必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Brazil

运营商(isp): Vivo S.A.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackbots
Unauthorized connection attempt from IP address 201.42.194.66 on Port 445(SMB)
2020-08-25 05:31:44
相同子网IP讨论:
IP 类型 评论内容 时间
201.42.194.14 attackbotsspam
Oct  2 07:11:47 taivassalofi sshd[113257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.42.194.14
Oct  2 07:11:49 taivassalofi sshd[113257]: Failed password for invalid user carter from 201.42.194.14 port 33925 ssh2
...
2019-10-02 12:57:20
201.42.194.14 attack
Sep 28 12:20:36 auw2 sshd\[7400\]: Invalid user aguiar from 201.42.194.14
Sep 28 12:20:36 auw2 sshd\[7400\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201-42-194-14.dsl.telesp.net.br
Sep 28 12:20:38 auw2 sshd\[7400\]: Failed password for invalid user aguiar from 201.42.194.14 port 39243 ssh2
Sep 28 12:25:19 auw2 sshd\[7815\]: Invalid user nimda123 from 201.42.194.14
Sep 28 12:25:19 auw2 sshd\[7815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201-42-194-14.dsl.telesp.net.br
2019-09-29 06:34:50
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.42.194.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56777
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;201.42.194.66.			IN	A

;; AUTHORITY SECTION:
.			467	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082401 1800 900 604800 86400

;; Query time: 28 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 25 05:31:40 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
66.194.42.201.in-addr.arpa domain name pointer 201-42-194-66.dsl.telesp.net.br.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
66.194.42.201.in-addr.arpa	name = 201-42-194-66.dsl.telesp.net.br.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
222.186.15.110 attack
2019-08-06T22:46:11.623514abusebot-3.cloudsearch.cf sshd\[15008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.110  user=root
2019-08-07 06:46:26
37.59.99.243 attackbotsspam
Automatic report - Banned IP Access
2019-08-07 06:38:00
103.233.76.254 attack
2019-08-06T22:20:08.107090abusebot-6.cloudsearch.cf sshd\[17442\]: Invalid user zahid from 103.233.76.254 port 56470
2019-08-07 06:34:35
134.209.208.112 attack
VNC brute force attack detected by fail2ban
2019-08-07 06:39:20
222.186.52.155 attackbotsspam
Aug  7 00:48:19 legacy sshd[8683]: Failed password for root from 222.186.52.155 port 58659 ssh2
Aug  7 00:48:40 legacy sshd[8691]: Failed password for root from 222.186.52.155 port 38693 ssh2
...
2019-08-07 06:58:44
105.158.169.191 attackbotsspam
Aug  6 23:29:47 tamoto postfix/smtpd[31503]: connect from unknown[105.158.169.191]
Aug  6 23:29:48 tamoto postfix/smtpd[31503]: warning: unknown[105.158.169.191]: SASL PLAIN authentication failed: authentication failure
Aug  6 23:29:49 tamoto postfix/smtpd[31503]: warning: unknown[105.158.169.191]: SASL PLAIN authentication failed: authentication failure
Aug  6 23:29:49 tamoto postfix/smtpd[31503]: warning: unknown[105.158.169.191]: SASL PLAIN authentication failed: authentication failure
Aug  6 23:29:49 tamoto postfix/smtpd[31503]: warning: unknown[105.158.169.191]: SASL PLAIN authentication failed: authentication failure
Aug  6 23:29:50 tamoto postfix/smtpd[31503]: warning: unknown[105.158.169.191]: SASL PLAIN authentication failed: authentication failure


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=105.158.169.191
2019-08-07 07:06:45
173.249.59.104 attackspambots
Aug  6 20:32:59 srv00 sshd[46208]: fatal: Unable to negotiate whostnameh 173.249.59.104 port 59922: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Aug  6 20:33:07 srv00 sshd[46222]: fatal: Unable to negotiate whostnameh 173.249.59.104 port 45336: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Aug  6 20:33:14 srv00 sshd[46225]: fatal: Unable to negotiate whostnameh 173.249.59.104 port 58972: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Aug  6 20:33:23 srv00 sshd[46227]: fatal: Unable to negotiate whostnameh 173.249.59.104 port 44376: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman........
------------------------------
2019-08-07 06:18:17
45.55.187.39 attackspambots
Aug  6 18:29:39 TORMINT sshd\[32247\]: Invalid user plex from 45.55.187.39
Aug  6 18:29:39 TORMINT sshd\[32247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.187.39
Aug  6 18:29:41 TORMINT sshd\[32247\]: Failed password for invalid user plex from 45.55.187.39 port 36208 ssh2
...
2019-08-07 06:57:41
158.69.220.70 attackspambots
SSH Brute-Force reported by Fail2Ban
2019-08-07 06:50:41
186.112.85.98 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-06 20:53:11,377 INFO [shellcode_manager] (186.112.85.98) no match, writing hexdump (d7c8e2a3988bdae188850b13eea8a146 :2964049) - MS17010 (EternalBlue)
2019-08-07 06:38:54
221.162.255.82 attack
Aug  6 23:03:44 ns341937 sshd[5123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.162.255.82
Aug  6 23:03:47 ns341937 sshd[5123]: Failed password for invalid user fabian from 221.162.255.82 port 32928 ssh2
Aug  6 23:50:02 ns341937 sshd[13825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.162.255.82
...
2019-08-07 06:22:46
202.65.183.3 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-06 20:09:54,031 INFO [amun_request_handler] PortScan Detected on Port: 445 (202.65.183.3)
2019-08-07 06:38:26
110.139.130.99 attackbotsspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-06 20:07:25,699 INFO [amun_request_handler] PortScan Detected on Port: 445 (110.139.130.99)
2019-08-07 06:52:26
61.227.243.214 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-06 20:12:52,883 INFO [amun_request_handler] PortScan Detected on Port: 445 (61.227.243.214)
2019-08-07 06:37:31
177.74.182.138 attackbots
failed_logins
2019-08-07 06:43:02

最近上报的IP列表

85.214.151.144 190.124.29.5 169.146.122.169 49.216.170.76
188.126.73.205 185.245.86.67 184.22.197.37 180.253.166.151
179.105.115.25 178.138.98.98 176.44.75.113 168.194.164.174
80.230.35.164 82.81.215.130 190.73.84.112 179.177.143.225
168.181.178.25 153.226.16.175 148.0.47.51 14.207.205.124