124.42.66.23 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Guanghuan Xinwang Digital Technology Co.Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Unauthorized connection attempt detected from IP address 124.42.66.23 to port 1433 [J]	2020-01-26 02:40:29

相同子网IP讨论:

IP	类型	评论内容	时间
124.42.66.35	attackbots	Unauthorized connection attempt detected from IP address 124.42.66.35 to port 1433 [J]	2020-03-02 15:32:13
124.42.66.31	attackspambots	Port 1433 Scan	2020-02-29 18:47:00
124.42.66.10	attack	unauthorized connection attempt	2020-02-26 14:32:46
124.42.66.26	attackspambots	port scan and connect, tcp 1433 (ms-sql-s)	2020-01-26 22:42:51
124.42.66.22	attackbots	Unauthorized connection attempt detected from IP address 124.42.66.22 to port 1433 [J]	2020-01-07 20:23:02

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.42.66.23
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29064
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.42.66.23.			IN	A

;; AUTHORITY SECTION:
.			443	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012500 1800 900 604800 86400

;; Query time: 140 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 26 02:40:22 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 23.66.42.124.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 23.66.42.124.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
194.146.50.45	attackspam	Mar 9 04:43:22 exim[13143]: [1\45] 1jB9K5-0003Pz-Gr H=oxidation.isefardi.com (oxidation.callbite.com) [194.146.50.45] F= rejected after DATA: This message scored 100.5 spam points.	2020-03-09 20:12:40
157.245.158.214	attackspambots	Mar 9 08:34:14 vps691689 sshd[4039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.158.214 Mar 9 08:34:15 vps691689 sshd[4039]: Failed password for invalid user kelly from 157.245.158.214 port 55912 ssh2 ...	2020-03-09 20:18:56
2.45.105.77	attackspambots	Automatic report - Port Scan Attack	2020-03-09 20:32:41
2.186.12.194	attackbots	IR_RIPE-NCC-HM-MNT_<177>1583757099 [1:2403304:55806] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 3 [Classification: Misc Attack] [Priority: 2] {TCP} 2.186.12.194:7208	2020-03-09 20:51:00
78.187.144.250	attack	Automatic report - Port Scan Attack	2020-03-09 20:49:46
14.234.112.152	attack	Automatic report - Port Scan Attack	2020-03-09 20:55:35
171.249.184.189	attack	firewall-block, port(s): 9530/tcp	2020-03-09 20:15:16
45.74.205.103	attackbotsspam	Honeypot attack, port: 5555, PTR: broadband-user.acndigital.net.	2020-03-09 20:36:03
5.144.128.211	attackbotsspam	Lines containing failures of 5.144.128.211 Mar 8 22:29:33 newdogma sshd[11941]: Invalid user nicolas from 5.144.128.211 port 53290 Mar 8 22:29:33 newdogma sshd[11941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.144.128.211 Mar 8 22:29:35 newdogma sshd[11941]: Failed password for invalid user nicolas from 5.144.128.211 port 53290 ssh2 Mar 8 22:29:36 newdogma sshd[11941]: Received disconnect from 5.144.128.211 port 53290:11: Bye Bye [preauth] Mar 8 22:29:36 newdogma sshd[11941]: Disconnected from invalid user nicolas 5.144.128.211 port 53290 [preauth] Mar 8 22:35:24 newdogma sshd[12010]: Invalid user lasse from 5.144.128.211 port 47900 Mar 8 22:35:24 newdogma sshd[12010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.144.128.211 Mar 8 22:35:27 newdogma sshd[12010]: Failed password for invalid user lasse from 5.144.128.211 port 47900 ssh2 ........ ----------------------------------------------- https://www.bloc	2020-03-09 20:15:43
52.19.185.170	attackspam	TCP Port Scanning	2020-03-09 20:41:48
91.40.168.216	attack	Scan detected and blocked 2020.03.09 13:31:38	2020-03-09 20:54:01
185.176.27.174	attackspambots	03/09/2020-07:55:25.073601 185.176.27.174 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-03-09 20:31:13
198.144.149.228	attackspambots	2020-03-08 22:43:49 H=(vv2.vvsedm.info) [198.144.149.228]:48074 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.2) (https://www.spamhaus.org/sbl/query/SBL464347) 2020-03-08 22:43:49 H=(vv2.vvsedm.info) [198.144.149.228]:48074 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.2) (https://www.spamhaus.org/sbl/query/SBL464347) 2020-03-08 22:43:49 H=(vv2.vvsedm.info) [198.144.149.228]:48074 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.2) (https://www.spamhaus.org/sbl/query/SBL464347) ...	2020-03-09 20:22:46
90.142.52.244	attackbotsspam	Honeypot attack, port: 5555, PTR: c90-142-52-244.bredband.comhem.se.	2020-03-09 20:19:55
222.186.52.78	attack	Mar 9 13:30:37 * sshd[12000]: Failed password for root from 222.186.52.78 port 19163 ssh2	2020-03-09 20:44:00

最近上报的IP列表

221.150.116.43	220.161.66.134	210.61.41.87	158.196.120.128
201.184.40.61	200.194.26.115	191.255.158.89	191.17.170.112
36.104.126.211	177.94.105.10	168.70.56.131	149.11.144.66
123.145.4.202	122.161.66.113	114.43.68.218	114.40.105.49
113.53.49.195	112.119.175.120	111.224.234.14	85.132.70.160