必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
42.117.220.92 attackspambots
Unauthorised access (Aug  8) SRC=42.117.220.92 LEN=40 TOS=0x10 PREC=0x40 TTL=52 ID=41640 TCP DPT=23 WINDOW=64002 SYN
2020-08-09 00:38:48
42.117.227.246 attack
Tried our host z.
2020-07-05 14:55:07
42.117.22.118 attack
1588507687 - 05/03/2020 14:08:07 Host: 42.117.22.118/42.117.22.118 Port: 445 TCP Blocked
2020-05-04 01:57:39
42.117.229.59 attack
Unauthorized connection attempt detected from IP address 42.117.229.59 to port 23 [J]
2020-03-01 17:46:23
42.117.229.211 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-28 22:57:32
42.117.229.82 attack
Unauthorized connection attempt detected from IP address 42.117.229.82 to port 23 [T]
2020-01-22 08:19:53
42.117.227.12 attackspam
Unauthorized connection attempt detected from IP address 42.117.227.12 to port 23 [J]
2020-01-16 01:45:23
42.117.228.223 attack
Unauthorized connection attempt detected from IP address 42.117.228.223 to port 23 [T]
2020-01-09 02:23:26
42.117.228.16 attack
Unauthorized connection attempt detected from IP address 42.117.228.16 to port 23
2019-12-31 01:09:16
42.117.228.91 attack
Dec 14 00:56:09 mc1 kernel: \[440200.538444\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=42.117.228.91 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=10203 PROTO=TCP SPT=13701 DPT=23 WINDOW=10133 RES=0x00 SYN URGP=0 
Dec 14 00:56:09 mc1 kernel: \[440200.561695\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=42.117.228.91 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=10203 PROTO=TCP SPT=13701 DPT=23 WINDOW=10133 RES=0x00 SYN URGP=0 
Dec 14 00:56:09 mc1 kernel: \[440200.599860\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=42.117.228.91 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=10203 PROTO=TCP SPT=13701 DPT=23 WINDOW=10133 RES=0x00 SYN URGP=0 
...
2019-12-14 08:28:06
42.117.228.109 attackspambots
Telnet/23 MH Probe, BF, Hack -
2019-11-20 22:34:00
42.117.229.20 attackspam
Unauthorized connection attempt from IP address 42.117.229.20 on Port 445(SMB)
2019-11-02 17:36:11
42.117.228.5 attack
(Oct  5)  LEN=40 TTL=47 ID=35175 TCP DPT=8080 WINDOW=35358 SYN 
 (Oct  5)  LEN=40 TTL=46 ID=60673 TCP DPT=8080 WINDOW=17829 SYN 
 (Oct  4)  LEN=40 TTL=46 ID=36584 TCP DPT=8080 WINDOW=26003 SYN 
 (Oct  4)  LEN=40 TTL=47 ID=7481 TCP DPT=8080 WINDOW=35358 SYN 
 (Oct  4)  LEN=40 TTL=46 ID=56957 TCP DPT=8080 WINDOW=26003 SYN 
 (Oct  3)  LEN=40 TTL=46 ID=43044 TCP DPT=8080 WINDOW=17829 SYN 
 (Oct  3)  LEN=40 TTL=46 ID=49026 TCP DPT=8080 WINDOW=17829 SYN 
 (Oct  3)  LEN=40 TTL=46 ID=3598 TCP DPT=8080 WINDOW=26003 SYN 
 (Oct  2)  LEN=40 TTL=46 ID=21057 TCP DPT=8080 WINDOW=26003 SYN 
 (Oct  2)  LEN=40 TTL=46 ID=6321 TCP DPT=8080 WINDOW=26003 SYN 
 (Oct  2)  LEN=40 TTL=47 ID=4849 TCP DPT=8080 WINDOW=35358 SYN 
 (Oct  2)  LEN=40 TTL=46 ID=6959 TCP DPT=8080 WINDOW=17829 SYN 
 (Oct  2)  LEN=40 TTL=46 ID=59640 TCP DPT=8080 WINDOW=26003 SYN 
 (Oct  1)  LEN=40 TTL=47 ID=52655 TCP DPT=8080 WINDOW=35358 SYN 
 (Oct  1)  LEN=40 TTL=47 ID=15654 TCP DPT=8080 WINDOW=35358 SYN 
 (Oct  1)  LEN=40 TTL=46 ID=40...
2019-10-05 19:18:06
42.117.226.51 attackspambots
Unauthorized connection attempt from IP address 42.117.226.51 on Port 445(SMB)
2019-09-27 19:57:52
42.117.229.209 attackspam
Honeypot attack, port: 23, PTR: PTR record not found
2019-07-08 22:39:55
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.117.22.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3677
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.117.22.6.			IN	A

;; AUTHORITY SECTION:
.			419	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400

;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 08:42:56 CST 2022
;; MSG SIZE  rcvd: 104
HOST信息:
Host 6.22.117.42.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 6.22.117.42.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
195.191.82.17 attackbotsspam
Aug 25 06:07:44 nextcloud sshd\[16068\]: Invalid user staff from 195.191.82.17
Aug 25 06:07:44 nextcloud sshd\[16068\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.191.82.17
Aug 25 06:07:46 nextcloud sshd\[16068\]: Failed password for invalid user staff from 195.191.82.17 port 26436 ssh2
2020-08-25 13:18:14
103.199.162.153 attack
Aug 24 16:19:21 sachi sshd\[17434\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.199.162.153  user=root
Aug 24 16:19:23 sachi sshd\[17434\]: Failed password for root from 103.199.162.153 port 56482 ssh2
Aug 24 16:22:42 sachi sshd\[19473\]: Invalid user rl from 103.199.162.153
Aug 24 16:22:42 sachi sshd\[19473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.199.162.153
Aug 24 16:22:44 sachi sshd\[19473\]: Failed password for invalid user rl from 103.199.162.153 port 34342 ssh2
2020-08-25 13:20:56
140.143.8.39 attackspambots
Aug 25 00:53:58 firewall sshd[16527]: Invalid user zhangzhe from 140.143.8.39
Aug 25 00:54:00 firewall sshd[16527]: Failed password for invalid user zhangzhe from 140.143.8.39 port 34126 ssh2
Aug 25 00:58:48 firewall sshd[16573]: Invalid user administrator from 140.143.8.39
...
2020-08-25 13:05:26
87.98.182.93 attackspam
$f2bV_matches
2020-08-25 12:58:19
36.89.251.105 attack
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-08-25 12:53:30
221.194.44.114 attackbots
Aug 25 06:31:22 fhem-rasp sshd[13964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.194.44.114  user=root
Aug 25 06:31:24 fhem-rasp sshd[13964]: Failed password for root from 221.194.44.114 port 55591 ssh2
...
2020-08-25 12:48:45
115.159.214.247 attackspambots
Aug 25 05:49:32 h1745522 sshd[20949]: Invalid user wqc from 115.159.214.247 port 47720
Aug 25 05:49:32 h1745522 sshd[20949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.214.247
Aug 25 05:49:32 h1745522 sshd[20949]: Invalid user wqc from 115.159.214.247 port 47720
Aug 25 05:49:35 h1745522 sshd[20949]: Failed password for invalid user wqc from 115.159.214.247 port 47720 ssh2
Aug 25 05:54:03 h1745522 sshd[21610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.214.247  user=root
Aug 25 05:54:05 h1745522 sshd[21610]: Failed password for root from 115.159.214.247 port 49840 ssh2
Aug 25 05:58:39 h1745522 sshd[22430]: Invalid user postgres from 115.159.214.247 port 51976
Aug 25 05:58:39 h1745522 sshd[22430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.214.247
Aug 25 05:58:39 h1745522 sshd[22430]: Invalid user postgres from 115.159.214.247 port
...
2020-08-25 13:13:31
193.70.89.118 attackbotsspam
193.70.89.118 - - \[25/Aug/2020:05:59:07 +0200\] "POST /wp-login.php HTTP/1.1" 200 12822 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
193.70.89.118 - - \[25/Aug/2020:05:59:07 +0200\] "POST /wp-login.php HTTP/1.1" 200 12657 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2020-08-25 12:49:30
96.45.180.34 attack
Aug 25 01:00:03 ws24vmsma01 sshd[43339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.45.180.34
Aug 25 01:00:05 ws24vmsma01 sshd[43339]: Failed password for invalid user waldo from 96.45.180.34 port 51518 ssh2
...
2020-08-25 12:44:19
193.111.156.7 attackbotsspam
193.111.156.7 - - [25/Aug/2020:05:58:37 +0200] "POST /xmlrpc.php HTTP/1.1" 403 31178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
193.111.156.7 - - [25/Aug/2020:05:58:37 +0200] "POST /xmlrpc.php HTTP/1.1" 403 31178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
...
2020-08-25 13:14:39
222.244.217.158 attackspam
" "
2020-08-25 13:09:04
89.90.209.252 attackspam
Invalid user admin from 89.90.209.252 port 41468
2020-08-25 13:06:06
222.186.175.163 attackspam
2020-08-25T07:53:23.868170afi-git.jinr.ru sshd[21872]: Failed password for root from 222.186.175.163 port 22766 ssh2
2020-08-25T07:53:27.835396afi-git.jinr.ru sshd[21872]: Failed password for root from 222.186.175.163 port 22766 ssh2
2020-08-25T07:53:31.999461afi-git.jinr.ru sshd[21872]: Failed password for root from 222.186.175.163 port 22766 ssh2
2020-08-25T07:53:31.999621afi-git.jinr.ru sshd[21872]: error: maximum authentication attempts exceeded for root from 222.186.175.163 port 22766 ssh2 [preauth]
2020-08-25T07:53:31.999635afi-git.jinr.ru sshd[21872]: Disconnecting: Too many authentication failures [preauth]
...
2020-08-25 13:05:00
187.162.246.198 attackbotsspam
$f2bV_matches
2020-08-25 12:56:28
81.68.82.251 attack
Fail2Ban
2020-08-25 12:45:50

最近上报的IP列表

42.118.228.245 42.118.95.100 42.118.23.96 42.118.39.158
42.118.95.180 42.118.42.23 42.122.65.201 42.119.82.62
42.119.157.63 42.119.25.201 42.122.17.185 42.127.192.30
42.119.224.186 42.151.105.181 42.145.221.229 42.176.117.116
42.176.113.230 42.176.45.130 42.177.152.230 42.179.64.13