172.16.42.130 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): Private IP Address LAN

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Reserved

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Auto Detect Rule! proto TCP (SYN), 172.16.42.130:54261->gjan.info:23, len 40	2020-08-26 06:18:55

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 172.16.42.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40518
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;172.16.42.130.			IN	A

;; AUTHORITY SECTION:
.			234	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082501 1800 900 604800 86400

;; Query time: 94 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 26 06:18:52 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 130.42.16.172.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 130.42.16.172.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
66.249.79.1	attack	Automatic report - Web App Attack	2019-10-14 00:56:16
67.213.69.94	attack	port scan and connect, tcp 80 (http)	2019-10-14 00:50:18
207.248.62.98	attackspam	$f2bV_matches	2019-10-14 00:28:05
62.210.151.21	attackbots	\[2019-10-13 12:35:52\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-13T12:35:52.428-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="0013054404227",SessionID="0x7fc3acc3d768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.151.21/55773",ACLName="no_extension_match" \[2019-10-13 12:36:06\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-13T12:36:06.841-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01113054404227",SessionID="0x7fc3ac2ed548",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.151.21/56854",ACLName="no_extension_match" \[2019-10-13 12:36:33\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-13T12:36:33.426-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00013054404227",SessionID="0x7fc3ac00c388",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.151.21/55154",ACLName="no_extensi	2019-10-14 00:53:29
185.232.67.5	attackspambots	Oct 13 18:50:05 dedicated sshd[5710]: Invalid user admin from 185.232.67.5 port 52062	2019-10-14 00:58:44
220.164.2.134	attackspam	Oct 13 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 5 secs$: user=\, method=PLAIN, rip=220.164.2.134, lip=REMOVED, TLS, session=\ Oct 13 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=220.164.2.134, lip=REMOVED, TLS: Disconnected, session=\ Oct 13 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=220.164.2.134, lip=REMOVED, TLS, session=\	2019-10-14 00:19:34
185.153.199.10	attack	8 attempts last 24 Hours	2019-10-14 01:07:52
93.70.224.106	attackbotsspam	$f2bV_matches	2019-10-14 00:52:44
129.211.27.10	attackbots	Oct 13 18:17:37 pornomens sshd\[31785\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.27.10 user=root Oct 13 18:17:39 pornomens sshd\[31785\]: Failed password for root from 129.211.27.10 port 35395 ssh2 Oct 13 18:22:46 pornomens sshd\[31787\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.27.10 user=root ...	2019-10-14 00:38:00
54.37.136.213	attack	Oct 13 16:03:20 localhost sshd\[29397\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.136.213 user=root Oct 13 16:03:23 localhost sshd\[29397\]: Failed password for root from 54.37.136.213 port 34548 ssh2 Oct 13 16:07:28 localhost sshd\[29542\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.136.213 user=root Oct 13 16:07:30 localhost sshd\[29542\]: Failed password for root from 54.37.136.213 port 45308 ssh2 Oct 13 16:11:38 localhost sshd\[29752\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.136.213 user=root ...	2019-10-14 00:14:06
42.228.2.150	attack	port scan/probe/communication attempt	2019-10-14 00:41:36
37.59.107.100	attackspambots	Oct 13 12:49:24 venus sshd\[11279\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.107.100 user=root Oct 13 12:49:26 venus sshd\[11279\]: Failed password for root from 37.59.107.100 port 47434 ssh2 Oct 13 12:53:22 venus sshd\[11346\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.107.100 user=root ...	2019-10-14 00:39:27
41.242.102.66	attack	2019-10-13T16:27:31.317364abusebot-2.cloudsearch.cf sshd\[27839\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hst-102-66.irenala.edu.mg user=root	2019-10-14 00:40:44
188.166.228.244	attackbots	Oct 13 01:42:48 auw2 sshd\[3649\]: Invalid user Rapido123 from 188.166.228.244 Oct 13 01:42:48 auw2 sshd\[3649\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.228.244 Oct 13 01:42:51 auw2 sshd\[3649\]: Failed password for invalid user Rapido123 from 188.166.228.244 port 60111 ssh2 Oct 13 01:50:33 auw2 sshd\[4238\]: Invalid user 123Mirror from 188.166.228.244 Oct 13 01:50:33 auw2 sshd\[4238\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.228.244	2019-10-14 00:14:51
14.116.253.142	attackspam	Oct 13 18:25:08 eventyay sshd[8096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.253.142 Oct 13 18:25:11 eventyay sshd[8096]: Failed password for invalid user Passw0rd12345 from 14.116.253.142 port 48460 ssh2 Oct 13 18:30:07 eventyay sshd[8186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.253.142 ...	2019-10-14 00:59:08

最近上报的IP列表

119.61.0.140	113.140.11.125	185.71.119.133	171.43.174.227
61.185.18.42	20.191.113.221	186.234.80.10	134.175.146.231
40.76.92.191	189.203.194.163	138.36.204.189	5.189.152.169
103.97.86.32	67.179.10.69	93.141.94.160	35.188.201.240
183.147.2.5	161.35.49.187	171.221.206.182	42.6.170.217