必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
42.48.194.164 attackbots
 TCP (SYN) 42.48.194.164:40896 -> port 2222, len 44
2020-10-02 05:50:47
42.48.194.164 attack
Found on   CINS badguys     / proto=6  .  srcport=39275  .  dstport=2222  .     (1829)
2020-10-01 22:12:58
42.48.194.164 attackspambots
Port Scan
...
2020-10-01 14:31:21
42.48.107.84 attackspam
Attempted connection to port 1433.
2020-05-20 21:54:47
42.48.104.96 attackbotsspam
CN_APNIC-HM_<177>1585831207 [1:2403346:56419] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 24 [Classification: Misc Attack] [Priority: 2]:  {TCP} 42.48.104.96:57414
2020-04-03 04:48:25
42.48.101.45 attack
Brute force blocker - service: proftpd1 - aantal: 40 - Tue Apr 17 05:40:12 2018
2020-03-09 03:30:12
42.48.137.58 attackspambots
Unauthorized connection attempt detected from IP address 42.48.137.58 to port 5555 [T]
2020-01-17 08:11:05
42.48.118.51 attack
Sep 30 12:32:28 mc1 kernel: \[1125974.119010\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=42.48.118.51 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=41 ID=27906 PROTO=TCP SPT=27347 DPT=23 WINDOW=40763 RES=0x00 SYN URGP=0 
Sep 30 12:32:58 mc1 kernel: \[1126003.892793\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=42.48.118.51 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=41 ID=27906 PROTO=TCP SPT=27347 DPT=23 WINDOW=40763 RES=0x00 SYN URGP=0 
Sep 30 12:33:02 mc1 kernel: \[1126008.277079\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=42.48.118.51 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=41 ID=27906 PROTO=TCP SPT=27347 DPT=23 WINDOW=40763 RES=0x00 SYN URGP=0 
...
2019-09-30 18:36:17
42.48.104.45 attackspambots
5322/tcp 4922/tcp 4722/tcp...
[2019-06-12/08-12]125pkt,34pt.(tcp)
2019-08-13 03:44:49
42.48.104.45 attackspambots
Portscan or hack attempt detected by psad/fwsnort
2019-08-01 09:23:23
42.48.104.45 attackbotsspam
" "
2019-07-27 10:56:08
42.48.104.45 attackbotsspam
1 attempts last 24 Hours
2019-07-24 22:28:32
42.48.104.45 attack
Portscan or hack attempt detected by psad/fwsnort
2019-07-16 08:33:25
42.48.104.45 attackbots
Portscan or hack attempt detected by psad/fwsnort
2019-07-06 07:09:11
42.48.118.162 attackspambots
port scan and connect, tcp 23 (telnet)
2019-06-26 03:02:54
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.48.1.207
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26184
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.48.1.207.			IN	A

;; AUTHORITY SECTION:
.			436	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023072500 1800 900 604800 86400

;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 25 17:36:36 CST 2023
;; MSG SIZE  rcvd: 104
HOST信息:
Host 207.1.48.42.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 207.1.48.42.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
190.213.0.117 attackspam
2020-03-13 22:12:34 H=\(\[190.213.0.117\]\) \[190.213.0.117\]:4228 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2020-03-13 22:13:31 H=\(\[190.213.0.117\]\) \[190.213.0.117\]:4248 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2020-03-13 22:14:01 H=\(\[190.213.0.117\]\) \[190.213.0.117\]:4235 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...
2020-03-14 08:17:19
14.162.192.107 attack
2020-03-1322:13:561jCrcx-00084g-K0\<=info@whatsup2013.chH=\(localhost\)[14.161.70.165]:56819P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3719id=999C2A7972A6883BE7E2AB13E75189AD@whatsup2013.chT="iamChristina"forkenyattawilliams4810@gmail.comzanderanderson2004@yahoo.com2020-03-1322:13:561jCrcx-00084c-Vm\<=info@whatsup2013.chH=\(localhost\)[42.55.164.124]:59371P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3684id=4B4EF8ABA0745AE9353079C135E1C5C8@whatsup2013.chT="iamChristina"forgeoffreywhittles@hotmail.comdeepak.singh12671@gmail.com2020-03-1322:12:421jCrbl-0007vY-4j\<=info@whatsup2013.chH=\(localhost\)[113.22.4.10]:43594P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3600id=1217A1F2F92D03B06C6920986CC530D9@whatsup2013.chT="iamChristina"fortundeemmanuel717@gmail.comskhirtladze7@mail.ru2020-03-1322:13:061jCrcA-0007yL-2J\<=info@whatsup2013.chH=mx-ll-183.89.229-114.dynamic.3bb.co
2020-03-14 08:11:59
42.55.164.124 attack
2020-03-1322:13:561jCrcx-00084g-K0\<=info@whatsup2013.chH=\(localhost\)[14.161.70.165]:56819P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3719id=999C2A7972A6883BE7E2AB13E75189AD@whatsup2013.chT="iamChristina"forkenyattawilliams4810@gmail.comzanderanderson2004@yahoo.com2020-03-1322:13:561jCrcx-00084c-Vm\<=info@whatsup2013.chH=\(localhost\)[42.55.164.124]:59371P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3684id=4B4EF8ABA0745AE9353079C135E1C5C8@whatsup2013.chT="iamChristina"forgeoffreywhittles@hotmail.comdeepak.singh12671@gmail.com2020-03-1322:12:421jCrbl-0007vY-4j\<=info@whatsup2013.chH=\(localhost\)[113.22.4.10]:43594P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3600id=1217A1F2F92D03B06C6920986CC530D9@whatsup2013.chT="iamChristina"fortundeemmanuel717@gmail.comskhirtladze7@mail.ru2020-03-1322:13:061jCrcA-0007yL-2J\<=info@whatsup2013.chH=mx-ll-183.89.229-114.dynamic.3bb.co
2020-03-14 08:16:11
220.248.58.58 attackspam
Invalid user meviafoods from 220.248.58.58 port 54488
2020-03-14 08:02:06
177.135.93.227 attack
$f2bV_matches
2020-03-14 08:29:08
106.13.63.24 attackbotsspam
Mar 14 04:08:48 itv-usvr-01 sshd[1643]: Invalid user rust from 106.13.63.24
Mar 14 04:08:48 itv-usvr-01 sshd[1643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.63.24
Mar 14 04:08:48 itv-usvr-01 sshd[1643]: Invalid user rust from 106.13.63.24
Mar 14 04:08:49 itv-usvr-01 sshd[1643]: Failed password for invalid user rust from 106.13.63.24 port 47938 ssh2
Mar 14 04:14:27 itv-usvr-01 sshd[1998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.63.24  user=root
Mar 14 04:14:29 itv-usvr-01 sshd[1998]: Failed password for root from 106.13.63.24 port 58518 ssh2
2020-03-14 07:57:58
81.171.26.215 attackbots
Email spam message
2020-03-14 08:14:22
158.46.187.32 attackspam
Chat Spam
2020-03-14 08:18:49
197.214.114.90 attack
Mar 13 21:12:02 src: 197.214.114.90 signature match: "MISC MS Terminal Server communication attempt" (sid: 100077) tcp port: 3389
2020-03-14 08:16:56
109.103.45.157 attackspam
firewall-block, port(s): 23/tcp
2020-03-14 08:17:37
139.59.0.90 attackspambots
SSH brute force
2020-03-14 08:23:00
190.205.199.75 attack
Unauthorized connection attempt detected from IP address 190.205.199.75 to port 445
2020-03-14 08:07:29
185.36.81.23 attack
Mar 14 01:18:17 srv01 postfix/smtpd\[14208\]: warning: unknown\[185.36.81.23\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar 14 01:23:07 srv01 postfix/smtpd\[10483\]: warning: unknown\[185.36.81.23\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar 14 01:24:30 srv01 postfix/smtpd\[10483\]: warning: unknown\[185.36.81.23\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar 14 01:25:00 srv01 postfix/smtpd\[11280\]: warning: unknown\[185.36.81.23\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar 14 01:28:01 srv01 postfix/smtpd\[15282\]: warning: unknown\[185.36.81.23\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-03-14 08:28:44
198.144.149.187 attackbots
2020-03-13 16:13:50 H=(tech9.technosolo.info) [198.144.149.187]:54394 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.2, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBL476536)
2020-03-13 16:13:52 H=(tech9.technosolo.info) [198.144.149.187]:54394 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.2) (https://www.spamhaus.org/sbl/query/SBLCSS)
2020-03-13 16:13:52 H=(tech9.technosolo.info) [198.144.149.187]:54394 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.2) (https://www.spamhaus.org/sbl/query/SBLCSS)
...
2020-03-14 08:23:14
159.89.3.172 attackspambots
DATE:2020-03-13 22:30:14, IP:159.89.3.172, PORT:ssh SSH brute force auth (docker-dc)
2020-03-14 08:24:42

最近上报的IP列表

111.55.137.144 203.177.3.100 203.177.11.100 203.177.20.100
62.77.122.52 216.72.51.211 18.155.16.154 173.244.228.15
149.122.65.14 135.176.148.230 125.88.226.57 45.95.169.229
45.120.110.2 45.120.11.2 210.185.173.57 210.185.11.57
203.5.77.240 203.5.11.240 203.5.77.44 63.203.80.126