必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackspambots
Unauthorized connection attempt from IP address 42.112.239.249 on Port 445(SMB)
2019-07-19 14:48:40
相同子网IP讨论:
IP 类型 评论内容 时间
42.112.239.220 attackbotsspam
Unauthorized connection attempt detected from IP address 42.112.239.220 to port 23 [J]
2020-03-01 04:55:28
42.112.239.185 attackbots
B: Magento admin pass /admin/ test (wrong country)
2020-01-12 07:05:23
42.112.239.127 attackspam
Invalid user avanthi from 42.112.239.127 port 51002
2019-08-23 14:55:05
42.112.239.219 attackbotsspam
Unauthorized connection attempt from IP address 42.112.239.219 on Port 445(SMB)
2019-08-13 19:26:14
42.112.239.65 attackspam
[SMB remote code execution attempt: port tcp/445]
[scan/connect: 2 time(s)]
*(RWIN=8192)(08041230)
2019-08-05 00:39:48
42.112.239.42 attackspambots
Lines containing failures of 42.112.239.42
Jul 13 05:53:11 mellenthin postfix/smtpd[14655]: connect from unknown[42.112.239.42]
Jul x@x
Jul 13 05:53:12 mellenthin postfix/smtpd[14655]: lost connection after DATA from unknown[42.112.239.42]
Jul 13 05:53:12 mellenthin postfix/smtpd[14655]: disconnect from unknown[42.112.239.42] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4
Jul 13 16:55:29 mellenthin postfix/smtpd[5662]: connect from unknown[42.112.239.42]
Jul x@x
Jul 13 16:55:30 mellenthin postfix/smtpd[5662]: lost connection after DATA from unknown[42.112.239.42]
Jul 13 16:55:30 mellenthin postfix/smtpd[5662]: disconnect from unknown[42.112.239.42] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=42.112.239.42
2019-07-14 06:15:12
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.112.239.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44572
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.112.239.249.			IN	A

;; AUTHORITY SECTION:
.			2344	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071900 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jul 19 14:48:24 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 249.239.112.42.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 249.239.112.42.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
115.85.204.139 attack
port scan and connect, tcp 1433 (ms-sql-s)
2020-08-14 15:41:34
34.77.127.43 attackspam
<6 unauthorized SSH connections
2020-08-14 15:43:02
185.220.100.244 attackbotsspam
xmlrpc attack
2020-08-14 15:29:01
36.92.208.39 attackbotsspam
20/8/13@23:37:34: FAIL: Alarm-Network address from=36.92.208.39
...
2020-08-14 16:02:41
60.248.94.243 attackbotsspam
port 23
2020-08-14 16:02:14
62.36.20.208 attack
$f2bV_matches
2020-08-14 15:45:35
42.115.140.229 attackspam
Unauthorized connection attempt from IP address 42.115.140.229 on Port 445(SMB)
2020-08-14 15:24:56
104.197.160.61 attackspam
B: There is NO wordpress hosted!
2020-08-14 15:48:44
120.239.196.105 attack
Aug 14 05:52:46 abendstille sshd\[26378\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.239.196.105  user=root
Aug 14 05:52:48 abendstille sshd\[26378\]: Failed password for root from 120.239.196.105 port 46612 ssh2
Aug 14 05:57:41 abendstille sshd\[31365\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.239.196.105  user=root
Aug 14 05:57:43 abendstille sshd\[31365\]: Failed password for root from 120.239.196.105 port 6640 ssh2
Aug 14 06:02:31 abendstille sshd\[4145\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.239.196.105  user=root
...
2020-08-14 15:43:40
201.72.190.98 attackspambots
Aug 14 06:54:19 amit sshd\[1538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.72.190.98  user=root
Aug 14 06:54:21 amit sshd\[1538\]: Failed password for root from 201.72.190.98 port 49327 ssh2
Aug 14 07:03:00 amit sshd\[19457\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.72.190.98  user=root
...
2020-08-14 15:30:56
139.59.161.78 attack
<6 unauthorized SSH connections
2020-08-14 15:47:41
94.31.85.173 attack
Aug 14 09:43:11 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\
Aug 14 09:43:13 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\<3OAFiNGsXK5eH1Wt\>
Aug 14 09:43:35 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\
Aug 14 09:48:45 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=5.9.254.190, session=\<1kTQm9GsvLJeH1Wt\>
Aug 14 09:48:47 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\<
...
2020-08-14 15:56:34
83.110.251.195 attack
port 23
2020-08-14 15:45:13
185.97.116.222 attackbots
Fail2Ban
2020-08-14 15:46:17
222.186.175.148 attackbotsspam
<6 unauthorized SSH connections
2020-08-14 15:31:28

最近上报的IP列表

94.131.219.184 113.172.125.98 93.152.142.30 95.215.159.137
81.33.134.46 185.127.27.222 92.46.83.28 1.54.209.241
124.123.96.63 83.209.248.201 62.183.103.74 162.216.143.176
65.189.1.108 114.40.180.54 103.83.176.136 81.49.201.138
43.230.41.228 172.98.67.37 91.73.225.255 190.79.148.219