104.42.12.110 - IPInfo

基本信息:

城市(city): San Jose

省份(region): California

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
104.42.124.11	attack	Automatic report - Banned IP Access	2020-08-02 02:51:03
104.42.126.249	attackspam	[2020-06-22 10:08:16] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:62692' - Wrong password [2020-06-22 10:08:16] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-22T10:08:16.777-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="qwerty1234",SessionID="0x7f31c02ff098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126.249/62692",Challenge="1da7a42e",ReceivedChallenge="1da7a42e",ReceivedHash="d411429833e27710a85d651fc7024e56" [2020-06-22 10:10:23] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:65365' - Wrong password [2020-06-22 10:10:23] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-22T10:10:23.362-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="qwerty12345",SessionID="0x7f31c04ccc48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAd ...	2020-06-22 22:21:15
104.42.126.249	attackspam	[2020-06-21 07:27:35] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:52773' - Wrong password [2020-06-21 07:27:35] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-21T07:27:35.296-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126.249/52773",Challenge="4287faf8",ReceivedChallenge="4287faf8",ReceivedHash="bee9ea31ad79495dc21591c3fb468bc5" [2020-06-21 07:29:21] NOTICE[1273] chan_sip.c: Registration from '' failed for '104.42.126.249:58206' - Wrong password [2020-06-21 07:29:21] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-21T07:29:21.457-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7f31c0045328",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.42.126 ...	2020-06-21 19:29:26
104.42.12.149	attack	Apr 17 06:27:23 Ubuntu-1404-trusty-64-minimal sshd\[2516\]: Invalid user admin from 104.42.12.149 Apr 17 06:27:23 Ubuntu-1404-trusty-64-minimal sshd\[2516\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.12.149 Apr 17 06:27:25 Ubuntu-1404-trusty-64-minimal sshd\[2516\]: Failed password for invalid user admin from 104.42.12.149 port 56776 ssh2 Apr 17 06:38:19 Ubuntu-1404-trusty-64-minimal sshd\[10986\]: Invalid user k from 104.42.12.149 Apr 17 06:38:19 Ubuntu-1404-trusty-64-minimal sshd\[10986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.12.149	2020-04-17 14:27:56
104.42.125.45	attack	Unauthorized connection attempt detected from IP address 104.42.125.45 to port 23	2020-04-13 02:33:28

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.42.12.110
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13297
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.42.12.110.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024122701 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 28 11:20:23 CST 2024
;; MSG SIZE  rcvd: 106

HOST信息:

Host 110.12.42.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 110.12.42.104.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
185.175.93.57	attackbotsspam	Portscan or hack attempt detected by psad/fwsnort	2019-07-28 13:56:15
23.225.121.194	attackspam	Port scan and direct access per IP instead of hostname	2019-07-28 14:28:29
203.188.244.123	attack	Port scan and direct access per IP instead of hostname	2019-07-28 14:39:03
95.130.9.90	attack	Automatic report - Banned IP Access	2019-07-28 14:29:51
71.6.167.142	attack	28.07.2019 05:06:22 Connection to port 2455 blocked by firewall	2019-07-28 13:42:10
185.220.101.26	attack	Jul 28 04:37:41 dev0-dcde-rnet sshd[11406]: Failed password for root from 185.220.101.26 port 37457 ssh2 Jul 28 04:37:43 dev0-dcde-rnet sshd[11408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.26 Jul 28 04:37:44 dev0-dcde-rnet sshd[11408]: Failed password for invalid user 666666 from 185.220.101.26 port 33567 ssh2	2019-07-28 13:49:55
23.225.121.251	attackbotsspam	Port scan and direct access per IP instead of hostname	2019-07-28 14:27:11
123.148.211.175	attackspam	REQUESTED PAGE: /wp-login.php	2019-07-28 14:37:27
79.53.74.199	attackbotsspam	Automatic report - Port Scan Attack	2019-07-28 14:14:07
217.174.174.12	attackspam	Port scan and direct access per IP instead of hostname	2019-07-28 14:33:10
168.187.153.237	attackspambots	Automatic report - Port Scan Attack	2019-07-28 14:55:31
125.77.30.31	attack	firewall-block, port(s): 60001/tcp	2019-07-28 13:52:02
185.220.101.68	attack	Brute force attempt	2019-07-28 14:07:08
167.71.41.110	attackspam	2019-07-28T06:05:00.435238abusebot.cloudsearch.cf sshd\[19023\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.41.110 user=root	2019-07-28 14:16:47
180.170.140.252	attackspambots	Jul 28 08:42:00 srv-4 sshd\[1017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.170.140.252 user=root Jul 28 08:42:01 srv-4 sshd\[1017\]: Failed password for root from 180.170.140.252 port 54593 ssh2 Jul 28 08:46:26 srv-4 sshd\[1419\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.170.140.252 user=root ...	2019-07-28 14:49:34

最近上报的IP列表

193.29.103.133	237.195.112.122	37.128.97.184	18.3.35.33
164.183.44.242	57.1.93.61	138.10.241.217	196.102.23.74
197.227.198.223	114.141.96.238	204.179.172.129	227.214.242.180
19.22.124.69	55.43.222.62	199.196.97.214	115.165.24.110
227.93.106.55	109.29.202.187	130.15.180.24	70.239.170.149