必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
" "
2020-08-08 22:31:32
attack
Jul 18 05:35:14 vps46666688 sshd[13648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.142.196.145
Jul 18 05:35:16 vps46666688 sshd[13648]: Failed password for invalid user admin from 52.142.196.145 port 1280 ssh2
...
2020-07-18 17:23:32
attackspam
RDP Bruteforce
2020-04-24 04:18:03
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.142.196.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49544
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.142.196.145.			IN	A

;; AUTHORITY SECTION:
.			145	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042301 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 24 04:18:00 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 145.196.142.52.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 145.196.142.52.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
134.209.235.106 attackspam
134.209.235.106 - - [24/Aug/2020:05:54:55 +0200] "GET /wp-login.php HTTP/1.1" 200 8691 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
134.209.235.106 - - [24/Aug/2020:05:54:57 +0200] "POST /wp-login.php HTTP/1.1" 200 8921 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
134.209.235.106 - - [24/Aug/2020:05:54:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-08-24 13:53:02
103.229.124.68 attack
RDP Brute-Force (honeypot 2)
2020-08-24 13:38:20
212.47.229.4 attackbots
$f2bV_matches
2020-08-24 13:57:29
118.97.189.60 attack
Unauthorised access (Aug 24) SRC=118.97.189.60 LEN=52 TOS=0x10 PREC=0x40 TTL=118 ID=10775 DF TCP DPT=445 WINDOW=8192 SYN
2020-08-24 13:40:09
192.35.168.96 attack
192.35.168.96 - - - [24/Aug/2020:07:37:56 +0200] "GET / HTTP/1.1" 404 162 "-" "Mozilla/5.0 zgrab/0.x" "-" "-"
2020-08-24 13:50:06
64.202.184.249 attackspambots
64.202.184.249 - - [24/Aug/2020:07:06:44 +0200] "GET /wp-login.php HTTP/1.1" 200 9040 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
64.202.184.249 - - [24/Aug/2020:07:06:47 +0200] "POST /wp-login.php HTTP/1.1" 200 9291 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
64.202.184.249 - - [24/Aug/2020:07:06:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-08-24 13:57:45
190.145.78.65 attackbotsspam
Aug 24 00:26:11 NPSTNNYC01T sshd[19296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.78.65
Aug 24 00:26:13 NPSTNNYC01T sshd[19296]: Failed password for invalid user minecraft from 190.145.78.65 port 50816 ssh2
Aug 24 00:30:53 NPSTNNYC01T sshd[19713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.78.65
...
2020-08-24 13:45:52
210.12.27.226 attackspam
Aug 24 06:17:40 inter-technics sshd[19964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.12.27.226  user=root
Aug 24 06:17:42 inter-technics sshd[19964]: Failed password for root from 210.12.27.226 port 48320 ssh2
Aug 24 06:22:04 inter-technics sshd[20272]: Invalid user charis from 210.12.27.226 port 49091
Aug 24 06:22:04 inter-technics sshd[20272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.12.27.226
Aug 24 06:22:04 inter-technics sshd[20272]: Invalid user charis from 210.12.27.226 port 49091
Aug 24 06:22:06 inter-technics sshd[20272]: Failed password for invalid user charis from 210.12.27.226 port 49091 ssh2
...
2020-08-24 13:49:53
175.24.87.22 attackspam
Aug 24 05:54:48 vps647732 sshd[15703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.87.22
Aug 24 05:54:50 vps647732 sshd[15703]: Failed password for invalid user admin from 175.24.87.22 port 39044 ssh2
...
2020-08-24 13:58:56
150.109.57.43 attackbotsspam
Aug 24 06:12:27 cho sshd[1483695]: Failed password for invalid user cosmos from 150.109.57.43 port 34110 ssh2
Aug 24 06:16:51 cho sshd[1483961]: Invalid user xxxx from 150.109.57.43 port 43184
Aug 24 06:16:51 cho sshd[1483961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.57.43 
Aug 24 06:16:51 cho sshd[1483961]: Invalid user xxxx from 150.109.57.43 port 43184
Aug 24 06:16:53 cho sshd[1483961]: Failed password for invalid user xxxx from 150.109.57.43 port 43184 ssh2
...
2020-08-24 13:42:38
94.46.15.22 attack
WordPress wp-login brute force :: 94.46.15.22 2.112 - [24/Aug/2020:03:54:48  0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 2411 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1"
2020-08-24 14:00:37
61.177.172.177 attackbotsspam
Aug 24 07:47:04 ip40 sshd[3638]: Failed password for root from 61.177.172.177 port 56263 ssh2
Aug 24 07:47:08 ip40 sshd[3638]: Failed password for root from 61.177.172.177 port 56263 ssh2
...
2020-08-24 13:54:45
104.248.160.58 attackspambots
Aug 24 07:46:36 ip40 sshd[3591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.160.58 
Aug 24 07:46:38 ip40 sshd[3591]: Failed password for invalid user test01 from 104.248.160.58 port 58716 ssh2
...
2020-08-24 13:53:27
111.231.71.157 attackspambots
Time:     Mon Aug 24 05:53:34 2020 +0200
IP:       111.231.71.157 (CN/China/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Aug 24 05:38:58 mail-01 sshd[15291]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.71.157  user=root
Aug 24 05:39:01 mail-01 sshd[15291]: Failed password for root from 111.231.71.157 port 41784 ssh2
Aug 24 05:49:26 mail-01 sshd[15879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.71.157  user=root
Aug 24 05:49:28 mail-01 sshd[15879]: Failed password for root from 111.231.71.157 port 59210 ssh2
Aug 24 05:53:29 mail-01 sshd[16082]: Invalid user zjy from 111.231.71.157 port 43138
2020-08-24 13:50:52
192.141.107.58 attack
Aug 24 07:01:45 sip sshd[1405934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.107.58 
Aug 24 07:01:45 sip sshd[1405934]: Invalid user yux from 192.141.107.58 port 43050
Aug 24 07:01:48 sip sshd[1405934]: Failed password for invalid user yux from 192.141.107.58 port 43050 ssh2
...
2020-08-24 14:05:51

最近上报的IP列表

168.61.55.145 70.37.84.242 200.187.127.8 217.118.178.100
242.78.147.193 31.174.178.132 152.124.162.224 62.108.42.184
23.99.128.104 208.198.245.238 201.223.50.96 186.93.93.26
51.89.142.43 13.77.158.96 190.144.249.7 202.142.99.127
219.79.56.166 13.71.119.97 20.46.40.146 15.164.232.13