42.112.170.96 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	2019-11-20 15:28:57 H=([42.112.170.96]) [42.112.170.96]:9988 I=[10.100.18.23]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=42.112.170.96) 2019-11-20 15:28:58 unexpected disconnection while reading SMTP command from ([42.112.170.96]) [42.112.170.96]:9988 I=[10.100.18.23]:25 (error: Connection reset by peer) 2019-11-20 15:35:15 H=([42.112.170.96]) [42.112.170.96]:49461 I=[10.100.18.23]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=42.112.170.96) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=42.112.170.96	2019-11-21 01:14:37

类型

评论内容

时间

attackspam

2019-11-20 15:28:57 H=([42.112.170.96]) [42.112.170.96]:9988 I=[10.100.18.23]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=42.112.170.96)
2019-11-20 15:28:58 unexpected disconnection while reading SMTP command from ([42.112.170.96]) [42.112.170.96]:9988 I=[10.100.18.23]:25 (error: Connection reset by peer)
2019-11-20 15:35:15 H=([42.112.170.96]) [42.112.170.96]:49461 I=[10.100.18.23]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=42.112.170.96)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=42.112.170.96

2019-11-21 01:14:37

相同子网IP讨论:

IP	类型	评论内容	时间
42.112.170.111	attackspambots	Unauthorized connection attempt from IP address 42.112.170.111 on Port 445(SMB)	2020-09-16 13:36:06
42.112.170.111	attackbotsspam	Unauthorized connection attempt from IP address 42.112.170.111 on Port 445(SMB)	2020-09-16 05:21:12
42.112.170.61	attackspambots	Unauthorized connection attempt from IP address 42.112.170.61 on Port 445(SMB)	2020-08-09 20:28:24
42.112.170.221	attackbotsspam	1585744787 - 04/01/2020 14:39:47 Host: 42.112.170.221/42.112.170.221 Port: 445 TCP Blocked	2020-04-02 01:21:46
42.112.170.178	attack	1578575365 - 01/09/2020 14:09:25 Host: 42.112.170.178/42.112.170.178 Port: 445 TCP Blocked	2020-01-09 23:00:17
42.112.170.86	attack	1578113417 - 01/04/2020 05:50:17 Host: 42.112.170.86/42.112.170.86 Port: 445 TCP Blocked	2020-01-04 16:47:56
42.112.170.113	attackspambots	Brute force attempt	2020-01-01 23:30:58

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.112.170.96
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45630
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.112.170.96.			IN	A

;; AUTHORITY SECTION:
.			595	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112001 1800 900 604800 86400

;; Query time: 896 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 21 01:14:33 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 96.170.112.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 96.170.112.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
190.190.40.203	attackspam	Sep 27 19:40:19 ip-172-31-62-245 sshd\[17350\]: Invalid user r from 190.190.40.203\ Sep 27 19:40:21 ip-172-31-62-245 sshd\[17350\]: Failed password for invalid user r from 190.190.40.203 port 52000 ssh2\ Sep 27 19:45:19 ip-172-31-62-245 sshd\[17390\]: Invalid user torr from 190.190.40.203\ Sep 27 19:45:21 ip-172-31-62-245 sshd\[17390\]: Failed password for invalid user torr from 190.190.40.203 port 35230 ssh2\ Sep 27 19:50:13 ip-172-31-62-245 sshd\[17439\]: Invalid user gmt from 190.190.40.203\	2019-09-28 04:00:31
222.186.52.107	attack	Sep 27 22:04:06 MK-Soft-Root2 sshd[19004]: Failed password for root from 222.186.52.107 port 19832 ssh2 Sep 27 22:04:12 MK-Soft-Root2 sshd[19004]: Failed password for root from 222.186.52.107 port 19832 ssh2 ...	2019-09-28 04:16:09
185.176.27.174	attackspambots	09/27/2019-21:00:37.519262 185.176.27.174 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-09-28 04:09:16
223.223.131.222	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:06:15.	2019-09-28 03:55:04
177.75.49.36	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:05:49.	2019-09-28 04:28:09
220.179.90.67	attackbots	Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:06:13.	2019-09-28 03:58:20
179.174.36.253	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:05:51.	2019-09-28 04:26:54
149.202.210.31	attackspambots	Invalid user gelu from 149.202.210.31 port 34700	2019-09-28 04:11:57
192.236.147.184	attackbots	2019-09-27 06:48:56 H=(durham.ultracarss.best) [192.236.147.184]:40924 I=[192.147.25.65]:25 F=<1060-85-46293-291-betsey1=why.net@mail.ultracarss.best> rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-27 07:03:44 H=(durham.ultracarss.best) [192.236.147.184]:53673 I=[192.147.25.65]:25 F=<1060-85-349742-291-lorentzen=why.net@mail.ultracarss.best> rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-27 07:05:58 H=(durham.ultracarss.best) [192.236.147.184]:45015 I=[192.147.25.65]:25 F=<1060-85-638861-291-wjhawk=why.net@mail.ultracarss.best> rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-09-28 04:14:55
76.27.163.60	attackspam	Automatic report - Banned IP Access	2019-09-28 03:57:16
221.127.9.100	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:06:14.	2019-09-28 03:56:33
186.195.145.154	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:05:59.	2019-09-28 04:14:35
210.212.101.198	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:06:10.	2019-09-28 04:01:31
203.194.110.199	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:06:09.	2019-09-28 04:02:58
222.186.175.151	attackbots	Sep 27 22:05:50 legacy sshd[24081]: Failed password for root from 222.186.175.151 port 55714 ssh2 Sep 27 22:06:02 legacy sshd[24081]: Failed password for root from 222.186.175.151 port 55714 ssh2 Sep 27 22:06:06 legacy sshd[24081]: Failed password for root from 222.186.175.151 port 55714 ssh2 Sep 27 22:06:06 legacy sshd[24081]: error: maximum authentication attempts exceeded for root from 222.186.175.151 port 55714 ssh2 [preauth] ...	2019-09-28 04:10:00

最近上报的IP列表

138.85.102.178	142.100.102.250	213.91.16.189	197.254.120.61
132.215.227.154	8.157.76.0	60.57.129.218	79.140.3.69
136.20.151.144	238.225.146.205	224.93.130.78	78.128.113.123
17.105.254.179	5.55.126.208	159.176.49.205	77.104.210.115
118.49.43.177	178.191.16.59	140.167.82.193	43.67.133.194