必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
点此参与IP信息讨论
类型 评论内容 时间
attackbots 
Unauthorized connection attempt from IP address 42.119.63.197 on Port 445(SMB)
 2019-12-23 05:55:01
相同子网IP讨论:
IP 类型 评论内容 时间
42.119.63.216 attackbotsspam 
Unauthorized connection attempt from IP address 42.119.63.216 on Port 445(SMB)
 2020-08-21 00:52:53
42.119.63.130 attackspam 
Invalid user Administrator from 42.119.63.130 port 63569
 2020-04-04 04:14:24
42.119.63.207 attack 
445/tcp
[2020-03-16]1pkt
 2020-03-17 07:03:34
42.119.63.125 attackspambots 
Lines containing failures of 42.119.63.125
Mar 11 11:34:12 shared11 sshd[5411]: Did not receive identification string from 42.119.63.125 port 11749
Mar 11 11:34:42 shared11 sshd[5414]: Invalid user thostname0nich from 42.119.63.125 port 12506
Mar 11 11:34:46 shared11 sshd[5414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.119.63.125
Mar 11 11:34:49 shared11 sshd[5414]: Failed password for invalid user thostname0nich from 42.119.63.125 port 12506 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=42.119.63.125
 2020-03-12 00:52:34
42.119.63.241 attackbots 
1583383750 - 03/05/2020 05:49:10 Host: 42.119.63.241/42.119.63.241 Port: 445 TCP Blocked
 2020-03-05 17:29:57
42.119.63.215 attack 
1581601657 - 02/13/2020 14:47:37 Host: 42.119.63.215/42.119.63.215 Port: 445 TCP Blocked
 2020-02-14 01:33:27
42.119.63.57 attack 
Unauthorized connection attempt detected from IP address 42.119.63.57 to port 445 [T]
 2020-01-21 04:18:26
42.119.63.27 attackbotsspam 
[WedDec1815:29:49.8071222019][:error][pid17598:tid140308599772928][client42.119.63.27:51320][client42.119.63.27]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"398"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(DisableifyouwanttoallowMSIE6\)"][severity"WARNING"][hostname"galardi.ch"][uri"/"][unique_id"Xfo33dqHSgKeT0vYKHLiSAAAAMo"][WedDec1815:29:57.1412392019][:error][pid30501:tid140308762294016][client42.119.63.27:40294][client42.119.63.27]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"398"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(Disableifyouwant
 2019-12-19 06:39:10
42.119.63.55 attackspam 
Attempt to attack host OS, exploiting network vulnerabilities, on 06-11-2019 14:40:34.
 2019-11-07 00:14:54
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.119.63.197
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25625
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.119.63.197.			IN	A

;; AUTHORITY SECTION:
.			139	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122201 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 23 05:54:58 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 197.63.119.42.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 197.63.119.42.in-addr.arpa: SERVFAIL
相关IP信息:
42.119.63.23
42.119.63.248
42.119.63.135
42.119.63.79
42.119.63.106
42.119.63.241
42.119.63.190
42.119.63.228
42.119.63.141
42.119.63.134
42.119.63.155
42.119.63.230
42.119.63.8
42.119.63.47
42.119.63.97
42.119.63.55
42.119.63.21
42.119.63.167
42.119.63.129
42.119.63.103
42.119.63.70
42.119.63.49
42.119.63.142
42.119.63.249
42.119.63.96
42.119.63.77
42.119.63.41
42.119.63.51
42.119.63.14
42.119.63.201
42.119.63.144
42.119.63.34
42.119.63.74
42.119.63.15
42.119.63.175
42.119.63.193
42.119.63.80
42.119.63.181
42.119.63.25
42.119.63.114
42.119.63.200
42.119.63.139
42.119.63.43
42.119.63.152
42.119.63.125
42.119.63.19
42.119.63.119
42.119.63.81
42.119.63.128
42.119.63.64
42.119.63.10
42.119.63.89
42.119.63.117
42.119.63.69
42.119.63.112
42.119.63.237
42.119.63.185
42.119.63.246
42.119.63.87
42.119.63.82
42.119.63.65
42.119.63.100
42.119.63.76
42.119.63.98
42.119.63.13
42.119.63.224
42.119.63.59
42.119.63.183
42.119.63.208
42.119.63.84
42.119.63.95
42.119.63.92
42.119.63.207
42.119.63.188
42.119.63.62
42.119.63.78
42.119.63.220
42.119.63.113
42.119.63.178
42.119.63.1
42.119.63.229
42.119.63.52
42.119.63.219
42.119.63.75
42.119.63.127
42.119.63.107
42.119.63.71
42.119.63.225
42.119.63.232
42.119.63.221
42.119.63.60
42.119.63.116
42.119.63.32
42.119.63.227
42.119.63.42
42.119.63.214
42.119.63.194
42.119.63.124
42.119.63.67
42.119.63.158
42.119.63.56
42.119.63.252
42.119.63.44
42.119.63.143
42.119.63.226
42.119.63.140
42.119.63.187
42.119.63.242
42.119.63.250
42.119.63.170
42.119.63.235
42.119.63.99
42.119.63.63
42.119.63.172
42.119.63.16
42.119.63.210
42.119.63.88
42.119.63.251
42.119.63.222
42.119.63.171
42.119.63.105
42.119.63.156
42.119.63.11
42.119.63.12
42.119.63.108
42.119.63.239
42.119.63.213
42.119.63.165
42.119.63.153
42.119.63.168
42.119.63.195
42.119.63.138
42.119.63.184
42.119.63.68
42.119.63.133
42.119.63.3
42.119.63.205
42.119.63.203
42.119.63.24
42.119.63.180
42.119.63.7
42.119.63.148
42.119.63.66
42.119.63.211
42.119.63.233
42.119.63.215
42.119.63.94
42.119.63.53
42.119.63.159
42.119.63.5
42.119.63.29
42.119.63.102
42.119.63.45
42.119.63.247
42.119.63.146
42.119.63.191
42.119.63.131
42.119.63.240
42.119.63.145
42.119.63.197
42.119.63.46
42.119.63.179
42.119.63.30
42.119.63.36
42.119.63.245
42.119.63.198
42.119.63.85
42.119.63.161
42.119.63.176
42.119.63.166
42.119.63.90
42.119.63.243
42.119.63.123
42.119.63.57
42.119.63.202
42.119.63.115
42.119.63.173
42.119.63.111
42.119.63.169
42.119.63.151
42.119.63.137
42.119.63.54
42.119.63.118
42.119.63.234
42.119.63.9
42.119.63.231
42.119.63.18
42.119.63.244
42.119.63.91
42.119.63.154
42.119.63.217
42.119.63.218
42.119.63.104
42.119.63.27
42.119.63.253
42.119.63.37
42.119.63.40
42.119.63.177
42.119.63.174
42.119.63.212
42.119.63.109
42.119.63.17
42.119.63.236
42.119.63.130
42.119.63.192
42.119.63.50
42.119.63.20
42.119.63.73
42.119.63.72
42.119.63.61
42.119.63.31
42.119.63.58
42.119.63.22
42.119.63.33
42.119.63.223
42.119.63.126
42.119.63.162
42.119.63.4
42.119.63.38
42.119.63.86
42.119.63.132
42.119.63.149
42.119.63.196
42.119.63.136
42.119.63.164
42.119.63.121
42.119.63.48
42.119.63.206
42.119.63.163
42.119.63.2
42.119.63.186
42.119.63.101
42.119.63.254
42.119.63.157
42.119.63.216
42.119.63.238
42.119.63.199
42.119.63.150
42.119.63.204
42.119.63.182
42.119.63.35
42.119.63.26
42.119.63.93
42.119.63.6
42.119.63.120
42.119.63.122
42.119.63.209
42.119.63.160
42.119.63.189
42.119.63.110
42.119.63.147
42.119.63.83
42.119.63.39
42.119.63.28
最新评论:
IP 类型 评论内容 时间
51.15.118.15 attack 
May 11 14:09:16 ns381471 sshd[14318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.118.15
May 11 14:09:19 ns381471 sshd[14318]: Failed password for invalid user rt from 51.15.118.15 port 36022 ssh2
 2020-05-11 20:36:49
49.232.131.80 attackspambots 
prod11
...
 2020-05-11 20:34:35
188.128.28.54 attackbots 
May 10 23:58:01 hostnameproxy sshd[4930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.128.28.54  user=r.r
May 10 23:58:03 hostnameproxy sshd[4930]: Failed password for r.r from 188.128.28.54 port 31848 ssh2
May 10 23:59:47 hostnameproxy sshd[5029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.128.28.54  user=r.r
May 10 23:59:49 hostnameproxy sshd[5029]: Failed password for r.r from 188.128.28.54 port 23907 ssh2
May 11 00:00:20 hostnameproxy sshd[5055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.128.28.54  user=r.r
May 11 00:00:21 hostnameproxy sshd[5055]: Failed password for r.r from 188.128.28.54 port 19397 ssh2
May 11 00:00:38 hostnameproxy sshd[5079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.128.28.54  user=r.r
May 11 00:00:40 hostnameproxy sshd[5079]: Failed password for r.r ........
------------------------------
 2020-05-11 20:54:08
112.3.29.199 attackbots 
2020-05-11T15:03:06.468312vps773228.ovh.net sshd[26042]: Failed password for invalid user ut2k4server from 112.3.29.199 port 56648 ssh2
2020-05-11T15:07:27.201052vps773228.ovh.net sshd[26064]: Invalid user www-data from 112.3.29.199 port 40148
2020-05-11T15:07:27.212795vps773228.ovh.net sshd[26064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.3.29.199
2020-05-11T15:07:27.201052vps773228.ovh.net sshd[26064]: Invalid user www-data from 112.3.29.199 port 40148
2020-05-11T15:07:29.569639vps773228.ovh.net sshd[26064]: Failed password for invalid user www-data from 112.3.29.199 port 40148 ssh2
...
 2020-05-11 21:09:53
114.40.131.72 attackspambots 
1589198932 - 05/11/2020 14:08:52 Host: 114.40.131.72/114.40.131.72 Port: 445 TCP Blocked
 2020-05-11 21:00:40
163.172.26.42 attack 
May 11 14:09:14 nextcloud sshd\[20746\]: Invalid user ftpuser from 163.172.26.42
May 11 14:09:14 nextcloud sshd\[20746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.26.42
May 11 14:09:16 nextcloud sshd\[20746\]: Failed password for invalid user ftpuser from 163.172.26.42 port 32870 ssh2
 2020-05-11 20:38:18
122.112.190.154 attack 
May 11 14:09:00 debian-2gb-nbg1-2 kernel: \[11457807.276055\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=122.112.190.154 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=224 ID=23946 PROTO=TCP SPT=58715 DPT=4243 WINDOW=1024 RES=0x00 SYN URGP=0
 2020-05-11 20:51:54
87.251.74.30 attackbotsspam 
May 11 14:47:29 vps639187 sshd\[13896\]: Invalid user admin from 87.251.74.30 port 17394
May 11 14:47:29 vps639187 sshd\[13897\]: Invalid user user from 87.251.74.30 port 17400
May 11 14:47:29 vps639187 sshd\[13896\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.251.74.30
May 11 14:47:29 vps639187 sshd\[13897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.251.74.30
...
 2020-05-11 20:51:26
122.228.19.80 attackspam 
May 11 14:24:07 debian-2gb-nbg1-2 kernel: \[11458714.243908\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=122.228.19.80 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=111 ID=57919 PROTO=TCP SPT=56298 DPT=5357 WINDOW=29200 RES=0x00 SYN URGP=0
 2020-05-11 21:01:30
61.222.56.80 attackspam 
(sshd) Failed SSH login from 61.222.56.80 (TW/Taiwan/61-222-56-80.HINET-IP.hinet.net): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 11 12:02:45 andromeda sshd[24722]: Invalid user horus from 61.222.56.80 port 38098
May 11 12:02:47 andromeda sshd[24722]: Failed password for invalid user horus from 61.222.56.80 port 38098 ssh2
May 11 12:08:59 andromeda sshd[24916]: Invalid user app from 61.222.56.80 port 51552
 2020-05-11 20:47:17
157.34.32.157 attackbotsspam 
Port probing on unauthorized port 445
 2020-05-11 21:01:09
118.223.237.2 attackbots 
May 11 14:35:30 plex sshd[8423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.223.237.2  user=root
May 11 14:35:32 plex sshd[8423]: Failed password for root from 118.223.237.2 port 34508 ssh2
 2020-05-11 20:38:48
14.17.114.65 attack 
Bruteforce detected by fail2ban
 2020-05-11 20:48:35
217.112.142.251 attackbots 
May 11 14:10:34 web01.agentur-b-2.de postfix/smtpd[216715]: NOQUEUE: reject: RCPT from unknown[217.112.142.251]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May 11 14:12:42 web01.agentur-b-2.de postfix/smtpd[212045]: NOQUEUE: reject: RCPT from unknown[217.112.142.251]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May 11 14:14:39 web01.agentur-b-2.de postfix/smtpd[218333]: NOQUEUE: reject: RCPT from unknown[217.112.142.251]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May 11 14:15:26 web01.agentur-b-2.de postfix/smtpd[218333]: NOQUEUE: reject: RCPT from unknown[217.112.142.251]: 450
 2020-05-11 20:34:49
195.54.160.228 attackspambots 
May 11 14:09:16 debian-2gb-nbg1-2 kernel: \[11457824.014479\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.54.160.228 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=55513 PROTO=TCP SPT=45622 DPT=33347 WINDOW=1024 RES=0x00 SYN URGP=0
 2020-05-11 20:37:49

最近上报的IP列表

103.60.172.10 92.223.206.58 220.93.127.232 79.111.121.107
46.215.189.232 104.211.165.113 192.228.100.200 75.161.126.113
236.237.49.185 182.239.63.191 95.68.35.160 123.40.29.201
232.46.144.29 210.4.123.98 114.33.96.173 36.70.8.60
113.199.0.3 124.83.19.208 103.29.249.70 222.184.56.18