42.114.125.53 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Vietnam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Feb 7 18:55:17 sip sshd[12222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.114.125.53 Feb 7 18:55:17 sip sshd[12224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.114.125.53 Feb 7 18:55:19 sip sshd[12222]: Failed password for invalid user pi from 42.114.125.53 port 60210 ssh2 Feb 7 18:55:19 sip sshd[12224]: Failed password for invalid user pi from 42.114.125.53 port 60218 ssh2	2020-02-08 05:16:07

类型

评论内容

时间

attackbots

Feb  7 18:55:17 sip sshd[12222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.114.125.53
Feb  7 18:55:17 sip sshd[12224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.114.125.53
Feb  7 18:55:19 sip sshd[12222]: Failed password for invalid user pi from 42.114.125.53 port 60210 ssh2
Feb  7 18:55:19 sip sshd[12224]: Failed password for invalid user pi from 42.114.125.53 port 60218 ssh2

2020-02-08 05:16:07

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.114.125.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52525
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.114.125.53.			IN	A

;; AUTHORITY SECTION:
.			419	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020701 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 08 05:16:02 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 53.125.114.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 53.125.114.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
218.92.0.201	attackspam	Jan 10 19:52:18 silence02 sshd[3175]: Failed password for root from 218.92.0.201 port 27252 ssh2 Jan 10 19:54:07 silence02 sshd[3227]: Failed password for root from 218.92.0.201 port 58787 ssh2	2020-01-11 02:59:16
68.183.236.66	attackspambots	Jan 8 22:26:18 tuxlinux sshd[27319]: Invalid user vsftpd from 68.183.236.66 port 40334 Jan 8 22:26:18 tuxlinux sshd[27319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.236.66 Jan 8 22:26:18 tuxlinux sshd[27319]: Invalid user vsftpd from 68.183.236.66 port 40334 Jan 8 22:26:18 tuxlinux sshd[27319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.236.66 Jan 8 22:26:18 tuxlinux sshd[27319]: Invalid user vsftpd from 68.183.236.66 port 40334 Jan 8 22:26:18 tuxlinux sshd[27319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.236.66 Jan 8 22:26:20 tuxlinux sshd[27319]: Failed password for invalid user vsftpd from 68.183.236.66 port 40334 ssh2 ...	2020-01-11 02:43:26
158.181.40.225	attackspambots	Jan 10 16:20:23 grey postfix/smtpd\[7048\]: NOQUEUE: reject: RCPT from unknown\[158.181.40.225\]: 554 5.7.1 Service unavailable\; Client host \[158.181.40.225\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=158.181.40.225\; from=\ to=\ proto=ESMTP helo=\<\[158.181.40.225\]\> ...	2020-01-11 02:33:50
42.200.206.225	attackspam	Jan 10 17:06:45 jane sshd[19921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.200.206.225 Jan 10 17:06:48 jane sshd[19921]: Failed password for invalid user xmc from 42.200.206.225 port 33676 ssh2 ...	2020-01-11 02:55:19
159.203.201.42	attack	Unauthorized connection attempt from IP address 159.203.201.42 on Port 3389(RDP)	2020-01-11 02:34:34
31.15.95.213	attackspam	Unauthorized connection attempt detected from IP address 31.15.95.213 to port 445	2020-01-11 02:45:37
117.57.85.100	attackbotsspam	/download/file.php?id=144&sid=c3b5cbdcbbe0e68114b2e3e19a5109ac	2020-01-11 02:42:44
43.231.185.163	attackbots	RDP Bruteforce	2020-01-11 02:46:32
187.189.65.51	attack	Jan 10 19:09:54 Ubuntu-1404-trusty-64-minimal sshd\[6308\]: Invalid user user from 187.189.65.51 Jan 10 19:09:54 Ubuntu-1404-trusty-64-minimal sshd\[6308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.65.51 Jan 10 19:09:55 Ubuntu-1404-trusty-64-minimal sshd\[6308\]: Failed password for invalid user user from 187.189.65.51 port 33526 ssh2 Jan 10 19:12:57 Ubuntu-1404-trusty-64-minimal sshd\[8251\]: Invalid user marketing from 187.189.65.51 Jan 10 19:12:57 Ubuntu-1404-trusty-64-minimal sshd\[8251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.65.51	2020-01-11 02:31:23
27.4.46.41	attack	Jan 10 13:55:20 grey postfix/smtpd\[16391\]: NOQUEUE: reject: RCPT from unknown\[27.4.46.41\]: 554 5.7.1 Service unavailable\; Client host \[27.4.46.41\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=27.4.46.41\; from=\ to=\ proto=ESMTP helo=\<\[27.4.46.41\]\> ...	2020-01-11 02:27:43
87.148.46.220	attackbots	Jan 10 16:44:49 ms-srv sshd[35231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.148.46.220 user=root Jan 10 16:44:51 ms-srv sshd[35231]: Failed password for invalid user root from 87.148.46.220 port 37180 ssh2	2020-01-11 02:38:48
49.88.112.112	attack	Jan 10 19:50:56 cvbnet sshd[7096]: Failed password for root from 49.88.112.112 port 51745 ssh2 Jan 10 19:50:58 cvbnet sshd[7096]: Failed password for root from 49.88.112.112 port 51745 ssh2 ...	2020-01-11 03:02:36
222.186.30.12	attackbotsspam	Jan 10 20:06:39 debian64 sshd\[22274\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.12 user=root Jan 10 20:06:41 debian64 sshd\[22274\]: Failed password for root from 222.186.30.12 port 41368 ssh2 Jan 10 20:06:44 debian64 sshd\[22274\]: Failed password for root from 222.186.30.12 port 41368 ssh2 ...	2020-01-11 03:07:00
77.42.87.167	attack	20/1/10@07:54:25: FAIL: IoT-Telnet address from=77.42.87.167 ...	2020-01-11 02:55:03
78.186.146.79	attackbots	Automatic report - Port Scan Attack	2020-01-11 02:33:23

最近上报的IP列表

179.89.55.122	85.69.122.100	50.241.228.12	154.236.169.133
100.170.117.43	85.192.71.53	54.148.198.134	5.169.205.232
32.158.13.80	211.203.16.85	80.134.254.131	203.47.244.139
179.215.143.4	52.190.162.235	219.46.181.199	111.151.142.183
211.187.190.220	87.141.101.59	134.175.194.143	173.219.28.133