必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Hong Kong Telecommunications (HKT) Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Unauthorized connection attempt detected from IP address 42.2.252.42 to port 5555 [J]
2020-02-06 05:43:35
相同子网IP讨论:
IP 类型 评论内容 时间
42.2.252.141 attackspam
Unauthorized connection attempt detected from IP address 42.2.252.141 to port 5555 [J]
2020-01-28 06:08:38
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.2.252.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64048
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.2.252.42.			IN	A

;; AUTHORITY SECTION:
.			584	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020200 1800 900 604800 86400

;; Query time: 94 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 02 18:14:34 CST 2020
;; MSG SIZE  rcvd: 115
HOST信息:
42.252.2.42.in-addr.arpa domain name pointer 42-2-252-042.static.netvigator.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
42.252.2.42.in-addr.arpa	name = 42-2-252-042.static.netvigator.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
103.21.143.129 attackbots
May 19 11:43:12 ns41 sshd[3383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.21.143.129
May 19 11:43:12 ns41 sshd[3383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.21.143.129
May 19 11:43:15 ns41 sshd[3383]: Failed password for invalid user yea from 103.21.143.129 port 33360 ssh2
2020-05-20 02:28:59
203.186.10.162 attackspam
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.186.10.162
Failed password for invalid user office2 from 203.186.10.162 port 36998 ssh2
Invalid user eur from 203.186.10.162 port 38204
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.186.10.162
Failed password for invalid user eur from 203.186.10.162 port 38204 ssh2
2020-05-20 02:33:59
222.186.175.148 attackspambots
2020-05-19T19:59:12.073032  sshd[20565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.148  user=root
2020-05-19T19:59:13.951456  sshd[20565]: Failed password for root from 222.186.175.148 port 48434 ssh2
2020-05-19T19:59:18.127946  sshd[20565]: Failed password for root from 222.186.175.148 port 48434 ssh2
2020-05-19T19:59:12.073032  sshd[20565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.148  user=root
2020-05-19T19:59:13.951456  sshd[20565]: Failed password for root from 222.186.175.148 port 48434 ssh2
2020-05-19T19:59:18.127946  sshd[20565]: Failed password for root from 222.186.175.148 port 48434 ssh2
...
2020-05-20 02:04:48
5.255.96.84 attack
[portscan] tcp/22 [SSH]
*(RWIN=65535)(05191225)
2020-05-20 02:13:22
191.31.20.39 attackspam
$f2bV_matches
2020-05-20 02:11:31
70.37.104.34 attack
May 18 21:51:01 uapps sshd[29301]: Failed password for invalid user my from 70.37.104.34 port 49170 ssh2
May 18 21:51:01 uapps sshd[29301]: Received disconnect from 70.37.104.34: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=70.37.104.34
2020-05-20 02:09:27
195.69.222.71 attackspambots
May 19 11:43:16 tuxlinux sshd[14499]: Invalid user xmj from 195.69.222.71 port 47110
May 19 11:43:16 tuxlinux sshd[14499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.69.222.71 
May 19 11:43:16 tuxlinux sshd[14499]: Invalid user xmj from 195.69.222.71 port 47110
May 19 11:43:16 tuxlinux sshd[14499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.69.222.71 
May 19 11:43:16 tuxlinux sshd[14499]: Invalid user xmj from 195.69.222.71 port 47110
May 19 11:43:16 tuxlinux sshd[14499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.69.222.71 
May 19 11:43:18 tuxlinux sshd[14499]: Failed password for invalid user xmj from 195.69.222.71 port 47110 ssh2
...
2020-05-20 02:27:47
124.160.96.249 attackbots
May 19 10:36:19 db01 sshd[15636]: Invalid user hlh from 124.160.96.249
May 19 10:36:19 db01 sshd[15636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.160.96.249 
May 19 10:36:21 db01 sshd[15636]: Failed password for invalid user hlh from 124.160.96.249 port 16728 ssh2
May 19 10:36:21 db01 sshd[15636]: Received disconnect from 124.160.96.249: 11: Bye Bye [preauth]
May 19 10:41:16 db01 sshd[16300]: Invalid user klv from 124.160.96.249
May 19 10:41:16 db01 sshd[16300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.160.96.249 
May 19 10:41:18 db01 sshd[16300]: Failed password for invalid user klv from 124.160.96.249 port 35961 ssh2
May 19 10:41:18 db01 sshd[16300]: Received disconnect from 124.160.96.249: 11: Bye Bye [preauth]
May 19 10:44:44 db01 sshd[16686]: Invalid user lzr from 124.160.96.249
May 19 10:44:44 db01 sshd[16686]: pam_unix(sshd:auth): authentication failure; logname=........
-------------------------------
2020-05-20 02:31:11
51.138.81.241 attack
Invalid user kob from 51.138.81.241 port 3072
2020-05-20 02:20:39
128.1.132.221 attackspambots
May 19 11:44:33 lnxweb62 sshd[17307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.132.221
2020-05-20 02:12:48
117.215.129.29 attackspambots
May 19 18:41:19 ns3164893 sshd[5073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.215.129.29
May 19 18:41:22 ns3164893 sshd[5073]: Failed password for invalid user wey from 117.215.129.29 port 50576 ssh2
...
2020-05-20 02:39:23
201.163.56.82 attackspambots
Lines containing failures of 201.163.56.82
May 18 19:11:45 shared03 sshd[14167]: Did not receive identification string from 201.163.56.82 port 59654
May 18 19:13:14 shared03 sshd[14901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.163.56.82  user=r.r
May 18 19:13:15 shared03 sshd[14901]: Failed password for r.r from 201.163.56.82 port 49330 ssh2
May 18 19:13:16 shared03 sshd[14901]: Received disconnect from 201.163.56.82 port 49330:11: Normal Shutdown, Thank you for playing [preauth]
May 18 19:13:16 shared03 sshd[14901]: Disconnected from authenticating user r.r 201.163.56.82 port 49330 [preauth]
May 18 19:13:19 shared03 sshd[14905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.163.56.82  user=r.r
May 18 19:13:21 shared03 sshd[14905]: Failed password for r.r from 201.163.56.82 port 39178 ssh2
May 18 19:13:21 shared03 sshd[14905]: Received disconnect from 201.163.56.82 port 3917........
------------------------------
2020-05-20 02:07:39
195.158.26.238 attack
May 19 19:55:08 vpn01 sshd[29854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.158.26.238
May 19 19:55:10 vpn01 sshd[29854]: Failed password for invalid user yod from 195.158.26.238 port 56060 ssh2
...
2020-05-20 02:26:33
157.230.151.241 attackspambots
May 19 11:42:54 ns37 sshd[21187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.151.241
May 19 11:42:54 ns37 sshd[21187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.151.241
2020-05-20 02:32:54
105.245.108.189 attackspambots
TCP Port Scanning
2020-05-20 02:09:44

最近上报的IP列表

119.109.95.239 61.64.235.172 135.113.199.248 192.8.6.1
204.13.149.243 23.105.235.71 163.25.102.4 189.115.134.50
95.137.137.114 80.147.219.78 131.252.37.245 117.223.183.51
89.63.6.44 175.98.36.153 46.4.64.25 164.68.127.125
37.219.117.246 33.5.144.48 108.100.33.30 61.199.187.63