必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-26 01:48:07
相同子网IP讨论:
IP 类型 评论内容 时间
42.113.128.124 attackbots
Unauthorized connection attempt detected from IP address 42.113.128.124 to port 445
2020-03-11 09:17:51
42.113.128.43 attackbots
Unauthorized connection attempt detected from IP address 42.113.128.43 to port 23 [J]
2020-02-01 21:34:49
42.113.128.144 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2019-07-02 03:26:22
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.113.128.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10609
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.113.128.149.			IN	A

;; AUTHORITY SECTION:
.			298	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012500 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 26 01:48:00 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 149.128.113.42.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 100.100.2.136, trying next server
;; Got SERVFAIL reply from 100.100.2.138, trying next server
Server:		100.100.2.138
Address:	100.100.2.138#53

** server can't find 149.128.113.42.in-addr.arpa: SERVFAIL

相关IP信息:
最新评论:
IP 类型 评论内容 时间
132.232.59.247 attackbotsspam
Automatic report - Banned IP Access
2019-08-04 11:23:45
107.170.234.235 attackbots
404 NOT FOUND
2019-08-04 11:31:29
79.195.112.55 attack
Aug  4 05:59:01 www sshd\[9136\]: Invalid user ramesh from 79.195.112.55Aug  4 05:59:03 www sshd\[9136\]: Failed password for invalid user ramesh from 79.195.112.55 port 59988 ssh2Aug  4 06:03:24 www sshd\[9287\]: Failed password for root from 79.195.112.55 port 57683 ssh2
...
2019-08-04 12:28:34
67.205.135.65 attackbotsspam
SSH Brute Force, server-1 sshd[12858]: Failed password for invalid user ds from 67.205.135.65 port 60248 ssh2
2019-08-04 11:39:26
14.247.119.219 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-04 00:21:49,916 INFO [amun_request_handler] PortScan Detected on Port: 445 (14.247.119.219)
2019-08-04 11:32:15
129.226.55.241 attackspam
Aug  4 03:57:28 mail sshd\[22414\]: Failed password for invalid user ncic from 129.226.55.241 port 46828 ssh2
Aug  4 04:12:38 mail sshd\[22629\]: Invalid user fabien from 129.226.55.241 port 34318
...
2019-08-04 11:26:30
185.137.84.200 attackspam
Aug  3 15:05:31 xxx sshd[21648]: Did not receive identification string from 185.137.84.200 port 52368
Aug  3 15:06:57 xxx sshd[21668]: Failed password for r.r from 185.137.84.200 port 38182 ssh2
Aug  3 15:06:57 xxx sshd[21668]: Received disconnect from 185.137.84.200 port 38182:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 15:06:57 xxx sshd[21668]: Disconnected from 185.137.84.200 port 38182 [preauth]
Aug  3 15:08:24 xxx sshd[21689]: Failed password for r.r from 185.137.84.200 port 36256 ssh2
Aug  3 15:08:24 xxx sshd[21689]: Received disconnect from 185.137.84.200 port 36256:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 15:08:24 xxx sshd[21689]: Disconnected from 185.137.84.200 port 36256 [preauth]
Aug  3 15:09:53 xxx sshd[21818]: Failed password for r.r from 185.137.84.200 port 34330 ssh2
Aug  3 15:09:53 xxx sshd[21818]: Received disconnect from 185.137.84.200 port 34330:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 15:09:53 xx........
-------------------------------
2019-08-04 11:28:15
46.218.138.197 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-04 00:09:33,950 INFO [amun_request_handler] PortScan Detected on Port: 445 (46.218.138.197)
2019-08-04 11:50:02
66.7.148.189 attackspam
Unauthorised access (Aug  4) SRC=66.7.148.189 LEN=52 TOS=0x08 PREC=0x20 TTL=115 ID=5620 DF TCP DPT=445 WINDOW=8192 SYN
2019-08-04 11:55:00
122.170.64.142 attack
Aug  4 02:42:56 server02 sshd[13011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.170.64.142
Aug  4 02:42:56 server02 sshd[13010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.170.64.142
Aug  4 02:42:56 server02 sshd[13019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.170.64.142
Aug  4 02:42:56 server02 sshd[13009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.170.64.142
Aug  4 02:42:56 server02 sshd[13014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.170.64.142
Aug  4 02:42:56 server02 sshd[13012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.170.64.142

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=122.170.64.142
2019-08-04 11:34:35
81.200.119.45 attack
$f2bV_matches
2019-08-04 12:24:59
51.83.70.157 attack
Invalid user Zmeu from 51.83.70.157 port 36360
2019-08-04 11:21:52
140.246.167.59 attackspambots
Aug  3 21:38:04 plusreed sshd[12921]: Invalid user nextcloud from 140.246.167.59
...
2019-08-04 11:37:53
178.32.238.239 attack
Aug  3 20:10:30 srv01 sshd[30772]: Invalid user jsclient from 178.32.238.239
Aug  3 20:10:30 srv01 sshd[30772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.32.238.239 
Aug  3 20:10:32 srv01 sshd[30772]: Failed password for invalid user jsclient from 178.32.238.239 port 56767 ssh2
Aug  3 20:10:32 srv01 sshd[30772]: Received disconnect from 178.32.238.239: 11: Bye Bye [preauth]
Aug  4 02:04:05 srv01 sshd[3712]: Invalid user inactive from 178.32.238.239
Aug  4 02:04:05 srv01 sshd[3712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.32.238.239 
Aug  4 02:04:07 srv01 sshd[3712]: Failed password for invalid user inactive from 178.32.238.239 port 41158 ssh2
Aug  4 02:04:07 srv01 sshd[3712]: Received disconnect from 178.32.238.239: 11: Bye Bye [preauth]
Aug  4 02:08:19 srv01 sshd[3880]: Invalid user dlzhu from 178.32.238.239
Aug  4 02:08:19 srv01 sshd[3880]: pam_unix(sshd:auth): authen........
-------------------------------
2019-08-04 12:28:11
82.213.245.223 attack
Excessive Port-Scanning
2019-08-04 11:42:19

最近上报的IP列表

220.77.95.154 211.227.201.234 191.249.104.87 190.130.3.222
177.205.105.147 150.223.27.22 131.255.216.0 123.160.232.158
25.174.253.107 123.56.25.127 138.163.70.180 118.218.16.13
78.13.75.88 116.48.4.41 186.68.202.15 3.38.24.49
113.123.245.198 113.70.167.115 109.242.228.84 103.78.55.164