必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
点此参与IP信息讨论
类型 评论内容 时间
attackbotsspam 
Unauthorized connection attempt from IP address 42.112.148.201 on Port 445(SMB)
 2020-07-16 22:44:21
相同子网IP讨论:
IP 类型 评论内容 时间
42.112.148.33 attack 
1583470493 - 03/06/2020 05:54:53 Host: 42.112.148.33/42.112.148.33 Port: 445 TCP Blocked
 2020-03-06 16:21:58
42.112.148.28 attackbots 
1580878332 - 02/05/2020 05:52:12 Host: 42.112.148.28/42.112.148.28 Port: 445 TCP Blocked
 2020-02-05 15:25:37
42.112.148.142 attackbots 
Unauthorized connection attempt from IP address 42.112.148.142 on Port 445(SMB)
 2019-12-06 02:28:57
42.112.148.127 attackspam 
Unauthorized connection attempt from IP address 42.112.148.127 on Port 445(SMB)
 2019-11-20 01:34:43
42.112.148.244 attackbotsspam 
Attempt to attack host OS, exploiting network vulnerabilities, on 04-11-2019 14:35:23.
 2019-11-04 23:32:58
42.112.148.67 attack 
Honeypot attack, port: 445, PTR: PTR record not found
 2019-10-31 16:22:36
42.112.148.124 attackbotsspam 
445/tcp
[2019-10-28]1pkt
 2019-10-28 14:30:41
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.112.148.201
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29977
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.112.148.201.			IN	A

;; AUTHORITY SECTION:
.			302	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071601 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 16 22:44:11 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
201.148.112.42.in-addr.arpa has no PTR record
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 201.148.112.42.in-addr.arpa: SERVFAIL
相关IP信息:
42.112.148.89
42.112.148.76
42.112.148.188
42.112.148.61
42.112.148.40
42.112.148.171
42.112.148.6
42.112.148.161
42.112.148.36
42.112.148.111
42.112.148.200
42.112.148.103
42.112.148.125
42.112.148.60
42.112.148.191
42.112.148.225
42.112.148.254
42.112.148.150
42.112.148.14
42.112.148.8
42.112.148.174
42.112.148.207
42.112.148.183
42.112.148.77
42.112.148.81
42.112.148.16
42.112.148.70
42.112.148.197
42.112.148.130
42.112.148.79
42.112.148.13
42.112.148.47
42.112.148.106
42.112.148.240
42.112.148.226
42.112.148.120
42.112.148.234
42.112.148.45
42.112.148.75
42.112.148.194
42.112.148.38
42.112.148.95
42.112.148.5
42.112.148.64
42.112.148.90
42.112.148.69
42.112.148.185
42.112.148.1
42.112.148.54
42.112.148.127
42.112.148.163
42.112.148.204
42.112.148.94
42.112.148.156
42.112.148.126
42.112.148.121
42.112.148.50
42.112.148.65
42.112.148.20
42.112.148.248
42.112.148.138
42.112.148.78
42.112.148.205
42.112.148.129
42.112.148.136
42.112.148.217
42.112.148.101
42.112.148.228
42.112.148.229
42.112.148.31
42.112.148.151
42.112.148.66
42.112.148.109
42.112.148.100
42.112.148.110
42.112.148.10
42.112.148.244
42.112.148.21
42.112.148.55
42.112.148.29
42.112.148.179
42.112.148.190
42.112.148.41
42.112.148.235
42.112.148.195
42.112.148.39
42.112.148.242
42.112.148.165
42.112.148.139
42.112.148.24
42.112.148.82
42.112.148.118
42.112.148.168
42.112.148.181
42.112.148.246
42.112.148.178
42.112.148.162
42.112.148.33
42.112.148.2
42.112.148.58
42.112.148.15
42.112.148.187
42.112.148.128
42.112.148.132
42.112.148.231
42.112.148.25
42.112.148.146
42.112.148.166
42.112.148.227
42.112.148.115
42.112.148.7
42.112.148.223
42.112.148.249
42.112.148.99
42.112.148.43
42.112.148.239
42.112.148.27
42.112.148.123
42.112.148.104
42.112.148.143
42.112.148.173
42.112.148.26
42.112.148.186
42.112.148.93
42.112.148.212
42.112.148.169
42.112.148.206
42.112.148.224
42.112.148.42
42.112.148.52
42.112.148.219
42.112.148.88
42.112.148.119
42.112.148.208
42.112.148.112
42.112.148.51
42.112.148.241
42.112.148.30
42.112.148.28
42.112.148.192
42.112.148.3
42.112.148.175
42.112.148.135
42.112.148.34
42.112.148.71
42.112.148.189
42.112.148.252
42.112.148.203
42.112.148.213
42.112.148.167
42.112.148.84
42.112.148.152
42.112.148.46
42.112.148.221
42.112.148.102
42.112.148.164
42.112.148.22
42.112.148.32
42.112.148.72
42.112.148.184
42.112.148.98
42.112.148.238
42.112.148.214
42.112.148.232
42.112.148.114
42.112.148.198
42.112.148.144
42.112.148.160
42.112.148.210
42.112.148.180
42.112.148.56
42.112.148.236
42.112.148.250
42.112.148.243
42.112.148.196
42.112.148.140
42.112.148.11
42.112.148.44
42.112.148.59
42.112.148.37
42.112.148.159
42.112.148.137
42.112.148.68
42.112.148.63
42.112.148.247
42.112.148.124
42.112.148.131
42.112.148.62
42.112.148.107
42.112.148.220
42.112.148.87
42.112.148.222
42.112.148.153
42.112.148.142
42.112.148.86
42.112.148.19
42.112.148.158
42.112.148.17
42.112.148.215
42.112.148.73
42.112.148.117
42.112.148.74
42.112.148.67
42.112.148.172
42.112.148.201
42.112.148.253
42.112.148.97
42.112.148.177
42.112.148.170
42.112.148.155
42.112.148.245
42.112.148.145
42.112.148.92
42.112.148.193
42.112.148.83
42.112.148.57
42.112.148.251
42.112.148.209
42.112.148.108
42.112.148.216
42.112.148.4
42.112.148.48
42.112.148.218
42.112.148.53
42.112.148.80
42.112.148.176
42.112.148.199
42.112.148.113
42.112.148.202
42.112.148.154
42.112.148.116
42.112.148.148
42.112.148.233
42.112.148.105
42.112.148.9
42.112.148.149
42.112.148.230
42.112.148.85
42.112.148.237
42.112.148.35
42.112.148.12
42.112.148.211
42.112.148.147
42.112.148.49
42.112.148.23
42.112.148.122
42.112.148.157
42.112.148.18
42.112.148.141
42.112.148.182
42.112.148.133
42.112.148.96
42.112.148.134
42.112.148.91
最新评论:
IP 类型 评论内容 时间
185.202.1.123 attackbots 
Unauthorized connection attempt detected from IP address 185.202.1.123 to port 3389 [T]
 2020-07-19 19:00:18
93.174.93.25 attack 
Jul 19 12:31:30 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.25, lip=185.118.197.126, session=
Jul 19 12:32:01 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.25, lip=185.118.197.126, session=
Jul 19 12:32:26 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.25, lip=185.118.197.126, session=
Jul 19 12:33:03 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.25, lip=185.118.197.126, session=<7b4c6siqrs1drl0Z>
Jul 19 12:34:14 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.25, lip=
 2020-07-19 19:23:47
52.172.194.247 attackspambots 
2020-07-19T05:13:31.082891linuxbox-skyline sshd[75712]: Invalid user wf from 52.172.194.247 port 48282
...
 2020-07-19 19:30:36
157.230.24.24 attack 
2020-07-19T04:25:11.767799linuxbox-skyline sshd[75154]: Invalid user roo from 157.230.24.24 port 55630
...
 2020-07-19 19:25:09
103.76.175.130 attackspambots 
SSH Login Bruteforce
 2020-07-19 19:11:50
46.38.145.252 attackspambots 
2020-07-19 11:14:40 auth_plain authenticator failed for (User) [46.38.145.252]: 535 Incorrect authentication data (set_id=ollie@csmailer.org)
2020-07-19 11:15:07 auth_plain authenticator failed for (User) [46.38.145.252]: 535 Incorrect authentication data (set_id=dcp@csmailer.org)
2020-07-19 11:15:33 auth_plain authenticator failed for (User) [46.38.145.252]: 535 Incorrect authentication data (set_id=pipe@csmailer.org)
2020-07-19 11:16:05 auth_plain authenticator failed for (User) [46.38.145.252]: 535 Incorrect authentication data (set_id=exporta@csmailer.org)
2020-07-19 11:16:33 auth_plain authenticator failed for (User) [46.38.145.252]: 535 Incorrect authentication data (set_id=pass1@csmailer.org)
...
 2020-07-19 19:12:49
202.172.28.20 attack 
secondhandhall.d-a-n-i-e-l.de 202.172.28.20 [19/Jul/2020:09:52:18 +0200] "POST /wp-login.php HTTP/1.1" 200 2304 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
secondhandhall.d-a-n-i-e-l.de 202.172.28.20 [19/Jul/2020:09:52:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
 2020-07-19 19:17:40
103.27.116.2 attack 
Jul 19 12:39:34 OPSO sshd\[21408\]: Invalid user wiki from 103.27.116.2 port 43762
Jul 19 12:39:34 OPSO sshd\[21408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.27.116.2
Jul 19 12:39:36 OPSO sshd\[21408\]: Failed password for invalid user wiki from 103.27.116.2 port 43762 ssh2
Jul 19 12:42:56 OPSO sshd\[22221\]: Invalid user candice from 103.27.116.2 port 52706
Jul 19 12:42:56 OPSO sshd\[22221\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.27.116.2
 2020-07-19 19:09:12
222.239.28.177 attackbots 
Jul 19 11:19:43 rancher-0 sshd[454950]: Invalid user testing from 222.239.28.177 port 39246
...
 2020-07-19 19:09:35
206.189.231.80 attackspam 
xmlrpc attack
 2020-07-19 19:05:34
111.72.197.140 attack 
Jul 19 11:35:32 srv01 postfix/smtpd\[11160\]: warning: unknown\[111.72.197.140\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 19 11:35:44 srv01 postfix/smtpd\[11160\]: warning: unknown\[111.72.197.140\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 19 11:36:00 srv01 postfix/smtpd\[11160\]: warning: unknown\[111.72.197.140\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 19 11:36:20 srv01 postfix/smtpd\[11160\]: warning: unknown\[111.72.197.140\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 19 11:36:36 srv01 postfix/smtpd\[11160\]: warning: unknown\[111.72.197.140\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
 2020-07-19 19:10:46
119.28.178.213 attackbots 
2020-07-19T10:10:40+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)
 2020-07-19 19:16:47
49.233.13.145 attackspambots 
Jul 19 13:05:49 eventyay sshd[8088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.13.145
Jul 19 13:05:50 eventyay sshd[8088]: Failed password for invalid user ftp_user from 49.233.13.145 port 36678 ssh2
Jul 19 13:12:27 eventyay sshd[8331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.13.145
...
 2020-07-19 19:17:07
193.32.161.147 attackbots 
07/19/2020-06:41:50.097090 193.32.161.147 Protocol: 6 ET DROP Dshield Block Listed Source group 1
 2020-07-19 19:19:11
188.237.250.100 attackbotsspam 
Dovecot Invalid User Login Attempt.
 2020-07-19 19:06:12

最近上报的IP列表

53.1.18.38 83.120.36.145 196.198.134.138 169.0.140.18
254.193.135.234 123.25.78.6 188.162.173.35 84.54.12.242
61.184.108.246 203.143.20.162 192.241.236.149 14.241.224.244
193.202.86.95 122.116.2.20 84.54.12.241 82.78.13.140
190.217.25.3 113.98.194.49 193.169.253.112 117.74.125.18