42.117.19.130 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Unauthorised access (Oct 11) SRC=42.117.19.130 LEN=52 TTL=110 ID=31754 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Oct 11) SRC=42.117.19.130 LEN=52 TTL=110 ID=14245 DF TCP DPT=445 WINDOW=8192 SYN	2019-10-11 16:25:04

类型

评论内容

时间

attackspam

Unauthorised access (Oct 11) SRC=42.117.19.130 LEN=52 TTL=110 ID=31754 DF TCP DPT=445 WINDOW=8192 SYN 
Unauthorised access (Oct 11) SRC=42.117.19.130 LEN=52 TTL=110 ID=14245 DF TCP DPT=445 WINDOW=8192 SYN

2019-10-11 16:25:04

相同子网IP讨论:

IP	类型	评论内容	时间
42.117.197.240	attackspambots	port scan and connect, tcp 23 (telnet)	2020-04-17 07:49:26
42.117.195.247	attack	Unauthorized connection attempt from IP address 42.117.195.247 on Port 445(SMB)	2020-03-28 20:59:49
42.117.196.122	attack	Unauthorized connection attempt detected from IP address 42.117.196.122 to port 9530 [T]	2020-03-24 19:51:02
42.117.191.64	attackbotsspam	Port probing on unauthorized port 5555	2020-03-10 04:12:24
42.117.191.98	attackspam	Honeypot attack, port: 81, PTR: PTR record not found	2020-03-08 15:21:48
42.117.190.72	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:27:57
42.117.199.17	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:24:50
42.117.199.222	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:21:13
42.117.190.146	attack	unauthorized connection attempt	2020-02-19 19:41:54
42.117.190.179	attackspam	Honeypot attack, port: 81, PTR: PTR record not found	2020-02-11 09:32:20
42.117.199.76	attackspambots	Unauthorized connection attempt detected from IP address 42.117.199.76 to port 23 [J]	2020-01-17 14:06:19
42.117.191.128	attackbots	Unauthorized connection attempt detected from IP address 42.117.191.128 to port 23	2020-01-01 19:34:27
42.117.198.17	attack	Honeypot attack, port: 23, PTR: PTR record not found	2019-12-24 17:43:22
42.117.198.4	attack	Automatic report - Port Scan Attack	2019-12-24 17:41:19
42.117.199.49	attack	UTC: 2019-12-06 port: 23/tcp	2019-12-07 16:18:49

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.117.19.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10425
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.117.19.130.			IN	A

;; AUTHORITY SECTION:
.			558	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101001 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 11 16:25:01 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 130.19.117.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 130.19.117.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
49.234.194.208	attackbotsspam	Apr 5 14:41:24 ncomp sshd[31948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.194.208 user=root Apr 5 14:41:27 ncomp sshd[31948]: Failed password for root from 49.234.194.208 port 37110 ssh2 Apr 5 14:46:14 ncomp sshd[32045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.194.208 user=root Apr 5 14:46:16 ncomp sshd[32045]: Failed password for root from 49.234.194.208 port 55060 ssh2	2020-04-05 21:07:20
36.22.182.26	attackspam	Unauthorized connection attempt from IP address 36.22.182.26 on Port 445(SMB)	2020-04-05 21:20:59
116.237.63.69	attack	Unauthorized connection attempt from IP address 116.237.63.69 on Port 445(SMB)	2020-04-05 21:33:48
88.91.13.216	attackspam	2020-04-05T12:36:50.208629dmca.cloudsearch.cf sshd[16921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ti2999a430-0215.bb.online.no user=root 2020-04-05T12:36:52.969801dmca.cloudsearch.cf sshd[16921]: Failed password for root from 88.91.13.216 port 35558 ssh2 2020-04-05T12:41:22.600691dmca.cloudsearch.cf sshd[17359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ti2999a430-0215.bb.online.no user=root 2020-04-05T12:41:24.031899dmca.cloudsearch.cf sshd[17359]: Failed password for root from 88.91.13.216 port 42172 ssh2 2020-04-05T12:43:25.724157dmca.cloudsearch.cf sshd[17542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ti2999a430-0215.bb.online.no user=root 2020-04-05T12:43:27.376187dmca.cloudsearch.cf sshd[17542]: Failed password for root from 88.91.13.216 port 46150 ssh2 2020-04-05T12:45:18.536619dmca.cloudsearch.cf sshd[17678]: pam_unix(sshd:auth): authe ...	2020-04-05 21:21:38
27.79.125.239	attack	1586090720 - 04/05/2020 14:45:20 Host: 27.79.125.239/27.79.125.239 Port: 445 TCP Blocked	2020-04-05 21:10:38
62.171.142.153	attack	Apr 4 11:39:03 srv05 sshd[28631]: Failed password for invalid user uv from 62.171.142.153 port 37206 ssh2 Apr 4 11:39:03 srv05 sshd[28631]: Received disconnect from 62.171.142.153: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=62.171.142.153	2020-04-05 21:23:01
183.89.215.47	attack	(imapd) Failed IMAP login from 183.89.215.47 (TH/Thailand/mx-ll-183.89.215-47.dynamic.3bb.in.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 5 17:14:56 ir1 dovecot[566034]: imap-login: Disconnected (auth failed, 1 attempts in 14 secs): user=, method=PLAIN, rip=183.89.215.47, lip=5.63.12.44, TLS: Connection closed, session=	2020-04-05 21:37:49
34.92.182.252	attackbotsspam	Apr 4 10:38:19 xxx sshd[28565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=252.182.92.34.bc.googleusercontent.com user=r.r Apr 4 10:38:19 xxx sshd[28565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=252.182.92.34.bc.googleusercontent.com user=r.r Apr 4 10:48:14 xxx sshd[29422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=252.182.92.34.bc.googleusercontent.com user=r.r Apr 4 10:48:14 xxx sshd[29422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=252.182.92.34.bc.googleusercontent.com user=r.r Apr 4 10:52:09 xxx sshd[29664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=252.182.92.34.bc.googleusercontent.com user=r.r Apr 4 10:52:09 xxx sshd[29664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=252.182.92.34......... ------------------------------	2020-04-05 20:59:21
80.211.24.117	attackbotsspam	Apr 5 14:36:11 pve sshd[23314]: Failed password for root from 80.211.24.117 port 37352 ssh2 Apr 5 14:40:41 pve sshd[24024]: Failed password for root from 80.211.24.117 port 49330 ssh2	2020-04-05 20:58:25
14.169.220.149	attack	failed_logins	2020-04-05 21:04:57
223.16.58.91	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 05-04-2020 13:45:08.	2020-04-05 21:35:50
167.71.222.136	attackbotsspam	Apr 4 10:57:05 liveconfig01 sshd[11845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.222.136 user=r.r Apr 4 10:57:07 liveconfig01 sshd[11845]: Failed password for r.r from 167.71.222.136 port 50104 ssh2 Apr 4 10:57:07 liveconfig01 sshd[11845]: Received disconnect from 167.71.222.136 port 50104:11: Bye Bye [preauth] Apr 4 10:57:07 liveconfig01 sshd[11845]: Disconnected from 167.71.222.136 port 50104 [preauth] Apr 4 11:04:16 liveconfig01 sshd[12244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.222.136 user=r.r Apr 4 11:04:18 liveconfig01 sshd[12244]: Failed password for r.r from 167.71.222.136 port 17590 ssh2 Apr 4 11:04:18 liveconfig01 sshd[12244]: Received disconnect from 167.71.222.136 port 17590:11: Bye Bye [preauth] Apr 4 11:04:18 liveconfig01 sshd[12244]: Disconnected from 167.71.222.136 port 17590 [preauth] Apr 4 11:07:26 liveconfig01 sshd[12378]: pam_un........ -------------------------------	2020-04-05 21:20:19
112.85.42.176	attackbotsspam	Apr 5 15:04:07 MainVPS sshd[22213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.176 user=root Apr 5 15:04:10 MainVPS sshd[22213]: Failed password for root from 112.85.42.176 port 41735 ssh2 Apr 5 15:04:22 MainVPS sshd[22213]: error: maximum authentication attempts exceeded for root from 112.85.42.176 port 41735 ssh2 [preauth] Apr 5 15:04:07 MainVPS sshd[22213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.176 user=root Apr 5 15:04:10 MainVPS sshd[22213]: Failed password for root from 112.85.42.176 port 41735 ssh2 Apr 5 15:04:22 MainVPS sshd[22213]: error: maximum authentication attempts exceeded for root from 112.85.42.176 port 41735 ssh2 [preauth] Apr 5 15:04:26 MainVPS sshd[23111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.176 user=root Apr 5 15:04:28 MainVPS sshd[23111]: Failed password for root from 112.85.42.176 port 11423 ssh2 ...	2020-04-05 21:09:35
134.209.250.9	attackbots	Apr 5 12:44:46 localhost sshd[126901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.250.9 user=root Apr 5 12:44:48 localhost sshd[126901]: Failed password for root from 134.209.250.9 port 53738 ssh2 Apr 5 12:49:37 localhost sshd[127335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.250.9 user=root Apr 5 12:49:39 localhost sshd[127335]: Failed password for root from 134.209.250.9 port 37228 ssh2 Apr 5 12:54:22 localhost sshd[127686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.250.9 user=root Apr 5 12:54:24 localhost sshd[127686]: Failed password for root from 134.209.250.9 port 48954 ssh2 ...	2020-04-05 21:13:08
14.177.166.111	attackbotsspam	Brute force attack to crack SMTP password (port 25 / 587)	2020-04-05 21:28:19

最近上报的IP列表

111.246.186.63	221.239.220.95	220.200.90.160	179.43.110.24
157.55.39.61	112.73.74.50	113.199.182.168	183.89.125.104
52.8.219.30	186.90.218.228	191.88.45.33	188.4.205.88
186.176.56.170	85.185.124.123	5.54.198.52	178.128.246.123
82.177.126.153	113.77.38.9	27.34.75.244	178.176.175.175