必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackspam
Unauthorized connection attempt detected from IP address 42.116.11.156 to port 5555 [T]
2020-04-09 19:37:32
attackbots
5555/tcp 23/tcp 23/tcp
[2020-02-10/04-06]3pkt
2020-04-06 20:04:52
attack
Unauthorized connection attempt detected from IP address 42.116.11.156 to port 5555 [T]
2020-03-24 19:11:36
attack
unauthorized connection attempt
2020-02-16 19:13:54
attackbots
Sep 30 12:15:33   TCP Attack: SRC=42.116.11.156 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=45  PROTO=TCP SPT=9013 DPT=23 WINDOW=57301 RES=0x00 SYN URGP=0
2019-09-30 22:31:56
相同子网IP讨论:
IP 类型 评论内容 时间
42.116.110.155 attackspam
Apr 17 23:08:53 v22018086721571380 sshd[19012]: Failed password for invalid user sa from 42.116.110.155 port 59596 ssh2
2020-04-18 06:56:20
42.116.110.155 attack
Lines containing failures of 42.116.110.155
Apr 12 22:29:12 kmh-wmh-001-nbg01 sshd[13923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.110.155  user=mysql
Apr 12 22:29:14 kmh-wmh-001-nbg01 sshd[13923]: Failed password for mysql from 42.116.110.155 port 56410 ssh2
Apr 12 22:29:16 kmh-wmh-001-nbg01 sshd[13923]: Received disconnect from 42.116.110.155 port 56410:11: Bye Bye [preauth]
Apr 12 22:29:16 kmh-wmh-001-nbg01 sshd[13923]: Disconnected from authenticating user mysql 42.116.110.155 port 56410 [preauth]
Apr 12 22:32:00 kmh-wmh-001-nbg01 sshd[14204]: Invalid user http from 42.116.110.155 port 39492
Apr 12 22:32:00 kmh-wmh-001-nbg01 sshd[14204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.110.155 
Apr 12 22:32:02 kmh-wmh-001-nbg01 sshd[14204]: Failed password for invalid user http from 42.116.110.155 port 39492 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.ht
2020-04-13 04:48:38
42.116.114.48 attackbotsspam
port scan and connect, tcp 23 (telnet)
2020-02-28 00:17:43
42.116.117.245 attack
Cảnh
 báo đăng nhập tài khoản ip 42.116.117.245
2020-02-01 18:43:56
42.116.117.245 attack
Cảnh
 báo đăng nhập tài khoản ip 42.116.117.245
2020-02-01 18:43:41
42.116.118.124 attackspam
Unauthorized connection attempt detected from IP address 42.116.118.124 to port 445 [T]
2020-01-16 02:45:44
42.116.114.246 attackbotsspam
Unauthorized connection attempt from IP address 42.116.114.246 on Port 445(SMB)
2019-12-19 03:52:20
42.116.117.35 attackspambots
42.116.117.35 - - \[06/Dec/2019:15:49:28 +0100\] "POST /wp-login.php HTTP/1.0" 200 7646 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
42.116.117.35 - - \[06/Dec/2019:15:49:47 +0100\] "POST /wp-login.php HTTP/1.0" 200 7463 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
42.116.117.35 - - \[06/Dec/2019:15:49:58 +0100\] "POST /wp-login.php HTTP/1.0" 200 7625 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-12-07 00:43:51
42.116.118.236 attackbots
Unauthorized connection attempt from IP address 42.116.118.236 on Port 445(SMB)
2019-11-29 08:24:22
42.116.114.140 attackspambots
Unauthorised access (Nov 17) SRC=42.116.114.140 LEN=52 TTL=107 ID=22407 DF TCP DPT=445 WINDOW=8192 SYN
2019-11-18 00:06:53
42.116.114.149 attackspam
Unauthorised access (Oct 31) SRC=42.116.114.149 LEN=52 TTL=112 ID=24426 DF TCP DPT=445 WINDOW=8192 SYN
2019-10-31 16:52:29
42.116.113.12 attack
Sun, 21 Jul 2019 07:37:29 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 18:50:34
42.116.116.188 attackbotsspam
Sat, 20 Jul 2019 21:53:44 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 15:21:51
42.116.118.167 attackbots
2019-07-03 15:11:03 unexpected disconnection while reading SMTP command from ([42.116.118.167]) [42.116.118.167]:21266 I=[10.100.18.23]:25 (error: Connection reset by peer)
2019-07-03 15:13:25 unexpected disconnection while reading SMTP command from ([42.116.118.167]) [42.116.118.167]:9354 I=[10.100.18.23]:25 (error: Connection reset by peer)
2019-07-03 15:14:14 unexpected disconnection while reading SMTP command from ([42.116.118.167]) [42.116.118.167]:35670 I=[10.100.18.23]:25 (error: Connection reset by peer)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=42.116.118.167
2019-07-04 01:25:27
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.116.11.156
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26442
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.116.11.156.			IN	A

;; AUTHORITY SECTION:
.			589	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019093000 1800 900 604800 86400

;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 30 22:31:52 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 156.11.116.42.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 156.11.116.42.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
35.202.157.96 attackspam
$f2bV_matches
2020-03-20 09:01:20
114.232.109.173 attackspambots
Mar 20 00:58:15 mail.srvfarm.net postfix/smtpd[2514180]: warning: unknown[114.232.109.173]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar 20 00:58:15 mail.srvfarm.net postfix/smtpd[2514180]: lost connection after AUTH from unknown[114.232.109.173]
Mar 20 00:58:22 mail.srvfarm.net postfix/smtpd[2514350]: warning: unknown[114.232.109.173]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar 20 00:58:22 mail.srvfarm.net postfix/smtpd[2514350]: lost connection after AUTH from unknown[114.232.109.173]
Mar 20 00:58:33 mail.srvfarm.net postfix/smtpd[2514448]: warning: unknown[114.232.109.173]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-03-20 09:00:27
123.58.4.17 attackspam
Mar 20 00:00:52 OPSO sshd\[25780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.58.4.17  user=root
Mar 20 00:00:54 OPSO sshd\[25780\]: Failed password for root from 123.58.4.17 port 21143 ssh2
Mar 20 00:05:37 OPSO sshd\[26253\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.58.4.17  user=root
Mar 20 00:05:39 OPSO sshd\[26253\]: Failed password for root from 123.58.4.17 port 47171 ssh2
Mar 20 00:10:25 OPSO sshd\[27342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.58.4.17  user=root
2020-03-20 09:05:28
144.91.64.3 attackspambots
$f2bV_matches
2020-03-20 08:51:23
117.50.62.33 attack
SSH brute force
2020-03-20 08:32:51
134.175.137.251 attack
Mar 20 00:52:27 v22018076622670303 sshd\[21076\]: Invalid user andoria from 134.175.137.251 port 33364
Mar 20 00:52:27 v22018076622670303 sshd\[21076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.137.251
Mar 20 00:52:29 v22018076622670303 sshd\[21076\]: Failed password for invalid user andoria from 134.175.137.251 port 33364 ssh2
...
2020-03-20 08:59:36
217.125.110.139 attackspambots
Mar 20 00:53:39 v22018076622670303 sshd\[21087\]: Invalid user www from 217.125.110.139 port 42278
Mar 20 00:53:39 v22018076622670303 sshd\[21087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.125.110.139
Mar 20 00:53:41 v22018076622670303 sshd\[21087\]: Failed password for invalid user www from 217.125.110.139 port 42278 ssh2
...
2020-03-20 09:09:54
106.13.47.19 attackspam
fail2ban -- 106.13.47.19
...
2020-03-20 09:08:08
162.243.133.95 attackbotsspam
firewall-block, port(s): 27017/tcp
2020-03-20 08:41:06
67.230.183.193 attackspambots
Mar 20 01:01:32 ewelt sshd[4748]: Invalid user yaoyiming from 67.230.183.193 port 51718
Mar 20 01:01:32 ewelt sshd[4748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.230.183.193
Mar 20 01:01:32 ewelt sshd[4748]: Invalid user yaoyiming from 67.230.183.193 port 51718
Mar 20 01:01:33 ewelt sshd[4748]: Failed password for invalid user yaoyiming from 67.230.183.193 port 51718 ssh2
...
2020-03-20 09:02:17
79.10.62.172 attackbotsspam
port scan and connect, tcp 23 (telnet)
2020-03-20 08:58:34
94.132.136.167 attackspam
web-1 [ssh] SSH Attack
2020-03-20 08:44:38
172.245.25.116 attack
Automatic report - Banned IP Access
2020-03-20 08:29:27
134.175.39.108 attackbotsspam
Mar 19 20:12:53 firewall sshd[28369]: Failed password for invalid user student4 from 134.175.39.108 port 33568 ssh2
Mar 19 20:20:21 firewall sshd[28785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.39.108  user=root
Mar 19 20:20:23 firewall sshd[28785]: Failed password for root from 134.175.39.108 port 55256 ssh2
...
2020-03-20 08:36:54
20.43.57.70 attackspambots
RDP Bruteforce
2020-03-20 09:04:48

最近上报的IP列表

102.102.126.241 36.110.2.67 228.216.180.167 142.135.196.221
135.174.244.213 12.5.28.161 241.75.242.156 157.230.248.74
186.55.67.41 19.138.39.43 200.228.187.205 149.100.90.221
119.51.70.44 92.246.76.218 81.17.21.2 68.120.178.232
82.81.31.9 31.230.179.5 39.233.102.71 23.200.94.140