必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
点此参与IP信息讨论
类型 评论内容 时间
attackspambots 
Attempt to attack host OS, exploiting network vulnerabilities, on 13-12-2019 04:55:11.
 2019-12-13 14:15:52
相同子网IP讨论:
IP 类型 评论内容 时间
42.118.219.199 attackbotsspam 
20/7/31@23:48:44: FAIL: Alarm-Network address from=42.118.219.199
20/7/31@23:48:44: FAIL: Alarm-Network address from=42.118.219.199
...
 2020-08-01 18:32:51
42.118.219.11 attack 
Automatic report - XMLRPC Attack
 2020-04-12 19:31:53
42.118.219.244 attackspam 
02/22/2020-03:40:54.932327 42.118.219.244 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
 2020-02-22 19:01:59
42.118.219.202 attackbots 
Unauthorized connection attempt from IP address 42.118.219.202 on Port 445(SMB)
 2020-01-11 20:09:11
42.118.219.131 attack 
unauthorized connection attempt
 2020-01-09 14:08:03
42.118.219.16 attackspam 
Unauthorized connection attempt detected from IP address 42.118.219.16 to port 445
 2020-01-01 04:48:54
42.118.219.173 attackspam 
Unauthorized connection attempt detected from IP address 42.118.219.173 to port 445
 2019-12-31 03:45:26
42.118.219.116 attackbots 
1577255368 - 12/25/2019 07:29:28 Host: 42.118.219.116/42.118.219.116 Port: 445 TCP Blocked
 2019-12-25 15:14:16
42.118.219.198 attackspambots 
Unauthorized connection attempt detected from IP address 42.118.219.198 to port 445
 2019-12-23 23:53:40
42.118.219.229 attackspam 
Unauthorized connection attempt from IP address 42.118.219.229 on Port 445(SMB)
 2019-11-26 08:44:02
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.118.219.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52542
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.118.219.52.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121300 1800 900 604800 86400

;; Query time: 120 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 13 14:15:49 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 52.219.118.42.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.219.118.42.in-addr.arpa: NXDOMAIN
相关IP信息:
42.118.219.67
42.118.219.84
42.118.219.75
42.118.219.52
42.118.219.14
42.118.219.141
42.118.219.122
42.118.219.25
42.118.219.215
42.118.219.100
42.118.219.26
42.118.219.28
42.118.219.246
42.118.219.48
42.118.219.78
42.118.219.151
42.118.219.60
42.118.219.9
42.118.219.118
42.118.219.92
42.118.219.90
42.118.219.91
42.118.219.241
42.118.219.50
42.118.219.187
42.118.219.183
42.118.219.117
42.118.219.51
42.118.219.40
42.118.219.19
42.118.219.88
42.118.219.82
42.118.219.66
42.118.219.172
42.118.219.202
42.118.219.195
42.118.219.129
42.118.219.20
42.118.219.97
42.118.219.112
42.118.219.64
42.118.219.3
42.118.219.252
42.118.219.21
42.118.219.76
42.118.219.206
42.118.219.41
42.118.219.200
42.118.219.205
42.118.219.107
42.118.219.146
42.118.219.216
42.118.219.149
42.118.219.136
42.118.219.6
42.118.219.95
42.118.219.190
42.118.219.142
42.118.219.113
42.118.219.192
42.118.219.4
42.118.219.45
42.118.219.96
42.118.219.103
42.118.219.224
42.118.219.217
42.118.219.161
42.118.219.17
42.118.219.225
42.118.219.10
42.118.219.126
42.118.219.101
42.118.219.207
42.118.219.115
42.118.219.230
42.118.219.133
42.118.219.208
42.118.219.166
42.118.219.240
42.118.219.109
42.118.219.159
42.118.219.233
42.118.219.222
42.118.219.23
42.118.219.81
42.118.219.249
42.118.219.189
42.118.219.98
42.118.219.74
42.118.219.15
42.118.219.49
42.118.219.150
42.118.219.104
42.118.219.65
42.118.219.167
42.118.219.11
42.118.219.194
42.118.219.125
42.118.219.196
42.118.219.248
42.118.219.47
42.118.219.219
42.118.219.145
42.118.219.34
42.118.219.135
42.118.219.228
42.118.219.33
42.118.219.158
42.118.219.212
42.118.219.43
42.118.219.198
42.118.219.108
42.118.219.87
42.118.219.227
42.118.219.223
42.118.219.197
42.118.219.155
42.118.219.5
42.118.219.85
42.118.219.213
42.118.219.238
42.118.219.176
42.118.219.120
42.118.219.253
42.118.219.193
42.118.219.61
42.118.219.105
42.118.219.147
42.118.219.30
42.118.219.211
42.118.219.37
42.118.219.116
42.118.219.1
42.118.219.182
42.118.219.79
42.118.219.55
42.118.219.18
42.118.219.77
42.118.219.204
42.118.219.29
42.118.219.99
42.118.219.56
42.118.219.128
42.118.219.247
42.118.219.46
42.118.219.39
42.118.219.201
42.118.219.175
42.118.219.173
42.118.219.188
42.118.219.186
42.118.219.174
42.118.219.130
42.118.219.169
42.118.219.94
42.118.219.157
42.118.219.119
42.118.219.214
42.118.219.127
42.118.219.242
42.118.219.144
42.118.219.180
42.118.219.42
42.118.219.36
42.118.219.143
42.118.219.244
42.118.219.22
42.118.219.69
42.118.219.140
42.118.219.16
42.118.219.234
42.118.219.8
42.118.219.53
42.118.219.152
42.118.219.154
42.118.219.72
42.118.219.160
42.118.219.89
42.118.219.237
42.118.219.148
42.118.219.114
42.118.219.12
42.118.219.54
42.118.219.106
42.118.219.24
42.118.219.102
42.118.219.178
42.118.219.111
42.118.219.209
42.118.219.199
42.118.219.184
42.118.219.93
42.118.219.59
42.118.219.35
42.118.219.220
42.118.219.80
42.118.219.137
42.118.219.177
42.118.219.218
42.118.219.156
42.118.219.250
42.118.219.70
42.118.219.139
42.118.219.231
42.118.219.131
42.118.219.170
42.118.219.110
42.118.219.2
42.118.219.58
42.118.219.181
42.118.219.134
42.118.219.203
42.118.219.31
42.118.219.179
42.118.219.138
42.118.219.171
42.118.219.185
42.118.219.235
42.118.219.164
42.118.219.162
42.118.219.191
42.118.219.13
42.118.219.232
42.118.219.251
42.118.219.124
42.118.219.236
42.118.219.7
42.118.219.210
42.118.219.44
42.118.219.132
42.118.219.239
42.118.219.73
42.118.219.165
42.118.219.243
42.118.219.86
42.118.219.168
42.118.219.62
42.118.219.32
42.118.219.229
42.118.219.123
42.118.219.226
42.118.219.57
42.118.219.245
42.118.219.153
42.118.219.254
42.118.219.163
42.118.219.221
42.118.219.68
42.118.219.83
42.118.219.27
42.118.219.63
42.118.219.121
42.118.219.38
42.118.219.71
最新评论:
IP 类型 评论内容 时间
128.199.200.108 attack 
Jun 18 15:07:24 scw-tender-jepsen sshd[8410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.200.108
Jun 18 15:07:26 scw-tender-jepsen sshd[8410]: Failed password for invalid user cut from 128.199.200.108 port 40120 ssh2
 2020-06-19 00:28:18
46.38.150.193 attack 
1456 times SMTP brute-force
 2020-06-19 00:32:14
200.108.132.90 attackspam 
Jun 18 13:27:01 mail.srvfarm.net postfix/smtps/smtpd[1465073]: warning: unknown[200.108.132.90]: SASL PLAIN authentication failed: 
Jun 18 13:27:01 mail.srvfarm.net postfix/smtps/smtpd[1465073]: lost connection after AUTH from unknown[200.108.132.90]
Jun 18 13:29:50 mail.srvfarm.net postfix/smtps/smtpd[1467860]: warning: unknown[200.108.132.90]: SASL PLAIN authentication failed: 
Jun 18 13:29:50 mail.srvfarm.net postfix/smtps/smtpd[1467860]: lost connection after AUTH from unknown[200.108.132.90]
Jun 18 13:34:46 mail.srvfarm.net postfix/smtpd[1469322]: warning: unknown[200.108.132.90]: SASL PLAIN authentication failed:
 2020-06-19 00:16:48
93.99.134.28 attackbotsspam 
Jun 18 13:50:56 mail.srvfarm.net postfix/smtps/smtpd[1469501]: warning: unknown[93.99.134.28]: SASL PLAIN authentication failed: 
Jun 18 13:50:56 mail.srvfarm.net postfix/smtps/smtpd[1469501]: lost connection after AUTH from unknown[93.99.134.28]
Jun 18 13:52:52 mail.srvfarm.net postfix/smtps/smtpd[1472204]: warning: unknown[93.99.134.28]: SASL PLAIN authentication failed: 
Jun 18 13:52:52 mail.srvfarm.net postfix/smtps/smtpd[1472204]: lost connection after AUTH from unknown[93.99.134.28]
Jun 18 13:59:23 mail.srvfarm.net postfix/smtpd[1474820]: warning: unknown[93.99.134.28]: SASL PLAIN authentication failed:
 2020-06-19 00:13:54
66.249.65.116 attackbots 
Automatic report - Banned IP Access
 2020-06-19 00:47:13
191.53.222.121 attackbots 
Jun 18 16:45:00 mail.srvfarm.net postfix/smtpd[1538843]: warning: unknown[191.53.222.121]: SASL PLAIN authentication failed: 
Jun 18 16:45:01 mail.srvfarm.net postfix/smtpd[1538843]: lost connection after AUTH from unknown[191.53.222.121]
Jun 18 16:46:44 mail.srvfarm.net postfix/smtps/smtpd[1536586]: warning: unknown[191.53.222.121]: SASL PLAIN authentication failed: 
Jun 18 16:46:45 mail.srvfarm.net postfix/smtps/smtpd[1536586]: lost connection after AUTH from unknown[191.53.222.121]
Jun 18 16:50:06 mail.srvfarm.net postfix/smtps/smtpd[1536200]: warning: unknown[191.53.222.121]: SASL PLAIN authentication failed:
 2020-06-19 00:50:58
185.143.75.81 attackbots 
2020-06-18 19:20:32 auth_plain authenticator failed for (User) [185.143.75.81]: 535 Incorrect authentication data (set_id=glass@lavrinenko.info)
2020-06-18 19:21:18 auth_plain authenticator failed for (User) [185.143.75.81]: 535 Incorrect authentication data (set_id=timesheets@lavrinenko.info)
...
 2020-06-19 00:22:18
187.172.191.246 attackspam 
Automatic report - XMLRPC Attack
 2020-06-19 00:19:13
129.28.141.140 attackspam 
2020/06/18 13:06:05 [error] 842#842: *14189 open() "/usr/share/nginx/html/cgi-bin/php" failed (2: No such file or directory), client: 129.28.141.140, server: _, request: "POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1", host: "185.118.196.154"
2020/06/18 13:06:08 [error] 842#842: *14189 open() "/usr/share/nginx/html/cgi-bin/php5" failed (2: No such file or directory), client: 129.28.141.140, server: _, request: "POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6
 2020-06-19 00:54:00
168.0.227.50 attack 
Jun 18 13:49:01 mail.srvfarm.net postfix/smtps/smtpd[1471887]: warning: 168-0-227-50.dynamic.telnetdns.com.br[168.0.227.50]: SASL PLAIN authentication failed: 
Jun 18 13:49:01 mail.srvfarm.net postfix/smtps/smtpd[1471887]: lost connection after AUTH from 168-0-227-50.dynamic.telnetdns.com.br[168.0.227.50]
Jun 18 13:51:24 mail.srvfarm.net postfix/smtps/smtpd[1471054]: warning: 168-0-227-50.dynamic.telnetdns.com.br[168.0.227.50]: SASL PLAIN authentication failed: 
Jun 18 13:51:24 mail.srvfarm.net postfix/smtps/smtpd[1471054]: lost connection after AUTH from 168-0-227-50.dynamic.telnetdns.com.br[168.0.227.50]
Jun 18 13:52:15 mail.srvfarm.net postfix/smtps/smtpd[1471884]: warning: 168-0-227-50.dynamic.telnetdns.com.br[168.0.227.50]: SASL PLAIN authentication failed:
 2020-06-19 00:25:23
185.180.91.252 attackbots 
DATE:2020-06-18 14:05:49, IP:185.180.91.252, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
 2020-06-19 00:49:42
103.207.7.75 attackspam 
Jun 18 13:18:57 mail.srvfarm.net postfix/smtps/smtpd[1467859]: warning: unknown[103.207.7.75]: SASL PLAIN authentication failed: 
Jun 18 13:18:58 mail.srvfarm.net postfix/smtps/smtpd[1467859]: lost connection after AUTH from unknown[103.207.7.75]
Jun 18 13:21:22 mail.srvfarm.net postfix/smtps/smtpd[1467859]: warning: unknown[103.207.7.75]: SASL PLAIN authentication failed: 
Jun 18 13:21:23 mail.srvfarm.net postfix/smtps/smtpd[1467859]: lost connection after AUTH from unknown[103.207.7.75]
Jun 18 13:28:55 mail.srvfarm.net postfix/smtpd[1464959]: warning: unknown[103.207.7.75]: SASL PLAIN authentication failed:
 2020-06-19 00:54:27
92.52.204.82 attackspambots 
Jun 18 12:54:56 mail.srvfarm.net postfix/smtps/smtpd[1450704]: warning: unknown[92.52.204.82]: SASL PLAIN authentication failed: 
Jun 18 12:54:56 mail.srvfarm.net postfix/smtps/smtpd[1450704]: lost connection after AUTH from unknown[92.52.204.82]
Jun 18 12:57:15 mail.srvfarm.net postfix/smtps/smtpd[1448758]: warning: unknown[92.52.204.82]: SASL PLAIN authentication failed: 
Jun 18 12:57:15 mail.srvfarm.net postfix/smtps/smtpd[1448758]: lost connection after AUTH from unknown[92.52.204.82]
Jun 18 12:59:53 mail.srvfarm.net postfix/smtps/smtpd[1450196]: warning: unknown[92.52.204.82]: SASL PLAIN authentication failed:
 2020-06-19 00:55:52
45.80.208.225 attack 
Jun 18 15:53:31 web01.agentur-b-2.de postfix/smtpd[47632]: NOQUEUE: reject: RCPT from unknown[45.80.208.225]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 18 15:53:33 web01.agentur-b-2.de postfix/smtpd[22988]: NOQUEUE: reject: RCPT from unknown[45.80.208.225]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 18 15:54:02 web01.agentur-b-2.de postfix/smtpd[47632]: NOQUEUE: reject: RCPT from unknown[45.80.208.225]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 18 15:58:32 web01.agentur-b-2.de postfix/smtpd[47631]: NOQUEUE: reject: RCPT from unknown[45.80.208.225]: 450 4.7.1 : Helo command rejected: Host not found; from=
 2020-06-19 00:35:43
46.33.103.69 attack 
Jun 18 13:10:54 mail.srvfarm.net postfix/smtps/smtpd[1465093]: warning: 46-33-103-69.infos.cz[46.33.103.69]: SASL PLAIN authentication failed: 
Jun 18 13:10:54 mail.srvfarm.net postfix/smtps/smtpd[1465093]: lost connection after AUTH from 46-33-103-69.infos.cz[46.33.103.69]
Jun 18 13:14:19 mail.srvfarm.net postfix/smtpd[1453028]: warning: 46-33-103-69.infos.cz[46.33.103.69]: SASL PLAIN authentication failed: 
Jun 18 13:14:19 mail.srvfarm.net postfix/smtpd[1453028]: lost connection after AUTH from 46-33-103-69.infos.cz[46.33.103.69]
Jun 18 13:18:38 mail.srvfarm.net postfix/smtps/smtpd[1465089]: warning: 46-33-103-69.infos.cz[46.33.103.69]: SASL PLAIN authentication failed:
 2020-06-19 01:00:30

最近上报的IP列表

122.51.222.18 119.205.98.157 112.78.162.220 62.245.115.145
172.245.116.2 28.91.247.21 158.78.99.1 62.22.71.242
170.192.138.254 34.134.153.38 122.88.31.170 5.67.87.40
63.55.9.124 95.35.95.3 121.226.68.79 177.241.141.98
135.40.26.46 38.175.28.170 18.204.219.52 74.6.131.123