必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Cernet New Technology Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbots
Port probing on unauthorized port 445
2020-02-14 09:53:22
attackspam
19/7/22@19:27:24: FAIL: Alarm-Intrusion address from=42.245.203.136
...
2019-07-23 09:08:17
相同子网IP讨论:
IP 类型 评论内容 时间
42.245.203.153 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-05-26 07:54:52
42.245.203.139 attackspambots
Honeypot attack, port: 445, PTR: PTR record not found
2020-02-23 22:23:13
42.245.203.148 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-13 14:30:01
42.245.203.148 attackspam
Unauthorized connection attempt detected from IP address 42.245.203.148 to port 4899 [J]
2020-01-06 14:26:40
42.245.203.134 attack
Port Scan: TCP/445
2019-08-24 14:32:30
42.245.203.139 attackbotsspam
19/7/22@19:26:43: FAIL: Alarm-Intrusion address from=42.245.203.139
...
2019-07-23 09:28:25
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.245.203.136
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13033
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.245.203.136.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072201 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 23 09:08:11 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 136.203.245.42.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 136.203.245.42.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
116.196.80.104 attackspambots
2020-03-17 11:59:29 server sshd[96705]: Failed password for invalid user root from 116.196.80.104 port 58630 ssh2
2020-03-19 03:11:05
94.154.88.215 attackbotsspam
1584536874 - 03/18/2020 14:07:54 Host: 94.154.88.215/94.154.88.215 Port: 445 TCP Blocked
2020-03-19 02:54:26
122.51.25.34 attack
$f2bV_matches
2020-03-19 02:51:03
31.14.142.162 attackspambots
Mar 18 19:32:25 ns3042688 sshd\[15578\]: Invalid user cpanelphpmyadmin from 31.14.142.162
Mar 18 19:32:25 ns3042688 sshd\[15578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.162 
Mar 18 19:32:27 ns3042688 sshd\[15578\]: Failed password for invalid user cpanelphpmyadmin from 31.14.142.162 port 39403 ssh2
Mar 18 19:36:38 ns3042688 sshd\[15939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.162  user=root
Mar 18 19:36:40 ns3042688 sshd\[15939\]: Failed password for root from 31.14.142.162 port 49656 ssh2
...
2020-03-19 03:01:01
222.222.141.171 attackspambots
2020-03-18T13:58:05.756844shield sshd\[7869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.222.141.171  user=root
2020-03-18T13:58:07.558876shield sshd\[7869\]: Failed password for root from 222.222.141.171 port 44389 ssh2
2020-03-18T14:00:17.988236shield sshd\[8323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.222.141.171  user=root
2020-03-18T14:00:20.243963shield sshd\[8323\]: Failed password for root from 222.222.141.171 port 57066 ssh2
2020-03-18T14:02:33.110946shield sshd\[8622\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.222.141.171  user=root
2020-03-19 03:17:33
171.124.65.242 attackspambots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/171.124.65.242/ 
 
 CN - 1H : (68)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN4837 
 
 IP : 171.124.65.242 
 
 CIDR : 171.120.0.0/13 
 
 PREFIX COUNT : 1262 
 
 UNIQUE IP COUNT : 56665856 
 
 
 ATTACKS DETECTED ASN4837 :  
  1H - 1 
  3H - 1 
  6H - 4 
 12H - 12 
 24H - 15 
 
 DateTime : 2020-03-18 14:07:29 
 
 INFO : Looking for resource vulnerabilities 403 Detected and Blocked by ADMIN  - data recovery
2020-03-19 03:18:50
107.13.107.67 attackspambots
Honeypot attack, port: 5555, PTR: mta-107-13-107-67.nc.rr.com.
2020-03-19 02:53:38
49.247.198.117 attackbots
Invalid user ishihara from 49.247.198.117 port 59112
2020-03-19 03:13:18
162.255.119.153 spam
AGAIN and AGAIN and ALWAYS the same REGISTRARS as namecheap.com, whoisguard.com, namesilo.com, privacyguardian.org and cloudflare.com TO STOP IMMEDIATELY for keeping SPAMMERS, LIERS, ROBERS and else since too many years ! The cheapest service, as usual...
And Link as usual by bit.ly to delette IMMEDIATELY too !
MARRE de ces ORDURES et autres FILS de PUTE genre SOUS MERDES capables de POLLUER STUPIDEMENT pour ne pas dire CONNEMENT la Planète par des POURRIELS INUTILES sur des listes VOLÉES on ne sait où et SANS notre accord !

surfsupport.club => namecheap.com => whoisguard.com

surfsupport.club => 192.64.119.6

162.255.119.153 => namecheap.com

https://www.mywot.com/scorecard/surfsupport.club

https://www.mywot.com/scorecard/namecheap.com

https://www.mywot.com/scorecard/whoisguard.com

https://en.asytech.cn/check-ip/162.255.119.153

AS USUAL since few days for PHISHING and SCAM send to :

http://bit.ly/412dd4z which resend to :

https://enticingse.com/fr-carrefour/?s1=16T&s2=d89bb555-d96f-468b-b60b-1dc635000f2b&s3=&s4=&s5=&Fname=&Lname=&Email=#/0

enticingse.com => namesilo.com => privacyguardian.org

enticingse.com => 104.27.177.33

104.27.177.33 => cloudflare.com

namesilo.com => 104.17.175.85

privacyguardian.org => 2606:4700:20::681a:56 => cloudflare.com

https://www.mywot.com/scorecard/enticingse.com

https://www.mywot.com/scorecard/namesilo.com

https://www.mywot.com/scorecard/privacyguardian.org

https://www.mywot.com/scorecard/cloudflare.com

https://en.asytech.cn/check-ip/104.27.177.33

https://en.asytech.cn/check-ip/2606:4700:20::681a:56
2020-03-19 03:06:33
176.107.131.141 attackbotsspam
Mar 18 20:45:41 www5 sshd\[57442\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.107.131.141  user=root
Mar 18 20:45:43 www5 sshd\[57442\]: Failed password for root from 176.107.131.141 port 47678 ssh2
Mar 18 20:50:58 www5 sshd\[58374\]: Invalid user teamspeak from 176.107.131.141
...
2020-03-19 03:09:07
45.141.84.25 attack
Mar 18 16:05:45 raspberrypi sshd\[3788\]: Invalid user admin from 45.141.84.25 port 6037
Mar 18 16:05:46 raspberrypi sshd\[3792\]: Invalid user support from 45.141.84.25 port 10986
Mar 18 16:05:48 raspberrypi sshd\[3796\]: Invalid user user from 45.141.84.25 port 17027
...
2020-03-19 03:26:46
112.94.191.158 attackspam
SSH/22 MH Probe, BF, Hack -
2020-03-19 03:18:12
200.85.110.240 attackbots
SSH login attempts with user root.
2020-03-19 03:22:35
119.42.115.218 attackspam
2020-03-16 18:23:34 plain_virtual_exim authenticator failed for ([127.0.0.1]) [119.42.115.218]: 535 Incorrect authentication data


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=119.42.115.218
2020-03-19 03:19:24
187.125.101.61 attackbots
Unauthorized connection attempt from IP address 187.125.101.61 on Port 445(SMB)
2020-03-19 03:31:14

最近上报的IP列表

118.172.205.86 220.92.16.86 187.214.193.178 196.189.255.22
157.230.12.3 2a02:2f0a:b10f:3d00:1030:1c95:ec86:c94 34.94.12.4 77.247.108.148
187.112.251.65 2001:41d0:8:5cc3:: 94.41.198.237 223.235.0.112
54.36.148.121 51.15.57.40 62.75.159.60 177.86.159.92
78.187.233.158 177.54.239.233 40.76.63.49 181.105.8.109