必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): Hanoi

国家(country): Vietnam

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): The Corporation for Financing & Promoting Technology

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
42.119.75.120 attack
Telnet/23 MH Probe, Scan, BF, Hack -
2020-05-28 17:16:34
42.119.75.67 attack
Unauthorized connection attempt detected from IP address 42.119.75.67 to port 23 [J]
2020-02-05 21:24:12
42.119.75.67 attackbots
Unauthorized connection attempt detected from IP address 42.119.75.67 to port 23 [J]
2020-01-31 05:24:08
42.119.75.76 attack
Unauthorized connection attempt detected from IP address 42.119.75.76 to port 23 [J]
2020-01-30 23:56:32
42.119.75.31 attackbotsspam
Telnetd brute force attack detected by fail2ban
2019-10-30 01:10:12
42.119.75.72 attackbots
port scan and connect, tcp 23 (telnet)
2019-10-29 05:09:28
42.119.75.128 attack
port scan and connect, tcp 23 (telnet)
2019-10-23 23:22:22
42.119.75.25 attack
Unauthorised access (Oct  6) SRC=42.119.75.25 LEN=40 TTL=48 ID=44696 TCP DPT=8080 WINDOW=39814 SYN 
Unauthorised access (Oct  6) SRC=42.119.75.25 LEN=40 TTL=48 ID=43552 TCP DPT=8080 WINDOW=39814 SYN 
Unauthorised access (Oct  6) SRC=42.119.75.25 LEN=40 TTL=48 ID=60912 TCP DPT=8080 WINDOW=39814 SYN 
Unauthorised access (Oct  6) SRC=42.119.75.25 LEN=40 TTL=48 ID=50945 TCP DPT=8080 WINDOW=287 SYN
2019-10-07 01:10:08
42.119.75.25 attackspam
(Oct  5)  LEN=40 TTL=47 ID=65261 TCP DPT=8080 WINDOW=39814 SYN 
 (Oct  5)  LEN=40 TTL=47 ID=51330 TCP DPT=8080 WINDOW=23298 SYN 
 (Oct  5)  LEN=40 TTL=47 ID=40892 TCP DPT=8080 WINDOW=39814 SYN 
 (Oct  4)  LEN=40 TTL=47 ID=16925 TCP DPT=8080 WINDOW=39814 SYN 
 (Oct  4)  LEN=40 TTL=47 ID=53265 TCP DPT=8080 WINDOW=35283 SYN 
 (Oct  4)  LEN=40 TTL=47 ID=15828 TCP DPT=8080 WINDOW=287 SYN 
 (Oct  3)  LEN=40 TTL=47 ID=10848 TCP DPT=8080 WINDOW=35283 SYN 
 (Oct  3)  LEN=40 TTL=47 ID=12964 TCP DPT=8080 WINDOW=23298 SYN 
 (Oct  3)  LEN=40 TTL=47 ID=50388 TCP DPT=8080 WINDOW=35283 SYN 
 (Oct  3)  LEN=40 TTL=47 ID=14031 TCP DPT=8080 WINDOW=23298 SYN 
 (Oct  2)  LEN=40 TTL=47 ID=12066 TCP DPT=8080 WINDOW=35283 SYN 
 (Oct  2)  LEN=40 TTL=47 ID=50850 TCP DPT=8080 WINDOW=287 SYN 
 (Oct  2)  LEN=40 TTL=47 ID=56638 TCP DPT=8080 WINDOW=23298 SYN 
 (Oct  2)  LEN=40 TTL=47 ID=33100 TCP DPT=8080 WINDOW=287 SYN 
 (Oct  1)  LEN=40 TTL=47 ID=42434 TCP DPT=8080 WINDOW=35283 SYN 
 (Oct  1)  LEN=40 TTL=47 ID=348...
2019-10-05 14:01:50
42.119.75.33 attackspambots
Unauthorised access (Oct  3) SRC=42.119.75.33 LEN=40 TTL=47 ID=32612 TCP DPT=8080 WINDOW=18588 SYN 
Unauthorised access (Oct  2) SRC=42.119.75.33 LEN=40 TTL=47 ID=25187 TCP DPT=8080 WINDOW=18588 SYN 
Unauthorised access (Oct  2) SRC=42.119.75.33 LEN=40 TTL=47 ID=11213 TCP DPT=8080 WINDOW=30380 SYN 
Unauthorised access (Oct  2) SRC=42.119.75.33 LEN=40 TTL=47 ID=34414 TCP DPT=8080 WINDOW=61220 SYN 
Unauthorised access (Oct  2) SRC=42.119.75.33 LEN=40 TTL=47 ID=12385 TCP DPT=8080 WINDOW=20884 SYN 
Unauthorised access (Oct  2) SRC=42.119.75.33 LEN=40 TTL=47 ID=541 TCP DPT=8080 WINDOW=20884 SYN 
Unauthorised access (Oct  1) SRC=42.119.75.33 LEN=40 TTL=47 ID=10615 TCP DPT=8080 WINDOW=61220 SYN 
Unauthorised access (Oct  1) SRC=42.119.75.33 LEN=40 TTL=47 ID=34640 TCP DPT=8080 WINDOW=61220 SYN
2019-10-03 05:49:23
42.119.75.18 attackbots
Unauthorised access (Oct  1) SRC=42.119.75.18 LEN=40 TTL=47 ID=21481 TCP DPT=8080 WINDOW=42293 SYN 
Unauthorised access (Oct  1) SRC=42.119.75.18 LEN=40 TTL=47 ID=27621 TCP DPT=8080 WINDOW=13749 SYN 
Unauthorised access (Oct  1) SRC=42.119.75.18 LEN=40 TTL=47 ID=48053 TCP DPT=8080 WINDOW=42293 SYN 
Unauthorised access (Oct  1) SRC=42.119.75.18 LEN=40 TTL=47 ID=14772 TCP DPT=8080 WINDOW=7061 SYN
2019-10-01 21:48:40
42.119.75.149 attackspam
[portscan] Port scan
2019-10-01 12:51:26
42.119.75.53 attack
Port scan attempt detected by AWS-CCS, CTS, India
2019-09-01 08:50:19
42.119.75.213 attack
[portscan] tcp/23 [TELNET]
*(RWIN=15867)(08041230)
2019-08-05 00:37:29
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.119.75.124
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51621
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.119.75.124.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019052700 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon May 27 19:25:20 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:
Host 124.75.119.42.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 124.75.119.42.in-addr.arpa: SERVFAIL

相关IP信息:
最新评论:
IP 类型 评论内容 时间
181.31.129.12 attack
Jul 25 20:03:13 firewall sshd[4445]: Invalid user sekine from 181.31.129.12
Jul 25 20:03:15 firewall sshd[4445]: Failed password for invalid user sekine from 181.31.129.12 port 11809 ssh2
Jul 25 20:08:45 firewall sshd[4594]: Invalid user nzb from 181.31.129.12
...
2020-07-26 07:52:27
139.155.71.154 attackbotsspam
Brute-force attempt banned
2020-07-26 07:57:32
106.52.130.172 attackspam
Jul 21 11:22:27 cumulus sshd[27281]: Invalid user vladimir from 106.52.130.172 port 57684
Jul 21 11:22:27 cumulus sshd[27281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.130.172
Jul 21 11:22:28 cumulus sshd[27281]: Failed password for invalid user vladimir from 106.52.130.172 port 57684 ssh2
Jul 21 11:22:33 cumulus sshd[27281]: Received disconnect from 106.52.130.172 port 57684:11: Bye Bye [preauth]
Jul 21 11:22:33 cumulus sshd[27281]: Disconnected from 106.52.130.172 port 57684 [preauth]
Jul 21 11:53:01 cumulus sshd[30159]: Invalid user nagios from 106.52.130.172 port 45540
Jul 21 11:53:01 cumulus sshd[30159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.130.172
Jul 21 11:53:03 cumulus sshd[30159]: Failed password for invalid user nagios from 106.52.130.172 port 45540 ssh2
Jul 21 11:53:03 cumulus sshd[30159]: Received disconnect from 106.52.130.172 port 45540:11: Bye B........
-------------------------------
2020-07-26 07:26:41
141.98.9.160 attackbotsspam
2020-07-26T01:14:09.547202vps751288.ovh.net sshd\[21974\]: Invalid user user from 141.98.9.160 port 41327
2020-07-26T01:14:09.550226vps751288.ovh.net sshd\[21974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.160
2020-07-26T01:14:11.409023vps751288.ovh.net sshd\[21974\]: Failed password for invalid user user from 141.98.9.160 port 41327 ssh2
2020-07-26T01:14:34.051241vps751288.ovh.net sshd\[22002\]: Invalid user guest from 141.98.9.160 port 39815
2020-07-26T01:14:34.059086vps751288.ovh.net sshd\[22002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.160
2020-07-26 07:57:04
138.197.129.38 attackbots
Brute-force attempt banned
2020-07-26 07:59:55
165.22.122.68 attackbots
Jul 26 01:09:03 debian-2gb-nbg1-2 kernel: \[17977056.180779\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=165.22.122.68 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=45463 PROTO=TCP SPT=32767 DPT=10331 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-26 07:35:46
139.130.13.204 attack
Jul 26 00:08:47 ajax sshd[17775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.130.13.204 
Jul 26 00:08:49 ajax sshd[17775]: Failed password for invalid user lk from 139.130.13.204 port 39310 ssh2
2020-07-26 07:48:08
140.143.9.142 attackspambots
Jul 25 17:06:11 server1 sshd\[32087\]: Invalid user trash from 140.143.9.142
Jul 25 17:06:11 server1 sshd\[32087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.9.142 
Jul 25 17:06:13 server1 sshd\[32087\]: Failed password for invalid user trash from 140.143.9.142 port 48500 ssh2
Jul 25 17:09:12 server1 sshd\[541\]: Invalid user crespo from 140.143.9.142
Jul 25 17:09:12 server1 sshd\[541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.9.142 
...
2020-07-26 07:24:22
139.199.165.189 attackbotsspam
Jul 26 01:22:33 abendstille sshd\[21012\]: Invalid user student from 139.199.165.189
Jul 26 01:22:33 abendstille sshd\[21012\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.165.189
Jul 26 01:22:36 abendstille sshd\[21012\]: Failed password for invalid user student from 139.199.165.189 port 35590 ssh2
Jul 26 01:27:00 abendstille sshd\[25583\]: Invalid user teamspeak from 139.199.165.189
Jul 26 01:27:00 abendstille sshd\[25583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.165.189
...
2020-07-26 07:28:53
61.186.190.39 attack
07/25/2020-19:09:16.950837 61.186.190.39 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2020-07-26 07:22:50
182.61.39.254 attackbots
Automatic Fail2ban report - Trying login SSH
2020-07-26 07:27:03
165.22.243.42 attackspambots
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-07-25T22:40:50Z and 2020-07-25T23:08:42Z
2020-07-26 07:56:51
35.195.238.142 attack
2020-07-25T18:05:15.348730server.mjenks.net sshd[3596236]: Invalid user hassan from 35.195.238.142 port 56982
2020-07-25T18:05:15.356160server.mjenks.net sshd[3596236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.195.238.142
2020-07-25T18:05:15.348730server.mjenks.net sshd[3596236]: Invalid user hassan from 35.195.238.142 port 56982
2020-07-25T18:05:17.571582server.mjenks.net sshd[3596236]: Failed password for invalid user hassan from 35.195.238.142 port 56982 ssh2
2020-07-25T18:08:46.720058server.mjenks.net sshd[3596559]: Invalid user wildan from 35.195.238.142 port 41444
...
2020-07-26 07:52:11
82.221.105.6 attack
07/25/2020-19:09:07.492470 82.221.105.6 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 85
2020-07-26 07:33:25
112.21.191.54 attackspambots
2020-07-26T06:03:40.906127hostname sshd[29401]: Invalid user 123456 from 112.21.191.54 port 47806
2020-07-26T06:03:43.434078hostname sshd[29401]: Failed password for invalid user 123456 from 112.21.191.54 port 47806 ssh2
2020-07-26T06:09:09.271264hostname sshd[31457]: Invalid user gloria from 112.21.191.54 port 44667
...
2020-07-26 07:31:44

最近上报的IP列表

212.5.58.157 49.113.14.151 161.2.160.146 156.108.232.20
36.31.228.53 164.160.22.176 110.57.223.168 53.201.142.199
89.214.136.26 152.181.228.177 67.124.129.123 37.111.197.156
145.136.39.133 109.234.38.183 32.102.82.201 147.129.65.2
219.31.167.96 139.196.139.224 45.3.158.95 80.181.141.209