必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackspam
Dec  2 16:36:07 server sshd\[10903\]: Invalid user pi from 42.119.14.140
Dec  2 16:36:07 server sshd\[10904\]: Invalid user pi from 42.119.14.140
Dec  2 16:36:07 server sshd\[10903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.119.14.140 
Dec  2 16:36:07 server sshd\[10904\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.119.14.140 
Dec  2 16:36:09 server sshd\[10903\]: Failed password for invalid user pi from 42.119.14.140 port 43956 ssh2
...
2019-12-02 23:00:28
相同子网IP讨论:
IP 类型 评论内容 时间
42.119.149.55 attackbots
Attempted connection to port 445.
2020-08-01 16:46:42
42.119.145.98 attackspam
1594179775 - 07/08/2020 05:42:55 Host: 42.119.145.98/42.119.145.98 Port: 445 TCP Blocked
2020-07-08 16:55:18
42.119.149.26 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 15-04-2020 04:55:10.
2020-04-15 15:24:36
42.119.14.203 attackbots
Automatic report - Port Scan Attack
2020-03-14 05:19:10
42.119.149.103 attackbots
Email rejected due to spam filtering
2020-03-10 16:45:45
42.119.14.199 attackspam
Unauthorized connection attempt detected from IP address 42.119.14.199 to port 23 [T]
2020-01-20 07:00:51
42.119.14.59 attack
*Port Scan* detected from 42.119.14.59 (VN/Vietnam/-). 4 hits in the last 250 seconds
2019-08-30 08:16:13
42.119.145.40 attackspambots
Sun, 21 Jul 2019 07:36:07 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 22:50:22
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.119.14.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58735
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.119.14.140.			IN	A

;; AUTHORITY SECTION:
.			248	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120200 1800 900 604800 86400

;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 02 23:00:23 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 140.14.119.42.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 140.14.119.42.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
211.179.124.162 attackspam
Jul  3 03:51:00 backup sshd[53582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.179.124.162 
Jul  3 03:51:02 backup sshd[53582]: Failed password for invalid user lsfadmin from 211.179.124.162 port 42230 ssh2
...
2020-07-04 01:42:18
218.92.0.145 attack
Jul  3 19:32:25 santamaria sshd\[15914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145  user=root
Jul  3 19:32:27 santamaria sshd\[15914\]: Failed password for root from 218.92.0.145 port 2421 ssh2
Jul  3 19:32:46 santamaria sshd\[15916\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145  user=root
...
2020-07-04 01:40:17
142.93.159.29 attackbots
(sshd) Failed SSH login from 142.93.159.29 (CA/Canada/-): 5 in the last 3600 secs
2020-07-04 01:33:28
45.182.159.195 attack
400 BAD REQUEST
2020-07-04 01:47:08
78.199.19.89 attack
Brute-force attempt banned
2020-07-04 01:45:15
222.186.180.223 attack
Jul  3 07:26:20 web9 sshd\[20412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223  user=root
Jul  3 07:26:22 web9 sshd\[20412\]: Failed password for root from 222.186.180.223 port 44474 ssh2
Jul  3 07:26:33 web9 sshd\[20412\]: Failed password for root from 222.186.180.223 port 44474 ssh2
Jul  3 07:26:36 web9 sshd\[20412\]: Failed password for root from 222.186.180.223 port 44474 ssh2
Jul  3 07:26:41 web9 sshd\[20449\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223  user=root
2020-07-04 01:30:56
211.137.254.221 attackbotsspam
SSH login attempts.
2020-07-04 01:35:08
49.235.192.120 attackbots
Jul  3 14:11:22 firewall sshd[28271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.192.120
Jul  3 14:11:22 firewall sshd[28271]: Invalid user tspeak from 49.235.192.120
Jul  3 14:11:24 firewall sshd[28271]: Failed password for invalid user tspeak from 49.235.192.120 port 2863 ssh2
...
2020-07-04 01:58:21
193.228.91.105 attackspam
Unauthorized connection attempt detected from IP address 193.228.91.105 to port 22 [T]
2020-07-04 02:00:45
200.9.67.4 attackspam
Unauthorized connection attempt from IP address 200.9.67.4 on Port 445(SMB)
2020-07-04 01:38:16
118.25.100.121 attack
Jul  3 18:11:29 xeon sshd[37236]: Failed password for invalid user family from 118.25.100.121 port 60320 ssh2
2020-07-04 01:53:42
106.54.48.208 attackbots
Jun 30 00:52:29 ns sshd[13447]: Connection from 106.54.48.208 port 57708 on 134.119.39.98 port 22
Jun 30 00:52:32 ns sshd[13447]: Invalid user test123 from 106.54.48.208 port 57708
Jun 30 00:52:32 ns sshd[13447]: Failed password for invalid user test123 from 106.54.48.208 port 57708 ssh2
Jun 30 00:52:32 ns sshd[13447]: Received disconnect from 106.54.48.208 port 57708:11: Bye Bye [preauth]
Jun 30 00:52:32 ns sshd[13447]: Disconnected from 106.54.48.208 port 57708 [preauth]
Jun 30 00:58:09 ns sshd[18151]: Connection from 106.54.48.208 port 56746 on 134.119.39.98 port 22
Jun 30 00:58:12 ns sshd[18151]: Invalid user admin from 106.54.48.208 port 56746
Jun 30 00:58:12 ns sshd[18151]: Failed password for invalid user admin from 106.54.48.208 port 56746 ssh2
Jun 30 00:58:12 ns sshd[18151]: Received disconnect from 106.54.48.208 port 56746:11: Bye Bye [preauth]
Jun 30 00:58:12 ns sshd[18151]: Disconnected from 106.54.48.208 port 56746 [preauth]
Jun 30 01:01:38 ns sshd[24216]: ........
-------------------------------
2020-07-04 02:07:32
103.98.176.188 attackbotsspam
32169:Jun 30 00:37:11 v2202006123119120432 sshd[3872]: Invalid user vertica from 103.98.176.188 port 50134
32171:Jun 30 00:37:11 v2202006123119120432 sshd[3872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.98.176.188 
32172:Jun 30 00:37:12 v2202006123119120432 sshd[3872]: Failed password for invalid user vertica from 103.98.176.188 port 50134 ssh2
32173:Jun 30 00:37:13 v2202006123119120432 sshd[3872]: Received disconnect from 103.98.176.188 port 50134:11: Bye Bye [preauth]
32174:Jun 30 00:37:13 v2202006123119120432 sshd[3872]: Disconnected from invalid user vertica 103.98.176.188 port 50134 [preauth]
32238:Jun 30 00:42:13 v2202006123119120432 sshd[4177]: Invalid user ubuntu from 103.98.176.188 port 33390
32240:Jun 30 00:42:13 v2202006123119120432 sshd[4177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.98.176.188 

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.
2020-07-04 02:06:27
103.84.63.5 attackspam
reported through recidive - multiple failed attempts(SSH)
2020-07-04 01:57:04
222.186.175.202 attackspam
Jul  3 18:05:43 rush sshd[20468]: Failed password for root from 222.186.175.202 port 18458 ssh2
Jul  3 18:05:53 rush sshd[20468]: Failed password for root from 222.186.175.202 port 18458 ssh2
Jul  3 18:05:55 rush sshd[20468]: Failed password for root from 222.186.175.202 port 18458 ssh2
Jul  3 18:05:55 rush sshd[20468]: error: maximum authentication attempts exceeded for root from 222.186.175.202 port 18458 ssh2 [preauth]
...
2020-07-04 02:09:17

最近上报的IP列表

2.45.109.145 211.255.229.120 182.221.94.16 50.25.208.78
52.27.88.195 102.226.48.114 42.114.13.80 120.92.90.10
154.209.5.49 185.171.27.235 167.172.24.169 14.0.145.85
41.41.0.14 45.68.87.135 191.217.44.47 165.132.88.11
75.61.131.145 51.11.170.97 47.68.111.6 220.97.0.125