124.127.42.42 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Research Institution of Telecom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): University/College/School

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	2020-09-01T00:47:49.760524lavrinenko.info sshd[1726]: Invalid user itadmin from 124.127.42.42 port 37390 2020-09-01T00:47:49.766524lavrinenko.info sshd[1726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.127.42.42 2020-09-01T00:47:49.760524lavrinenko.info sshd[1726]: Invalid user itadmin from 124.127.42.42 port 37390 2020-09-01T00:47:51.458929lavrinenko.info sshd[1726]: Failed password for invalid user itadmin from 124.127.42.42 port 37390 ssh2 2020-09-01T00:51:09.605231lavrinenko.info sshd[1856]: Invalid user ftpuser from 124.127.42.42 port 52394 ...	2020-09-01 08:32:57
attack	Aug 19 12:39:19 django-0 sshd[6556]: Invalid user bhushan from 124.127.42.42 ...	2020-08-19 21:08:19
attack	Brute-force attempt banned	2020-07-31 08:15:36
attackspambots	Failed password for invalid user junk from 124.127.42.42 port 60244 ssh2	2020-07-22 09:21:36
attackspam	"Unauthorized connection attempt on SSHD detected"	2020-07-21 19:47:57
attack	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):	2020-07-19 22:11:11
attackbots	(sshd) Failed SSH login from 124.127.42.42 (CN/China/42.42.127.124.broad.bj.bj.static.163data.com.cn): 5 in the last 3600 secs	2020-07-16 17:38:53

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.127.42.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35709
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.127.42.42.			IN	A

;; AUTHORITY SECTION:
.			500	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071601 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 16 17:38:49 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

42.42.127.124.in-addr.arpa domain name pointer 42.42.127.124.broad.bj.bj.static.163data.com.cn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
42.42.127.124.in-addr.arpa	name = 42.42.127.124.broad.bj.bj.static.163data.com.cn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
95.167.39.12	attackspam	Oct 13 13:47:35 * sshd[5704]: Failed password for root from 95.167.39.12 port 55042 ssh2	2019-10-13 23:39:31
179.127.175.202	attackbots	2019-10-13 06:51:27 H=(lomopress.it) [179.127.175.202]:56634 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-10-13 06:51:28 H=(lomopress.it) [179.127.175.202]:56634 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/179.127.175.202) 2019-10-13 06:51:28 H=(lomopress.it) [179.127.175.202]:56634 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/179.127.175.202) ...	2019-10-13 23:46:56
91.99.73.70	attackbotsspam	Automatic report - XMLRPC Attack	2019-10-13 23:28:59
64.91.248.136	attackspam	Automatic report - XMLRPC Attack	2019-10-14 00:01:20
103.245.181.2	attackbotsspam	2019-10-13T15:14:11.540456abusebot-7.cloudsearch.cf sshd\[18433\]: Invalid user Wachtwoord1q from 103.245.181.2 port 38313	2019-10-14 00:07:30
117.50.2.47	attackspambots	Oct 13 15:20:36 venus sshd\[14622\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.2.47 user=root Oct 13 15:20:38 venus sshd\[14622\]: Failed password for root from 117.50.2.47 port 34732 ssh2 Oct 13 15:25:58 venus sshd\[14715\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.2.47 user=root ...	2019-10-13 23:39:59
185.53.88.102	attackbotsspam	\[2019-10-13 11:11:22\] NOTICE\[1887\] chan_sip.c: Registration from '"301" \' failed for '185.53.88.102:5696' - Wrong password \[2019-10-13 11:11:22\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-13T11:11:22.755-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7fc3ac5226d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.102/5696",Challenge="7d972ceb",ReceivedChallenge="7d972ceb",ReceivedHash="355465cffd6f61a288f919227ab1b5a1" \[2019-10-13 11:11:22\] NOTICE\[1887\] chan_sip.c: Registration from '"301" \' failed for '185.53.88.102:5696' - Wrong password \[2019-10-13 11:11:22\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-13T11:11:22.893-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7fc3ac4a5a08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.	2019-10-13 23:35:46
177.124.89.14	attackspambots	Oct 13 04:07:05 hanapaa sshd\[6533\]: Invalid user Cream@2017 from 177.124.89.14 Oct 13 04:07:05 hanapaa sshd\[6533\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.124.89.14 Oct 13 04:07:07 hanapaa sshd\[6533\]: Failed password for invalid user Cream@2017 from 177.124.89.14 port 40030 ssh2 Oct 13 04:12:06 hanapaa sshd\[7032\]: Invalid user Utilisateur@123 from 177.124.89.14 Oct 13 04:12:06 hanapaa sshd\[7032\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.124.89.14	2019-10-14 00:05:37
59.12.148.221	attack	SASL Brute Force	2019-10-13 23:49:02
79.137.73.253	attackspam	Oct 13 03:12:38 kapalua sshd\[11503\]: Invalid user !@\#qwe from 79.137.73.253 Oct 13 03:12:38 kapalua sshd\[11503\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=253.ip-79-137-73.eu Oct 13 03:12:41 kapalua sshd\[11503\]: Failed password for invalid user !@\#qwe from 79.137.73.253 port 56842 ssh2 Oct 13 03:16:50 kapalua sshd\[11871\]: Invalid user P@\$\$w0rt-123 from 79.137.73.253 Oct 13 03:16:50 kapalua sshd\[11871\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=253.ip-79-137-73.eu	2019-10-13 23:31:58
185.36.81.248	attackbotsspam	Rude login attack (34 tries in 1d)	2019-10-14 00:04:46
88.86.120.207	attack	Automatic report - XMLRPC Attack	2019-10-13 23:51:46
92.43.104.99	attack	Unauthorised access (Oct 13) SRC=92.43.104.99 LEN=40 TTL=248 ID=45817 TCP DPT=1433 WINDOW=1024 SYN	2019-10-14 00:03:18
190.85.145.162	attackspam	Oct 13 17:16:50 vps01 sshd[1414]: Failed password for root from 190.85.145.162 port 54914 ssh2	2019-10-13 23:31:23
178.128.215.148	attackspam	Oct 13 11:28:10 plusreed sshd[26695]: Invalid user admin from 178.128.215.148 ...	2019-10-13 23:36:51

最近上报的IP列表

42.119.225.111	177.157.166.105	2.224.54.133	84.241.37.1
123.185.79.56	122.14.218.159	222.89.56.136	40.77.167.170
152.51.171.153	220.132.127.183	122.121.115.77	215.26.92.152
197.222.137.168	103.52.34.125	92.134.88.76	247.70.52.198
174.116.160.122	239.173.133.143	52.247.223.76	75.250.231.51