必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Henan Telcom Union Technology Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Sep  5 15:24:16 hostnameproxy sshd[26462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.194.55  user=r.r
Sep  5 15:24:18 hostnameproxy sshd[26462]: Failed password for r.r from 42.51.194.55 port 1428 ssh2
Sep  5 15:24:20 hostnameproxy sshd[26462]: Failed password for r.r from 42.51.194.55 port 1428 ssh2
Sep  5 15:24:23 hostnameproxy sshd[26462]: Failed password for r.r from 42.51.194.55 port 1428 ssh2
Sep  5 15:24:26 hostnameproxy sshd[26462]: Failed password for r.r from 42.51.194.55 port 1428 ssh2
Sep  5 15:24:28 hostnameproxy sshd[26462]: Failed password for r.r from 42.51.194.55 port 1428 ssh2
Sep  5 15:24:32 hostnameproxy sshd[26466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.194.55  user=r.r
Sep  5 15:24:34 hostnameproxy sshd[26466]: Failed password for r.r from 42.51.194.55 port 3584 ssh2
Sep  5 15:24:36 hostnameproxy sshd[26466]: Failed password for r.r from 42.51........
------------------------------
2019-09-06 11:35:10
相同子网IP讨论:
IP 类型 评论内容 时间
42.51.194.15 attackspam
Dec  5 17:40:18 reporting2 sshd[12581]: reveeclipse mapping checking getaddrinfo for idc.ly.ha [42.51.194.15] failed - POSSIBLE BREAK-IN ATTEMPT!
Dec  5 17:40:18 reporting2 sshd[12581]: User r.r from 42.51.194.15 not allowed because not listed in AllowUsers
Dec  5 17:40:18 reporting2 sshd[12581]: Failed password for invalid user r.r from 42.51.194.15 port 1244 ssh2
Dec  5 17:40:19 reporting2 sshd[12581]: Failed password for invalid user r.r from 42.51.194.15 port 1244 ssh2
Dec  5 17:40:19 reporting2 sshd[12581]: Failed password for invalid user r.r from 42.51.194.15 port 1244 ssh2
Dec  5 17:40:20 reporting2 sshd[12581]: Failed password for invalid user r.r from 42.51.194.15 port 1244 ssh2
Dec  5 17:40:21 reporting2 sshd[12581]: Failed password for invalid user r.r from 42.51.194.15 port 1244 ssh2
Dec  5 17:40:25 reporting2 sshd[12638]:
.... truncated .... 
539]: User r.r from 42.51.194.15 not allowed because not listed in AllowUsers
Dec  5 18:22:17 reporting2 sshd[3539]........
-------------------------------
2019-12-06 19:10:30
42.51.194.4 attackbotsspam
Nov 21 01:58:01 server sshd\[3484\]: Invalid user ngrc from 42.51.194.4
Nov 21 01:58:01 server sshd\[3484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.194.4 
Nov 21 01:58:02 server sshd\[3484\]: Failed password for invalid user ngrc from 42.51.194.4 port 39830 ssh2
Nov 21 02:06:59 server sshd\[5946\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.194.4  user=root
Nov 21 02:07:01 server sshd\[5946\]: Failed password for root from 42.51.194.4 port 38762 ssh2
...
2019-11-21 07:38:27
42.51.194.4 attackspam
Nov 18 18:02:48 MK-Soft-VM8 sshd[3441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.194.4 
Nov 18 18:02:50 MK-Soft-VM8 sshd[3441]: Failed password for invalid user webadmin from 42.51.194.4 port 53503 ssh2
...
2019-11-19 01:06:58
42.51.194.4 attackbots
Nov  9 10:22:29 fr01 sshd[4380]: Invalid user p@ssw0rd from 42.51.194.4
Nov  9 10:22:29 fr01 sshd[4380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.194.4
Nov  9 10:22:29 fr01 sshd[4380]: Invalid user p@ssw0rd from 42.51.194.4
Nov  9 10:22:30 fr01 sshd[4380]: Failed password for invalid user p@ssw0rd from 42.51.194.4 port 47203 ssh2
...
2019-11-09 19:38:15
42.51.194.4 attack
Oct 23 01:43:16 server sshd\[29595\]: Invalid user long from 42.51.194.4 port 32908
Oct 23 01:43:16 server sshd\[29595\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.194.4
Oct 23 01:43:19 server sshd\[29595\]: Failed password for invalid user long from 42.51.194.4 port 32908 ssh2
Oct 23 01:47:59 server sshd\[2979\]: User root from 42.51.194.4 not allowed because listed in DenyUsers
Oct 23 01:47:59 server sshd\[2979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.194.4  user=root
2019-10-23 06:51:22
42.51.194.4 attackspambots
$f2bV_matches
2019-10-22 01:29:23
42.51.194.35 attack
Unauthorized connection attempt from IP address 42.51.194.35 on Port 3306(MYSQL)
2019-09-29 22:26:34
42.51.194.35 attackspam
Unauthorized connection attempt from IP address 42.51.194.35 on Port 3306(MYSQL)
2019-09-23 15:01:44
42.51.194.35 attack
09/15/2019-19:22:10.539826 42.51.194.35 Protocol: 6 ET SCAN Suspicious inbound to mySQL port 3306
2019-09-16 07:33:53
42.51.194.35 attackspam
Unauthorized connection attempt from IP address 42.51.194.35 on Port 3306(MYSQL)
2019-09-15 22:07:14
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.51.194.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24994
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.51.194.55.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090501 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Sep 06 11:35:03 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
55.194.51.42.in-addr.arpa domain name pointer idc.ly.ha.
NSLOOKUP信息:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
55.194.51.42.in-addr.arpa	name = idc.ly.ha.

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
190.202.182.131 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-28 05:01:24
51.91.8.222 attackbotsspam
$f2bV_matches
2019-11-28 04:59:16
218.94.133.182 attackspam
UTC: 2019-11-26 port: 222/tcp
2019-11-28 05:21:13
190.113.142.197 attackbotsspam
Nov 27 19:49:42 mout sshd[15972]: Invalid user guest1234 from 190.113.142.197 port 52599
2019-11-28 05:22:59
51.68.143.224 attack
Nov 11 20:34:09 vtv3 sshd[18815]: Invalid user porsche from 51.68.143.224 port 60166
Nov 11 20:34:09 vtv3 sshd[18815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.143.224
Nov 27 14:25:26 vtv3 sshd[3616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.143.224 
Nov 27 14:25:28 vtv3 sshd[3616]: Failed password for invalid user lizbeida from 51.68.143.224 port 46957 ssh2
Nov 27 14:31:39 vtv3 sshd[6326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.143.224 
Nov 27 14:43:57 vtv3 sshd[12004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.143.224 
Nov 27 14:43:59 vtv3 sshd[12004]: Failed password for invalid user ediva from 51.68.143.224 port 44318 ssh2
Nov 27 14:50:12 vtv3 sshd[15386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.143.224 
Nov 27 15:05:00 vtv3 sshd[22177]: pam_u
2019-11-28 05:09:24
177.161.12.214 attackbotsspam
SSH/22 MH Probe, BF, Hack -
2019-11-28 05:29:47
218.65.236.249 attack
Honeypot hit.
2019-11-28 04:54:39
150.161.5.10 attack
Nov 27 17:33:44 server sshd\[25515\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mangue.dqf.ufpe.br  user=root
Nov 27 17:33:46 server sshd\[25515\]: Failed password for root from 150.161.5.10 port 38254 ssh2
Nov 27 17:47:51 server sshd\[29115\]: Invalid user harijs from 150.161.5.10
Nov 27 17:47:51 server sshd\[29115\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mangue.dqf.ufpe.br 
Nov 27 17:47:53 server sshd\[29115\]: Failed password for invalid user harijs from 150.161.5.10 port 34306 ssh2
...
2019-11-28 04:53:59
46.100.62.185 attackbotsspam
UTC: 2019-11-26 port: 23/tcp
2019-11-28 04:53:42
191.243.240.129 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-28 04:52:56
185.156.73.42 attackspam
11/27/2019-13:00:19.932396 185.156.73.42 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-11-28 05:26:31
5.219.38.66 attackbots
Unauthorized connection attempt from IP address 5.219.38.66 on Port 445(SMB)
2019-11-28 05:27:04
194.102.35.245 attackspambots
2019-11-27T17:22:30.241080abusebot-3.cloudsearch.cf sshd\[31712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.102.35.245  user=root
2019-11-28 05:12:18
106.13.3.174 attackspam
Nov 27 06:00:10 vpxxxxxxx22308 sshd[13276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.3.174  user=r.r
Nov 27 06:00:12 vpxxxxxxx22308 sshd[13276]: Failed password for r.r from 106.13.3.174 port 44196 ssh2
Nov 27 06:04:52 vpxxxxxxx22308 sshd[13641]: Invalid user bot from 106.13.3.174
Nov 27 06:04:52 vpxxxxxxx22308 sshd[13641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.3.174
Nov 27 06:04:54 vpxxxxxxx22308 sshd[13641]: Failed password for invalid user bot from 106.13.3.174 port 17505 ssh2

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.13.3.174
2019-11-28 05:02:52
106.75.6.229 attack
Invalid user apache from 106.75.6.229 port 42934
2019-11-28 04:51:11

最近上报的IP列表

97.240.59.31 91.221.221.21 37.238.26.23 152.246.36.1
11.84.138.115 159.203.203.64 119.76.149.189 88.0.80.224
223.85.57.70 176.228.202.123 141.98.81.253 163.231.59.210
109.247.156.243 220.149.54.241 133.177.178.52 1.27.47.108
51.79.73.206 219.203.169.118 142.219.233.24 92.131.135.18