必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Italy

运营商(isp): Fastweb SpA

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attack
port scan and connect, tcp 1433 (ms-sql-s)
2020-06-10 06:21:02
attackbotsspam
Honeypot attack, port: 445, PTR: 93-42-155-129.ip87.fastwebnet.it.
2020-03-03 14:02:40
attackspam
Honeypot attack, port: 445, PTR: 93-42-155-129.ip87.fastwebnet.it.
2020-02-28 17:37:31
attack
Unauthorized connection attempt detected from IP address 93.42.155.129 to port 445
2020-01-10 19:42:17
attack
Unauthorized access or intrusion attempt detected from Thor banned IP
2019-11-12 21:29:03
attackbots
[portscan] tcp/1433 [MsSQL]
*(RWIN=1024)(10151156)
2019-10-16 01:12:21
attackbotsspam
445/tcp 445/tcp 445/tcp...
[2019-08-12/09-30]7pkt,1pt.(tcp)
2019-09-30 22:29:20
attackspam
Scanning random ports - tries to find possible vulnerable services
2019-09-01 17:53:57
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.42.155.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55802
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;93.42.155.129.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090100 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Sep 01 17:53:47 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
129.155.42.93.in-addr.arpa domain name pointer 93-42-155-129.ip87.fastwebnet.it.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
129.155.42.93.in-addr.arpa	name = 93-42-155-129.ip87.fastwebnet.it.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
119.28.178.218 attack
2020-06-24T05:35:35.153163 X postfix/smtpd[111907]: NOQUEUE: reject: RCPT from unknown[119.28.178.218]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
2020-06-24T05:45:36.503837 X postfix/smtpd[112474]: NOQUEUE: reject: RCPT from unknown[119.28.178.218]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
2020-06-24T05:55:37.752042 X postfix/smtpd[114560]: NOQUEUE: reject: RCPT from unknown[119.28.178.218]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
2020-06-24 14:33:21
121.42.38.56 attack
SSH Bruteforce Attempt (failed auth)
2020-06-24 14:38:11
123.21.23.202 attackbotsspam
(smtpauth) Failed SMTP AUTH login from 123.21.23.202 (VN/Vietnam/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-24 08:25:25 login authenticator failed for ([127.0.0.1]) [123.21.23.202]: 535 Incorrect authentication data (set_id=architect)
2020-06-24 14:36:56
188.68.45.180 attackspam
Brute forcing email accounts
2020-06-24 14:33:49
35.193.91.176 attackbotsspam
wp4.breidenba.ch 35.193.91.176 [24/Jun/2020:05:55:33 +0200] "POST /wp-login.php HTTP/1.1" 200 5995 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
wp4.breidenba.ch 35.193.91.176 [24/Jun/2020:05:55:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4049 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-24 14:35:56
117.102.90.203 attackbots
20/6/23@23:55:29: FAIL: Alarm-Network address from=117.102.90.203
...
2020-06-24 14:40:30
46.38.148.18 attack
2020-06-24 06:25:14 auth_plain authenticator failed for (User) [46.38.148.18]: 535 Incorrect authentication data (set_id=neon@csmailer.org)
2020-06-24 06:25:36 auth_plain authenticator failed for (User) [46.38.148.18]: 535 Incorrect authentication data (set_id=chrysler@csmailer.org)
2020-06-24 06:25:59 auth_plain authenticator failed for (User) [46.38.148.18]: 535 Incorrect authentication data (set_id=foros@csmailer.org)
2020-06-24 06:26:22 auth_plain authenticator failed for (User) [46.38.148.18]: 535 Incorrect authentication data (set_id=sco@csmailer.org)
2020-06-24 06:26:43 auth_plain authenticator failed for (User) [46.38.148.18]: 535 Incorrect authentication data (set_id=meeting@csmailer.org)
...
2020-06-24 14:29:46
41.111.133.103 attack
Jun 24 05:55:47 raspberrypi sshd[29449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.111.133.103 
Jun 24 05:55:49 raspberrypi sshd[29449]: Failed password for invalid user git from 41.111.133.103 port 59773 ssh2
...
2020-06-24 14:24:08
200.52.80.34 attackspambots
Invalid user techuser from 200.52.80.34 port 35174
2020-06-24 14:39:12
133.242.52.96 attackspam
2020-06-24T07:55:49.814705  sshd[4506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.242.52.96  user=root
2020-06-24T07:55:51.964484  sshd[4506]: Failed password for root from 133.242.52.96 port 41089 ssh2
2020-06-24T07:59:24.038153  sshd[4572]: Invalid user public from 133.242.52.96 port 41280
...
2020-06-24 14:42:54
104.248.176.46 attackbots
Port scan denied
2020-06-24 14:16:09
195.206.105.217 attackbotsspam
Jun 24 13:55:32 localhost sshd[226526]: Invalid user www from 195.206.105.217 port 45174
...
2020-06-24 14:37:52
64.227.16.110 attackspam
WordPress (CMS) attack attempts.
Date: 2020 Jun 24. 07:47:01
Source IP: 64.227.16.110

Portion of the log(s):
64.227.16.110 - [24/Jun/2020:07:46:53 +0200] "GET /wp-login.php HTTP/1.1" 200 1962 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
64.227.16.110 - [24/Jun/2020:07:46:59 +0200] "POST /wp-login.php HTTP/1.1" 200 2416 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
64.227.16.110 - [24/Jun/2020:07:47:00 +0200] "GET /wp-login.php HTTP/1.1" 200 1962 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
64.227.16.110 - [24/Jun/2020:07:47:01 +0200] "POST /wp-login.php HTTP/1.1" 200 2419 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
64.227.16.110 - [24/Jun/2020:07:47:01 +0200] "POST /xmlrpc.php HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-24 14:18:22
13.125.200.249 attackbotsspam
Jun 24 08:40:07 b2b-pharm sshd[27225]: Invalid user test from 13.125.200.249 port 33410
Jun 24 08:40:07 b2b-pharm sshd[27225]: error: maximum authentication attempts exceeded for invalid user test from 13.125.200.249 port 33410 ssh2 [preauth]
Jun 24 08:40:07 b2b-pharm sshd[27225]: Invalid user test from 13.125.200.249 port 33410
Jun 24 08:40:07 b2b-pharm sshd[27225]: error: maximum authentication attempts exceeded for invalid user test from 13.125.200.249 port 33410 ssh2 [preauth]
Jun 24 08:40:07 b2b-pharm sshd[27225]: Invalid user test from 13.125.200.249 port 33410
Jun 24 08:40:07 b2b-pharm sshd[27225]: error: maximum authentication attempts exceeded for invalid user test from 13.125.200.249 port 33410 ssh2 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=13.125.200.249
2020-06-24 14:21:59
106.52.188.129 attackbotsspam
Jun 24 05:55:25 serwer sshd\[21809\]: Invalid user poseidon from 106.52.188.129 port 44296
Jun 24 05:55:25 serwer sshd\[21809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.188.129
Jun 24 05:55:26 serwer sshd\[21809\]: Failed password for invalid user poseidon from 106.52.188.129 port 44296 ssh2
...
2020-06-24 14:40:45

最近上报的IP列表

186.77.1.206 71.93.255.239 83.219.20.100 54.248.109.5
83.150.214.204 83.110.251.29 82.208.111.237 81.218.183.128
81.163.37.108 81.4.253.12 80.177.214.111 80.91.176.173
79.52.207.188 79.31.92.33 203.217.224.193 8.193.28.211
194.127.34.177 77.124.56.45 71.196.150.188 71.182.140.188