必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackspam
Dec  2 16:36:07 server sshd\[10903\]: Invalid user pi from 42.119.14.140
Dec  2 16:36:07 server sshd\[10904\]: Invalid user pi from 42.119.14.140
Dec  2 16:36:07 server sshd\[10903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.119.14.140 
Dec  2 16:36:07 server sshd\[10904\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.119.14.140 
Dec  2 16:36:09 server sshd\[10903\]: Failed password for invalid user pi from 42.119.14.140 port 43956 ssh2
...
2019-12-02 23:00:28
相同子网IP讨论:
IP 类型 评论内容 时间
42.119.149.55 attackbots
Attempted connection to port 445.
2020-08-01 16:46:42
42.119.145.98 attackspam
1594179775 - 07/08/2020 05:42:55 Host: 42.119.145.98/42.119.145.98 Port: 445 TCP Blocked
2020-07-08 16:55:18
42.119.149.26 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 15-04-2020 04:55:10.
2020-04-15 15:24:36
42.119.14.203 attackbots
Automatic report - Port Scan Attack
2020-03-14 05:19:10
42.119.149.103 attackbots
Email rejected due to spam filtering
2020-03-10 16:45:45
42.119.14.199 attackspam
Unauthorized connection attempt detected from IP address 42.119.14.199 to port 23 [T]
2020-01-20 07:00:51
42.119.14.59 attack
*Port Scan* detected from 42.119.14.59 (VN/Vietnam/-). 4 hits in the last 250 seconds
2019-08-30 08:16:13
42.119.145.40 attackspambots
Sun, 21 Jul 2019 07:36:07 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 22:50:22
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.119.14.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58735
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.119.14.140.			IN	A

;; AUTHORITY SECTION:
.			248	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120200 1800 900 604800 86400

;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 02 23:00:23 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 140.14.119.42.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 140.14.119.42.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
182.50.135.81 attackspam
xmlrpc attack
2020-03-21 14:28:49
104.248.126.170 attackspam
$f2bV_matches
2020-03-21 13:51:44
123.97.100.75 attackbots
1584762763 - 03/21/2020 04:52:43 Host: 123.97.100.75/123.97.100.75 Port: 445 TCP Blocked
2020-03-21 14:22:15
92.118.37.88 attackspambots
Mar 21 06:57:44 debian-2gb-nbg1-2 kernel: \[7029363.030496\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.88 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=42945 PROTO=TCP SPT=55916 DPT=33893 WINDOW=1024 RES=0x00 SYN URGP=0
2020-03-21 14:11:10
222.186.173.238 attackbotsspam
Mar 21 07:19:37 jane sshd[2362]: Failed password for root from 222.186.173.238 port 64474 ssh2
Mar 21 07:19:41 jane sshd[2362]: Failed password for root from 222.186.173.238 port 64474 ssh2
...
2020-03-21 14:31:23
134.73.51.192 attackspambots
Mar 21 05:38:58 mail.srvfarm.net postfix/smtpd[3238064]: NOQUEUE: reject: RCPT from unknown[134.73.51.192]: 554 5.7.1 Service unavailable; Client host [134.73.51.192] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?134.73.51.192; from= to= proto=ESMTP helo=
Mar 21 05:38:58 mail.srvfarm.net postfix/smtpd[3238065]: NOQUEUE: reject: RCPT from unknown[134.73.51.192]: 554 5.7.1 Service unavailable; Client host [134.73.51.192] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?134.73.51.192; from= to= proto=ESMTP helo=
Mar 21 05:38:58 mail.srvfarm.net postfix/smtpd[3238066]: NOQUEUE: reject: RCPT from unknown[134.73.51.192]: 554 5.7.1 Service unavailable; Client host [134.73.51.192] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?134.73.51.192; from=
2020-03-21 13:44:29
69.163.152.111 attackbots
69.163.152.111 - - [21/Mar/2020:04:52:42 +0100] "GET /wp-login.php HTTP/1.1" 200 6463 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
69.163.152.111 - - [21/Mar/2020:04:52:44 +0100] "POST /wp-login.php HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
69.163.152.111 - - [21/Mar/2020:04:52:46 +0100] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-03-21 14:20:13
58.214.60.242 attack
Automatic report - Port Scan Attack
2020-03-21 14:24:45
185.176.27.54 attack
03/21/2020-00:59:02.802393 185.176.27.54 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2020-03-21 14:03:44
148.72.23.181 attackbots
WordPress login Brute force / Web App Attack on client site.
2020-03-21 14:10:28
62.169.208.59 attackbots
Mar 21 03:52:43 marvibiene sshd[6980]: Invalid user ft from 62.169.208.59 port 58576
Mar 21 03:52:43 marvibiene sshd[6980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.169.208.59
Mar 21 03:52:43 marvibiene sshd[6980]: Invalid user ft from 62.169.208.59 port 58576
Mar 21 03:52:45 marvibiene sshd[6980]: Failed password for invalid user ft from 62.169.208.59 port 58576 ssh2
...
2020-03-21 14:21:38
45.133.99.4 attackspam
Mar 21 06:03:12 mail postfix/smtpd\[31072\]: warning: unknown\[45.133.99.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Mar 21 06:03:33 mail postfix/smtpd\[31090\]: warning: unknown\[45.133.99.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Mar 21 06:42:07 mail postfix/smtpd\[32059\]: warning: unknown\[45.133.99.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Mar 21 06:42:25 mail postfix/smtpd\[32062\]: warning: unknown\[45.133.99.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2020-03-21 13:57:00
182.219.172.224 attack
Mar 21 06:04:59 OPSO sshd\[19428\]: Invalid user vasile from 182.219.172.224 port 48182
Mar 21 06:04:59 OPSO sshd\[19428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.219.172.224
Mar 21 06:05:01 OPSO sshd\[19428\]: Failed password for invalid user vasile from 182.219.172.224 port 48182 ssh2
Mar 21 06:09:45 OPSO sshd\[20618\]: Invalid user eddie from 182.219.172.224 port 39162
Mar 21 06:09:45 OPSO sshd\[20618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.219.172.224
2020-03-21 14:30:02
111.229.39.187 attackspam
Mar 21 04:48:02 eventyay sshd[12933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.39.187
Mar 21 04:48:04 eventyay sshd[12933]: Failed password for invalid user bacula from 111.229.39.187 port 33246 ssh2
Mar 21 04:53:17 eventyay sshd[13043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.39.187
...
2020-03-21 13:54:52
51.255.83.132 attack
51.255.83.132 - - [21/Mar/2020:05:00:40 +0100] "GET /wp-login.php HTTP/1.1" 200 5688 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
51.255.83.132 - - [21/Mar/2020:05:00:41 +0100] "POST /wp-login.php HTTP/1.1" 200 6587 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
51.255.83.132 - - [21/Mar/2020:05:00:42 +0100] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-03-21 14:06:29

最近上报的IP列表

2.45.109.145 211.255.229.120 182.221.94.16 50.25.208.78
52.27.88.195 102.226.48.114 42.114.13.80 120.92.90.10
154.209.5.49 185.171.27.235 167.172.24.169 14.0.145.85
41.41.0.14 45.68.87.135 191.217.44.47 165.132.88.11
75.61.131.145 51.11.170.97 47.68.111.6 220.97.0.125