119.42.114.28 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
119.42.114.96	attackspambots	Unauthorized connection attempt from IP address 119.42.114.96 on Port 445(SMB)	2020-08-11 03:06:39
119.42.114.42	attack	Unauthorized connection attempt from IP address 119.42.114.42 on Port 445(SMB)	2020-04-23 22:50:55
119.42.114.249	attack	firewall-block, port(s): 23/tcp	2020-03-11 20:22:20
119.42.114.36	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-09 19:41:53
119.42.114.58	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-11 15:35:55

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.42.114.28
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20824
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;119.42.114.28.			IN	A

;; AUTHORITY SECTION:
.			451	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 18:36:50 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 28.114.42.119.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 28.114.42.119.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
134.209.153.100	attackspambots	Jun 19 16:12:35 h2034429 sshd[12395]: Invalid user test from 134.209.153.100 Jun 19 16:12:35 h2034429 sshd[12395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.153.100 Jun 19 16:12:37 h2034429 sshd[12395]: Failed password for invalid user test from 134.209.153.100 port 41050 ssh2 Jun 19 16:12:37 h2034429 sshd[12395]: Received disconnect from 134.209.153.100 port 41050:11: Bye Bye [preauth] Jun 19 16:12:37 h2034429 sshd[12395]: Disconnected from 134.209.153.100 port 41050 [preauth] Jun 19 16:29:37 h2034429 sshd[12622]: Invalid user user from 134.209.153.100 Jun 19 16:29:37 h2034429 sshd[12622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.153.100 Jun 19 16:29:39 h2034429 sshd[12622]: Failed password for invalid user user from 134.209.153.100 port 60914 ssh2 Jun 19 16:29:39 h2034429 sshd[12622]: Received disconnect from 134.209.153.100 port 60914:11: Bye Bye [preauth] Jun........ -------------------------------	2019-06-24 09:05:27
78.134.3.221	attackspam	Jun 23 15:58:35 Tower sshd[1186]: Connection from 78.134.3.221 port 55568 on 192.168.10.220 port 22 Jun 23 15:58:50 Tower sshd[1186]: Invalid user sk from 78.134.3.221 port 55568 Jun 23 15:58:50 Tower sshd[1186]: error: Could not get shadow information for NOUSER Jun 23 15:58:50 Tower sshd[1186]: Failed password for invalid user sk from 78.134.3.221 port 55568 ssh2 Jun 23 15:58:51 Tower sshd[1186]: Received disconnect from 78.134.3.221 port 55568:11: Bye Bye [preauth] Jun 23 15:58:51 Tower sshd[1186]: Disconnected from invalid user sk 78.134.3.221 port 55568 [preauth]	2019-06-24 09:05:42
81.130.161.44	attackspam	SSH login attempts brute force.	2019-06-24 09:25:16
46.32.253.32	attackbotsspam	[munged]::443 46.32.253.32 - - [24/Jun/2019:02:04:17 +0200] "POST /[munged]: HTTP/1.1" 200 6318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 46.32.253.32 - - [24/Jun/2019:02:04:18 +0200] "POST /[munged]: HTTP/1.1" 200 6317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 46.32.253.32 - - [24/Jun/2019:02:04:18 +0200] "POST /[munged]: HTTP/1.1" 200 6317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 46.32.253.32 - - [24/Jun/2019:02:04:19 +0200] "POST /[munged]: HTTP/1.1" 200 6314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 46.32.253.32 - - [24/Jun/2019:02:04:19 +0200] "POST /[munged]: HTTP/1.1" 200 6314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 46.32.253.32 - - [24/Jun/2019:02:04:20 +0200] "POST /[munged]: HTTP/1.1" 200 6314 "-" "Mozilla/5.0 (X11; Ubuntu; Li	2019-06-24 08:42:34
191.253.47.120	attack	failed_logins	2019-06-24 09:29:45
209.17.96.106	attackbots	Port scan attempt detected by AWS-CCS, CTS, India	2019-06-24 08:39:20
134.175.118.68	attackspambots	134.175.118.68 - - [23/Jun/2019:21:57:55 +0200] "POST [munged]wp-login.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 0.000	2019-06-24 09:25:46
203.113.174.104	attackspam	php WP PHPmyadamin ABUSE blocked for 12h	2019-06-24 09:17:39
36.80.170.184	attackspam	TCP port 445 (SMB) attempt blocked by firewall. [2019-06-23 21:57:51]	2019-06-24 09:10:58
140.143.196.39	attack	Jun 24 05:46:56 tanzim-HP-Z238-Microtower-Workstation sshd\[20012\]: Invalid user developer from 140.143.196.39 Jun 24 05:46:56 tanzim-HP-Z238-Microtower-Workstation sshd\[20012\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.196.39 Jun 24 05:46:58 tanzim-HP-Z238-Microtower-Workstation sshd\[20012\]: Failed password for invalid user developer from 140.143.196.39 port 55300 ssh2 ...	2019-06-24 09:25:00
91.232.188.5	attackbots	Brute Force Joomla Admin Login	2019-06-24 09:18:49
62.210.89.215	attackbots	\[2019-06-23 15:59:32\] SECURITY\[1857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-06-23T15:59:32.203-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="2746557107",SessionID="0x7fc424245928",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.89.215/5592",ACLName="no_extension_match" \[2019-06-23 15:59:35\] NOTICE\[1849\] chan_sip.c: Registration from '"702" \' failed for '62.210.89.215:5655' - Wrong password \[2019-06-23 15:59:35\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-23T15:59:35.530-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="702",SessionID="0x7fc424131548",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.89.215/5655",Challenge="328d2710",ReceivedChallenge="328d2710",ReceivedHash="597ec3718c072ef7681e490502b6f50a" \[2019-06-23 15:59:35\] NOTICE\[1849\] chan_sip.c: Registration from '"702" \' faile	2019-06-24 09:00:15
59.110.152.52	attackspam	firewall-block, port(s): 1433/tcp, 7002/tcp, 9200/tcp	2019-06-24 08:50:50
173.226.134.224	attackspambots	firewall-block, port(s): 623/tcp	2019-06-24 09:03:58
108.222.68.232	attackbots	SSH bruteforce	2019-06-24 09:22:30

最近上报的IP列表

119.42.114.251	119.42.114.32	119.42.114.40	119.42.114.43
119.42.114.56	119.42.114.3	117.140.122.53	119.42.114.63
119.42.114.38	119.42.114.46	119.42.114.52	119.42.114.69
119.42.114.74	119.42.114.86	119.42.114.81	119.42.114.9
119.42.114.92	119.42.115.100	119.42.115.10	119.42.115.103

基本信息:

用户上报:

相同子网IP讨论:

WHOIS信息:

DIG信息:

HOST信息:

NSLOOKUP信息:

相关IP信息:

最新评论:

最近上报的IP列表