42.115.18.144 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Vietnam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Lines containing failures of 42.115.18.144 Jan 3 15:03:54 shared04 sshd[15124]: Invalid user admin from 42.115.18.144 port 57269 Jan 3 15:03:54 shared04 sshd[15124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.115.18.144 Jan 3 15:03:56 shared04 sshd[15124]: Failed password for invalid user admin from 42.115.18.144 port 57269 ssh2 Jan 3 15:03:56 shared04 sshd[15124]: Connection closed by invalid user admin 42.115.18.144 port 57269 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=42.115.18.144	2020-01-03 23:07:02

类型

评论内容

时间

attackbotsspam

Lines containing failures of 42.115.18.144
Jan  3 15:03:54 shared04 sshd[15124]: Invalid user admin from 42.115.18.144 port 57269
Jan  3 15:03:54 shared04 sshd[15124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.115.18.144
Jan  3 15:03:56 shared04 sshd[15124]: Failed password for invalid user admin from 42.115.18.144 port 57269 ssh2
Jan  3 15:03:56 shared04 sshd[15124]: Connection closed by invalid user admin 42.115.18.144 port 57269 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=42.115.18.144

2020-01-03 23:07:02

相同子网IP讨论:

IP	类型	评论内容	时间
42.115.185.96	attackspam	TCP (SYN) 42.115.185.96:4173 -> port 23, len 44	2020-08-02 01:44:08
42.115.186.139	attack	Port probing on unauthorized port 23	2020-08-01 18:13:13
42.115.18.179	attack	Email rejected due to spam filtering	2020-03-07 00:57:48
42.115.18.57	attackbotsspam	Port Scan detected from 42.115.18.57 (KH/Cambodia/-). 11 hits in the last 261 seconds	2020-02-13 22:02:29
42.115.18.232	attackspam	Automatic report - Port Scan Attack	2019-12-15 18:56:32
42.115.18.171	attackbotsspam	Jul 12 11:39:22 dev postfix/smtpd\[2092\]: warning: unknown\[42.115.18.171\]: SASL CRAM-MD5 authentication failed: authentication failure Jul 12 11:39:22 dev postfix/smtpd\[2092\]: warning: unknown\[42.115.18.171\]: SASL PLAIN authentication failed: authentication failure Jul 12 11:39:24 dev postfix/smtpd\[2092\]: warning: unknown\[42.115.18.171\]: SASL LOGIN authentication failed: authentication failure Jul 12 11:39:31 dev postfix/smtpd\[2092\]: warning: unknown\[42.115.18.171\]: SASL CRAM-MD5 authentication failed: authentication failure Jul 12 11:39:33 dev postfix/smtpd\[2092\]: warning: unknown\[42.115.18.171\]: SASL PLAIN authentication failed: authentication failure	2019-07-13 00:01:49

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.115.18.144
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22242
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.115.18.144.			IN	A

;; AUTHORITY SECTION:
.			532	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010300 1800 900 604800 86400

;; Query time: 165 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 03 23:06:53 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 144.18.115.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 144.18.115.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
2a00:d680:10:50::22	attackbots	/test/wp-login.php	2019-11-15 21:04:24
103.89.91.224	attack	103.89.91.224 was recorded 10 times by 8 hosts attempting to connect to the following ports: 4,5555,4444,8888,3395,9,3399,2,6666. Incident counter (4h, 24h, all-time): 10, 26, 26	2019-11-15 21:17:54
157.245.233.164	attack	B: Abusive content scan (301)	2019-11-15 21:29:24
66.85.156.75	attackbotsspam	Nov 15 13:10:11 zeus sshd[24351]: Failed password for root from 66.85.156.75 port 34898 ssh2 Nov 15 13:14:14 zeus sshd[24424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.85.156.75 Nov 15 13:14:16 zeus sshd[24424]: Failed password for invalid user forney from 66.85.156.75 port 56926 ssh2	2019-11-15 21:19:09
36.236.86.235	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/36.236.86.235/ TW - 1H : (144) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TW NAME ASN : ASN3462 IP : 36.236.86.235 CIDR : 36.236.0.0/16 PREFIX COUNT : 390 UNIQUE IP COUNT : 12267520 ATTACKS DETECTED ASN3462 : 1H - 4 3H - 14 6H - 35 12H - 74 24H - 125 DateTime : 2019-11-15 07:19:00 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-15 21:34:27
192.254.207.123	attack	joshuajohannes.de 192.254.207.123 \[15/Nov/2019:11:39:05 +0100\] "POST /wp-login.php HTTP/1.1" 200 6301 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" joshuajohannes.de 192.254.207.123 \[15/Nov/2019:11:39:06 +0100\] "POST /wp-login.php HTTP/1.1" 200 6269 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" joshuajohannes.de 192.254.207.123 \[15/Nov/2019:11:39:08 +0100\] "POST /wp-login.php HTTP/1.1" 200 6264 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-11-15 21:13:05
5.181.108.239	attack	Nov 15 14:49:59 pkdns2 sshd\[52018\]: Invalid user laura from 5.181.108.239Nov 15 14:50:01 pkdns2 sshd\[52018\]: Failed password for invalid user laura from 5.181.108.239 port 60706 ssh2Nov 15 14:53:53 pkdns2 sshd\[52203\]: Invalid user Bookit from 5.181.108.239Nov 15 14:53:55 pkdns2 sshd\[52203\]: Failed password for invalid user Bookit from 5.181.108.239 port 42614 ssh2Nov 15 14:57:43 pkdns2 sshd\[52382\]: Invalid user mother1 from 5.181.108.239Nov 15 14:57:45 pkdns2 sshd\[52382\]: Failed password for invalid user mother1 from 5.181.108.239 port 52758 ssh2 ...	2019-11-15 20:58:30
103.49.215.147	attackspambots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/103.49.215.147/ HK - 1H : (50) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : HK NAME ASN : ASN134705 IP : 103.49.215.147 CIDR : 103.49.215.0/24 PREFIX COUNT : 1831 UNIQUE IP COUNT : 469248 ATTACKS DETECTED ASN134705 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-15 07:19:31 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery	2019-11-15 21:18:17
60.247.36.112	attackbots	Nov 14 22:20:23 tdfoods sshd\[24756\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.247.36.112 user=backup Nov 14 22:20:25 tdfoods sshd\[24756\]: Failed password for backup from 60.247.36.112 port 53357 ssh2 Nov 14 22:26:05 tdfoods sshd\[25233\]: Invalid user administrator from 60.247.36.112 Nov 14 22:26:05 tdfoods sshd\[25233\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.247.36.112 Nov 14 22:26:07 tdfoods sshd\[25233\]: Failed password for invalid user administrator from 60.247.36.112 port 44497 ssh2	2019-11-15 21:02:22
180.76.151.113	attackbotsspam	$f2bV_matches	2019-11-15 21:29:00
159.203.201.135	attackbotsspam	ET DROP Dshield Block Listed Source group 1 - port: 15905 proto: TCP cat: Misc Attack	2019-11-15 21:05:48
109.205.243.8	attackbots	../../mnt/custom/ProductDefinition	2019-11-15 21:26:51
186.104.153.125	attackspambots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/186.104.153.125/ CL - 1H : (32) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CL NAME ASN : ASN7418 IP : 186.104.153.125 CIDR : 186.104.0.0/15 PREFIX COUNT : 102 UNIQUE IP COUNT : 2336000 ATTACKS DETECTED ASN7418 : 1H - 1 3H - 2 6H - 8 12H - 11 24H - 24 DateTime : 2019-11-15 07:19:22 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-15 21:22:57
221.148.45.168	attack	Automatic report - Banned IP Access	2019-11-15 21:04:45
111.75.253.76	attackbotsspam	Nov 15 07:19:43 MK-Soft-VM5 sshd[18127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.75.253.76 Nov 15 07:19:44 MK-Soft-VM5 sshd[18127]: Failed password for invalid user chopper1 from 111.75.253.76 port 52180 ssh2 ...	2019-11-15 21:10:46

最近上报的IP列表

121.16.114.30	147.188.29.127	103.239.132.123	176.109.168.116
218.91.112.61	85.184.243.29	93.185.30.86	5.188.84.220
73.8.89.19	215.3.20.173	39.179.185.195	61.137.149.249
48.178.146.231	42.51.64.187	67.240.214.162	17.104.232.245
160.11.202.157	103.213.180.60	96.253.118.46	137.55.207.136