必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Popesti-Leordeni

省份(region): Ilfov

国家(country): Romania

运营商(isp): RCS & RDS S.A.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspambots
Nov  9 02:16:37 taivassalofi sshd[206601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.2.142.130
Nov  9 02:16:39 taivassalofi sshd[206601]: Failed password for invalid user WWW@1234 from 5.2.142.130 port 37478 ssh2
...
2019-11-09 08:26:44
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.2.142.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1260
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;5.2.142.130.			IN	A

;; AUTHORITY SECTION:
.			254	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110801 1800 900 604800 86400

;; Query time: 51 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 09 08:26:41 CST 2019
;; MSG SIZE  rcvd: 115
HOST信息:
130.142.2.5.in-addr.arpa domain name pointer static-5-2-142-130.rdsnet.ro.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
130.142.2.5.in-addr.arpa	name = static-5-2-142-130.rdsnet.ro.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
165.227.2.132 attackbotsspam
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-07-15T09:48:15Z and 2020-07-15T10:15:12Z
2020-07-15 20:50:43
114.35.220.181 attack
Jul 15 12:15:06 debian-2gb-nbg1-2 kernel: \[17066671.551186\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=114.35.220.181 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=30995 PROTO=TCP SPT=8848 DPT=85 WINDOW=12416 RES=0x00 SYN URGP=0
2020-07-15 20:58:31
212.253.93.120 attackbotsspam
Unauthorized connection attempt from IP address 212.253.93.120 on Port 445(SMB)
2020-07-15 21:01:11
217.141.152.174 attackspam
Unauthorized connection attempt from IP address 217.141.152.174 on Port 445(SMB)
2020-07-15 22:11:48
117.33.253.49 attackspam
Jul 15 15:51:58 ns382633 sshd\[413\]: Invalid user gamer from 117.33.253.49 port 57116
Jul 15 15:51:58 ns382633 sshd\[413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.33.253.49
Jul 15 15:52:00 ns382633 sshd\[413\]: Failed password for invalid user gamer from 117.33.253.49 port 57116 ssh2
Jul 15 16:13:55 ns382633 sshd\[5044\]: Invalid user splunk from 117.33.253.49 port 33652
Jul 15 16:13:55 ns382633 sshd\[5044\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.33.253.49
2020-07-15 22:17:32
178.128.82.148 attackbots
(mod_security) mod_security (id:20000005) triggered by 178.128.82.148 (SG/Singapore/-): 5 in the last 300 secs
2020-07-15 20:44:55
171.239.199.160 attack
Honeypot attack, port: 81, PTR: dynamic-ip-adsl.viettel.vn.
2020-07-15 20:56:18
212.70.149.51 attackspambots
SMTP:25 2336 failed authentication attempts in 24 hours  Attack from multiple 212.70.149.0/24
2020-07-15 21:02:56
119.45.0.217 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-07-15 22:25:11
185.143.144.71 attackbotsspam
Honeypot attack, port: 5555, PTR: host-71.primonet.com.ua.
2020-07-15 20:42:44
203.195.130.233 attackspam
2020-07-15T06:26:39.3564381495-001 sshd[30713]: Invalid user natanael from 203.195.130.233 port 45174
2020-07-15T06:26:41.2077011495-001 sshd[30713]: Failed password for invalid user natanael from 203.195.130.233 port 45174 ssh2
2020-07-15T06:29:24.6116981495-001 sshd[30853]: Invalid user smkim from 203.195.130.233 port 47092
2020-07-15T06:29:24.6186231495-001 sshd[30853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.130.233
2020-07-15T06:29:24.6116981495-001 sshd[30853]: Invalid user smkim from 203.195.130.233 port 47092
2020-07-15T06:29:27.1159411495-001 sshd[30853]: Failed password for invalid user smkim from 203.195.130.233 port 47092 ssh2
...
2020-07-15 20:54:43
198.187.29.15 attackspambots
REQUESTED PAGE: /wordpress/wp-admin/
2020-07-15 22:21:09
116.87.48.124 attackspam
Unauthorized IMAP connection attempt
2020-07-15 22:25:46
14.231.254.159 attackspam
Unauthorized connection attempt from IP address 14.231.254.159 on Port 445(SMB)
2020-07-15 20:59:57
212.129.38.177 attackbotsspam
Connection to SSH Honeypot - Detected by HoneypotDB
2020-07-15 22:12:15

最近上报的IP列表

5.54.133.160 186.225.61.178 95.178.241.222 47.201.56.13
46.191.137.89 49.68.147.63 159.255.164.194 207.246.119.98
100.15.40.165 175.5.114.211 136.169.214.255 63.80.88.204
164.68.104.74 153.228.109.99 183.166.61.9 60.175.84.235
40.89.129.39 77.43.171.151 46.170.34.38 113.205.149.67