42.117.20.173 - IPInfo

基本信息:

城市(city): Ho Chi Minh City

省份(region): Ho Chi Minh

国家(country): Vietnam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt detected from IP address 42.117.20.173 to port 23 [J]	2020-01-15 08:21:06

相同子网IP讨论:

IP	类型	评论内容	时间
42.117.20.146	attackspam	firewall-block, port(s): 23/tcp	2020-08-15 03:29:19
42.117.20.106	attackspambots	1596370021 - 08/02/2020 19:07:01 Host: 42.117.20.106/42.117.20.106 Port: 23 TCP Blocked ...	2020-08-03 01:47:29
42.117.20.103	attackbotsspam	Port probing on unauthorized port 23	2020-08-02 03:40:47
42.117.20.119	attackbots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-01 22:12:51
42.117.20.8	attackbotsspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-01 21:15:51
42.117.20.181	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-05-27 00:14:09
42.117.20.158	attackbotsspam	TCP (SYN) 42.117.20.158:55984 -> port 23, len 44	2020-05-26 00:13:31
42.117.20.14	attack	unauthorized connection attempt	2020-02-29 13:44:46
42.117.20.147	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:15:44
42.117.20.188	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:10:43
42.117.20.196	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:07:26
42.117.20.216	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:00:50
42.117.20.222	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:57:22
42.117.20.46	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:52:26
42.117.20.60	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:49:07

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.117.20.173
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20520
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.117.20.173.			IN	A

;; AUTHORITY SECTION:
.			505	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011402 1800 900 604800 86400

;; Query time: 46 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 15 08:21:03 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 173.20.117.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 173.20.117.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
14.142.94.222	attack	Oct 6 17:46:01 TORMINT sshd\[28951\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.142.94.222 user=root Oct 6 17:46:03 TORMINT sshd\[28951\]: Failed password for root from 14.142.94.222 port 36110 ssh2 Oct 6 17:50:18 TORMINT sshd\[29280\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.142.94.222 user=root ...	2019-10-07 06:04:35
116.255.149.226	attackspambots	Oct 6 12:21:39 auw2 sshd\[19069\]: Invalid user !@\#\$ASDF from 116.255.149.226 Oct 6 12:21:39 auw2 sshd\[19069\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.149.226 Oct 6 12:21:41 auw2 sshd\[19069\]: Failed password for invalid user !@\#\$ASDF from 116.255.149.226 port 52465 ssh2 Oct 6 12:26:00 auw2 sshd\[19488\]: Invalid user !@\#\$ASDF from 116.255.149.226 Oct 6 12:26:00 auw2 sshd\[19488\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.149.226	2019-10-07 06:37:11
222.186.30.165	attackspam	2019-10-06T22:35:50.830035abusebot-7.cloudsearch.cf sshd\[4752\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.165 user=root	2019-10-07 06:37:38
217.41.38.19	attackbots	Oct 6 22:12:03 vps647732 sshd[17894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.41.38.19 Oct 6 22:12:04 vps647732 sshd[17894]: Failed password for invalid user P@sswordXXX from 217.41.38.19 port 54436 ssh2 ...	2019-10-07 06:18:56
84.163.216.234	attackbotsspam	Automatic report - Port Scan Attack	2019-10-07 06:21:20
201.228.121.230	attack	Oct 6 11:45:39 sachi sshd\[28616\]: Invalid user Jeanine_123 from 201.228.121.230 Oct 6 11:45:39 sachi sshd\[28616\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.228.121.230 Oct 6 11:45:41 sachi sshd\[28616\]: Failed password for invalid user Jeanine_123 from 201.228.121.230 port 57214 ssh2 Oct 6 11:51:36 sachi sshd\[29101\]: Invalid user Eternite from 201.228.121.230 Oct 6 11:51:36 sachi sshd\[29101\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.228.121.230	2019-10-07 06:20:14
173.161.242.217	attackbotsspam	Oct 6 15:49:28 mail sshd\[46678\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.161.242.217 user=root ...	2019-10-07 06:39:53
103.228.19.86	attack	Oct 6 22:02:03 hcbbdb sshd\[6709\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.228.19.86 user=root Oct 6 22:02:05 hcbbdb sshd\[6709\]: Failed password for root from 103.228.19.86 port 25173 ssh2 Oct 6 22:06:37 hcbbdb sshd\[7160\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.228.19.86 user=root Oct 6 22:06:40 hcbbdb sshd\[7160\]: Failed password for root from 103.228.19.86 port 57009 ssh2 Oct 6 22:11:29 hcbbdb sshd\[7655\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.228.19.86 user=root	2019-10-07 06:22:25
81.171.85.147	attack	\[2019-10-06 18:24:54\] NOTICE\[1887\] chan_sip.c: Registration from '\' failed for '81.171.85.147:55554' - Wrong password \[2019-10-06 18:24:54\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-06T18:24:54.362-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="28943",SessionID="0x7fc3ac00c388",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.85.147/55554",Challenge="265196d3",ReceivedChallenge="265196d3",ReceivedHash="96b51419a58c18e1c2b7ef106f042e29" \[2019-10-06 18:25:46\] NOTICE\[1887\] chan_sip.c: Registration from '\' failed for '81.171.85.147:63332' - Wrong password \[2019-10-06 18:25:46\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-06T18:25:46.385-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="18586",SessionID="0x7fc3acac5048",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.17	2019-10-07 06:26:00
101.78.209.39	attackbots	Oct 7 00:23:59 markkoudstaal sshd[4589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.78.209.39 Oct 7 00:24:00 markkoudstaal sshd[4589]: Failed password for invalid user Heslo!2 from 101.78.209.39 port 50022 ssh2 Oct 7 00:28:19 markkoudstaal sshd[4932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.78.209.39	2019-10-07 06:39:31
91.121.211.59	attackbotsspam	Oct 6 21:42:59 SilenceServices sshd[26655]: Failed password for root from 91.121.211.59 port 56642 ssh2 Oct 6 21:46:39 SilenceServices sshd[27653]: Failed password for root from 91.121.211.59 port 39294 ssh2	2019-10-07 06:09:26
178.73.215.171	attack	Oct 6 22:16:14 *** sshd[31329]: Did not receive identification string from 178.73.215.171	2019-10-07 06:40:48
80.82.78.104	attackspam	firewall-block, port(s): 5800/tcp	2019-10-07 06:22:38
218.92.0.193	attack	Oct 6 21:19:28 venus sshd\[6235\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.193 user=root Oct 6 21:19:30 venus sshd\[6235\]: Failed password for root from 218.92.0.193 port 18499 ssh2 Oct 6 21:19:33 venus sshd\[6235\]: Failed password for root from 218.92.0.193 port 18499 ssh2 ...	2019-10-07 06:17:59
203.110.179.26	attack	Oct 6 23:55:27 MK-Soft-VM4 sshd[29403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.110.179.26 Oct 6 23:55:29 MK-Soft-VM4 sshd[29403]: Failed password for invalid user P4sswort! from 203.110.179.26 port 48457 ssh2 ...	2019-10-07 06:35:36

最近上报的IP列表

206.189.214.51	1.236.231.92	1.123.197.116	34.201.225.78
95.152.12.238	101.198.15.183	120.188.35.224	109.137.31.223
99.242.104.5	212.17.139.142	150.122.93.19	106.166.34.128
151.31.223.69	192.184.112.139	186.188.238.59	184.152.5.86
123.174.233.2	128.15.238.59	77.244.209.4	10.100.85.147