必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Henan Telcom Union Technology Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspambots
May 28 13:01:08 pi sshd[31028]: Failed password for root from 42.51.82.49 port 55948 ssh2
2020-05-28 21:20:26
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.51.82.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31617
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.51.82.49.			IN	A

;; AUTHORITY SECTION:
.			485	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052800 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 28 21:20:13 CST 2020
;; MSG SIZE  rcvd: 115
HOST信息:
49.82.51.42.in-addr.arpa domain name pointer idc.ly.ha.
NSLOOKUP信息:
Server:		100.100.2.138
Address:	100.100.2.138#53

Non-authoritative answer:
49.82.51.42.in-addr.arpa	name = idc.ly.ha.

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
94.97.99.117 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-02 02:16:44
14.164.224.137 attack
Honeypot attack, port: 445, PTR: static.vnpt.vn.
2020-03-02 02:19:02
59.120.189.230 attackbots
Mar  1 08:01:40 web1 sshd\[10420\]: Invalid user mongouser from 59.120.189.230
Mar  1 08:01:40 web1 sshd\[10420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.120.189.230
Mar  1 08:01:42 web1 sshd\[10420\]: Failed password for invalid user mongouser from 59.120.189.230 port 53556 ssh2
Mar  1 08:07:52 web1 sshd\[10986\]: Invalid user tsadmin from 59.120.189.230
Mar  1 08:07:52 web1 sshd\[10986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.120.189.230
2020-03-02 02:18:35
156.200.110.226 attack
Honeypot attack, port: 445, PTR: host-156.200.110.226.tedata.net.
2020-03-02 02:03:14
14.247.130.36 attack
Mar  1 12:45:38 mxgate1 postfix/postscreen[12313]: CONNECT from [14.247.130.36]:13331 to [176.31.12.44]:25
Mar  1 12:45:38 mxgate1 postfix/dnsblog[12317]: addr 14.247.130.36 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Mar  1 12:45:38 mxgate1 postfix/dnsblog[12315]: addr 14.247.130.36 listed by domain cbl.abuseat.org as 127.0.0.2
Mar  1 12:45:38 mxgate1 postfix/dnsblog[12316]: addr 14.247.130.36 listed by domain zen.spamhaus.org as 127.0.0.4
Mar  1 12:45:38 mxgate1 postfix/dnsblog[12316]: addr 14.247.130.36 listed by domain zen.spamhaus.org as 127.0.0.11
Mar  1 12:45:38 mxgate1 postfix/dnsblog[12314]: addr 14.247.130.36 listed by domain b.barracudacentral.org as 127.0.0.2
Mar  1 12:45:44 mxgate1 postfix/postscreen[12313]: DNSBL rank 5 for [14.247.130.36]:13331
Mar x@x
Mar  1 12:45:45 mxgate1 postfix/postscreen[12313]: HANGUP after 0.97 from [14.247.130.36]:13331 in tests after SMTP handshake
Mar  1 12:45:45 mxgate1 postfix/postscreen[12313]: DISCONNECT [14.247.130.........
-------------------------------
2020-03-02 02:07:11
150.95.153.82 attack
Mar  1 08:03:32 tdfoods sshd\[14758\]: Invalid user postgres from 150.95.153.82
Mar  1 08:03:32 tdfoods sshd\[14758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v150-95-153-82.a092.g.tyo1.static.cnode.io
Mar  1 08:03:35 tdfoods sshd\[14758\]: Failed password for invalid user postgres from 150.95.153.82 port 48832 ssh2
Mar  1 08:07:50 tdfoods sshd\[15083\]: Invalid user paul from 150.95.153.82
Mar  1 08:07:50 tdfoods sshd\[15083\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v150-95-153-82.a092.g.tyo1.static.cnode.io
2020-03-02 02:21:10
102.29.192.4 attackbots
2020-03-01T08:06:36.563057srv.ecualinux.com sshd[13361]: Invalid user admin from 102.29.192.4 port 46394
2020-03-01T08:06:36.569470srv.ecualinux.com sshd[13361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.29.192.4
2020-03-01T08:06:38.648204srv.ecualinux.com sshd[13361]: Failed password for invalid user admin from 102.29.192.4 port 46394 ssh2
2020-03-01T08:06:41.710896srv.ecualinux.com sshd[13363]: Invalid user admin from 102.29.192.4 port 46395
2020-03-01T08:06:41.714248srv.ecualinux.com sshd[13363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.29.192.4

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=102.29.192.4
2020-03-02 02:28:28
14.63.167.192 attackbots
SSH Brute Force
2020-03-02 02:31:09
64.202.187.152 attack
2020-03-02T04:37:20.288258luisaranguren sshd[2964732]: Invalid user zhangzihan from 64.202.187.152 port 55888
2020-03-02T04:37:22.059762luisaranguren sshd[2964732]: Failed password for invalid user zhangzihan from 64.202.187.152 port 55888 ssh2
...
2020-03-02 02:29:51
222.186.180.8 attackspambots
Mar  1 19:03:20 jane sshd[32029]: Failed password for root from 222.186.180.8 port 19506 ssh2
Mar  1 19:03:23 jane sshd[32029]: Failed password for root from 222.186.180.8 port 19506 ssh2
...
2020-03-02 02:15:31
86.157.35.14 attackbots
Mar  1 14:22:07 grey postfix/smtpd\[21028\]: NOQUEUE: reject: RCPT from host86-157-35-14.range86-157.btcentralplus.com\[86.157.35.14\]: 554 5.7.1 Service unavailable\; Client host \[86.157.35.14\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?86.157.35.14\; from=\ to=\ proto=ESMTP helo=\
...
2020-03-02 02:00:14
101.255.116.44 attack
20/3/1@08:22:00: FAIL: Alarm-Network address from=101.255.116.44
...
2020-03-02 02:07:55
91.121.175.138 attackbotsspam
Mar  1 18:25:47 MK-Soft-Root1 sshd[10379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.175.138 
Mar  1 18:25:50 MK-Soft-Root1 sshd[10379]: Failed password for invalid user remote from 91.121.175.138 port 39642 ssh2
...
2020-03-02 01:59:12
185.93.2.76 attackspambots
Potential Directory Traversal Attempt.
2020-03-02 02:22:24
103.23.102.3 attackspambots
Mar  1 17:58:27 server sshd\[15469\]: Invalid user cpaneleximfilter from 103.23.102.3
Mar  1 17:58:27 server sshd\[15469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.23.102.3 
Mar  1 17:58:29 server sshd\[15469\]: Failed password for invalid user cpaneleximfilter from 103.23.102.3 port 33453 ssh2
Mar  1 18:11:57 server sshd\[18007\]: Invalid user node from 103.23.102.3
Mar  1 18:11:57 server sshd\[18007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.23.102.3 
...
2020-03-02 02:08:36

最近上报的IP列表

59.167.200.174 249.32.71.152 175.134.228.125 210.252.205.115
34.227.21.90 183.139.156.0 224.235.214.104 39.120.56.196
83.153.188.236 23.252.91.187 14.146.95.191 255.230.56.151
9.91.192.93 197.248.206.182 152.23.123.53 170.192.158.59
208.92.136.38 85.26.164.221 205.230.181.9 7.254.227.60