必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Kolomna

省份(region): Moscow Oblast

国家(country): Russia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
5.42.21.72 attackspambots
DATE:2020-02-13 14:48:56, IP:5.42.21.72, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2020-02-14 00:04:28
5.42.239.197 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/5.42.239.197/ 
 
 SA - 1H : (12)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : SA 
 NAME ASN : ASN35753 
 
 IP : 5.42.239.197 
 
 CIDR : 5.42.238.0/23 
 
 PREFIX COUNT : 230 
 
 UNIQUE IP COUNT : 194816 
 
 
 ATTACKS DETECTED ASN35753 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-11-18 23:53:44 
 
 INFO : Server 301 - Looking for resource vulnerabilities Detected and Blocked by ADMIN  - data recovery
2019-11-19 07:40:51
5.42.226.10 attackspam
2019-07-23T05:56:25.288967abusebot-6.cloudsearch.cf sshd\[876\]: Invalid user ze from 5.42.226.10 port 52470
2019-07-23 14:17:13
5.42.226.10 attackspam
Jul 16 08:53:36 srv-4 sshd\[8178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.226.10  user=root
Jul 16 08:53:38 srv-4 sshd\[8178\]: Failed password for root from 5.42.226.10 port 48372 ssh2
Jul 16 08:59:07 srv-4 sshd\[8563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.226.10  user=root
...
2019-07-16 14:15:53
5.42.226.10 attackspam
Jul 15 23:07:35 srv-4 sshd\[30286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.226.10  user=daemon
Jul 15 23:07:37 srv-4 sshd\[30286\]: Failed password for daemon from 5.42.226.10 port 33338 ssh2
Jul 15 23:13:01 srv-4 sshd\[30689\]: Invalid user train5 from 5.42.226.10
Jul 15 23:13:01 srv-4 sshd\[30689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.226.10
...
2019-07-16 04:29:37
5.42.226.10 attackbots
Jul  9 23:35:09 unicornsoft sshd\[15257\]: Invalid user vnc from 5.42.226.10
Jul  9 23:35:09 unicornsoft sshd\[15257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.226.10
Jul  9 23:35:11 unicornsoft sshd\[15257\]: Failed password for invalid user vnc from 5.42.226.10 port 43006 ssh2
2019-07-10 08:10:45
5.42.226.10 attack
Reported by AbuseIPDB proxy server.
2019-07-08 02:00:13
5.42.226.10 attackspambots
Jul  5 20:47:17 dedicated sshd[26725]: Invalid user daniel from 5.42.226.10 port 60224
2019-07-06 07:09:43
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.42.2.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27604
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;5.42.2.48.			IN	A

;; AUTHORITY SECTION:
.			533	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020120800 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 08 15:09:29 CST 2020
;; MSG SIZE  rcvd: 113

HOST信息:
48.2.42.5.in-addr.arpa domain name pointer 5-42-2-48.colomna.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
48.2.42.5.in-addr.arpa	name = 5-42-2-48.colomna.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
49.88.112.116 attackbots
Sep 14 21:09:40 mail sshd[29102]: refused connect from 49.88.112.116 (49.88.112.116)
Sep 14 21:10:43 mail sshd[29127]: refused connect from 49.88.112.116 (49.88.112.116)
Sep 14 21:11:50 mail sshd[29155]: refused connect from 49.88.112.116 (49.88.112.116)
Sep 14 21:12:54 mail sshd[29214]: refused connect from 49.88.112.116 (49.88.112.116)
Sep 14 21:13:59 mail sshd[29273]: refused connect from 49.88.112.116 (49.88.112.116)
...
2020-09-15 03:18:44
62.234.217.203 attackspam
2020-09-14T17:17:58.111446abusebot-4.cloudsearch.cf sshd[5397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.217.203  user=root
2020-09-14T17:18:00.412139abusebot-4.cloudsearch.cf sshd[5397]: Failed password for root from 62.234.217.203 port 41558 ssh2
2020-09-14T17:21:02.115980abusebot-4.cloudsearch.cf sshd[5454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.217.203  user=root
2020-09-14T17:21:04.009735abusebot-4.cloudsearch.cf sshd[5454]: Failed password for root from 62.234.217.203 port 53098 ssh2
2020-09-14T17:24:05.426935abusebot-4.cloudsearch.cf sshd[5511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.217.203  user=root
2020-09-14T17:24:07.441340abusebot-4.cloudsearch.cf sshd[5511]: Failed password for root from 62.234.217.203 port 36402 ssh2
2020-09-14T17:27:03.742339abusebot-4.cloudsearch.cf sshd[5610]: pam_unix(sshd:auth): authen
...
2020-09-15 03:01:27
156.96.47.20 attack
DATE:2020-09-14 13:39:14, IP:156.96.47.20, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2020-09-15 02:52:02
51.77.213.136 attackbotsspam
2020-09-15T00:04:21.591587hostname sshd[14747]: Failed password for root from 51.77.213.136 port 51188 ssh2
2020-09-15T00:08:17.551568hostname sshd[16377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.ip-51-77-213.eu  user=root
2020-09-15T00:08:19.096655hostname sshd[16377]: Failed password for root from 51.77.213.136 port 37134 ssh2
...
2020-09-15 03:20:19
182.61.150.42 attack
Sep 14 19:26:53 v22019038103785759 sshd\[28769\]: Invalid user ftpd from 182.61.150.42 port 43954
Sep 14 19:26:53 v22019038103785759 sshd\[28769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.150.42
Sep 14 19:26:55 v22019038103785759 sshd\[28769\]: Failed password for invalid user ftpd from 182.61.150.42 port 43954 ssh2
Sep 14 19:30:10 v22019038103785759 sshd\[29103\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.150.42  user=root
Sep 14 19:30:11 v22019038103785759 sshd\[29103\]: Failed password for root from 182.61.150.42 port 52406 ssh2
...
2020-09-15 03:06:49
213.92.220.13 attackbots
Sep 14 11:30:15 mail.srvfarm.net postfix/smtpd[1912640]: warning: unknown[213.92.220.13]: SASL PLAIN authentication failed: 
Sep 14 11:30:15 mail.srvfarm.net postfix/smtpd[1912640]: lost connection after AUTH from unknown[213.92.220.13]
Sep 14 11:33:55 mail.srvfarm.net postfix/smtps/smtpd[1914409]: warning: unknown[213.92.220.13]: SASL PLAIN authentication failed: 
Sep 14 11:33:55 mail.srvfarm.net postfix/smtps/smtpd[1914409]: lost connection after AUTH from unknown[213.92.220.13]
Sep 14 11:35:42 mail.srvfarm.net postfix/smtpd[1915153]: warning: unknown[213.92.220.13]: SASL PLAIN authentication failed:
2020-09-15 02:50:07
46.101.143.148 attack
Sep 14 18:39:59 serwer sshd\[18015\]: Invalid user abcdefg from 46.101.143.148 port 59714
Sep 14 18:39:59 serwer sshd\[18015\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.143.148
Sep 14 18:40:01 serwer sshd\[18015\]: Failed password for invalid user abcdefg from 46.101.143.148 port 59714 ssh2
...
2020-09-15 03:04:28
49.233.75.234 attackspambots
SSH bruteforce
2020-09-15 03:08:47
51.68.227.98 attackspambots
SSH Bruteforce attack
2020-09-15 02:53:11
175.173.145.154 attackspambots
IP 175.173.145.154 attacked honeypot on port: 23 at 9/13/2020 9:50:02 AM
2020-09-15 03:27:36
103.228.144.57 attackspam
 TCP (SYN) 103.228.144.57:6595 -> port 23, len 44
2020-09-15 03:10:03
138.68.55.193 attack
Invalid user charisse from 138.68.55.193 port 45654
2020-09-15 03:19:26
51.195.138.52 attackbotsspam
Sep 14 18:55:50 db sshd[29105]: User root from 51.195.138.52 not allowed because none of user's groups are listed in AllowGroups
...
2020-09-15 03:22:20
52.78.204.50 attackspam
$f2bV_matches
2020-09-15 03:16:37
159.65.180.64 attackspambots
2020-09-13T22:45:46.203855hostname sshd[47478]: Failed password for root from 159.65.180.64 port 58316 ssh2
...
2020-09-15 03:17:38

最近上报的IP列表

223.104.63.7 46.34.228.81 192.168.12.4 78.83.159.190
119.82.251.250 196.65.131.238 45.190.253.134 23.14.162.35
223.217.58.9 119.94.129.127 88.136.129.76 52.113.205.55
94.52.99.74 90.151.82.130 125.224.165.206 114.46.5.81
114.41.87.47 223.138.174.21 118.170.143.37 44.235.167.48