1.163.42.248 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Republic of China (ROC)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
1.163.42.212	attack	TCP (SYN) 1.163.42.212:26855 -> port 23, len 44	2020-06-23 18:38:38

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.163.42.248
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19457
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.163.42.248.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022400 1800 900 604800 86400

;; Query time: 179 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 13:34:17 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

248.42.163.1.in-addr.arpa domain name pointer 1-163-42-248.dynamic-ip.hinet.net.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
248.42.163.1.in-addr.arpa	name = 1-163-42-248.dynamic-ip.hinet.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
106.12.30.229	attackbotsspam	Sep 11 21:22:55 dedicated sshd[17928]: Invalid user d3m0 from 106.12.30.229 port 35802	2019-09-12 03:24:12
77.247.110.30	attack	CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2019-09-12 03:10:34
104.140.148.58	attack	Sep 11 14:57:21 localhost kernel: [1966058.443067] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=104.140.148.58 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=2495 PROTO=TCP SPT=65325 DPT=987 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 14:57:21 localhost kernel: [1966058.443093] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=104.140.148.58 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=2495 PROTO=TCP SPT=65325 DPT=987 SEQ=3815533082 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 OPT (020405B4) Sep 11 14:59:52 localhost kernel: [1966209.518449] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=104.140.148.58 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=43417 PROTO=TCP SPT=64300 DPT=5910 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 14:59:52 localhost kernel: [1966209.518469] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=104.140.148.58 DST=[mungedIP2] LEN=4	2019-09-12 03:13:24
185.234.218.50	attackspambots	[mysql-auth-2] MySQL auth attack	2019-09-12 03:35:58
222.112.65.55	attack	Sep 11 21:22:08 v22018053744266470 sshd[8235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.112.65.55 Sep 11 21:22:10 v22018053744266470 sshd[8235]: Failed password for invalid user zxcvbn from 222.112.65.55 port 44650 ssh2 Sep 11 21:29:35 v22018053744266470 sshd[8759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.112.65.55 ...	2019-09-12 03:31:16
192.241.220.228	attackspambots	Sep 11 19:12:25 hb sshd\[20272\]: Invalid user admin1 from 192.241.220.228 Sep 11 19:12:25 hb sshd\[20272\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.220.228 Sep 11 19:12:27 hb sshd\[20272\]: Failed password for invalid user admin1 from 192.241.220.228 port 36678 ssh2 Sep 11 19:18:56 hb sshd\[20935\]: Invalid user guest from 192.241.220.228 Sep 11 19:18:56 hb sshd\[20935\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.220.228	2019-09-12 03:34:02
148.72.212.161	attackspam	Sep 11 20:51:53 apollo sshd\[5789\]: Invalid user teamspeak3-user from 148.72.212.161Sep 11 20:51:55 apollo sshd\[5789\]: Failed password for invalid user teamspeak3-user from 148.72.212.161 port 51766 ssh2Sep 11 21:00:13 apollo sshd\[5800\]: Invalid user www from 148.72.212.161 ...	2019-09-12 03:38:18
176.159.208.68	attackbotsspam	Sep 11 20:59:21 jane sshd\[1989\]: Invalid user infa from 176.159.208.68 port 42742 Sep 11 20:59:21 jane sshd\[1989\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.159.208.68 Sep 11 20:59:23 jane sshd\[1989\]: Failed password for invalid user infa from 176.159.208.68 port 42742 ssh2 ...	2019-09-12 03:34:33
167.71.203.147	attackbotsspam	Sep 11 09:12:58 sachi sshd\[21386\]: Invalid user sftpuser from 167.71.203.147 Sep 11 09:12:58 sachi sshd\[21386\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.203.147 Sep 11 09:13:00 sachi sshd\[21386\]: Failed password for invalid user sftpuser from 167.71.203.147 port 55318 ssh2 Sep 11 09:19:37 sachi sshd\[21950\]: Invalid user servers from 167.71.203.147 Sep 11 09:19:37 sachi sshd\[21950\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.203.147	2019-09-12 03:40:07
187.36.255.161	attackbotsspam	Sep 11 09:14:29 hanapaa sshd\[7597\]: Invalid user dockeruser from 187.36.255.161 Sep 11 09:14:29 hanapaa sshd\[7597\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.36.255.161 Sep 11 09:14:32 hanapaa sshd\[7597\]: Failed password for invalid user dockeruser from 187.36.255.161 port 44532 ssh2 Sep 11 09:22:05 hanapaa sshd\[8252\]: Invalid user sinusbot from 187.36.255.161 Sep 11 09:22:05 hanapaa sshd\[8252\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.36.255.161	2019-09-12 03:36:43
182.156.196.50	attackspambots	$f2bV_matches	2019-09-12 03:06:34
89.248.171.97	attackbots	CloudCIX Reconnaissance Scan Detected, PTR: f02.fopex.com.	2019-09-12 03:02:51
223.247.194.119	attack	Sep 11 20:59:48 ubuntu-2gb-nbg1-dc3-1 sshd[7099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.194.119 Sep 11 20:59:50 ubuntu-2gb-nbg1-dc3-1 sshd[7099]: Failed password for invalid user ubuntu from 223.247.194.119 port 43098 ssh2 ...	2019-09-12 03:15:14
92.188.124.228	attack	Invalid user musikbot from 92.188.124.228 port 57544	2019-09-12 03:11:37
104.244.77.11	attack	Scanning random ports - tries to find possible vulnerable services	2019-09-12 03:35:42

最近上报的IP列表

1.163.42.204	1.163.42.32	1.163.42.43	1.163.42.51
1.163.42.52	1.163.42.68	1.163.42.86	1.163.43.153
1.163.43.179	1.163.43.205	1.163.43.225	1.163.43.226
1.163.43.235	1.163.43.32	1.163.43.37	1.163.43.46
1.163.43.5	1.163.43.58	1.163.43.61	1.163.43.72