必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Henan Telcom Union Technology Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbots
Invalid user an from 42.51.13.102 port 53275
2019-10-23 07:54:04
attackspambots
$f2bV_matches
2019-10-16 14:23:15
attack
Oct 10 10:50:01 myhostname sshd[20963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.13.102  user=r.r
Oct 10 10:50:03 myhostname sshd[20963]: Failed password for r.r from 42.51.13.102 port 57284 ssh2
Oct 10 10:50:03 myhostname sshd[20963]: Received disconnect from 42.51.13.102 port 57284:11: Bye Bye [preauth]
Oct 10 10:50:03 myhostname sshd[20963]: Disconnected from 42.51.13.102 port 57284 [preauth]
Oct 10 11:14:57 myhostname sshd[21029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.13.102  user=r.r
Oct 10 11:14:59 myhostname sshd[21029]: Failed password for r.r from 42.51.13.102 port 43249 ssh2
Oct 10 11:14:59 myhostname sshd[21029]: Received disconnect from 42.51.13.102 port 43249:11: Bye Bye [preauth]
Oct 10 11:14:59 myhostname sshd[21029]: Disconnected from 42.51.13.102 port 43249 [preauth]
Oct 10 11:19:42 myhostname sshd[21038]: pam_unix(sshd:auth): authentication fail........
-------------------------------
2019-10-13 16:57:43
attackbots
Oct 10 10:50:01 myhostname sshd[20963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.13.102  user=r.r
Oct 10 10:50:03 myhostname sshd[20963]: Failed password for r.r from 42.51.13.102 port 57284 ssh2
Oct 10 10:50:03 myhostname sshd[20963]: Received disconnect from 42.51.13.102 port 57284:11: Bye Bye [preauth]
Oct 10 10:50:03 myhostname sshd[20963]: Disconnected from 42.51.13.102 port 57284 [preauth]
Oct 10 11:14:57 myhostname sshd[21029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.13.102  user=r.r
Oct 10 11:14:59 myhostname sshd[21029]: Failed password for r.r from 42.51.13.102 port 43249 ssh2
Oct 10 11:14:59 myhostname sshd[21029]: Received disconnect from 42.51.13.102 port 43249:11: Bye Bye [preauth]
Oct 10 11:14:59 myhostname sshd[21029]: Disconnected from 42.51.13.102 port 43249 [preauth]
Oct 10 11:19:42 myhostname sshd[21038]: pam_unix(sshd:auth): authentication fail........
-------------------------------
2019-10-11 06:48:52
相同子网IP讨论:
IP 类型 评论内容 时间
42.51.13.2 attack
Failed password for invalid user web from 42.51.13.2 port 46784 ssh2
2020-06-24 13:51:36
42.51.136.12 attackspam
Unauthorized connection attempt detected from IP address 42.51.136.12 to port 1433 [T]
2020-04-15 02:20:55
42.51.133.29 attack
Dec 23 03:07:30 webhost01 sshd[21719]: Failed password for root from 42.51.133.29 port 38920 ssh2
...
2019-12-23 04:14:34
42.51.133.29 attack
Dec 10 04:06:59 mailserver sshd[6868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.133.29  user=r.r
Dec 10 04:07:01 mailserver sshd[6868]: Failed password for r.r from 42.51.133.29 port 35671 ssh2
Dec 10 04:07:01 mailserver sshd[6868]: Received disconnect from 42.51.133.29 port 35671:11: Bye Bye [preauth]
Dec 10 04:07:01 mailserver sshd[6868]: Disconnected from 42.51.133.29 port 35671 [preauth]
Dec 10 04:29:59 mailserver sshd[8981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.133.29  user=r.r
Dec 10 04:30:01 mailserver sshd[8981]: Failed password for r.r from 42.51.133.29 port 44008 ssh2
Dec 10 04:30:01 mailserver sshd[8981]: Received disconnect from 42.51.133.29 port 44008:11: Bye Bye [preauth]
Dec 10 04:30:01 mailserver sshd[8981]: Disconnected from 42.51.133.29 port 44008 [preauth]
Dec 10 04:35:55 mailserver sshd[9430]: Invalid user brace from 42.51.133.29
Dec 10 04:35........
-------------------------------
2019-12-10 16:00:12
42.51.13.107 attackbotsspam
Automatic report - Banned IP Access
2019-10-20 00:11:42
42.51.13.107 attackbots
2019-10-18T19:56:03.124936abusebot-6.cloudsearch.cf sshd\[2860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.13.107  user=root
2019-10-19 04:44:39
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.51.13.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28315
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.51.13.102.			IN	A

;; AUTHORITY SECTION:
.			467	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101001 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 11 06:48:49 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
102.13.51.42.in-addr.arpa domain name pointer idc.ly.ha.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
102.13.51.42.in-addr.arpa	name = idc.ly.ha.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
222.186.30.218 attack
Aug  1 05:16:28 rocket sshd[30063]: Failed password for root from 222.186.30.218 port 33579 ssh2
Aug  1 05:16:37 rocket sshd[30087]: Failed password for root from 222.186.30.218 port 28111 ssh2
...
2020-08-01 12:20:42
103.145.12.206 attackspam
[2020-07-31 23:57:35] NOTICE[1248] chan_sip.c: Registration from '"1600" ' failed for '103.145.12.206:6180' - Wrong password
[2020-07-31 23:57:35] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-31T23:57:35.836-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1600",SessionID="0x7f2720091b18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.206/6180",Challenge="5416d8ab",ReceivedChallenge="5416d8ab",ReceivedHash="1dd9cfa0944e32d86b9ded5fff38bcde"
[2020-07-31 23:57:35] NOTICE[1248] chan_sip.c: Registration from '"1600" ' failed for '103.145.12.206:6180' - Wrong password
[2020-07-31 23:57:35] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-31T23:57:35.943-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1600",SessionID="0x7f27200510e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP
...
2020-08-01 12:43:31
49.233.182.23 attackbotsspam
Aug  1 11:15:36 itv-usvr-01 sshd[31473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.182.23  user=root
Aug  1 11:15:38 itv-usvr-01 sshd[31473]: Failed password for root from 49.233.182.23 port 39174 ssh2
Aug  1 11:21:23 itv-usvr-01 sshd[31810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.182.23  user=root
Aug  1 11:21:24 itv-usvr-01 sshd[31810]: Failed password for root from 49.233.182.23 port 41074 ssh2
2020-08-01 12:25:16
20.50.31.143 attackbotsspam
Aug  1 06:19:29 eventyay sshd[3437]: Failed password for postgres from 20.50.31.143 port 3586 ssh2
Aug  1 06:20:23 eventyay sshd[3471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.50.31.143
Aug  1 06:20:25 eventyay sshd[3471]: Failed password for invalid user git from 20.50.31.143 port 3586 ssh2
...
2020-08-01 12:42:02
212.64.71.225 attack
Aug  1 05:58:00 rancher-0 sshd[698920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.71.225  user=root
Aug  1 05:58:02 rancher-0 sshd[698920]: Failed password for root from 212.64.71.225 port 41122 ssh2
...
2020-08-01 12:22:21
63.82.55.126 attackspam
E-Mail Spam (RBL) [REJECTED]
2020-08-01 12:23:35
49.88.112.110 attackspambots
2020-08-01T05:53:56.054588amanda2.illicoweb.com sshd\[46649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.110  user=root
2020-08-01T05:53:57.767529amanda2.illicoweb.com sshd\[46649\]: Failed password for root from 49.88.112.110 port 46792 ssh2
2020-08-01T05:54:00.341969amanda2.illicoweb.com sshd\[46649\]: Failed password for root from 49.88.112.110 port 46792 ssh2
2020-08-01T05:54:02.865238amanda2.illicoweb.com sshd\[46649\]: Failed password for root from 49.88.112.110 port 46792 ssh2
2020-08-01T05:57:25.876059amanda2.illicoweb.com sshd\[46874\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.110  user=root
...
2020-08-01 12:50:53
92.81.222.217 attackbotsspam
$f2bV_matches
2020-08-01 12:16:50
62.234.82.70 attackspambots
Aug  1 03:58:03 *** sshd[4115]: User root from 62.234.82.70 not allowed because not listed in AllowUsers
2020-08-01 12:18:58
51.137.134.191 attackbots
2020-08-01T05:49:45.442514mail.broermann.family sshd[2898]: Failed password for root from 51.137.134.191 port 38794 ssh2
2020-08-01T05:53:28.075007mail.broermann.family sshd[3104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.137.134.191  user=root
2020-08-01T05:53:30.275202mail.broermann.family sshd[3104]: Failed password for root from 51.137.134.191 port 50856 ssh2
2020-08-01T05:57:26.127120mail.broermann.family sshd[3314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.137.134.191  user=root
2020-08-01T05:57:28.000537mail.broermann.family sshd[3314]: Failed password for root from 51.137.134.191 port 34710 ssh2
...
2020-08-01 12:49:39
202.137.20.58 attack
Aug  1 00:38:31 ny01 sshd[2441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.137.20.58
Aug  1 00:38:33 ny01 sshd[2441]: Failed password for invalid user root@huawei123 from 202.137.20.58 port 13536 ssh2
Aug  1 00:43:44 ny01 sshd[3004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.137.20.58
2020-08-01 12:58:08
219.136.243.47 attackspambots
Aug  1 01:17:57 ws22vmsma01 sshd[7120]: Failed password for root from 219.136.243.47 port 41216 ssh2
...
2020-08-01 12:58:57
49.234.196.215 attackbotsspam
Aug  1 06:34:41 lnxweb62 sshd[9718]: Failed password for root from 49.234.196.215 port 45736 ssh2
Aug  1 06:34:41 lnxweb62 sshd[9718]: Failed password for root from 49.234.196.215 port 45736 ssh2
2020-08-01 12:51:16
222.186.61.19 attackspambots
" "
2020-08-01 12:22:00
110.166.82.211 attackspam
Aug  1 05:57:43 lnxded64 sshd[9309]: Failed password for root from 110.166.82.211 port 54524 ssh2
Aug  1 05:57:43 lnxded64 sshd[9309]: Failed password for root from 110.166.82.211 port 54524 ssh2
2020-08-01 12:37:00

最近上报的IP列表

135.184.163.101 137.98.156.147 82.46.204.14 3.231.248.137
208.122.121.1 84.183.97.109 117.92.16.54 183.48.33.61
118.69.238.10 54.36.150.66 203.129.224.86 96.234.72.26
178.19.179.241 139.99.157.106 193.70.2.50 218.127.227.0
91.108.156.30 51.75.165.119 125.43.169.47 37.59.34.100