42.115.55.42 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Cambodia

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): OpenNet ISP Cambodia

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Aug 7 17:36:55 DDOS Attack: SRC=42.115.55.42 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=40 DF PROTO=TCP SPT=2043 DPT=80 WINDOW=0 RES=0x00 RST URGP=0	2019-08-08 06:19:58
attackspam	Unauthorised access (Aug 4) SRC=42.115.55.42 LEN=40 TTL=44 ID=55217 TCP DPT=8080 WINDOW=27076 SYN Unauthorised access (Jul 29) SRC=42.115.55.42 LEN=40 TTL=44 ID=27119 TCP DPT=8080 WINDOW=9689 SYN Unauthorised access (Jul 28) SRC=42.115.55.42 LEN=40 TTL=44 ID=5268 TCP DPT=8080 WINDOW=9689 SYN	2019-08-04 20:38:39

类型

评论内容

时间

attack

Aug  7 17:36:55   DDOS Attack: SRC=42.115.55.42 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=40  DF PROTO=TCP SPT=2043 DPT=80 WINDOW=0 RES=0x00 RST URGP=0

2019-08-08 06:19:58

attackspam

Unauthorised access (Aug  4) SRC=42.115.55.42 LEN=40 TTL=44 ID=55217 TCP DPT=8080 WINDOW=27076 SYN 
Unauthorised access (Jul 29) SRC=42.115.55.42 LEN=40 TTL=44 ID=27119 TCP DPT=8080 WINDOW=9689 SYN 
Unauthorised access (Jul 28) SRC=42.115.55.42 LEN=40 TTL=44 ID=5268 TCP DPT=8080 WINDOW=9689 SYN

2019-08-04 20:38:39

相同子网IP讨论:

IP	类型	评论内容	时间
42.115.55.23	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-05-07 22:30:01
42.115.55.23	attackbotsspam	Unauthorized connection attempt from IP address 42.115.55.23 on Port 445(SMB)	2020-01-31 20:21:14
42.115.55.23	attackbots	445/tcp 445/tcp 445/tcp [2019-07-18/09-13]3pkt	2019-09-14 05:21:48

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.115.55.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28568
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.115.55.42.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019061201 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jun 13 02:27:01 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 42.55.115.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 42.55.115.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
159.65.144.233	attack	Oct 7 22:41:59 www sshd\[4186\]: Invalid user sampless from 159.65.144.233	2020-10-09 02:01:50
54.38.134.219	attackbots	54.38.134.219 - - [08/Oct/2020:15:17:50 +0100] "POST /wp-login.php HTTP/1.1" 200 2551 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.38.134.219 - - [08/Oct/2020:15:17:51 +0100] "POST /wp-login.php HTTP/1.1" 200 2529 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.38.134.219 - - [08/Oct/2020:15:17:51 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-09 02:19:55
171.246.52.48	attack	TCP (SYN) 171.246.52.48:8124 -> port 23, len 44	2020-10-09 02:25:55
113.53.243.219	attackspam	Icarus honeypot on github	2020-10-09 02:05:55
125.119.82.237	attack	Port probing on unauthorized port 1433	2020-10-09 02:20:24
171.229.131.87	attackbotsspam	Found on CINS badguys / proto=6 . srcport=17237 . dstport=23 Telnet . (3299)	2020-10-09 02:29:43
74.120.14.21	attackspambots	firewall-block, port(s): 587/tcp	2020-10-09 02:15:19
192.243.116.235	attackbots	Oct 8 17:38:02 roki-contabo sshd\[23929\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.243.116.235 user=root Oct 8 17:38:04 roki-contabo sshd\[23929\]: Failed password for root from 192.243.116.235 port 40392 ssh2 Oct 8 17:43:03 roki-contabo sshd\[24100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.243.116.235 user=root Oct 8 17:43:06 roki-contabo sshd\[24100\]: Failed password for root from 192.243.116.235 port 35914 ssh2 Oct 8 17:46:50 roki-contabo sshd\[24229\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.243.116.235 user=root ...	2020-10-09 02:09:21
58.209.197.206	attack	Brute-force attempt banned	2020-10-09 01:59:56
79.137.36.108	attackbots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-10-09 02:12:30
51.68.227.98	attackspambots	Oct 8 18:57:55 hosting sshd[32025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.ip-51-68-227.eu user=root Oct 8 18:57:56 hosting sshd[32025]: Failed password for root from 51.68.227.98 port 42460 ssh2 ...	2020-10-09 02:03:30
189.238.98.182	attack	Attempt to hack Wordpress Login, XMLRPC or other login	2020-10-09 02:23:25
167.248.133.16	attackbots	firewall-block, port(s): 6443/tcp	2020-10-09 02:09:45
118.25.104.200	attack	2020-10-08T06:50:20.615657hostname sshd[61591]: Failed password for root from 118.25.104.200 port 55060 ssh2 ...	2020-10-09 02:03:15
220.186.159.148	attack	Oct 8 19:14:36 host2 sshd[1942472]: Failed password for root from 220.186.159.148 port 51504 ssh2 Oct 8 19:14:34 host2 sshd[1942472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.186.159.148 user=root Oct 8 19:14:36 host2 sshd[1942472]: Failed password for root from 220.186.159.148 port 51504 ssh2 Oct 8 19:18:32 host2 sshd[1943078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.186.159.148 user=root Oct 8 19:18:34 host2 sshd[1943078]: Failed password for root from 220.186.159.148 port 48882 ssh2 ...	2020-10-09 02:18:39

最近上报的IP列表

192.99.15.77	75.19.195.39	191.81.149.138	121.183.75.145
49.191.236.43	55.143.55.57	121.148.11.68	94.59.78.111
202.107.244.27	40.43.58.184	85.149.248.179	120.253.127.99
168.15.230.35	88.214.26.16	3.95.27.164	213.135.192.234
186.203.25.128	65.105.134.218	202.130.115.122	157.167.72.185