城市(city): unknown
省份(region): unknown
国家(country): Viet Nam
运营商(isp): FPT Telecom Company
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): Fixed Line ISP
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attackspam | Unauthorized connection attempt detected from IP address 42.116.11.156 to port 5555 [T] |
2020-04-09 19:37:32 |
| attackbots | 5555/tcp 23/tcp 23/tcp [2020-02-10/04-06]3pkt |
2020-04-06 20:04:52 |
| attack | Unauthorized connection attempt detected from IP address 42.116.11.156 to port 5555 [T] |
2020-03-24 19:11:36 |
| attack | unauthorized connection attempt |
2020-02-16 19:13:54 |
| attackbots | Sep 30 12:15:33 TCP Attack: SRC=42.116.11.156 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=45 PROTO=TCP SPT=9013 DPT=23 WINDOW=57301 RES=0x00 SYN URGP=0 |
2019-09-30 22:31:56 |
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 42.116.110.155 | attackspam | Apr 17 23:08:53 v22018086721571380 sshd[19012]: Failed password for invalid user sa from 42.116.110.155 port 59596 ssh2 |
2020-04-18 06:56:20 |
| 42.116.110.155 | attack | Lines containing failures of 42.116.110.155 Apr 12 22:29:12 kmh-wmh-001-nbg01 sshd[13923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.110.155 user=mysql Apr 12 22:29:14 kmh-wmh-001-nbg01 sshd[13923]: Failed password for mysql from 42.116.110.155 port 56410 ssh2 Apr 12 22:29:16 kmh-wmh-001-nbg01 sshd[13923]: Received disconnect from 42.116.110.155 port 56410:11: Bye Bye [preauth] Apr 12 22:29:16 kmh-wmh-001-nbg01 sshd[13923]: Disconnected from authenticating user mysql 42.116.110.155 port 56410 [preauth] Apr 12 22:32:00 kmh-wmh-001-nbg01 sshd[14204]: Invalid user http from 42.116.110.155 port 39492 Apr 12 22:32:00 kmh-wmh-001-nbg01 sshd[14204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.110.155 Apr 12 22:32:02 kmh-wmh-001-nbg01 sshd[14204]: Failed password for invalid user http from 42.116.110.155 port 39492 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.ht |
2020-04-13 04:48:38 |
| 42.116.114.48 | attackbotsspam | port scan and connect, tcp 23 (telnet) |
2020-02-28 00:17:43 |
| 42.116.117.245 | attack | Cảnh báo đăng nhập tài khoản ip 42.116.117.245 |
2020-02-01 18:43:56 |
| 42.116.117.245 | attack | Cảnh báo đăng nhập tài khoản ip 42.116.117.245 |
2020-02-01 18:43:41 |
| 42.116.118.124 | attackspam | Unauthorized connection attempt detected from IP address 42.116.118.124 to port 445 [T] |
2020-01-16 02:45:44 |
| 42.116.114.246 | attackbotsspam | Unauthorized connection attempt from IP address 42.116.114.246 on Port 445(SMB) |
2019-12-19 03:52:20 |
| 42.116.117.35 | attackspambots | 42.116.117.35 - - \[06/Dec/2019:15:49:28 +0100\] "POST /wp-login.php HTTP/1.0" 200 7646 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 42.116.117.35 - - \[06/Dec/2019:15:49:47 +0100\] "POST /wp-login.php HTTP/1.0" 200 7463 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 42.116.117.35 - - \[06/Dec/2019:15:49:58 +0100\] "POST /wp-login.php HTTP/1.0" 200 7625 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-12-07 00:43:51 |
| 42.116.118.236 | attackbots | Unauthorized connection attempt from IP address 42.116.118.236 on Port 445(SMB) |
2019-11-29 08:24:22 |
| 42.116.114.140 | attackspambots | Unauthorised access (Nov 17) SRC=42.116.114.140 LEN=52 TTL=107 ID=22407 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-18 00:06:53 |
| 42.116.114.149 | attackspam | Unauthorised access (Oct 31) SRC=42.116.114.149 LEN=52 TTL=112 ID=24426 DF TCP DPT=445 WINDOW=8192 SYN |
2019-10-31 16:52:29 |
| 42.116.113.12 | attack | Sun, 21 Jul 2019 07:37:29 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-21 18:50:34 |
| 42.116.116.188 | attackbotsspam | Sat, 20 Jul 2019 21:53:44 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-21 15:21:51 |
| 42.116.118.167 | attackbots | 2019-07-03 15:11:03 unexpected disconnection while reading SMTP command from ([42.116.118.167]) [42.116.118.167]:21266 I=[10.100.18.23]:25 (error: Connection reset by peer) 2019-07-03 15:13:25 unexpected disconnection while reading SMTP command from ([42.116.118.167]) [42.116.118.167]:9354 I=[10.100.18.23]:25 (error: Connection reset by peer) 2019-07-03 15:14:14 unexpected disconnection while reading SMTP command from ([42.116.118.167]) [42.116.118.167]:35670 I=[10.100.18.23]:25 (error: Connection reset by peer) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=42.116.118.167 |
2019-07-04 01:25:27 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.116.11.156
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26442
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.116.11.156. IN A
;; AUTHORITY SECTION:
. 589 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019093000 1800 900 604800 86400
;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 30 22:31:52 CST 2019
;; MSG SIZE rcvd: 117Host 156.11.116.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 156.11.116.42.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 91.99.29.206 | attackbotsspam | 3389BruteforceFW23 |
2020-02-02 13:59:31 |
| 49.235.84.51 | attack | Feb 2 06:13:14 v22018076622670303 sshd\[13652\]: Invalid user ubuntu from 49.235.84.51 port 43894 Feb 2 06:13:14 v22018076622670303 sshd\[13652\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.84.51 Feb 2 06:13:16 v22018076622670303 sshd\[13652\]: Failed password for invalid user ubuntu from 49.235.84.51 port 43894 ssh2 ... |
2020-02-02 14:11:03 |
| 212.67.224.230 | attackspambots | Feb 2 11:27:26 gw1 sshd[1948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.67.224.230 Feb 2 11:27:28 gw1 sshd[1948]: Failed password for invalid user server from 212.67.224.230 port 57608 ssh2 ... |
2020-02-02 15:02:06 |
| 159.203.251.90 | attackbotsspam | Feb 2 05:53:35 XXX sshd[32729]: Invalid user billy from 159.203.251.90 port 59802 |
2020-02-02 14:03:19 |
| 137.117.182.16 | attackspam | Brute forcing email accounts |
2020-02-02 14:20:50 |
| 179.186.198.89 | attack | Unauthorized connection attempt detected from IP address 179.186.198.89 to port 23 [J] |
2020-02-02 14:27:56 |
| 2.38.109.52 | attackbotsspam | Honeypot attack, port: 81, PTR: net-2-38-109-52.cust.vodafonedsl.it. |
2020-02-02 14:28:26 |
| 138.197.162.32 | attack | Unauthorized connection attempt detected from IP address 138.197.162.32 to port 2220 [J] |
2020-02-02 13:57:04 |
| 113.31.102.157 | attackspam | SSH Brute Force, server-1 sshd[22846]: Failed password for invalid user user from 113.31.102.157 port 48954 ssh2 |
2020-02-02 15:02:32 |
| 36.37.115.106 | attackspam | Fail2Ban - SSH Bruteforce Attempt |
2020-02-02 14:19:03 |
| 125.212.152.41 | attackbots | Honeypot attack, port: 445, PTR: dynamic-ip-adsl.viettel.vn. |
2020-02-02 15:09:31 |
| 222.186.175.147 | attackspam | Feb 2 11:36:55 areeb-Workstation sshd[17610]: Failed password for root from 222.186.175.147 port 3006 ssh2 Feb 2 11:37:01 areeb-Workstation sshd[17610]: Failed password for root from 222.186.175.147 port 3006 ssh2 ... |
2020-02-02 14:18:11 |
| 82.117.190.170 | attackbots | Invalid user udadhisuta from 82.117.190.170 port 43402 |
2020-02-02 14:27:14 |
| 149.202.206.206 | attackbotsspam | Feb 2 06:58:22 [host] sshd[6318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.206.206 user=root Feb 2 06:58:23 [host] sshd[6318]: Failed password for root from 149.202.206.206 port 45015 ssh2 Feb 2 07:02:20 [host] sshd[6447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.206.206 user=root |
2020-02-02 14:02:27 |
| 107.180.123.21 | attackbots | US - - [19 Nov 2018:03:13:06 +0300] "\n" 400 10118 "-" "-" |
2020-02-02 14:26:12 |