必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackspam
Unauthorized connection attempt detected from IP address 42.116.11.156 to port 5555 [T]
2020-04-09 19:37:32
attackbots
5555/tcp 23/tcp 23/tcp
[2020-02-10/04-06]3pkt
2020-04-06 20:04:52
attack
Unauthorized connection attempt detected from IP address 42.116.11.156 to port 5555 [T]
2020-03-24 19:11:36
attack
unauthorized connection attempt
2020-02-16 19:13:54
attackbots
Sep 30 12:15:33   TCP Attack: SRC=42.116.11.156 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=45  PROTO=TCP SPT=9013 DPT=23 WINDOW=57301 RES=0x00 SYN URGP=0
2019-09-30 22:31:56
相同子网IP讨论:
IP 类型 评论内容 时间
42.116.110.155 attackspam
Apr 17 23:08:53 v22018086721571380 sshd[19012]: Failed password for invalid user sa from 42.116.110.155 port 59596 ssh2
2020-04-18 06:56:20
42.116.110.155 attack
Lines containing failures of 42.116.110.155
Apr 12 22:29:12 kmh-wmh-001-nbg01 sshd[13923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.110.155  user=mysql
Apr 12 22:29:14 kmh-wmh-001-nbg01 sshd[13923]: Failed password for mysql from 42.116.110.155 port 56410 ssh2
Apr 12 22:29:16 kmh-wmh-001-nbg01 sshd[13923]: Received disconnect from 42.116.110.155 port 56410:11: Bye Bye [preauth]
Apr 12 22:29:16 kmh-wmh-001-nbg01 sshd[13923]: Disconnected from authenticating user mysql 42.116.110.155 port 56410 [preauth]
Apr 12 22:32:00 kmh-wmh-001-nbg01 sshd[14204]: Invalid user http from 42.116.110.155 port 39492
Apr 12 22:32:00 kmh-wmh-001-nbg01 sshd[14204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.110.155 
Apr 12 22:32:02 kmh-wmh-001-nbg01 sshd[14204]: Failed password for invalid user http from 42.116.110.155 port 39492 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.ht
2020-04-13 04:48:38
42.116.114.48 attackbotsspam
port scan and connect, tcp 23 (telnet)
2020-02-28 00:17:43
42.116.117.245 attack
Cảnh
 báo đăng nhập tài khoản ip 42.116.117.245
2020-02-01 18:43:56
42.116.117.245 attack
Cảnh
 báo đăng nhập tài khoản ip 42.116.117.245
2020-02-01 18:43:41
42.116.118.124 attackspam
Unauthorized connection attempt detected from IP address 42.116.118.124 to port 445 [T]
2020-01-16 02:45:44
42.116.114.246 attackbotsspam
Unauthorized connection attempt from IP address 42.116.114.246 on Port 445(SMB)
2019-12-19 03:52:20
42.116.117.35 attackspambots
42.116.117.35 - - \[06/Dec/2019:15:49:28 +0100\] "POST /wp-login.php HTTP/1.0" 200 7646 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
42.116.117.35 - - \[06/Dec/2019:15:49:47 +0100\] "POST /wp-login.php HTTP/1.0" 200 7463 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
42.116.117.35 - - \[06/Dec/2019:15:49:58 +0100\] "POST /wp-login.php HTTP/1.0" 200 7625 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-12-07 00:43:51
42.116.118.236 attackbots
Unauthorized connection attempt from IP address 42.116.118.236 on Port 445(SMB)
2019-11-29 08:24:22
42.116.114.140 attackspambots
Unauthorised access (Nov 17) SRC=42.116.114.140 LEN=52 TTL=107 ID=22407 DF TCP DPT=445 WINDOW=8192 SYN
2019-11-18 00:06:53
42.116.114.149 attackspam
Unauthorised access (Oct 31) SRC=42.116.114.149 LEN=52 TTL=112 ID=24426 DF TCP DPT=445 WINDOW=8192 SYN
2019-10-31 16:52:29
42.116.113.12 attack
Sun, 21 Jul 2019 07:37:29 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 18:50:34
42.116.116.188 attackbotsspam
Sat, 20 Jul 2019 21:53:44 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 15:21:51
42.116.118.167 attackbots
2019-07-03 15:11:03 unexpected disconnection while reading SMTP command from ([42.116.118.167]) [42.116.118.167]:21266 I=[10.100.18.23]:25 (error: Connection reset by peer)
2019-07-03 15:13:25 unexpected disconnection while reading SMTP command from ([42.116.118.167]) [42.116.118.167]:9354 I=[10.100.18.23]:25 (error: Connection reset by peer)
2019-07-03 15:14:14 unexpected disconnection while reading SMTP command from ([42.116.118.167]) [42.116.118.167]:35670 I=[10.100.18.23]:25 (error: Connection reset by peer)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=42.116.118.167
2019-07-04 01:25:27
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.116.11.156
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26442
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.116.11.156.			IN	A

;; AUTHORITY SECTION:
.			589	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019093000 1800 900 604800 86400

;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 30 22:31:52 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 156.11.116.42.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 156.11.116.42.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
222.186.175.140 attackbots
Feb  1 17:03:29 124388 sshd[20882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.140  user=root
Feb  1 17:03:31 124388 sshd[20882]: Failed password for root from 222.186.175.140 port 17074 ssh2
Feb  1 17:03:29 124388 sshd[20882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.140  user=root
Feb  1 17:03:31 124388 sshd[20882]: Failed password for root from 222.186.175.140 port 17074 ssh2
Feb  1 17:03:48 124388 sshd[20882]: error: maximum authentication attempts exceeded for root from 222.186.175.140 port 17074 ssh2 [preauth]
2020-02-02 01:05:41
201.0.12.134 attack
Honeypot attack, port: 4567, PTR: 201-0-12-134.dsl.telesp.net.br.
2020-02-02 01:21:06
145.239.87.109 attackbots
...
2020-02-02 01:27:07
192.241.234.109 attackspambots
5666/tcp
[2020-02-01]1pkt
2020-02-02 01:26:09
203.195.177.202 attack
Unauthorized connection attempt detected from IP address 203.195.177.202 to port 2323 [J]
2020-02-02 01:41:12
188.166.159.148 attackbots
Feb  1 15:38:58 srv-ubuntu-dev3 sshd[70647]: Invalid user cmsuser from 188.166.159.148
Feb  1 15:38:58 srv-ubuntu-dev3 sshd[70647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.159.148
Feb  1 15:38:58 srv-ubuntu-dev3 sshd[70647]: Invalid user cmsuser from 188.166.159.148
Feb  1 15:39:01 srv-ubuntu-dev3 sshd[70647]: Failed password for invalid user cmsuser from 188.166.159.148 port 38638 ssh2
Feb  1 15:41:56 srv-ubuntu-dev3 sshd[71076]: Invalid user ts3bot from 188.166.159.148
Feb  1 15:41:56 srv-ubuntu-dev3 sshd[71076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.159.148
Feb  1 15:41:56 srv-ubuntu-dev3 sshd[71076]: Invalid user ts3bot from 188.166.159.148
Feb  1 15:41:58 srv-ubuntu-dev3 sshd[71076]: Failed password for invalid user ts3bot from 188.166.159.148 port 53444 ssh2
Feb  1 15:44:50 srv-ubuntu-dev3 sshd[71313]: Invalid user ts3server from 188.166.159.148
...
2020-02-02 01:48:04
122.226.123.182 attack
Unauthorized connection attempt from IP address 122.226.123.182 on Port 445(SMB)
2020-02-02 01:19:50
222.186.173.238 attackbotsspam
Feb  1 18:03:43 jane sshd[28481]: Failed password for root from 222.186.173.238 port 30692 ssh2
Feb  1 18:03:48 jane sshd[28481]: Failed password for root from 222.186.173.238 port 30692 ssh2
...
2020-02-02 01:07:18
145.14.133.252 attackspambots
Jan 30 01:46:27 v22018076590370373 sshd[25380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.14.133.252 
...
2020-02-02 01:53:43
77.247.110.85 attack
[2020-02-01 12:08:30] NOTICE[1148][C-00004e65] chan_sip.c: Call from '' (77.247.110.85:65197) to extension '48632170016' rejected because extension not found in context 'public'.
[2020-02-01 12:08:30] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-01T12:08:30.593-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="48632170016",SessionID="0x7fd82c2bd8a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.85/65197",ACLName="no_extension_match"
[2020-02-01 12:08:51] NOTICE[1148][C-00004e66] chan_sip.c: Call from '' (77.247.110.85:54001) to extension '+48632170016' rejected because extension not found in context 'public'.
[2020-02-01 12:08:51] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-01T12:08:51.105-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="+48632170016",SessionID="0x7fd82c307128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.85/
...
2020-02-02 01:17:27
145.255.31.52 attackspam
Unauthorized connection attempt detected from IP address 145.255.31.52 to port 2220 [J]
2020-02-02 01:13:44
145.239.198.218 attackspam
Unauthorized connection attempt detected from IP address 145.239.198.218 to port 2220 [J]
2020-02-02 01:48:39
2.56.8.137 attack
Unauthorized connection attempt detected from IP address 2.56.8.137 to port 23 [J]
2020-02-02 01:36:19
145.239.254.161 attackspambots
...
2020-02-02 01:44:13
139.59.92.117 attackbotsspam
Unauthorized connection attempt detected from IP address 139.59.92.117 to port 2220 [J]
2020-02-02 01:15:16

最近上报的IP列表

102.102.126.241 36.110.2.67 228.216.180.167 142.135.196.221
135.174.244.213 12.5.28.161 241.75.242.156 157.230.248.74
186.55.67.41 19.138.39.43 200.228.187.205 149.100.90.221
119.51.70.44 92.246.76.218 81.17.21.2 68.120.178.232
82.81.31.9 31.230.179.5 39.233.102.71 23.200.94.140