必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Kolomna

省份(region): Moscow Oblast

国家(country): Russia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
5.42.21.72 attackspambots
DATE:2020-02-13 14:48:56, IP:5.42.21.72, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2020-02-14 00:04:28
5.42.239.197 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/5.42.239.197/ 
 
 SA - 1H : (12)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : SA 
 NAME ASN : ASN35753 
 
 IP : 5.42.239.197 
 
 CIDR : 5.42.238.0/23 
 
 PREFIX COUNT : 230 
 
 UNIQUE IP COUNT : 194816 
 
 
 ATTACKS DETECTED ASN35753 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-11-18 23:53:44 
 
 INFO : Server 301 - Looking for resource vulnerabilities Detected and Blocked by ADMIN  - data recovery
2019-11-19 07:40:51
5.42.226.10 attackspam
2019-07-23T05:56:25.288967abusebot-6.cloudsearch.cf sshd\[876\]: Invalid user ze from 5.42.226.10 port 52470
2019-07-23 14:17:13
5.42.226.10 attackspam
Jul 16 08:53:36 srv-4 sshd\[8178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.226.10  user=root
Jul 16 08:53:38 srv-4 sshd\[8178\]: Failed password for root from 5.42.226.10 port 48372 ssh2
Jul 16 08:59:07 srv-4 sshd\[8563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.226.10  user=root
...
2019-07-16 14:15:53
5.42.226.10 attackspam
Jul 15 23:07:35 srv-4 sshd\[30286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.226.10  user=daemon
Jul 15 23:07:37 srv-4 sshd\[30286\]: Failed password for daemon from 5.42.226.10 port 33338 ssh2
Jul 15 23:13:01 srv-4 sshd\[30689\]: Invalid user train5 from 5.42.226.10
Jul 15 23:13:01 srv-4 sshd\[30689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.226.10
...
2019-07-16 04:29:37
5.42.226.10 attackbots
Jul  9 23:35:09 unicornsoft sshd\[15257\]: Invalid user vnc from 5.42.226.10
Jul  9 23:35:09 unicornsoft sshd\[15257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.226.10
Jul  9 23:35:11 unicornsoft sshd\[15257\]: Failed password for invalid user vnc from 5.42.226.10 port 43006 ssh2
2019-07-10 08:10:45
5.42.226.10 attack
Reported by AbuseIPDB proxy server.
2019-07-08 02:00:13
5.42.226.10 attackspambots
Jul  5 20:47:17 dedicated sshd[26725]: Invalid user daniel from 5.42.226.10 port 60224
2019-07-06 07:09:43
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.42.2.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27604
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;5.42.2.48.			IN	A

;; AUTHORITY SECTION:
.			533	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020120800 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 08 15:09:29 CST 2020
;; MSG SIZE  rcvd: 113

HOST信息:
48.2.42.5.in-addr.arpa domain name pointer 5-42-2-48.colomna.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
48.2.42.5.in-addr.arpa	name = 5-42-2-48.colomna.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
109.166.128.209 attackspam
Automatic report - XMLRPC Attack
2020-06-28 22:36:49
203.80.21.38 attack
Jun 28 14:04:08 scw-6657dc sshd[21154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.80.21.38  user=root
Jun 28 14:04:08 scw-6657dc sshd[21154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.80.21.38  user=root
Jun 28 14:04:09 scw-6657dc sshd[21154]: Failed password for root from 203.80.21.38 port 39508 ssh2
...
2020-06-28 22:48:56
60.250.80.216 attack
SSH Brute-Force. Ports scanning.
2020-06-28 23:13:51
213.158.10.101 attackspam
Jun 28 16:17:14 vpn01 sshd[25346]: Failed password for root from 213.158.10.101 port 41502 ssh2
...
2020-06-28 22:51:20
182.50.130.152 attack
182.50.130.152 - - [28/Jun/2020:14:12:35 +0200] "POST /xmlrpc.php HTTP/1.1" 403 105425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
182.50.130.152 - - [28/Jun/2020:14:12:36 +0200] "POST /xmlrpc.php HTTP/1.1" 403 105421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
...
2020-06-28 23:08:40
85.209.0.102 attackbots
Jun 29 00:16:29 localhost sshd[933670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.0.102  user=root
Jun 29 00:16:31 localhost sshd[933670]: Failed password for root from 85.209.0.102 port 3472 ssh2
Jun 29 00:16:31 localhost sshd[933670]: Connection closed by authenticating user root 85.209.0.102 port 3472 [preauth]
...
2020-06-28 22:56:22
118.70.81.241 attack
Repeated brute force against a port
2020-06-28 23:03:42
123.183.224.65 attack
Automatic report - Banned IP Access
2020-06-28 23:18:27
101.36.150.59 attackbots
5x Failed Password
2020-06-28 23:06:17
191.191.100.177 attack
Invalid user bkpuser from 191.191.100.177 port 58555                                                   
sshd[3847197]: pam_unix(sshd:auth): check pass; user unknown                                                          
   403 Jun 21 14:35:40 sshd[3847197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.191.100.177                                                                                                                                                      
   404 Jun 21 14:35:42  sshd[3847197]: Failed password for invalid user bkpuser from 191.191.100.177 port 58555 ssh2                          
   405 Jun 21 14:35:43  sshd[3847197]: Received disconnect from 191.191.100.177 port 58555:11: Bye Bye [preauth]                              
   406 Jun 21 14:35:43 sshd[3847197]: Disconnected from invalid user bkpuser 191.191.100.177 port 58555 [preauth]
2020-06-28 22:55:08
139.155.21.186 attackbots
Jun 28 15:14:03 Invalid user multicraft from 139.155.21.186 port 43430
2020-06-28 23:01:14
14.228.180.25 attack
Port scan: Attack repeated for 24 hours
2020-06-28 23:07:43
35.196.75.48 attackbots
Jun 28 21:30:23 itv-usvr-02 sshd[23698]: Invalid user userftp from 35.196.75.48 port 37208
Jun 28 21:30:23 itv-usvr-02 sshd[23698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.196.75.48
Jun 28 21:30:23 itv-usvr-02 sshd[23698]: Invalid user userftp from 35.196.75.48 port 37208
Jun 28 21:30:24 itv-usvr-02 sshd[23698]: Failed password for invalid user userftp from 35.196.75.48 port 37208 ssh2
Jun 28 21:35:28 itv-usvr-02 sshd[23912]: Invalid user kr from 35.196.75.48 port 55684
2020-06-28 23:19:18
52.250.65.231 attack
Fail2Ban Ban Triggered
HTTP SQL Injection Attempt
2020-06-28 23:14:09
189.113.140.212 attack
Port probing on unauthorized port 2323
2020-06-28 22:57:33

最近上报的IP列表

223.104.63.7 46.34.228.81 192.168.12.4 78.83.159.190
119.82.251.250 196.65.131.238 45.190.253.134 23.14.162.35
223.217.58.9 119.94.129.127 88.136.129.76 52.113.205.55
94.52.99.74 90.151.82.130 125.224.165.206 114.46.5.81
114.41.87.47 223.138.174.21 118.170.143.37 44.235.167.48