42.116.62.143 - IPInfo

基本信息:

城市(city): Ho Chi Minh City

省份(region): Ho Chi Minh

国家(country): Vietnam

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
42.116.62.207	attackbots	(Oct 4) LEN=40 TTL=47 ID=57782 TCP DPT=8080 WINDOW=17011 SYN (Oct 4) LEN=40 TTL=47 ID=7783 TCP DPT=8080 WINDOW=14616 SYN (Oct 3) LEN=40 TTL=47 ID=23215 TCP DPT=8080 WINDOW=17011 SYN (Oct 3) LEN=40 TTL=47 ID=60084 TCP DPT=8080 WINDOW=17011 SYN (Oct 3) LEN=40 TTL=47 ID=40399 TCP DPT=8080 WINDOW=14616 SYN (Oct 2) LEN=40 TTL=47 ID=62513 TCP DPT=8080 WINDOW=36779 SYN (Oct 2) LEN=40 TTL=47 ID=32290 TCP DPT=8080 WINDOW=17011 SYN (Oct 2) LEN=40 TTL=47 ID=19087 TCP DPT=8080 WINDOW=17011 SYN (Oct 1) LEN=40 TTL=47 ID=4240 TCP DPT=8080 WINDOW=14616 SYN (Oct 1) LEN=40 TTL=47 ID=55868 TCP DPT=8080 WINDOW=17011 SYN (Oct 1) LEN=40 TTL=47 ID=3737 TCP DPT=8080 WINDOW=36779 SYN (Oct 1) LEN=40 TTL=47 ID=33409 TCP DPT=8080 WINDOW=3123 SYN (Oct 1) LEN=40 TTL=47 ID=2502 TCP DPT=8080 WINDOW=14616 SYN (Oct 1) LEN=40 TTL=43 ID=64406 TCP DPT=8080 WINDOW=17011 SYN	2019-10-04 22:29:19
42.116.62.141	attackspam	scan z	2019-08-16 11:40:31

类型

评论内容

时间

42.116.62.207

attackbots

(Oct  4)  LEN=40 TTL=47 ID=57782 TCP DPT=8080 WINDOW=17011 SYN 
 (Oct  4)  LEN=40 TTL=47 ID=7783 TCP DPT=8080 WINDOW=14616 SYN 
 (Oct  3)  LEN=40 TTL=47 ID=23215 TCP DPT=8080 WINDOW=17011 SYN 
 (Oct  3)  LEN=40 TTL=47 ID=60084 TCP DPT=8080 WINDOW=17011 SYN 
 (Oct  3)  LEN=40 TTL=47 ID=40399 TCP DPT=8080 WINDOW=14616 SYN 
 (Oct  2)  LEN=40 TTL=47 ID=62513 TCP DPT=8080 WINDOW=36779 SYN 
 (Oct  2)  LEN=40 TTL=47 ID=32290 TCP DPT=8080 WINDOW=17011 SYN 
 (Oct  2)  LEN=40 TTL=47 ID=19087 TCP DPT=8080 WINDOW=17011 SYN 
 (Oct  1)  LEN=40 TTL=47 ID=4240 TCP DPT=8080 WINDOW=14616 SYN 
 (Oct  1)  LEN=40 TTL=47 ID=55868 TCP DPT=8080 WINDOW=17011 SYN 
 (Oct  1)  LEN=40 TTL=47 ID=3737 TCP DPT=8080 WINDOW=36779 SYN 
 (Oct  1)  LEN=40 TTL=47 ID=33409 TCP DPT=8080 WINDOW=3123 SYN 
 (Oct  1)  LEN=40 TTL=47 ID=2502 TCP DPT=8080 WINDOW=14616 SYN 
 (Oct  1)  LEN=40 TTL=43 ID=64406 TCP DPT=8080 WINDOW=17011 SYN

2019-10-04 22:29:19

42.116.62.141

attackspam

scan z

2019-08-16 11:40:31

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.116.62.143
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48566
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.116.62.143.			IN	A

;; AUTHORITY SECTION:
.			444	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022100300 1800 900 604800 86400

;; Query time: 83 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 03 20:23:24 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 143.62.116.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

server can't find 42.116.62.143.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
54.39.138.246	attack	$f2bV_matches	2020-07-10 13:02:51
202.166.175.142	attack	SMB Server BruteForce Attack	2020-07-10 13:07:22
222.186.173.226	attackbots	Jul 10 06:59:25 jane sshd[29544]: Failed password for root from 222.186.173.226 port 3918 ssh2 Jul 10 06:59:30 jane sshd[29544]: Failed password for root from 222.186.173.226 port 3918 ssh2 ...	2020-07-10 13:01:29
2.224.168.43	attackspambots	$f2bV_matches	2020-07-10 12:38:04
81.192.169.192	attackspam	Jul 10 06:31:25 mout sshd[24853]: Invalid user robin from 81.192.169.192 port 52195	2020-07-10 12:34:57
139.59.43.196	attackspam	139.59.43.196 - - [10/Jul/2020:05:31:25 +0100] "POST /wp-login.php HTTP/1.1" 200 1968 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.43.196 - - [10/Jul/2020:05:31:27 +0100] "POST /wp-login.php HTTP/1.1" 200 1952 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.43.196 - - [10/Jul/2020:05:31:27 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-10 12:53:16
49.235.73.150	attackbots	Jul 10 06:57:09 hosting sshd[31366]: Invalid user sito from 49.235.73.150 port 45146 ...	2020-07-10 12:46:50
212.70.149.82	attackbots	Jul 10 06:52:19 relay postfix/smtpd\[4166\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 10 06:52:32 relay postfix/smtpd\[1978\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 10 06:52:46 relay postfix/smtpd\[28646\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 10 06:52:59 relay postfix/smtpd\[2428\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 10 06:53:14 relay postfix/smtpd\[28646\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-07-10 12:55:32
59.127.218.235	attack	port scan and connect, tcp 80 (http)	2020-07-10 12:45:55
129.213.38.54	attack	2020-07-10T05:55:56.096222galaxy.wi.uni-potsdam.de sshd[23151]: Invalid user yyk from 129.213.38.54 port 58388 2020-07-10T05:55:56.101499galaxy.wi.uni-potsdam.de sshd[23151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.38.54 2020-07-10T05:55:56.096222galaxy.wi.uni-potsdam.de sshd[23151]: Invalid user yyk from 129.213.38.54 port 58388 2020-07-10T05:55:58.218394galaxy.wi.uni-potsdam.de sshd[23151]: Failed password for invalid user yyk from 129.213.38.54 port 58388 ssh2 2020-07-10T05:57:23.400178galaxy.wi.uni-potsdam.de sshd[23327]: Invalid user kstrive from 129.213.38.54 port 52910 2020-07-10T05:57:23.405205galaxy.wi.uni-potsdam.de sshd[23327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.38.54 2020-07-10T05:57:23.400178galaxy.wi.uni-potsdam.de sshd[23327]: Invalid user kstrive from 129.213.38.54 port 52910 2020-07-10T05:57:24.799374galaxy.wi.uni-potsdam.de sshd[23327]: Failed password ...	2020-07-10 12:34:44
157.230.109.166	attackspambots	Jul 10 06:29:08 [host] sshd[15825]: Invalid user z Jul 10 06:29:08 [host] sshd[15825]: pam_unix(sshd: Jul 10 06:29:10 [host] sshd[15825]: Failed passwor	2020-07-10 12:33:08
222.186.30.35	attackbotsspam	Fail2Ban Ban Triggered (2)	2020-07-10 12:55:59
103.78.242.202	attackbotsspam	[H1] Blocked by UFW	2020-07-10 12:29:29
106.52.209.36	attackbots	Jul 10 05:36:06 ns382633 sshd\[23536\]: Invalid user e-shop from 106.52.209.36 port 39512 Jul 10 05:36:06 ns382633 sshd\[23536\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.209.36 Jul 10 05:36:09 ns382633 sshd\[23536\]: Failed password for invalid user e-shop from 106.52.209.36 port 39512 ssh2 Jul 10 05:57:09 ns382633 sshd\[27337\]: Invalid user www from 106.52.209.36 port 51764 Jul 10 05:57:09 ns382633 sshd\[27337\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.209.36	2020-07-10 12:46:26
185.36.81.232	attackbots	[2020-07-10 00:43:51] NOTICE[1150] chan_sip.c: Registration from '"4004" ' failed for '185.36.81.232:53347' - Wrong password [2020-07-10 00:43:51] SECURITY[1167] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-10T00:43:51.593-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4004",SessionID="0x7fcb4c0dfe08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.36.81.232/53347",Challenge="2eb89d12",ReceivedChallenge="2eb89d12",ReceivedHash="56416cf638141c7c6f5697679a00e246" [2020-07-10 00:44:51] NOTICE[1150] chan_sip.c: Registration from '"4005" ' failed for '185.36.81.232:64594' - Wrong password [2020-07-10 00:44:51] SECURITY[1167] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-10T00:44:51.570-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4005",SessionID="0x7fcb4c0dfe08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-07-10 12:52:47

最近上报的IP列表

95.9.245.154	22.225.40.196	29.146.192.191	64.82.185.202
190.242.10.144	6.21.207.14	42.127.29.27	183.135.31.165
197.54.239.37	220.34.18.84	82.234.3.155	38.10.245.189
111.210.21.192	192.164.114.225	200.30.41.124	201.117.54.75
58.19.125.128	138.68.0.218	193.21.252.137	245.84.125.9