116.19  user=sshd
Aug 18 15:43:32 localhost sshd\[15754\]: Failed password for sshd from 192.42.116.19 port 45166 ssh2
Aug 18 15:43:35 localhost sshd\[15754\]: Failed password for sshd from 192.42.116.19 port 45166 ssh2
...
2020-08-19 02:34:24
attack
Failed password for invalid user from 192.42.116.19 port 53762 ssh2
2020-08-16 05:59:38
attackspam
Invalid user admin from 192.42.116.19 port 57858
2020-07-25 00:36:46
attackspam
Jul 16 23:05:40 web1 sshd[4668]: Invalid user admin from 192.42.116.19 port 55944
Jul 16 23:05:40 web1 sshd[4668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.42.116.19
Jul 16 23:05:40 web1 sshd[4668]: Invalid user admin from 192.42.116.19 port 55944
Jul 16 23:05:43 web1 sshd[4668]: Failed password for invalid user admin from 192.42.116.19 port 55944 ssh2
Jul 17 16:39:36 web1 sshd[25222]: Invalid user admin from 192.42.116.19 port 52028
Jul 17 16:39:36 web1 sshd[25222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.42.116.19
Jul 17 16:39:36 web1 sshd[25222]: Invalid user admin from 192.42.116.19 port 52028
Jul 17 16:39:37 web1 sshd[25222]: Failed password for invalid user admin from 192.42.116.19 port 52028 ssh2
Jul 17 22:14:34 web1 sshd[19051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.42.116.19  user=sshd
Jul 17 22:14:36 web1 sshd[19051]: Fai
...
2020-07-17 20:59:24
attack
srv02 SSH BruteForce Attacks 22 ..
2020-06-22 18:04:57
attack
Jun 16 23:19:42 mellenthin sshd[21117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.42.116.19  user=root
Jun 16 23:19:44 mellenthin sshd[21117]: Failed password for invalid user root from 192.42.116.19 port 34798 ssh2
2020-06-17 06:16:32
attackspambots
(sshd) Failed SSH login from 192.42.116.19 (NL/Netherlands/this-is-a-tor-exit-node-hviv119.hviv.nl): 5 in the last 3600 secs
2020-05-27 03:06:53
attackspam
fail2ban
2020-04-03 17:02:26
attackspambots
XMLRPC attack attempt
2019-11-07 00:49:47
attackbotsspam
Oct 29 21:01:46 rotator sshd\[31761\]: Invalid user acid from 192.42.116.19Oct 29 21:01:48 rotator sshd\[31761\]: Failed password for invalid user acid from 192.42.116.19 port 55144 ssh2Oct 29 21:01:51 rotator sshd\[31768\]: Invalid user acitoolkit from 192.42.116.19Oct 29 21:01:53 rotator sshd\[31768\]: Failed password for invalid user acitoolkit from 192.42.116.19 port 54442 ssh2Oct 29 21:01:57 rotator sshd\[31770\]: Invalid user acoustic from 192.42.116.19Oct 29 21:01:59 rotator sshd\[31770\]: Failed password for invalid user acoustic from 192.42.116.19 port 50794 ssh2
...
2019-10-30 05:51:14
attackbots
Oct 21 11:07:17 rotator sshd\[31927\]: Failed password for root from 192.42.116.19 port 45250 ssh2Oct 21 11:07:20 rotator sshd\[31927\]: Failed password for root from 192.42.116.19 port 45250 ssh2Oct 21 11:07:22 rotator sshd\[31927\]: Failed password for root from 192.42.116.19 port 45250 ssh2Oct 21 11:07:25 rotator sshd\[31927\]: Failed password for root from 192.42.116.19 port 45250 ssh2Oct 21 11:07:28 rotator sshd\[31927\]: Failed password for root from 192.42.116.19 port 45250 ssh2Oct 21 11:07:31 rotator sshd\[31927\]: Failed password for root from 192.42.116.19 port 45250 ssh2
...
2019-10-21 18:24:52
attackbots
Automatic report - Banned IP Access
2019-10-21 01:08:55
attackbotsspam
Sep  3 20:13:20 thevastnessof sshd[3398]: Failed password for root from 192.42.116.19 port 47114 ssh2
...
2019-09-04 04:16:22
attackspam
Automatic report - Banned IP Access
2019-08-21 16:49:36
attack
Aug 13 21:05:48 mail sshd\[18299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.42.116.19  user=root
Aug 13 21:05:49 mail sshd\[18299\]: Failed password for root from 192.42.116.19 port 54130 ssh2
Aug 13 21:05:52 mail sshd\[18299\]: Failed password for root from 192.42.116.19 port 54130 ssh2
Aug 13 21:05:54 mail sshd\[18299\]: Failed password for root from 192.42.116.19 port 54130 ssh2
Aug 13 21:05:58 mail sshd\[18299\]: Failed password for root from 192.42.116.19 port 54130 ssh2
2019-08-14 06:25:14
attack
SSH bruteforce
2019-08-13 01:29:57
attackbots
Unauthorized SSH login attempts
2019-08-12 16:07:23
attackbots
Aug 12 02:20:11 MK-Soft-Root2 sshd\[20995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.42.116.19  user=root
Aug 12 02:20:14 MK-Soft-Root2 sshd\[20995\]: Failed password for root from 192.42.116.19 port 47574 ssh2
Aug 12 02:20:16 MK-Soft-Root2 sshd\[20995\]: Failed password for root from 192.42.116.19 port 47574 ssh2
...
2019-08-12 09:16:05
attack
k+ssh-bruteforce
2019-08-03 07:23:44
attackbotsspam
Reported by AbuseIPDB proxy server.
2019-07-31 16:29:19
attack
Triggered by Fail2Ban at Vostok web server
2019-07-13 01:28:41
相同子网IP讨论:
IP 类型 评论内容 时间
192.42.116.25 attack
Oct 12 19:24:00 icinga sshd[5977]: Failed password for root from 192.42.116.25 port 48074 ssh2
Oct 12 19:24:03 icinga sshd[5977]: Failed password for root from 192.42.116.25 port 48074 ssh2
Oct 12 19:24:07 icinga sshd[5977]: Failed password for root from 192.42.116.25 port 48074 ssh2
Oct 12 19:24:10 icinga sshd[5977]: Failed password for root from 192.42.116.25 port 48074 ssh2
...
2020-10-13 03:37:49
192.42.116.25 attackspambots
Bruteforce detected by fail2ban
2020-10-12 19:09:46
192.42.116.15 attack
$f2bV_matches
2020-10-12 01:50:21
192.42.116.15 attackspambots
Dovecot Invalid User Login Attempt.
2020-10-11 17:40:29
192.42.116.22 attackbotsspam
Sep 26 18:09:32 *hidden* sshd[16677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.42.116.22 Sep 26 18:09:34 *hidden* sshd[16677]: Failed password for invalid user admin from 192.42.116.22 port 37180 ssh2 Sep 26 18:10:43 *hidden* sshd[18298]: Invalid user admin from 192.42.116.22 port 52642
2020-09-27 00:56:08
192.42.116.22 attackbots
CMS (WordPress or Joomla) login attempt.
2020-09-26 16:46:29
192.42.116.28 attackspambots
Sep 25 02:54:11 itv-usvr-01 sshd[14558]: Invalid user admin from 192.42.116.28
2020-09-25 07:32:38
192.42.116.20 attack
Automatic report - Banned IP Access
2020-09-21 03:50:06
192.42.116.22 attack
Sep 20 08:22:48 vpn01 sshd[10728]: Failed password for root from 192.42.116.22 port 44304 ssh2
Sep 20 08:22:50 vpn01 sshd[10728]: Failed password for root from 192.42.116.22 port 44304 ssh2
...
2020-09-21 02:45:56
192.42.116.28 attackbotsspam
(sshd) Failed SSH login from 192.42.116.28 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 20 02:50:14 server5 sshd[12602]: Failed password for root from 192.42.116.28 port 52248 ssh2
Sep 20 02:50:16 server5 sshd[12602]: Failed password for root from 192.42.116.28 port 52248 ssh2
Sep 20 02:50:19 server5 sshd[12602]: Failed password for root from 192.42.116.28 port 52248 ssh2
Sep 20 02:50:21 server5 sshd[12602]: Failed password for root from 192.42.116.28 port 52248 ssh2
Sep 20 02:50:24 server5 sshd[12602]: Failed password for root from 192.42.116.28 port 52248 ssh2
2020-09-20 23:54:58
192.42.116.17 attackspambots
2020-09-20T05:46[Censored Hostname] sshd[4273]: Failed password for root from 192.42.116.17 port 52734 ssh2
2020-09-20T05:46[Censored Hostname] sshd[4273]: Failed password for root from 192.42.116.17 port 52734 ssh2
2020-09-20T05:46[Censored Hostname] sshd[4273]: Failed password for root from 192.42.116.17 port 52734 ssh2[...]
2020-09-20 23:11:30
192.42.116.14 attackbots
(sshd) Failed SSH login from 192.42.116.14 (NL/Netherlands/this-is-a-tor-exit-node-hviv114.hviv.nl): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 20 05:15:57 server sshd[14826]: Failed password for root from 192.42.116.14 port 46742 ssh2
Sep 20 05:16:00 server sshd[14826]: Failed password for root from 192.42.116.14 port 46742 ssh2
Sep 20 05:16:06 server sshd[14826]: Failed password for root from 192.42.116.14 port 46742 ssh2
Sep 20 05:16:09 server sshd[14826]: Failed password for root from 192.42.116.14 port 46742 ssh2
Sep 20 05:16:11 server sshd[14826]: Failed password for root from 192.42.116.14 port 46742 ssh2
2020-09-20 21:31:04
192.42.116.20 attackbotsspam
(sshd) Failed SSH login from 192.42.116.20 (NL/Netherlands/this-is-a-tor-exit-node-hviv120.hviv.nl): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 20 05:19:23 optimus sshd[24250]: Failed password for root from 192.42.116.20 port 37152 ssh2
Sep 20 05:19:25 optimus sshd[24250]: Failed password for root from 192.42.116.20 port 37152 ssh2
Sep 20 05:19:27 optimus sshd[24250]: Failed password for root from 192.42.116.20 port 37152 ssh2
Sep 20 05:19:30 optimus sshd[24250]: Failed password for root from 192.42.116.20 port 37152 ssh2
Sep 20 05:19:32 optimus sshd[24250]: Failed password for root from 192.42.116.20 port 37152 ssh2
2020-09-20 20:01:56
192.42.116.22 attackspam
Sep 20 08:22:48 vpn01 sshd[10728]: Failed password for root from 192.42.116.22 port 44304 ssh2
Sep 20 08:22:50 vpn01 sshd[10728]: Failed password for root from 192.42.116.22 port 44304 ssh2
...
2020-09-20 18:48:24
192.42.116.28 attackbotsspam
(sshd) Failed SSH login from 192.42.116.28 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 20 02:50:14 server5 sshd[12602]: Failed password for root from 192.42.116.28 port 52248 ssh2
Sep 20 02:50:16 server5 sshd[12602]: Failed password for root from 192.42.116.28 port 52248 ssh2
Sep 20 02:50:19 server5 sshd[12602]: Failed password for root from 192.42.116.28 port 52248 ssh2
Sep 20 02:50:21 server5 sshd[12602]: Failed password for root from 192.42.116.28 port 52248 ssh2
Sep 20 02:50:24 server5 sshd[12602]: Failed password for root from 192.42.116.28 port 52248 ssh2
2020-09-20 15:48:44
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 192.42.116.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34104
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;192.42.116.19.			IN	A

;; AUTHORITY SECTION:
.			942	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019032802 1800 900 604800 86400

;; Query time: 156 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 29 04:51:16 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:
19.116.42.192.in-addr.arpa domain name pointer this-is-a-tor-exit-node-hviv119.hviv.nl.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
19.116.42.192.in-addr.arpa	name = this-is-a-tor-exit-node-hviv119.hviv.nl.

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
80.250.234.105 attack
Unauthorized connection attempt from IP address 80.250.234.105 on Port 445(SMB)
2019-06-26 21:50:34
218.64.165.194 attack
failed_logins
2019-06-26 22:19:42
193.188.22.220 attack
SSH Bruteforce Attack
2019-06-26 22:14:37
62.234.219.27 attack
2019-06-26T13:47:20.520971abusebot-4.cloudsearch.cf sshd\[12964\]: Invalid user ashish from 62.234.219.27 port 46177
2019-06-26 22:10:01
45.55.188.133 attackspam
Jan 27 17:09:30 vtv3 sshd\[32593\]: Invalid user web from 45.55.188.133 port 39536
Jan 27 17:09:30 vtv3 sshd\[32593\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.188.133
Jan 27 17:09:33 vtv3 sshd\[32593\]: Failed password for invalid user web from 45.55.188.133 port 39536 ssh2
Jan 27 17:13:32 vtv3 sshd\[1433\]: Invalid user test from 45.55.188.133 port 55657
Jan 27 17:13:32 vtv3 sshd\[1433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.188.133
Feb  2 23:58:17 vtv3 sshd\[26080\]: Invalid user cos from 45.55.188.133 port 48851
Feb  2 23:58:17 vtv3 sshd\[26080\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.188.133
Feb  2 23:58:19 vtv3 sshd\[26080\]: Failed password for invalid user cos from 45.55.188.133 port 48851 ssh2
Feb  3 00:02:24 vtv3 sshd\[27332\]: Invalid user sofair from 45.55.188.133 port 36705
Feb  3 00:02:24 vtv3 sshd\[27332\]: pam_unix\(sshd:
2019-06-26 22:15:39
182.148.122.3 attack
445/tcp 445/tcp 445/tcp...
[2019-05-05/06-26]5pkt,1pt.(tcp)
2019-06-26 22:38:21
81.22.45.251 attack
26.06.2019 13:59:23 Connection to port 5926 blocked by firewall
2019-06-26 22:07:19
168.195.198.200 attack
failed_logins
2019-06-26 22:38:46
118.200.77.211 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-26 01:23:49,458 INFO [shellcode_manager] (118.200.77.211) no match, writing hexdump (1dbdafe8da552bce464aaf887bc2515a :2112040) - MS17010 (EternalBlue)
2019-06-26 21:48:48
35.187.246.124 attackspam
Jun 26 15:39:40 vps691689 sshd[5012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.187.246.124
Jun 26 15:39:42 vps691689 sshd[5012]: Failed password for invalid user elasticsearch from 35.187.246.124 port 45554 ssh2
Jun 26 15:41:31 vps691689 sshd[5023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.187.246.124
...
2019-06-26 22:24:55
176.202.86.13 attackspambots
Spam
2019-06-26 21:55:25
185.222.209.26 attack
RDP Bruteforce
2019-06-26 22:39:19
81.212.102.160 attack
Jun 26 15:16:53 giegler sshd[29490]: Invalid user dario from 81.212.102.160 port 57450
2019-06-26 21:47:24
187.1.40.51 attackbots
Brute force attempt
2019-06-26 22:01:13
190.109.74.19 attackspam
failed_logins
2019-06-26 22:00:31

最近上报的IP列表

216.144.250.146 111.56.44.252 106.12.222.70 104.248.235.0
219.93.106.33 123.136.161.147 93.157.63.6 79.7.143.125
146.185.148.67 202.57.39.26 40.117.135.57 194.102.113.105
140.143.208.176 138.197.65.71 122.3.255.114 118.89.27.122
108.176.0.2 104.236.30.168 46.101.11.213 185.209.0.24