必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Ho Chi Minh City

省份(region): Ho Chi Minh

国家(country): Vietnam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2019-12-31 04:03:18
相同子网IP讨论:
IP 类型 评论内容 时间
42.117.20.146 attackspam
firewall-block, port(s): 23/tcp
2020-08-15 03:29:19
42.117.20.106 attackspambots
1596370021 - 08/02/2020 19:07:01 Host: 42.117.20.106/42.117.20.106 Port: 23 TCP Blocked
...
2020-08-03 01:47:29
42.117.20.103 attackbotsspam
Port probing on unauthorized port 23
2020-08-02 03:40:47
42.117.20.119 attackbots
Telnet/23 MH Probe, Scan, BF, Hack -
2020-08-01 22:12:51
42.117.20.8 attackbotsspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-08-01 21:15:51
42.117.20.181 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-05-27 00:14:09
42.117.20.158 attackbotsspam
 TCP (SYN) 42.117.20.158:55984 -> port 23, len 44
2020-05-26 00:13:31
42.117.20.14 attack
unauthorized connection attempt
2020-02-29 13:44:46
42.117.20.147 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-29 00:15:44
42.117.20.188 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-29 00:10:43
42.117.20.196 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-29 00:07:26
42.117.20.216 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-29 00:00:50
42.117.20.222 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-28 23:57:22
42.117.20.46 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-28 23:52:26
42.117.20.60 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-28 23:49:07
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.117.20.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10213
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.117.20.149.			IN	A

;; AUTHORITY SECTION:
.			10800	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019123001 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 100.100.2.136#53(100.100.2.136)
;; WHEN: Tue Dec 31 04:08:28 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:
Host 149.20.117.42.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 149.20.117.42.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
142.44.242.38 attackspambots
Aug 12 10:08:06 vibhu-HP-Z238-Microtower-Workstation sshd\[31280\]: Invalid user alexandre from 142.44.242.38
Aug 12 10:08:06 vibhu-HP-Z238-Microtower-Workstation sshd\[31280\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.242.38
Aug 12 10:08:07 vibhu-HP-Z238-Microtower-Workstation sshd\[31280\]: Failed password for invalid user alexandre from 142.44.242.38 port 48109 ssh2
Aug 12 10:12:14 vibhu-HP-Z238-Microtower-Workstation sshd\[31463\]: Invalid user merje from 142.44.242.38
Aug 12 10:12:14 vibhu-HP-Z238-Microtower-Workstation sshd\[31463\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.242.38
...
2019-08-12 12:47:27
192.99.12.24 attackbotsspam
Aug 12 06:22:32 vps647732 sshd[14042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.12.24
Aug 12 06:22:33 vps647732 sshd[14042]: Failed password for invalid user os from 192.99.12.24 port 36156 ssh2
...
2019-08-12 12:39:29
213.32.16.127 attack
Aug 12 04:49:48 vps647732 sshd[12507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.16.127
Aug 12 04:49:50 vps647732 sshd[12507]: Failed password for invalid user citicog from 213.32.16.127 port 45534 ssh2
...
2019-08-12 12:21:35
5.70.21.107 attack
Automatic report - Port Scan Attack
2019-08-12 12:11:13
120.203.197.58 attack
SSH Brute Force, server-1 sshd[31995]: Failed password for invalid user ldo from 120.203.197.58 port 36504 ssh2
2019-08-12 12:05:45
118.122.191.187 attack
Aug 12 04:25:35 host sshd[10462]: Invalid user school from 118.122.191.187 port 28652
Aug 12 04:25:35 host sshd[10462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.122.191.187
Aug 12 04:25:36 host sshd[10462]: Failed password for invalid user school from 118.122.191.187 port 28652 ssh2
Aug 12 04:25:37 host sshd[10462]: Received disconnect from 118.122.191.187 port 28652:11: Bye Bye [preauth]
Aug 12 04:25:37 host sshd[10462]: Disconnected from invalid user school 118.122.191.187 port 28652 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=118.122.191.187
2019-08-12 12:06:07
73.109.11.25 attackbots
Aug 12 01:04:22 GIZ-Server-02 sshd[23874]: Invalid user ssl from 73.109.11.25
Aug 12 01:04:22 GIZ-Server-02 sshd[23874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-73-109-11-25.hsd1.wa.comcast.net 
Aug 12 01:04:24 GIZ-Server-02 sshd[23874]: Failed password for invalid user ssl from 73.109.11.25 port 38726 ssh2
Aug 12 01:04:24 GIZ-Server-02 sshd[23874]: Received disconnect from 73.109.11.25: 11: Bye Bye [preauth]
Aug 12 01:11:21 GIZ-Server-02 sshd[25391]: Invalid user p from 73.109.11.25
Aug 12 01:11:21 GIZ-Server-02 sshd[25391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-73-109-11-25.hsd1.wa.comcast.net 
Aug 12 01:11:23 GIZ-Server-02 sshd[25391]: Failed password for invalid user p from 73.109.11.25 port 60642 ssh2
Aug 12 01:11:23 GIZ-Server-02 sshd[25391]: Received disconnect from 73.109.11.25: 11: Bye Bye [preauth]
Aug 12 01:15:45 GIZ-Server-02 sshd[28511]: Invalid user newuse........
-------------------------------
2019-08-12 12:01:55
91.250.242.12 attack
v+ssh-bruteforce
2019-08-12 12:29:02
68.183.195.86 attack
SIP brute force
2019-08-12 12:13:53
213.182.94.121 attackbots
Aug 12 06:20:24 vps647732 sshd[14006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.182.94.121
Aug 12 06:20:25 vps647732 sshd[14006]: Failed password for invalid user odpcache from 213.182.94.121 port 43540 ssh2
...
2019-08-12 12:29:42
103.249.100.12 attackbots
Aug 11 22:45:43 TORMINT sshd\[3575\]: Invalid user contact from 103.249.100.12
Aug 11 22:45:43 TORMINT sshd\[3575\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.249.100.12
Aug 11 22:45:45 TORMINT sshd\[3575\]: Failed password for invalid user contact from 103.249.100.12 port 40610 ssh2
...
2019-08-12 12:03:21
121.157.229.23 attack
Aug 12 06:49:09 srv-4 sshd\[10057\]: Invalid user pad from 121.157.229.23
Aug 12 06:49:09 srv-4 sshd\[10057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.157.229.23
Aug 12 06:49:11 srv-4 sshd\[10057\]: Failed password for invalid user pad from 121.157.229.23 port 53998 ssh2
...
2019-08-12 12:35:46
23.129.64.181 attackspambots
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.129.64.181  user=root
Failed password for root from 23.129.64.181 port 12415 ssh2
Failed password for root from 23.129.64.181 port 12415 ssh2
Failed password for root from 23.129.64.181 port 12415 ssh2
Failed password for root from 23.129.64.181 port 12415 ssh2
2019-08-12 12:46:06
201.217.4.220 attack
Aug 12 00:10:43 xtremcommunity sshd\[25179\]: Invalid user ana from 201.217.4.220 port 45420
Aug 12 00:10:43 xtremcommunity sshd\[25179\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.217.4.220
Aug 12 00:10:45 xtremcommunity sshd\[25179\]: Failed password for invalid user ana from 201.217.4.220 port 45420 ssh2
Aug 12 00:17:02 xtremcommunity sshd\[25356\]: Invalid user anathan from 201.217.4.220 port 64086
Aug 12 00:17:02 xtremcommunity sshd\[25356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.217.4.220
...
2019-08-12 12:22:11
154.8.228.143 attack
Lines containing failures of 154.8.228.143
Aug 12 04:12:08 kopano sshd[8777]: Invalid user ymchoi from 154.8.228.143 port 54473
Aug 12 04:12:08 kopano sshd[8777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.228.143
Aug 12 04:12:10 kopano sshd[8777]: Failed password for invalid user ymchoi from 154.8.228.143 port 54473 ssh2
Aug 12 04:12:11 kopano sshd[8777]: Received disconnect from 154.8.228.143 port 54473:11: Bye Bye [preauth]
Aug 12 04:12:11 kopano sshd[8777]: Disconnected from invalid user ymchoi 154.8.228.143 port 54473 [preauth]
Aug 12 04:32:53 kopano sshd[9219]: Invalid user master from 154.8.228.143 port 40019
Aug 12 04:32:53 kopano sshd[9219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.228.143


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=154.8.228.143
2019-08-12 12:09:29

最近上报的IP列表

3.252.77.216 121.136.19.64 195.8.130.74 42.117.20.146
46.36.136.128 141.63.106.235 5.225.81.98 62.114.123.24
159.75.75.208 190.154.36.48 134.226.222.126 63.39.140.84
196.201.228.118 64.162.122.104 42.117.20.110 62.157.106.234
2.95.236.37 169.231.109.239 2.67.9.208 120.81.101.149