必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Kolomna

省份(region): Moscow Oblast

国家(country): Russia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
5.42.21.72 attackspambots
DATE:2020-02-13 14:48:56, IP:5.42.21.72, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2020-02-14 00:04:28
5.42.239.197 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/5.42.239.197/ 
 
 SA - 1H : (12)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : SA 
 NAME ASN : ASN35753 
 
 IP : 5.42.239.197 
 
 CIDR : 5.42.238.0/23 
 
 PREFIX COUNT : 230 
 
 UNIQUE IP COUNT : 194816 
 
 
 ATTACKS DETECTED ASN35753 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-11-18 23:53:44 
 
 INFO : Server 301 - Looking for resource vulnerabilities Detected and Blocked by ADMIN  - data recovery
2019-11-19 07:40:51
5.42.226.10 attackspam
2019-07-23T05:56:25.288967abusebot-6.cloudsearch.cf sshd\[876\]: Invalid user ze from 5.42.226.10 port 52470
2019-07-23 14:17:13
5.42.226.10 attackspam
Jul 16 08:53:36 srv-4 sshd\[8178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.226.10  user=root
Jul 16 08:53:38 srv-4 sshd\[8178\]: Failed password for root from 5.42.226.10 port 48372 ssh2
Jul 16 08:59:07 srv-4 sshd\[8563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.226.10  user=root
...
2019-07-16 14:15:53
5.42.226.10 attackspam
Jul 15 23:07:35 srv-4 sshd\[30286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.226.10  user=daemon
Jul 15 23:07:37 srv-4 sshd\[30286\]: Failed password for daemon from 5.42.226.10 port 33338 ssh2
Jul 15 23:13:01 srv-4 sshd\[30689\]: Invalid user train5 from 5.42.226.10
Jul 15 23:13:01 srv-4 sshd\[30689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.226.10
...
2019-07-16 04:29:37
5.42.226.10 attackbots
Jul  9 23:35:09 unicornsoft sshd\[15257\]: Invalid user vnc from 5.42.226.10
Jul  9 23:35:09 unicornsoft sshd\[15257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.226.10
Jul  9 23:35:11 unicornsoft sshd\[15257\]: Failed password for invalid user vnc from 5.42.226.10 port 43006 ssh2
2019-07-10 08:10:45
5.42.226.10 attack
Reported by AbuseIPDB proxy server.
2019-07-08 02:00:13
5.42.226.10 attackspambots
Jul  5 20:47:17 dedicated sshd[26725]: Invalid user daniel from 5.42.226.10 port 60224
2019-07-06 07:09:43
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.42.2.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27604
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;5.42.2.48.			IN	A

;; AUTHORITY SECTION:
.			533	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020120800 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 08 15:09:29 CST 2020
;; MSG SIZE  rcvd: 113

HOST信息:
48.2.42.5.in-addr.arpa domain name pointer 5-42-2-48.colomna.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
48.2.42.5.in-addr.arpa	name = 5-42-2-48.colomna.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
196.36.1.108 attackbots
Jun 10 23:55:53 Host-KEWR-E sshd[5610]: User root from 196.36.1.108 not allowed because not listed in AllowUsers
...
2020-06-11 14:41:45
193.112.48.79 attackbotsspam
2020-06-11T08:55:58.760511lavrinenko.info sshd[22700]: Failed password for root from 193.112.48.79 port 32982 ssh2
2020-06-11T08:58:59.213079lavrinenko.info sshd[22793]: Invalid user adam from 193.112.48.79 port 49877
2020-06-11T08:58:59.223919lavrinenko.info sshd[22793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.48.79
2020-06-11T08:58:59.213079lavrinenko.info sshd[22793]: Invalid user adam from 193.112.48.79 port 49877
2020-06-11T08:59:00.322505lavrinenko.info sshd[22793]: Failed password for invalid user adam from 193.112.48.79 port 49877 ssh2
...
2020-06-11 14:06:28
165.227.198.144 attackspam
Jun 11 01:39:39 ny01 sshd[24378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.198.144
Jun 11 01:39:41 ny01 sshd[24378]: Failed password for invalid user faris from 165.227.198.144 port 33150 ssh2
Jun 11 01:43:16 ny01 sshd[24874]: Failed password for root from 165.227.198.144 port 35842 ssh2
2020-06-11 14:33:11
211.180.175.198 attackspambots
Jun 11 06:59:29 sso sshd[24607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.180.175.198
Jun 11 06:59:30 sso sshd[24607]: Failed password for invalid user alen from 211.180.175.198 port 52223 ssh2
...
2020-06-11 14:02:17
39.156.9.132 attack
Jun 11 05:56:34 ns381471 sshd[29980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.156.9.132
Jun 11 05:56:37 ns381471 sshd[29980]: Failed password for invalid user ubuntu from 39.156.9.132 port 35606 ssh2
2020-06-11 14:12:19
88.87.86.63 attack
Jun 11 06:42:51 electroncash sshd[37726]: Invalid user liyang from 88.87.86.63 port 53554
Jun 11 06:42:53 electroncash sshd[37726]: Failed password for invalid user liyang from 88.87.86.63 port 53554 ssh2
Jun 11 06:45:48 electroncash sshd[38498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.87.86.63  user=root
Jun 11 06:45:50 electroncash sshd[38498]: Failed password for root from 88.87.86.63 port 36654 ssh2
Jun 11 06:48:42 electroncash sshd[39254]: Invalid user test from 88.87.86.63 port 19764
...
2020-06-11 14:34:26
68.183.48.172 attack
Jun 10 23:56:02 mail sshd\[8667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.48.172  user=root
...
2020-06-11 14:36:08
118.166.201.3 attackbotsspam
Jun 11 05:56:31 debian-2gb-nbg1-2 kernel: \[14106519.330051\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=118.166.201.3 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=63931 PROTO=TCP SPT=52233 DPT=23 WINDOW=19463 RES=0x00 SYN URGP=0
2020-06-11 14:16:07
42.239.155.148 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2020-06-11 14:34:52
212.70.149.2 attack
Jun 11 08:38:41 srv01 postfix/smtpd\[30236\]: warning: unknown\[212.70.149.2\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 11 08:38:53 srv01 postfix/smtpd\[30236\]: warning: unknown\[212.70.149.2\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 11 08:38:59 srv01 postfix/smtpd\[31634\]: warning: unknown\[212.70.149.2\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 11 08:39:16 srv01 postfix/smtpd\[30236\]: warning: unknown\[212.70.149.2\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 11 08:39:28 srv01 postfix/smtpd\[30236\]: warning: unknown\[212.70.149.2\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-06-11 14:40:27
177.44.16.194 attackbots
(smtpauth) Failed SMTP AUTH login from 177.44.16.194 (BR/Brazil/177-44-16-194.ptu-wr.mastercabo.com.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-11 08:26:01 plain authenticator failed for ([177.44.16.194]) [177.44.16.194]: 535 Incorrect authentication data (set_id=foroosh@ajorkowsar.com)
2020-06-11 14:30:55
222.186.175.202 attackbots
2020-06-11T06:21:59.837594shield sshd\[23301\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.202  user=root
2020-06-11T06:22:01.055791shield sshd\[23301\]: Failed password for root from 222.186.175.202 port 46760 ssh2
2020-06-11T06:22:04.590495shield sshd\[23301\]: Failed password for root from 222.186.175.202 port 46760 ssh2
2020-06-11T06:22:08.168257shield sshd\[23301\]: Failed password for root from 222.186.175.202 port 46760 ssh2
2020-06-11T06:22:11.330181shield sshd\[23301\]: Failed password for root from 222.186.175.202 port 46760 ssh2
2020-06-11 14:22:34
157.230.45.31 attackbots
2020-06-11T05:01:25.144283abusebot-2.cloudsearch.cf sshd[29437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.45.31  user=root
2020-06-11T05:01:27.070855abusebot-2.cloudsearch.cf sshd[29437]: Failed password for root from 157.230.45.31 port 46110 ssh2
2020-06-11T05:05:00.674400abusebot-2.cloudsearch.cf sshd[29541]: Invalid user ruth from 157.230.45.31 port 47720
2020-06-11T05:05:00.682824abusebot-2.cloudsearch.cf sshd[29541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.45.31
2020-06-11T05:05:00.674400abusebot-2.cloudsearch.cf sshd[29541]: Invalid user ruth from 157.230.45.31 port 47720
2020-06-11T05:05:02.794609abusebot-2.cloudsearch.cf sshd[29541]: Failed password for invalid user ruth from 157.230.45.31 port 47720 ssh2
2020-06-11T05:08:31.784418abusebot-2.cloudsearch.cf sshd[29548]: Invalid user admin from 157.230.45.31 port 49332
...
2020-06-11 14:23:13
62.122.156.74 attackbots
(sshd) Failed SSH login from 62.122.156.74 (UA/Ukraine/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 11 08:38:18 ubnt-55d23 sshd[905]: Invalid user admin from 62.122.156.74 port 59960
Jun 11 08:38:19 ubnt-55d23 sshd[905]: Failed password for invalid user admin from 62.122.156.74 port 59960 ssh2
2020-06-11 14:41:33
178.216.249.168 attack
$f2bV_matches | Triggered by Fail2Ban at Vostok web server
2020-06-11 14:08:42

最近上报的IP列表

223.104.63.7 46.34.228.81 192.168.12.4 78.83.159.190
119.82.251.250 196.65.131.238 45.190.253.134 23.14.162.35
223.217.58.9 119.94.129.127 88.136.129.76 52.113.205.55
94.52.99.74 90.151.82.130 125.224.165.206 114.46.5.81
114.41.87.47 223.138.174.21 118.170.143.37 44.235.167.48