必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Education and Research Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): University/College/School

用户上报:
类型 评论内容 时间
attack
Unauthorised access (Jul 30) SRC=42.247.5.92 LEN=40 TOS=0x08 PREC=0x20 TTL=223 ID=46808 TCP DPT=1433 WINDOW=1024 SYN
2020-07-30 21:58:24
相同子网IP讨论:
IP 类型 评论内容 时间
42.247.5.86 attack
Unauthorised access (Sep 10) SRC=42.247.5.86 LEN=40 TOS=0x08 PREC=0x20 TTL=223 ID=35781 TCP DPT=1433 WINDOW=1024 SYN
2020-09-11 22:47:08
42.247.5.86 attackspam
Unauthorised access (Sep 10) SRC=42.247.5.86 LEN=40 TOS=0x08 PREC=0x20 TTL=223 ID=35781 TCP DPT=1433 WINDOW=1024 SYN
2020-09-11 14:53:29
42.247.5.86 attack
Unauthorised access (Sep 10) SRC=42.247.5.86 LEN=40 TOS=0x08 PREC=0x20 TTL=223 ID=35781 TCP DPT=1433 WINDOW=1024 SYN
2020-09-11 07:04:41
42.247.5.70 attackspam
Unauthorized connection attempt detected from IP address 42.247.5.70 to port 1433 [T]
2020-08-14 01:51:20
42.247.5.88 attack
07/16/2020-23:54:27.251909 42.247.5.88 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2020-07-17 16:14:33
42.247.5.82 attack
unauthorized connection attempt
2020-07-01 16:59:27
42.247.5.78 attackspambots
Icarus honeypot on github
2020-06-08 07:02:29
42.247.5.77 attack
Unauthorized connection attempt detected from IP address 42.247.5.77 to port 1433
2020-05-20 05:32:27
42.247.5.70 attack
 TCP (RST) 42.247.5.70:46859 -> port 1433, len 40
2020-05-17 03:01:54
42.247.5.84 attackbotsspam
1433/tcp 1433/tcp
[2020-03-05/04-10]2pkt
2020-04-11 06:35:58
42.247.5.78 attackspam
Icarus honeypot on github
2020-04-10 23:56:54
42.247.5.95 attackbots
Unauthorized connection attempt detected from IP address 42.247.5.95 to port 1433 [J]
2020-03-03 00:21:13
42.247.5.71 attack
unauthorized connection attempt
2020-02-26 18:08:12
42.247.5.95 attackbots
Feb 26 06:31:38 debian-2gb-nbg1-2 kernel: \[4954295.571976\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=42.247.5.95 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=230 ID=22462 PROTO=TCP SPT=49139 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0
2020-02-26 16:49:04
42.247.5.68 attackspam
unauthorized connection attempt
2020-02-19 19:41:29
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.247.5.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 541
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.247.5.92.			IN	A

;; AUTHORITY SECTION:
.			556	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020073000 1800 900 604800 86400

;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 30 21:58:18 CST 2020
;; MSG SIZE  rcvd: 115
HOST信息:
Host 92.5.247.42.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 92.5.247.42.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
35.222.170.114 attack
2020-04-10T23:49:46.890814mail.thespaminator.com sshd[10248]: Invalid user admin from 35.222.170.114 port 47881
2020-04-10T23:49:46.910946mail.thespaminator.com sshd[10248]: Failed none for invalid user admin from 35.222.170.114 port 47881 ssh2
...
2020-04-11 17:11:10
106.54.145.68 attack
Invalid user info from 106.54.145.68 port 56662
2020-04-11 17:28:12
222.232.29.235 attackbots
Apr 11 08:33:13 ns382633 sshd\[3441\]: Invalid user cricket from 222.232.29.235 port 54106
Apr 11 08:33:13 ns382633 sshd\[3441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.232.29.235
Apr 11 08:33:16 ns382633 sshd\[3441\]: Failed password for invalid user cricket from 222.232.29.235 port 54106 ssh2
Apr 11 08:50:56 ns382633 sshd\[6795\]: Invalid user elastic from 222.232.29.235 port 51206
Apr 11 08:50:56 ns382633 sshd\[6795\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.232.29.235
2020-04-11 17:30:26
198.98.52.15 attackbots
Apr 11 07:47:17 debian-2gb-nbg1-2 kernel: \[8843041.594403\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=198.98.52.15 DST=195.201.40.59 LEN=44 TOS=0x08 PREC=0x00 TTL=240 ID=54321 PROTO=TCP SPT=49640 DPT=1122 WINDOW=65535 RES=0x00 SYN URGP=0
2020-04-11 17:15:28
202.43.167.234 attackspam
Bruteforce detected by fail2ban
2020-04-11 17:31:50
223.247.223.39 attackspam
$f2bV_matches
2020-04-11 17:13:23
50.116.96.227 attackspambots
50.116.96.227 - - \[11/Apr/2020:10:46:07 +0200\] "POST /wp-login.php HTTP/1.0" 200 7427 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
50.116.96.227 - - \[11/Apr/2020:10:46:09 +0200\] "POST /wp-login.php HTTP/1.0" 200 7242 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
50.116.96.227 - - \[11/Apr/2020:10:46:11 +0200\] "POST /wp-login.php HTTP/1.0" 200 7239 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-04-11 17:16:24
69.10.48.67 attackbots
Apr 11 06:20:48 www sshd[29910]: Failed password for r.r from 69.10.48.67 port 55588 ssh2
Apr 11 06:20:49 www sshd[29912]: Invalid user admin from 69.10.48.67
Apr 11 06:20:51 www sshd[29912]: Failed password for invalid user admin from 69.10.48.67 port 60982 ssh2
Apr 11 06:20:52 www sshd[29914]: Invalid user admin from 69.10.48.67
Apr 11 06:20:54 www sshd[29914]: Failed password for invalid user admin from 69.10.48.67 port 37452 ssh2
Apr 11 06:20:54 www sshd[29916]: Invalid user user from 69.10.48.67
Apr 11 06:20:57 www sshd[29916]: Failed password for invalid user user from 69.10.48.67 port 41582 ssh2
Apr 11 06:20:58 www sshd[29918]: Invalid user ubnt from 69.10.48.67
Apr 11 06:21:00 www sshd[29918]: Failed password for invalid user ubnt from 69.10.48.67 port 47208 ssh2
Apr 11 06:21:01 www sshd[29922]: Invalid user admin from 69.10.48.67


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=69.10.48.67
2020-04-11 17:36:18
119.96.189.97 attack
$f2bV_matches
2020-04-11 17:20:49
86.108.62.30 attack
Hits on port :
2020-04-11 17:36:01
118.24.104.152 attackspambots
Apr 11 08:41:36 Ubuntu-1404-trusty-64-minimal sshd\[7886\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.104.152  user=root
Apr 11 08:41:38 Ubuntu-1404-trusty-64-minimal sshd\[7886\]: Failed password for root from 118.24.104.152 port 47280 ssh2
Apr 11 08:52:43 Ubuntu-1404-trusty-64-minimal sshd\[12761\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.104.152  user=root
Apr 11 08:52:45 Ubuntu-1404-trusty-64-minimal sshd\[12761\]: Failed password for root from 118.24.104.152 port 49174 ssh2
Apr 11 08:55:41 Ubuntu-1404-trusty-64-minimal sshd\[13669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.104.152  user=root
2020-04-11 17:37:55
14.229.204.98 attackbots
1586576964 - 04/11/2020 05:49:24 Host: 14.229.204.98/14.229.204.98 Port: 445 TCP Blocked
2020-04-11 17:23:41
146.88.240.4 attackbotsspam
[portscan] udp/1900 [ssdp]
[portscan] udp/3702 [ws-discovery]
[portscan] udp/5353 [mdns]
[scan/connect: 4 time(s)]
*(RWIN=-)(04111013)
2020-04-11 17:26:03
125.110.38.91 attackspam
IP reached maximum auth failures
2020-04-11 17:25:40
179.177.221.150 attack
Found by fail2ban
2020-04-11 17:33:59

最近上报的IP列表

180.59.60.86 151.240.158.125 175.144.196.53 37.151.169.159
103.125.106.20 137.220.135.50 113.65.210.156 195.54.167.167
116.255.156.112 89.231.138.202 92.119.161.182 92.119.161.4
154.130.107.133 102.36.164.141 61.64.9.213 100.26.7.37
119.195.180.42 115.206.14.87 60.193.26.81 45.138.5.226