109.42.1.112 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): Vodafone GmbH

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Mobile ISP

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
109.42.1.170	attackbotsspam	May 1 13:47:41 [host] kernel: [4962588.839865] [U May 1 13:47:42 [host] kernel: [4962589.635216] [U May 1 13:47:43 [host] kernel: [4962590.635104] [U May 1 13:47:46 [host] kernel: [4962593.226625] [U May 1 13:47:47 [host] kernel: [4962594.226666] [U May 1 13:47:53 [host] kernel: [4962600.417413] [U	2020-05-02 00:46:46
109.42.1.222	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 31-01-2020 08:50:18.	2020-01-31 17:19:00

类型

评论内容

时间

109.42.1.170

attackbotsspam

May  1 13:47:41 [host] kernel: [4962588.839865] [U
May  1 13:47:42 [host] kernel: [4962589.635216] [U
May  1 13:47:43 [host] kernel: [4962590.635104] [U
May  1 13:47:46 [host] kernel: [4962593.226625] [U
May  1 13:47:47 [host] kernel: [4962594.226666] [U
May  1 13:47:53 [host] kernel: [4962600.417413] [U

2020-05-02 00:46:46

109.42.1.222

attackbotsspam

Attempt to attack host OS, exploiting network vulnerabilities, on 31-01-2020 08:50:18.

2020-01-31 17:19:00

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.42.1.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38431
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;109.42.1.112.			IN	A

;; AUTHORITY SECTION:
.			411	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051600 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 16 23:49:31 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

112.1.42.109.in-addr.arpa domain name pointer ip-109-42-1-112.web.vodafone.de.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
112.1.42.109.in-addr.arpa	name = ip-109-42-1-112.web.vodafone.de.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
222.186.169.194	attackspam	Sep 26 22:06:39 localhost sshd[16237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194 user=root Sep 26 22:06:41 localhost sshd[16237]: Failed password for root from 222.186.169.194 port 4796 ssh2 Sep 26 22:06:44 localhost sshd[16237]: Failed password for root from 222.186.169.194 port 4796 ssh2 Sep 26 22:06:39 localhost sshd[16237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194 user=root Sep 26 22:06:41 localhost sshd[16237]: Failed password for root from 222.186.169.194 port 4796 ssh2 Sep 26 22:06:44 localhost sshd[16237]: Failed password for root from 222.186.169.194 port 4796 ssh2 Sep 26 22:06:39 localhost sshd[16237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194 user=root Sep 26 22:06:41 localhost sshd[16237]: Failed password for root from 222.186.169.194 port 4796 ssh2 Sep 26 22:06:44 localhost sshd[16237]: ...	2020-09-27 06:10:42
37.152.181.57	attackspam	Brute force attempt	2020-09-27 05:46:07
121.200.61.37	attackspambots	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-26T16:28:36Z and 2020-09-26T16:37:15Z	2020-09-27 06:05:27
112.91.145.58	attackbotsspam	sshd jail - ssh hack attempt	2020-09-27 06:09:30
210.195.108.238	attackspambots	Automatic report - Port Scan Attack	2020-09-27 06:02:48
20.55.4.26	attackbotsspam	SSH Invalid Login	2020-09-27 05:46:29
40.122.169.225	attackspam	SSH Brute Force	2020-09-27 06:04:24
1.119.44.250	attackspam	2020-03-07T17:33:47.461003suse-nuc sshd[8491]: Invalid user 22 from 1.119.44.250 port 32796 ...	2020-09-27 05:49:24
1.119.131.102	attackbotsspam	SSH Invalid Login	2020-09-27 05:52:27
192.35.169.31	attackspam	TCP (SYN) 192.35.169.31:5853 -> port 22, len 44	2020-09-27 06:20:08
52.163.209.253	attackspambots	2020-09-26T20:19:57.530795ns386461 sshd\[20952\]: Invalid user 252 from 52.163.209.253 port 10139 2020-09-26T20:19:57.535561ns386461 sshd\[20952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.163.209.253 2020-09-26T20:19:59.638018ns386461 sshd\[20952\]: Failed password for invalid user 252 from 52.163.209.253 port 10139 ssh2 2020-09-27T00:11:28.427715ns386461 sshd\[7837\]: Invalid user ecommerce from 52.163.209.253 port 62154 2020-09-27T00:11:28.432089ns386461 sshd\[7837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.163.209.253 ...	2020-09-27 06:18:45
40.88.123.179	attack	SSH Invalid Login	2020-09-27 05:45:38
13.66.217.166	attackbots	SSH Invalid Login	2020-09-27 06:07:17
1.10.141.254	attackspambots	2020-04-03T21:16:06.505373suse-nuc sshd[9062]: User root from 1.10.141.254 not allowed because listed in DenyUsers ...	2020-09-27 05:56:54
81.70.39.239	attackspambots	Invalid user haoyu from 81.70.39.239 port 41036	2020-09-27 06:11:42

最近上报的IP列表

103.220.80.254	29.47.131.86	116.231.234.11	35.217.160.236
216.115.102.230	41.33.106.56	158.245.92.94	37.36.49.230
135.172.87.63	28.32.117.167	160.120.181.151	36.68.201.14
176.36.225.6	222.232.165.23	94.237.64.53	1.54.170.3
220.134.165.119	175.200.90.203	103.255.4.11	46.99.139.72