必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
点此参与IP信息讨论
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
42.56.219.181 attackspam 
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/42.56.219.181/ 
 
 CN - 1H : (740)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN4837 
 
 IP : 42.56.219.181 
 
 CIDR : 42.56.0.0/14 
 
 PREFIX COUNT : 1262 
 
 UNIQUE IP COUNT : 56665856 
 
 
 ATTACKS DETECTED ASN4837 :  
  1H - 14 
  3H - 46 
  6H - 69 
 12H - 124 
 24H - 257 
 
 DateTime : 2019-10-29 04:53:35 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
 2019-10-29 15:09:02
42.56.236.201 attack 
Automatic report - Port Scan Attack
 2019-10-24 18:50:58
42.56.25.49 attackbotsspam 
Sep  8 22:57:09 srv206 sshd[5615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.56.25.49  user=root
Sep  8 22:57:11 srv206 sshd[5615]: Failed password for root from 42.56.25.49 port 36786 ssh2
Sep  8 22:57:14 srv206 sshd[5615]: Failed password for root from 42.56.25.49 port 36786 ssh2
Sep  8 22:57:09 srv206 sshd[5615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.56.25.49  user=root
Sep  8 22:57:11 srv206 sshd[5615]: Failed password for root from 42.56.25.49 port 36786 ssh2
Sep  8 22:57:14 srv206 sshd[5615]: Failed password for root from 42.56.25.49 port 36786 ssh2
...
 2019-09-09 09:49:03
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.56.2.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47162
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.56.2.1.			IN	A

;; AUTHORITY SECTION:
.			471	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072201 1800 900 604800 86400

;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 23 08:05:45 CST 2020
;; MSG SIZE  rcvd: 113
HOST信息:
Host 1.2.56.42.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 1.2.56.42.in-addr.arpa: NXDOMAIN
相关IP信息:
42.56.2.245
42.56.2.3
42.56.2.127
42.56.2.24
42.56.2.201
42.56.2.177
42.56.2.189
42.56.2.109
42.56.2.19
42.56.2.134
42.56.2.196
42.56.2.154
42.56.2.209
42.56.2.119
42.56.2.120
42.56.2.122
42.56.2.49
42.56.2.220
42.56.2.219
42.56.2.60
42.56.2.183
42.56.2.174
42.56.2.10
42.56.2.144
42.56.2.17
42.56.2.39
42.56.2.227
42.56.2.36
42.56.2.67
42.56.2.104
42.56.2.142
42.56.2.93
42.56.2.26
42.56.2.162
42.56.2.161
42.56.2.95
42.56.2.232
42.56.2.191
42.56.2.165
42.56.2.223
42.56.2.229
42.56.2.238
42.56.2.206
42.56.2.58
42.56.2.115
42.56.2.246
42.56.2.129
42.56.2.215
42.56.2.4
42.56.2.147
42.56.2.27
42.56.2.208
42.56.2.210
42.56.2.126
42.56.2.38
42.56.2.46
42.56.2.113
42.56.2.133
42.56.2.195
42.56.2.118
42.56.2.172
42.56.2.23
42.56.2.160
42.56.2.6
42.56.2.85
42.56.2.110
42.56.2.243
42.56.2.79
42.56.2.225
42.56.2.111
42.56.2.230
42.56.2.12
42.56.2.96
42.56.2.199
42.56.2.212
42.56.2.62
42.56.2.53
42.56.2.55
42.56.2.105
42.56.2.92
42.56.2.8
42.56.2.202
42.56.2.87
42.56.2.33
42.56.2.247
42.56.2.186
42.56.2.184
42.56.2.91
42.56.2.75
42.56.2.235
42.56.2.73
42.56.2.65
42.56.2.52
42.56.2.97
42.56.2.29
42.56.2.249
42.56.2.88
42.56.2.168
42.56.2.207
42.56.2.140
42.56.2.90
42.56.2.100
42.56.2.213
42.56.2.114
42.56.2.51
42.56.2.171
42.56.2.25
42.56.2.112
42.56.2.7
42.56.2.222
42.56.2.239
42.56.2.182
42.56.2.116
42.56.2.192
42.56.2.237
42.56.2.216
42.56.2.138
42.56.2.102
42.56.2.74
42.56.2.190
42.56.2.103
42.56.2.56
42.56.2.157
42.56.2.45
42.56.2.180
42.56.2.233
42.56.2.124
42.56.2.187
42.56.2.59
42.56.2.224
42.56.2.15
42.56.2.61
42.56.2.188
42.56.2.40
42.56.2.149
42.56.2.178
42.56.2.98
42.56.2.82
42.56.2.86
42.56.2.248
42.56.2.252
42.56.2.170
42.56.2.101
42.56.2.42
42.56.2.250
42.56.2.32
42.56.2.241
42.56.2.106
42.56.2.77
42.56.2.226
42.56.2.132
42.56.2.50
42.56.2.47
42.56.2.117
42.56.2.21
42.56.2.78
42.56.2.173
42.56.2.194
42.56.2.30
42.56.2.193
42.56.2.198
42.56.2.130
42.56.2.141
42.56.2.11
42.56.2.136
42.56.2.89
42.56.2.71
42.56.2.72
42.56.2.242
42.56.2.22
42.56.2.1
42.56.2.176
42.56.2.203
42.56.2.31
42.56.2.166
42.56.2.251
42.56.2.128
42.56.2.69
42.56.2.5
42.56.2.158
42.56.2.84
42.56.2.83
42.56.2.13
42.56.2.131
42.56.2.254
42.56.2.159
42.56.2.76
42.56.2.2
42.56.2.143
42.56.2.217
42.56.2.148
42.56.2.9
42.56.2.197
42.56.2.48
42.56.2.185
42.56.2.163
42.56.2.150
42.56.2.68
42.56.2.234
42.56.2.152
42.56.2.135
42.56.2.123
42.56.2.70
42.56.2.151
42.56.2.155
42.56.2.179
42.56.2.54
42.56.2.200
42.56.2.99
42.56.2.175
42.56.2.146
42.56.2.108
42.56.2.218
42.56.2.66
42.56.2.156
42.56.2.240
42.56.2.16
42.56.2.221
42.56.2.205
42.56.2.107
42.56.2.35
42.56.2.153
42.56.2.121
42.56.2.81
42.56.2.18
42.56.2.28
42.56.2.228
42.56.2.63
42.56.2.57
42.56.2.125
42.56.2.204
42.56.2.253
42.56.2.236
42.56.2.211
42.56.2.214
42.56.2.244
42.56.2.44
42.56.2.137
42.56.2.94
42.56.2.14
42.56.2.231
42.56.2.181
42.56.2.145
42.56.2.41
42.56.2.64
42.56.2.34
42.56.2.169
42.56.2.37
42.56.2.80
42.56.2.167
42.56.2.139
42.56.2.43
42.56.2.20
42.56.2.164
最新评论:
IP 类型 评论内容 时间
79.5.114.177 attack 
firewall-block, port(s): 80/tcp
 2020-09-05 15:14:30
92.188.134.54 attack 
Sep  4 18:49:14 mellenthin postfix/smtpd[30941]: NOQUEUE: reject: RCPT from unknown[92.188.134.54]: 554 5.7.1 Service unavailable; Client host [92.188.134.54] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/92.188.134.54; from= to= proto=ESMTP helo=<54.134.188.92.dynamic.ftth.abo.nordnet.fr>
 2020-09-05 15:50:46
171.7.65.123 attack 
Sep  4 05:48:34 kmh-wmh-003-nbg03 sshd[31272]: Invalid user user3 from 171.7.65.123 port 51274
Sep  4 05:48:34 kmh-wmh-003-nbg03 sshd[31272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.7.65.123
Sep  4 05:48:36 kmh-wmh-003-nbg03 sshd[31272]: Failed password for invalid user user3 from 171.7.65.123 port 51274 ssh2
Sep  4 05:48:37 kmh-wmh-003-nbg03 sshd[31272]: Received disconnect from 171.7.65.123 port 51274:11: Bye Bye [preauth]
Sep  4 05:48:37 kmh-wmh-003-nbg03 sshd[31272]: Disconnected from 171.7.65.123 port 51274 [preauth]
Sep  4 05:53:01 kmh-wmh-003-nbg03 sshd[31690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.7.65.123  user=r.r
Sep  4 05:53:03 kmh-wmh-003-nbg03 sshd[31690]: Failed password for r.r from 171.7.65.123 port 58506 ssh2
Sep  4 05:53:04 kmh-wmh-003-nbg03 sshd[31690]: Received disconnect from 171.7.65.123 port 58506:11: Bye Bye [preauth]
Sep  4 05:53:04 kmh-wmh........
-------------------------------
 2020-09-05 15:12:19
193.35.51.21 attackbotsspam 
Sep  5 09:18:19 galaxy event: galaxy/lswi: smtp: gilbert [193.35.51.21] authentication failure using internet password
Sep  5 09:18:24 galaxy event: galaxy/lswi: smtp: torsten@wirtschaftsinformatik-potsdam.de [193.35.51.21] authentication failure using internet password
Sep  5 09:18:24 galaxy event: galaxy/lswi: smtp: sophie@wirtschaftsinformatik-potsdam.de [193.35.51.21] authentication failure using internet password
Sep  5 09:18:26 galaxy event: galaxy/lswi: smtp: torsten [193.35.51.21] authentication failure using internet password
Sep  5 09:18:26 galaxy event: galaxy/lswi: smtp: sophie [193.35.51.21] authentication failure using internet password
...
 2020-09-05 15:23:47
185.147.215.8 attack 
[2020-09-05 02:59:39] NOTICE[1194] chan_sip.c: Registration from '' failed for '185.147.215.8:50911' - Wrong password
[2020-09-05 02:59:39] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-05T02:59:39.450-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3876",SessionID="0x7f2ddc04e988",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/50911",Challenge="6f0a89dc",ReceivedChallenge="6f0a89dc",ReceivedHash="efd834d7ee3f3ec8196a7641e6e96519"
[2020-09-05 03:00:21] NOTICE[1194] chan_sip.c: Registration from '' failed for '185.147.215.8:63634' - Wrong password
[2020-09-05 03:00:21] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-05T03:00:21.317-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4765",SessionID="0x7f2ddc2f61d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8
...
 2020-09-05 15:09:52
115.231.231.3 attack 
Port Scan
...
 2020-09-05 15:26:45
96.54.228.119 attack 
reported through recidive - multiple failed attempts(SSH)
 2020-09-05 15:10:53
23.105.196.142 attackspam 
Sep  5 04:01:57 vmd17057 sshd[4837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.105.196.142 
Sep  5 04:01:59 vmd17057 sshd[4837]: Failed password for invalid user newuser1 from 23.105.196.142 port 50844 ssh2
...
 2020-09-05 15:43:19
84.180.236.164 attackspambots 
Sep  5 09:28:19 lnxweb61 sshd[16942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.180.236.164
 2020-09-05 15:45:10
95.163.196.191 attackspam 
Scanned 3 times in the last 24 hours on port 22
 2020-09-05 15:19:42
183.87.157.202 attackspam 
(sshd) Failed SSH login from 183.87.157.202 (IN/India/202-157-87-183.mysipl.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  5 00:57:28 optimus sshd[31875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.87.157.202  user=root
Sep  5 00:57:31 optimus sshd[31875]: Failed password for root from 183.87.157.202 port 51856 ssh2
Sep  5 01:13:19 optimus sshd[4271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.87.157.202  user=root
Sep  5 01:13:21 optimus sshd[4271]: Failed password for root from 183.87.157.202 port 52242 ssh2
Sep  5 01:17:31 optimus sshd[5645]: Invalid user admin from 183.87.157.202
 2020-09-05 15:32:46
170.130.63.95 attack 
Registration form abuse
 2020-09-05 15:39:46
103.59.113.193 attack 
$f2bV_matches
 2020-09-05 15:41:39
45.233.76.225 attackspambots 
Sep  4 18:49:24 mellenthin postfix/smtpd[32575]: NOQUEUE: reject: RCPT from unknown[45.233.76.225]: 554 5.7.1 Service unavailable; Client host [45.233.76.225] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/45.233.76.225; from= to= proto=ESMTP helo=<[45.233.76.225]>
 2020-09-05 15:42:57
118.24.35.5 attackspambots 
Invalid user altri from 118.24.35.5 port 45848
 2020-09-05 15:05:08

最近上报的IP列表

118.211.214.96 114.151.88.76 168.39.186.62 218.61.100.12
54.214.28.61 152.23.247.158 114.187.240.113 182.188.221.213
182.52.139.211 14.142.122.234 113.186.191.240 110.240.187.5
117.93.82.202 142.1.35.92 154.125.13.72 13.233.146.104
187.189.54.45 62.171.184.123 70.23.202.243 179.33.233.111