必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attack
Unauthorized connection attempt detected from IP address 42.112.164.32 to port 23 [J]
2020-01-21 02:49:51
相同子网IP讨论:
IP 类型 评论内容 时间
42.112.164.91 attackspam
Unauthorized connection attempt detected from IP address 42.112.164.91 to port 23 [J]
2020-01-25 20:08:41
42.112.164.199 attack
Dec 30 07:27:03 h2177944 kernel: \[885893.704562\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=42.112.164.199 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=45965 PROTO=TCP SPT=57932 DPT=23 WINDOW=61532 RES=0x00 SYN URGP=0 
Dec 30 07:27:03 h2177944 kernel: \[885893.704576\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=42.112.164.199 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=45965 PROTO=TCP SPT=57932 DPT=23 WINDOW=61532 RES=0x00 SYN URGP=0 
Dec 30 07:27:04 h2177944 kernel: \[885893.963192\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=42.112.164.199 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=45965 PROTO=TCP SPT=57932 DPT=23 WINDOW=61532 RES=0x00 SYN URGP=0 
Dec 30 07:27:04 h2177944 kernel: \[885893.963205\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=42.112.164.199 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=45965 PROTO=TCP SPT=57932 DPT=23 WINDOW=61532 RES=0x00 SYN URGP=0 
Dec 30 07:27:04 h2177944 kernel: \[885893.964172\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=42.112.164.199 DST=85.214.117.9 LEN=40
2019-12-30 17:30:17
42.112.164.85 normal
2019-12-02 23:26:56
42.112.164.147 attack
Honeypot attack, port: 23, PTR: PTR record not found
2019-07-06 15:16:49
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.112.164.32
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3836
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.112.164.32.			IN	A

;; AUTHORITY SECTION:
.			586	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012001 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 21 02:49:47 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 32.164.112.42.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 32.164.112.42.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
141.105.66.254 attack
Nov 21 07:12:26 mxgate1 postfix/postscreen[7403]: CONNECT from [141.105.66.254]:63166 to [176.31.12.44]:25
Nov 21 07:12:26 mxgate1 postfix/dnsblog[7468]: addr 141.105.66.254 listed by domain zen.spamhaus.org as 127.0.0.3
Nov 21 07:12:26 mxgate1 postfix/dnsblog[7466]: addr 141.105.66.254 listed by domain b.barracudacentral.org as 127.0.0.2
Nov 21 07:12:32 mxgate1 postfix/postscreen[7403]: DNSBL rank 3 for [141.105.66.254]:63166
Nov x@x
Nov 21 07:12:32 mxgate1 postfix/postscreen[7403]: DISCONNECT [141.105.66.254]:63166


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=141.105.66.254
2019-11-21 19:52:48
120.133.133.243 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2019-11-21 20:13:02
188.138.74.132 attackbots
IP attempted unauthorised action
2019-11-21 19:37:21
107.172.22.174 attackbotsspam
Nov 21 05:37:53 kmh-wsh-001-nbg03 sshd[14302]: Invalid user patricot from 107.172.22.174 port 49298
Nov 21 05:37:53 kmh-wsh-001-nbg03 sshd[14302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.22.174
Nov 21 05:37:54 kmh-wsh-001-nbg03 sshd[14302]: Failed password for invalid user patricot from 107.172.22.174 port 49298 ssh2
Nov 21 05:37:55 kmh-wsh-001-nbg03 sshd[14302]: Received disconnect from 107.172.22.174 port 49298:11: Bye Bye [preauth]
Nov 21 05:37:55 kmh-wsh-001-nbg03 sshd[14302]: Disconnected from 107.172.22.174 port 49298 [preauth]
Nov 21 05:50:03 kmh-wsh-001-nbg03 sshd[14824]: Invalid user postgresql from 107.172.22.174 port 45034
Nov 21 05:50:03 kmh-wsh-001-nbg03 sshd[14824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.22.174
Nov 21 05:50:05 kmh-wsh-001-nbg03 sshd[14824]: Failed password for invalid user postgresql from 107.172.22.174 port 45034 ssh2
Nov 21 05........
-------------------------------
2019-11-21 19:34:19
104.200.110.210 attackbotsspam
Nov 21 11:48:19 lnxmysql61 sshd[1416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.110.210
Nov 21 11:48:21 lnxmysql61 sshd[1416]: Failed password for invalid user balasingham from 104.200.110.210 port 45714 ssh2
Nov 21 11:52:09 lnxmysql61 sshd[1958]: Failed password for root from 104.200.110.210 port 53778 ssh2
2019-11-21 20:00:00
49.80.63.136 attackspam
49.80.63.136 - - [21/Nov/2019:07:11:20 +0100] "GET / HTTP/1.1" 301 299 "-" "Googlebot/2.1 (+hxxp://www.googlebot.com/bot.html)"


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=49.80.63.136
2019-11-21 19:58:28
200.3.188.107 attackbotsspam
Autoban   200.3.188.107 AUTH/CONNECT
2019-11-21 19:51:52
92.119.160.52 attack
92.119.160.52 was recorded 59 times by 18 hosts attempting to connect to the following ports: 43158,60570,34742,25845,56155,58029,36136,43230,27464,32327,35825,60604,53287,42750,42129,42480,65216,35494,55045,53779,28453,60757,52151,52937,53953,25654,38450,43633. Incident counter (4h, 24h, all-time): 59, 430, 4564
2019-11-21 19:41:47
81.28.100.129 attackspam
2019-11-21T07:22:39.507394stark.klein-stark.info postfix/smtpd\[2270\]: NOQUEUE: reject: RCPT from marmalade.shrewdmhealth.com\[81.28.100.129\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\
...
2019-11-21 20:15:20
112.85.42.194 attackbots
2019-11-21T12:53:55.219299scmdmz1 sshd\[14125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.194  user=root
2019-11-21T12:53:57.540513scmdmz1 sshd\[14125\]: Failed password for root from 112.85.42.194 port 32194 ssh2
2019-11-21T12:54:00.049288scmdmz1 sshd\[14125\]: Failed password for root from 112.85.42.194 port 32194 ssh2
...
2019-11-21 20:07:25
176.31.250.160 attackbotsspam
Nov  7 07:38:49 odroid64 sshd\[25011\]: User root from 176.31.250.160 not allowed because not listed in AllowUsers
Nov  7 07:38:49 odroid64 sshd\[25011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.250.160  user=root
...
2019-11-21 19:54:23
54.38.155.103 attack
11/21/2019-07:23:17.397128 54.38.155.103 Protocol: 17 ET SCAN Sipvicious Scan
2019-11-21 20:04:09
27.128.175.209 attackspam
2019-11-21 05:13:15,010 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 27.128.175.209
2019-11-21 05:44:09,428 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 27.128.175.209
2019-11-21 06:20:04,238 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 27.128.175.209
2019-11-21 06:52:02,254 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 27.128.175.209
2019-11-21 07:23:38,335 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 27.128.175.209
...
2019-11-21 19:46:50
62.234.101.62 attack
SSH Bruteforce attack
2019-11-21 20:08:22
129.211.113.29 attackbotsspam
Oct 29 02:42:50 odroid64 sshd\[21595\]: User root from 129.211.113.29 not allowed because not listed in AllowUsers
Oct 29 02:42:50 odroid64 sshd\[21595\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.113.29  user=root
...
2019-11-21 19:58:55

最近上报的IP列表

75.17.162.166 164.202.150.107 117.25.111.192 54.126.133.92
57.183.102.110 7.95.183.137 90.84.155.242 219.152.48.90
252.167.36.128 192.187.126.170 204.47.38.139 157.154.60.111
87.156.215.115 232.165.118.54 239.152.104.87 172.113.251.182
252.48.25.194 197.190.152.150 97.198.200.24 30.39.36.236