107.155.5.42 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Zenlayer Inc

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	ICMP MH Probe, Scan /Distributed -	2020-04-19 06:24:41
attackspam	ICMP MH Probe, Scan /Distributed -	2020-03-27 00:16:02

相同子网IP讨论:

IP	类型	评论内容	时间
107.155.55.69	attack	Port probing on unauthorized port 445	2020-06-21 13:51:54
107.155.58.145	attackspam	ICMP MH Probe, Scan /Distributed -	2020-05-26 21:52:10
107.155.58.145	attack	ICMP MH Probe, Scan /Distributed -	2020-03-27 00:12:27
107.155.56.229	attack	2020-03-20T08:29:43.181079ns386461 sshd\[9493\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.155.56.229 user=root 2020-03-20T08:29:45.453687ns386461 sshd\[9493\]: Failed password for root from 107.155.56.229 port 54568 ssh2 2020-03-20T08:43:23.700535ns386461 sshd\[22036\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.155.56.229 user=root 2020-03-20T08:43:25.877623ns386461 sshd\[22036\]: Failed password for root from 107.155.56.229 port 57956 ssh2 2020-03-20T08:51:29.250198ns386461 sshd\[29750\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.155.56.229 user=root ...	2020-03-20 18:23:37
107.155.58.145	attackspam	ICMP MH Probe, Scan /Distributed -	2020-01-14 22:47:49
107.155.58.145	attackbots	ICMP MP Probe, Scan -	2019-10-03 23:51:06
107.155.55.70	attackbots	CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2019-08-20 14:32:07

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.155.5.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62858
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;107.155.5.42.			IN	A

;; AUTHORITY SECTION:
.			354	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032600 1800 900 604800 86400

;; Query time: 96 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 27 00:15:55 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 42.5.155.107.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.5.155.107.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
45.55.57.6	attackspambots	2020-06-13T19:01:14.911983linuxbox-skyline sshd[365504]: Invalid user yangsq from 45.55.57.6 port 49892 ...	2020-06-14 09:08:06
109.116.41.170	attackspam	SSH Bruteforce attack	2020-06-14 12:18:08
222.186.30.167	attackspambots	Wordpress malicious attack:[sshd]	2020-06-14 12:06:48
180.76.158.139	attack	Jun 14 05:57:27 ns37 sshd[18767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.158.139	2020-06-14 12:07:08
222.186.175.167	attackspambots	Jun 14 02:56:23 ns381471 sshd[16308]: Failed password for root from 222.186.175.167 port 28614 ssh2 Jun 14 02:56:36 ns381471 sshd[16308]: error: maximum authentication attempts exceeded for root from 222.186.175.167 port 28614 ssh2 [preauth]	2020-06-14 09:05:45
62.171.144.195	attack	[2020-06-13 21:19:45] NOTICE[1273] chan_sip.c: Registration from '' failed for '62.171.144.195:34076' - Wrong password [2020-06-13 21:19:45] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-13T21:19:45.798-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="231abc",SessionID="0x7f31c02f7128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.171.144.195/34076",Challenge="41723184",ReceivedChallenge="41723184",ReceivedHash="609b27e7a9a8b0445575e0efcf68ff87" [2020-06-13 21:23:46] NOTICE[1273] chan_sip.c: Registration from '' failed for '62.171.144.195:53551' - Wrong password [2020-06-13 21:23:46] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-13T21:23:46.344-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="240abc",SessionID="0x7f31c018ea98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62 ...	2020-06-14 09:24:50
185.74.4.17	attackspambots	Jun 14 03:01:08 minden010 sshd[1654]: Failed password for root from 185.74.4.17 port 45772 ssh2 Jun 14 03:02:28 minden010 sshd[1795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.74.4.17 Jun 14 03:02:29 minden010 sshd[1795]: Failed password for invalid user user from 185.74.4.17 port 54969 ssh2 ...	2020-06-14 09:11:31
70.37.56.225	attack	Jun 14 00:47:44 vmi345603 sshd[2606]: Failed password for root from 70.37.56.225 port 55248 ssh2 ...	2020-06-14 09:27:03
134.122.50.199	attackspambots	Auto Fail2Ban report, multiple SMTP login attempts.	2020-06-14 09:02:54
141.98.80.150	attackspambots	Jun 14 04:17:30 takio postfix/smtpd[4156]: lost connection after AUTH from unknown[141.98.80.150] Jun 14 04:17:42 takio postfix/smtpd[4157]: lost connection after AUTH from unknown[141.98.80.150] Jun 14 04:17:53 takio postfix/smtpd[4154]: lost connection after AUTH from unknown[141.98.80.150]	2020-06-14 09:22:23
197.15.230.125	attack	Automatic report - Port Scan Attack	2020-06-14 09:25:15
125.26.79.66	attackspambots	port scan and connect, tcp 1433 (ms-sql-s)	2020-06-14 09:16:55
152.136.191.203	attackbotsspam	Jun 14 09:24:56 dhoomketu sshd[731900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.191.203 Jun 14 09:24:56 dhoomketu sshd[731900]: Invalid user roro from 152.136.191.203 port 60684 Jun 14 09:24:59 dhoomketu sshd[731900]: Failed password for invalid user roro from 152.136.191.203 port 60684 ssh2 Jun 14 09:26:31 dhoomketu sshd[731936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.191.203 user=root Jun 14 09:26:33 dhoomketu sshd[731936]: Failed password for root from 152.136.191.203 port 49376 ssh2 ...	2020-06-14 12:08:23
138.68.50.18	attackbots	Jun 13 23:03:10 vps sshd[899884]: Failed password for invalid user mmadmin from 138.68.50.18 port 39616 ssh2 Jun 13 23:04:09 vps sshd[903541]: Invalid user Welkome$#1234 from 138.68.50.18 port 49994 Jun 13 23:04:09 vps sshd[903541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.50.18 Jun 13 23:04:11 vps sshd[903541]: Failed password for invalid user Welkome$#1234 from 138.68.50.18 port 49994 ssh2 Jun 13 23:05:09 vps sshd[911289]: Invalid user meres from 138.68.50.18 port 60372 ...	2020-06-14 09:19:01
203.198.104.24	attackspam	Automatic report - Port Scan Attack	2020-06-14 09:15:16

最近上报的IP列表

45.63.48.116	193.63.179.96	32.228.171.117	135.160.218.100
81.76.248.2	53.168.52.48	226.17.31.186	107.155.34.58
107.155.21.91	58.217.19.40	211.76.72.168	107.155.21.86
63.82.48.220	194.28.213.159	178.205.245.40	187.225.221.154
106.6.172.247	94.191.86.50	106.6.172.21	168.232.66.184