119.42.107.211

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): CAT Telecom Public Company Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools	2020-01-31 13:37:03

相同子网IP讨论:

IP	类型	评论内容	时间
119.42.107.24	attackbots	Feb 12 06:49:35 ncomp sshd[27495]: Invalid user system from 119.42.107.24 Feb 12 06:49:36 ncomp sshd[27495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.42.107.24 Feb 12 06:49:35 ncomp sshd[27495]: Invalid user system from 119.42.107.24 Feb 12 06:49:37 ncomp sshd[27495]: Failed password for invalid user system from 119.42.107.24 port 63193 ssh2	2020-02-12 20:17:33

类型

评论内容

时间

119.42.107.24

attackbots

Feb 12 06:49:35 ncomp sshd[27495]: Invalid user system from 119.42.107.24
Feb 12 06:49:36 ncomp sshd[27495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.42.107.24
Feb 12 06:49:35 ncomp sshd[27495]: Invalid user system from 119.42.107.24
Feb 12 06:49:37 ncomp sshd[27495]: Failed password for invalid user system from 119.42.107.24 port 63193 ssh2

2020-02-12 20:17:33

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.42.107.211
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14887
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;119.42.107.211.			IN	A

;; AUTHORITY SECTION:
.			561	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020013003 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 13:37:00 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 211.107.42.119.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 211.107.42.119.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
18.85.192.253	attackbots	Jul 29 20:20:32 h2177944 sshd\[8826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.85.192.253 user=root Jul 29 20:20:35 h2177944 sshd\[8826\]: Failed password for root from 18.85.192.253 port 60534 ssh2 Jul 29 20:20:37 h2177944 sshd\[8826\]: Failed password for root from 18.85.192.253 port 60534 ssh2 Jul 29 20:20:40 h2177944 sshd\[8826\]: Failed password for root from 18.85.192.253 port 60534 ssh2 ...	2019-07-30 04:23:05
12.221.198.198	attackbots	Automatic report - Port Scan Attack	2019-07-30 04:27:07
117.228.219.212	attackspambots	Brute force attempt	2019-07-30 04:05:45
219.151.22.20	attack	firewall-block, port(s): 445/tcp	2019-07-30 04:46:58
142.93.117.249	attackspam	Jul 29 19:46:06 MK-Soft-VM7 sshd\[13634\]: Invalid user ubuntu from 142.93.117.249 port 34052 Jul 29 19:46:06 MK-Soft-VM7 sshd\[13634\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.117.249 Jul 29 19:46:08 MK-Soft-VM7 sshd\[13634\]: Failed password for invalid user ubuntu from 142.93.117.249 port 34052 ssh2 ...	2019-07-30 04:12:05
49.231.37.205	attack	2019-07-29T15:53:44.313174WS-Zach sshd[17254]: Invalid user refunds from 49.231.37.205 port 56756 2019-07-29T15:53:44.317275WS-Zach sshd[17254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.231.37.205 2019-07-29T15:53:44.313174WS-Zach sshd[17254]: Invalid user refunds from 49.231.37.205 port 56756 2019-07-29T15:53:46.448171WS-Zach sshd[17254]: Failed password for invalid user refunds from 49.231.37.205 port 56756 ssh2 2019-07-29T16:10:42.331862WS-Zach sshd[26412]: Invalid user alx from 49.231.37.205 port 35155 ...	2019-07-30 04:34:37
195.154.251.114	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-07-30 04:21:38
62.233.65.182	attackspam	\[2019-07-29 21:55:50\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-29T21:55:50.919+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="655442262-1160005794-1688747169",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/62.233.65.182/50493",Challenge="1564430150/3843a2808b19af62feed4a5dc27b0530",Response="aa2957a8a7fea859a05508c5e4e2531a",ExpectedResponse="" \[2019-07-29 21:55:50\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-29T21:55:50.976+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="655442262-1160005794-1688747169",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/62.233.65.182/50493",Challenge="1564430150/3843a2808b19af62feed4a5dc27b0530",Response="f0b5467bb257ee1e6c3d6b6a116f755c",ExpectedResponse="" \[2019-07-29 21:55:51\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResp	2019-07-30 04:43:01
37.114.132.216	attack	Jul 29 20:40:35 srv-4 sshd\[14000\]: Invalid user admin from 37.114.132.216 Jul 29 20:40:35 srv-4 sshd\[14000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.114.132.216 Jul 29 20:40:37 srv-4 sshd\[14000\]: Failed password for invalid user admin from 37.114.132.216 port 45889 ssh2 ...	2019-07-30 04:43:37
61.50.255.247	attackbotsspam	Jul 29 17:41:25 MK-Soft-VM6 sshd\[15274\]: Invalid user 0 from 61.50.255.247 port 32966 Jul 29 17:41:25 MK-Soft-VM6 sshd\[15274\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.50.255.247 Jul 29 17:41:27 MK-Soft-VM6 sshd\[15274\]: Failed password for invalid user 0 from 61.50.255.247 port 32966 ssh2 ...	2019-07-30 04:17:54
162.244.150.67	attackspam	1,17-10/02 [bc03/m51] concatform PostRequest-Spammer scoring: Durban01	2019-07-30 04:37:15
167.71.85.50	attackspam	Unauthorised access (Jul 29) SRC=167.71.85.50 LEN=40 TTL=56 ID=36060 TCP DPT=8080 WINDOW=57440 SYN Unauthorised access (Jul 29) SRC=167.71.85.50 LEN=40 TTL=56 ID=64978 TCP DPT=8080 WINDOW=57440 SYN	2019-07-30 04:44:03
188.131.140.115	attack	Jul 29 16:39:50 plusreed sshd[18802]: Invalid user zjSXidc123!@# from 188.131.140.115 ...	2019-07-30 04:50:24
120.52.152.18	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-07-30 04:04:08
108.61.204.172	attackbots	[portscan] Port scan	2019-07-30 04:26:22

最近上报的IP列表

187.157.91.201	113.161.0.9	177.11.41.92	61.90.97.42
103.136.115.175	51.79.66.142	250.53.65.75	126.102.107.231
187.162.253.238	105.216.59.217	221.227.85.25	94.228.10.70
47.103.213.13	36.6.92.151	2.56.240.119	1.0.213.163
116.233.138.83	110.171.217.97	182.61.1.88	14.63.1.108