42.116.163.199

基本信息:

城市(city): Hanoi

省份(region): Hanoi

国家(country): Vietnam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Feb 4 14:47:57 grey postfix/smtpd\[17116\]: NOQUEUE: reject: RCPT from unknown\[42.116.163.199\]: 554 5.7.1 Service unavailable\; Client host \[42.116.163.199\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?42.116.163.199\; from=\ to=\ proto=ESMTP helo=\<\[42.116.163.199\]\> ...	2020-02-05 04:05:49

类型

评论内容

时间

attackspambots

Feb  4 14:47:57 grey postfix/smtpd\[17116\]: NOQUEUE: reject: RCPT from unknown\[42.116.163.199\]: 554 5.7.1 Service unavailable\; Client host \[42.116.163.199\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?42.116.163.199\; from=\ to=\ proto=ESMTP helo=\<\[42.116.163.199\]\>
...

2020-02-05 04:05:49

相同子网IP讨论:

IP	类型	评论内容	时间
42.116.163.209	attack	[SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(08041230)	2019-08-05 00:38:51
42.116.163.109	attackspam	445/tcp [2019-06-21]1pkt	2019-06-22 07:05:51

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.116.163.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25024
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.116.163.199.			IN	A

;; AUTHORITY SECTION:
.			427	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020401 1800 900 604800 86400

;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 04:05:46 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 199.163.116.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 199.163.116.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
218.92.0.180	attackbotsspam	Dec 6 18:57:40 hanapaa sshd\[21335\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.180 user=root Dec 6 18:57:42 hanapaa sshd\[21335\]: Failed password for root from 218.92.0.180 port 23049 ssh2 Dec 6 18:57:53 hanapaa sshd\[21335\]: Failed password for root from 218.92.0.180 port 23049 ssh2 Dec 6 18:57:56 hanapaa sshd\[21335\]: Failed password for root from 218.92.0.180 port 23049 ssh2 Dec 6 18:58:00 hanapaa sshd\[21387\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.180 user=root	2019-12-07 13:03:38
182.73.123.118	attackbots	$f2bV_matches	2019-12-07 13:08:57
123.20.89.1	attack	Dec 6 23:05:58 mail postfix/smtpd[895]: warning: unknown[123.20.89.1]: SASL PLAIN authentication failed: Dec 6 23:05:59 mail postfix/smtpd[1887]: warning: unknown[123.20.89.1]: SASL PLAIN authentication failed: Dec 6 23:14:08 mail postfix/smtpd[3727]: warning: unknown[123.20.89.1]: SASL PLAIN authentication failed:	2019-12-07 13:27:50
111.207.149.133	attackbots	Dec 7 05:55:05 andromeda sshd\[7135\]: Invalid user user from 111.207.149.133 port 16588 Dec 7 05:55:05 andromeda sshd\[7135\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.207.149.133 Dec 7 05:55:06 andromeda sshd\[7135\]: Failed password for invalid user user from 111.207.149.133 port 16588 ssh2	2019-12-07 13:08:39
51.15.84.255	attackbotsspam	Dec 6 18:29:41 dallas01 sshd[32275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.84.255 Dec 6 18:29:43 dallas01 sshd[32275]: Failed password for invalid user billie from 51.15.84.255 port 48732 ssh2 Dec 6 18:38:39 dallas01 sshd[2866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.84.255	2019-12-07 09:13:49
183.63.87.236	attack	2019-12-07T05:26:14.210795abusebot-5.cloudsearch.cf sshd\[2386\]: Invalid user tipping from 183.63.87.236 port 43764	2019-12-07 13:32:29
190.244.72.2	attackbots	Brute force SMTP login attempts.	2019-12-07 13:14:10
163.172.187.30	attackspam	Invalid user host from 163.172.187.30 port 45950 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.187.30 Failed password for invalid user host from 163.172.187.30 port 45950 ssh2 Invalid user www from 163.172.187.30 port 38514 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.187.30	2019-12-07 13:13:23
210.92.105.120	attackspambots	Dec 6 23:05:37 mail sshd[1851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.92.105.120 Dec 6 23:05:39 mail sshd[1851]: Failed password for invalid user edelstein from 210.92.105.120 port 35092 ssh2 Dec 6 23:12:49 mail sshd[3604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.92.105.120	2019-12-07 13:25:41
180.163.220.99	attackbots	Multiport scan : 12 ports scanned 9 544 648 700 720 1069 1183 2047 2394 4443 5120 7019	2019-12-07 09:13:24
190.133.14.62	attack	Automatic report - Port Scan Attack	2019-12-07 13:06:55
159.89.160.91	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-12-07 09:18:37
129.204.76.34	attackbotsspam	Dec 6 19:08:52 php1 sshd\[7037\]: Invalid user user from 129.204.76.34 Dec 6 19:08:52 php1 sshd\[7037\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.76.34 Dec 6 19:08:55 php1 sshd\[7037\]: Failed password for invalid user user from 129.204.76.34 port 44006 ssh2 Dec 6 19:16:12 php1 sshd\[7898\]: Invalid user liddiard from 129.204.76.34 Dec 6 19:16:12 php1 sshd\[7898\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.76.34	2019-12-07 13:27:22
111.230.185.56	attackbotsspam	Dec 7 10:18:13 vibhu-HP-Z238-Microtower-Workstation sshd\[4056\]: Invalid user admin from 111.230.185.56 Dec 7 10:18:13 vibhu-HP-Z238-Microtower-Workstation sshd\[4056\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.185.56 Dec 7 10:18:15 vibhu-HP-Z238-Microtower-Workstation sshd\[4056\]: Failed password for invalid user admin from 111.230.185.56 port 29914 ssh2 Dec 7 10:25:10 vibhu-HP-Z238-Microtower-Workstation sshd\[4586\]: Invalid user dyckman from 111.230.185.56 Dec 7 10:25:10 vibhu-HP-Z238-Microtower-Workstation sshd\[4586\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.185.56 ...	2019-12-07 13:02:54
138.68.92.121	attack	Dec 6 23:29:05 pi sshd\[22323\]: Failed password for invalid user sandige from 138.68.92.121 port 47878 ssh2 Dec 6 23:44:41 pi sshd\[22983\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 user=mysql Dec 6 23:44:43 pi sshd\[22983\]: Failed password for mysql from 138.68.92.121 port 57418 ssh2 Dec 6 23:59:58 pi sshd\[23658\]: Invalid user nentwich from 138.68.92.121 port 38736 Dec 6 23:59:58 pi sshd\[23658\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 ...	2019-12-07 09:12:17

最近上报的IP列表

39.247.249.116	149.157.12.174	82.207.207.105	129.63.195.233
172.69.70.131	182.84.167.2	70.59.244.110	95.6.87.197
96.70.139.30	149.236.104.83	42.87.3.144	200.96.87.56
132.157.66.66	125.72.234.189	117.96.251.130	99.13.10.252
172.7.154.154	82.185.217.140	198.1.37.219	89.211.16.219