必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Shanghai Blue Cloud Technology Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Jun  4 03:11:45 dns1 sshd[31706]: Failed password for root from 42.159.92.93 port 56014 ssh2
Jun  4 03:14:58 dns1 sshd[31869]: Failed password for root from 42.159.92.93 port 46274 ssh2
2020-06-04 20:04:56
attack
Jun  2 15:36:45 vps647732 sshd[30013]: Failed password for root from 42.159.92.93 port 46236 ssh2
...
2020-06-03 02:57:50
attack
May 31 23:06:52 piServer sshd[17617]: Failed password for root from 42.159.92.93 port 38398 ssh2
May 31 23:09:05 piServer sshd[17784]: Failed password for root from 42.159.92.93 port 40550 ssh2
...
2020-06-01 06:43:48
attackbotsspam
Invalid user oracle from 42.159.92.93 port 59522
2020-05-29 14:07:35
attackspambots
2020-05-13T12:27:54.094536abusebot-2.cloudsearch.cf sshd[5605]: Invalid user providencia from 42.159.92.93 port 41576
2020-05-13T12:27:54.103137abusebot-2.cloudsearch.cf sshd[5605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.92.93
2020-05-13T12:27:54.094536abusebot-2.cloudsearch.cf sshd[5605]: Invalid user providencia from 42.159.92.93 port 41576
2020-05-13T12:27:55.786440abusebot-2.cloudsearch.cf sshd[5605]: Failed password for invalid user providencia from 42.159.92.93 port 41576 ssh2
2020-05-13T12:35:11.391327abusebot-2.cloudsearch.cf sshd[5667]: Invalid user arkserver from 42.159.92.93 port 40616
2020-05-13T12:35:11.396652abusebot-2.cloudsearch.cf sshd[5667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.92.93
2020-05-13T12:35:11.391327abusebot-2.cloudsearch.cf sshd[5667]: Invalid user arkserver from 42.159.92.93 port 40616
2020-05-13T12:35:13.070072abusebot-2.cloudsearch.cf sshd[56
...
2020-05-14 01:10:44
attackspam
Invalid user techuser from 42.159.92.93 port 36884
2020-04-19 13:44:06
attack
Apr 17 13:28:26 localhost sshd\[29064\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.92.93  user=root
Apr 17 13:28:27 localhost sshd\[29064\]: Failed password for root from 42.159.92.93 port 40368 ssh2
Apr 17 13:33:00 localhost sshd\[29396\]: Invalid user sftpuser from 42.159.92.93
Apr 17 13:33:00 localhost sshd\[29396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.92.93
Apr 17 13:33:02 localhost sshd\[29396\]: Failed password for invalid user sftpuser from 42.159.92.93 port 45650 ssh2
...
2020-04-17 19:33:33
attackbotsspam
Mar 26 11:00:53 NPSTNNYC01T sshd[29953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.92.93
Mar 26 11:00:56 NPSTNNYC01T sshd[29953]: Failed password for invalid user butthead from 42.159.92.93 port 48182 ssh2
Mar 26 11:03:15 NPSTNNYC01T sshd[30143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.92.93
...
2020-03-26 23:30:26
attackspambots
Mar 22 04:54:17 nextcloud sshd\[30791\]: Invalid user robert from 42.159.92.93
Mar 22 04:54:17 nextcloud sshd\[30791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.92.93
Mar 22 04:54:19 nextcloud sshd\[30791\]: Failed password for invalid user robert from 42.159.92.93 port 57482 ssh2
2020-03-22 15:31:56
attackspambots
Mar  8 12:01:47 hosting sshd[13584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.92.93  user=root
Mar  8 12:01:49 hosting sshd[13584]: Failed password for root from 42.159.92.93 port 43768 ssh2
Mar  8 12:18:34 hosting sshd[14999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.92.93  user=root
Mar  8 12:18:36 hosting sshd[14999]: Failed password for root from 42.159.92.93 port 50604 ssh2
...
2020-03-08 17:33:37
attack
Feb 20 13:47:13 auw2 sshd\[5665\]: Invalid user sinusbot from 42.159.92.93
Feb 20 13:47:13 auw2 sshd\[5665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.92.93
Feb 20 13:47:15 auw2 sshd\[5665\]: Failed password for invalid user sinusbot from 42.159.92.93 port 49816 ssh2
Feb 20 13:52:12 auw2 sshd\[6085\]: Invalid user zhugf from 42.159.92.93
Feb 20 13:52:12 auw2 sshd\[6085\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.92.93
2020-02-21 08:21:09
attackspam
Feb 20 01:56:14 vps46666688 sshd[6322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.92.93
Feb 20 01:56:16 vps46666688 sshd[6322]: Failed password for invalid user at from 42.159.92.93 port 36038 ssh2
...
2020-02-20 13:54:06
attackspambots
Feb 11 21:32:22 mockhub sshd[613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.92.93
Feb 11 21:32:23 mockhub sshd[613]: Failed password for invalid user sicily from 42.159.92.93 port 60336 ssh2
...
2020-02-12 19:07:35
相同子网IP讨论:
IP 类型 评论内容 时间
42.159.92.147 attack
Sep 21 04:08:18 xtremcommunity sshd\[311665\]: Invalid user pi from 42.159.92.147 port 53334
Sep 21 04:08:18 xtremcommunity sshd\[311665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.92.147
Sep 21 04:08:20 xtremcommunity sshd\[311665\]: Failed password for invalid user pi from 42.159.92.147 port 53334 ssh2
Sep 21 04:11:40 xtremcommunity sshd\[311781\]: Invalid user tom from 42.159.92.147 port 51392
Sep 21 04:11:40 xtremcommunity sshd\[311781\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.92.147
...
2019-09-21 20:50:18
42.159.92.147 attackspam
2019-09-14T11:14:35.693859abusebot-2.cloudsearch.cf sshd\[13003\]: Invalid user nexthink from 42.159.92.147 port 53496
2019-09-14 19:26:55
42.159.92.147 attack
2019-09-11T13:38:18.180074abusebot-4.cloudsearch.cf sshd\[21784\]: Invalid user hadoop from 42.159.92.147 port 39960
2019-09-11 23:32:22
42.159.92.147 attackspambots
$f2bV_matches
2019-08-02 16:56:40
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.159.92.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53764
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.159.92.93.			IN	A

;; AUTHORITY SECTION:
.			126	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021200 1800 900 604800 86400

;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 19:07:28 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
Host 93.92.159.42.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 93.92.159.42.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
185.204.183.186 attackbotsspam
log
2020-02-12 03:56:33
156.221.75.255 attack
Feb 11 14:35:34 seraph sshd[14120]: Did not receive identification string f=
rom 156.221.75.255
Feb 11 14:35:40 seraph sshd[14122]: Invalid user avanthi from 156.221.75.255
Feb 11 14:35:40 seraph sshd[14122]: pam_unix(sshd:auth): authentication fai=
lure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D156.221.75.255
Feb 11 14:35:42 seraph sshd[14122]: Failed password for invalid user avanth=
i from 156.221.75.255 port 55032 ssh2
Feb 11 14:35:42 seraph sshd[14122]: Connection closed by 156.221.75.255 por=
t 55032 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=156.221.75.255
2020-02-12 03:57:50
91.38.123.119 attackbots
Feb 11 05:36:58 spidey sshd[2914]: Invalid user admin1 from 91.38.123.119 port 62159
Feb 11 05:36:58 spidey sshd[2921]: Invalid user admin1 from 91.38.123.119 port 64461
Feb 11 05:36:58 spidey sshd[2922]: Invalid user admin1 from 91.38.123.119 port 62598


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=91.38.123.119
2020-02-12 04:00:33
76.164.219.18 attackspam
Feb 11 18:46:59 grey postfix/smtpd\[1408\]: NOQUEUE: reject: RCPT from archi2.archipielago.io\[76.164.219.18\]: 554 5.7.1 Service unavailable\; Client host \[76.164.219.18\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?76.164.219.18\; from=\ to=\ proto=ESMTP helo=\
...
2020-02-12 03:39:42
198.50.197.217 attackspam
Feb 11 18:35:32 dedicated sshd[29474]: Invalid user kha from 198.50.197.217 port 37678
2020-02-12 03:30:29
91.225.163.157 attackspam
Feb 11 14:37:52 seraph sshd[14168]: Did not receive identification string f=
rom 91.225.163.157
Feb 11 14:38:40 seraph sshd[14183]: Invalid user user from 91.225.163.157
Feb 11 14:38:42 seraph sshd[14183]: pam_unix(sshd:auth): authentication fai=
lure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D91.225.163.157
Feb 11 14:38:44 seraph sshd[14183]: Failed password for invalid user user f=
rom 91.225.163.157 port 50659 ssh2
Feb 11 14:38:44 seraph sshd[14183]: Connection closed by 91.225.163.157 por=
t 50659 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=91.225.163.157
2020-02-12 04:04:13
209.17.97.82 attack
IP: 209.17.97.82
Ports affected
    World Wide Web HTTP (80) 
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
   AS174 Cogent Communications
   United States (US)
   CIDR 209.17.96.0/20
Log Date: 11/02/2020 4:00:41 PM UTC
2020-02-12 03:37:44
209.251.180.190 attackbots
Feb 11 18:10:06 server sshd\[19524\]: Invalid user manager from 209.251.180.190
Feb 11 18:10:06 server sshd\[19524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.251.180.190 
Feb 11 18:10:07 server sshd\[19524\]: Failed password for invalid user manager from 209.251.180.190 port 8201 ssh2
Feb 11 20:39:01 server sshd\[10949\]: Invalid user admin from 209.251.180.190
Feb 11 20:39:01 server sshd\[10949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.251.180.190 
...
2020-02-12 03:42:31
51.77.195.149 attack
Feb 11 16:54:09 web8 sshd\[3590\]: Invalid user izt from 51.77.195.149
Feb 11 16:54:09 web8 sshd\[3590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.149
Feb 11 16:54:11 web8 sshd\[3590\]: Failed password for invalid user izt from 51.77.195.149 port 38718 ssh2
Feb 11 16:57:54 web8 sshd\[5383\]: Invalid user dcx from 51.77.195.149
Feb 11 16:57:54 web8 sshd\[5383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.149
2020-02-12 03:37:20
175.158.52.95 attack
[Tue Feb 11 11:40:43.358485 2020] [access_compat:error] [pid 43750] [client 175.158.52.95:57214] AH01797: client denied by server configuration: /var/www/www.periodicos.unifra.br/files/index.php
[Tue Feb 11 11:41:09.411815 2020] [access_compat:error] [pid 45168] [client 175.158.52.95:57282] AH01797: client denied by server configuration: /var/www/www.periodicos.unifra.br/files/journals/index.php
[Tue Feb 11 11:41:36.685667 2020] [access_compat:error] [pid 45290] [client 175.158.52.95:57325] AH01797: client denied by server configuration: /var/www/www.periodicos.unifra.br/files/journals/1/articles/index.php
...
2020-02-12 03:56:49
96.11.181.84 attack
tcp 445
2020-02-12 04:15:14
200.84.147.173 attack
20/2/11@08:42:46: FAIL: Alarm-Network address from=200.84.147.173
...
2020-02-12 03:25:02
209.88.21.197 attack
1581428489 - 02/11/2020 14:41:29 Host: 209.88.21.197/209.88.21.197 Port: 445 TCP Blocked
2020-02-12 04:13:49
177.207.192.137 attackbots
IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.
2020-02-12 04:05:45
86.110.35.210 attackspambots
Feb 11 14:39:33 ns381471 sshd[14984]: Failed password for postgres from 86.110.35.210 port 35894 ssh2
2020-02-12 03:29:55

最近上报的IP列表

210.66.64.136 96.125.162.70 106.197.195.189 20.255.186.16
137.211.81.178 85.255.8.100 183.102.82.85 45.50.222.46
1.238.238.220 54.121.23.90 128.186.7.142 117.196.18.32
59.127.17.3 49.206.27.215 123.24.41.108 189.212.117.15
201.131.177.8 81.171.26.136 59.126.149.233 31.133.97.24