192.158.42.9 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Cummins Engine Co.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Unauthorised access (Aug 17) SRC=192.158.42.9 LEN=52 TTL=108 ID=22729 DF TCP DPT=445 WINDOW=8192 SYN	2020-08-17 21:02:23

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 192.158.42.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45986
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;192.158.42.9.			IN	A

;; AUTHORITY SECTION:
.			397	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081700 1800 900 604800 86400

;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 17 21:02:15 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 9.42.158.192.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 9.42.158.192.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
78.134.99.105	attack	Jan 10 23:26:15 vps691689 sshd[22575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.134.99.105 Jan 10 23:26:17 vps691689 sshd[22575]: Failed password for invalid user fnb from 78.134.99.105 port 42540 ssh2 ...	2020-01-11 08:32:16
187.189.27.97	attack	Attempts against Email Servers	2020-01-11 08:26:55
93.191.40.33	attackbotsspam	Microsoft SQL Server User Authentication Brute Force Attempt, PTR: 93-191-40-33.aic.fr.	2020-01-11 08:35:05
186.12.96.86	attackspambots	Jan 10 22:07:57 grey postfix/smtpd\[30701\]: NOQUEUE: reject: RCPT from unknown\[186.12.96.86\]: 554 5.7.1 Service unavailable\; Client host \[186.12.96.86\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=186.12.96.86\; from=\ to=\ proto=ESMTP helo=\<\[186.12.96.86\]\> ...	2020-01-11 08:39:48
174.138.58.149	attackspambots	Jan 11 02:07:29 server sshd\[17480\]: Invalid user bub from 174.138.58.149 Jan 11 02:07:29 server sshd\[17480\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.58.149 Jan 11 02:07:31 server sshd\[17480\]: Failed password for invalid user bub from 174.138.58.149 port 53204 ssh2 Jan 11 02:20:55 server sshd\[20824\]: Invalid user bn from 174.138.58.149 Jan 11 02:20:55 server sshd\[20824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.58.149 ...	2020-01-11 08:47:34
171.100.22.237	attack	Automatic report - Port Scan Attack	2020-01-11 08:18:27
222.186.173.183	attack	2020-01-11T01:27:21.521547struts4.enskede.local sshd\[17795\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183 user=root 2020-01-11T01:27:25.131950struts4.enskede.local sshd\[17795\]: Failed password for root from 222.186.173.183 port 64806 ssh2 2020-01-11T01:27:28.553382struts4.enskede.local sshd\[17795\]: Failed password for root from 222.186.173.183 port 64806 ssh2 2020-01-11T01:27:32.594079struts4.enskede.local sshd\[17795\]: Failed password for root from 222.186.173.183 port 64806 ssh2 2020-01-11T01:27:37.463271struts4.enskede.local sshd\[17795\]: Failed password for root from 222.186.173.183 port 64806 ssh2 ...	2020-01-11 08:31:58
62.234.124.104	attackspam	Jan 10 21:27:56 firewall sshd[27696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.124.104 Jan 10 21:27:56 firewall sshd[27696]: Invalid user soporte from 62.234.124.104 Jan 10 21:27:58 firewall sshd[27696]: Failed password for invalid user soporte from 62.234.124.104 port 42112 ssh2 ...	2020-01-11 08:48:21
183.129.48.236	attackspam	2020-01-10 15:00:39 H=(ail.com) [183.129.48.236]:49782 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3, 127.0.0.2, 127.0.0.11) (https://www.spamhaus.org/sbl/query/SBL467425) 2020-01-10 15:00:43 H=(163.com) [183.129.48.236]:50170 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.2, 127.0.0.3, 127.0.0.4, 127.0.0.11) (https://www.spamhaus.org/query/ip/183.129.48.236) 2020-01-10 15:07:43 H=(163.com) [183.129.48.236]:60092 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.11, 127.0.0.2, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBL467425) ...	2020-01-11 08:48:39
218.92.0.191	attackspambots	Jan 11 01:20:31 dcd-gentoo sshd[21660]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Jan 11 01:20:34 dcd-gentoo sshd[21660]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Jan 11 01:20:31 dcd-gentoo sshd[21660]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Jan 11 01:20:34 dcd-gentoo sshd[21660]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Jan 11 01:20:31 dcd-gentoo sshd[21660]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Jan 11 01:20:34 dcd-gentoo sshd[21660]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Jan 11 01:20:34 dcd-gentoo sshd[21660]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 20485 ssh2 ...	2020-01-11 08:23:31
218.92.0.212	attack	Jan 11 01:15:36 MK-Soft-VM7 sshd[1559]: Failed password for root from 218.92.0.212 port 37114 ssh2 Jan 11 01:15:41 MK-Soft-VM7 sshd[1559]: Failed password for root from 218.92.0.212 port 37114 ssh2 ...	2020-01-11 08:25:46
210.122.10.36	attack	Jan 10 21:59:02 * sshd[19567]: refused connect from 210.122.10.36 (210.122.10.36) Jan 10 21:59:03 * sshd[19568]: refused connect from 210.122.10.36 (210.122.10.36) Jan 10 21:59:09 *** sshd[19569]: refused connect from 210.122.10.36 (210.122.10.36) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=210.122.10.36	2020-01-11 08:26:17
14.162.199.21	attack	Jan 10 22:07:50 MainVPS sshd[30209]: Invalid user pi from 14.162.199.21 port 41692 Jan 10 22:07:50 MainVPS sshd[30211]: Invalid user pi from 14.162.199.21 port 41696 Jan 10 22:07:51 MainVPS sshd[30209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.162.199.21 Jan 10 22:07:50 MainVPS sshd[30209]: Invalid user pi from 14.162.199.21 port 41692 Jan 10 22:07:53 MainVPS sshd[30209]: Failed password for invalid user pi from 14.162.199.21 port 41692 ssh2 Jan 10 22:07:51 MainVPS sshd[30211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.162.199.21 Jan 10 22:07:50 MainVPS sshd[30211]: Invalid user pi from 14.162.199.21 port 41696 Jan 10 22:07:53 MainVPS sshd[30211]: Failed password for invalid user pi from 14.162.199.21 port 41696 ssh2 ...	2020-01-11 08:42:45
222.186.175.181	attack	Jan 11 01:43:01 MK-Soft-VM6 sshd[31633]: Failed password for root from 222.186.175.181 port 11025 ssh2 Jan 11 01:43:06 MK-Soft-VM6 sshd[31633]: Failed password for root from 222.186.175.181 port 11025 ssh2 ...	2020-01-11 08:45:43
104.131.138.126	attackspambots	Invalid user dfh from 104.131.138.126 port 59198	2020-01-11 08:58:44

最近上报的IP列表

232.3.230.21	55.162.32.238	26.32.48.97	186.88.140.12
82.33.99.233	72.38.46.161	225.137.117.165	117.111.22.183
8.201.47.34	166.43.232.218	80.204.243.98	139.180.130.246
191.244.57.42	239.8.153.223	132.124.157.126	178.181.29.217
222.76.42.249	159.89.49.44	154.125.59.222	106.75.249.8