42.117.20.18 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Unauthorised access (Oct 3) SRC=42.117.20.18 LEN=40 TTL=47 ID=42474 TCP DPT=8080 WINDOW=15909 SYN Unauthorised access (Oct 2) SRC=42.117.20.18 LEN=40 TTL=47 ID=15918 TCP DPT=8080 WINDOW=23228 SYN Unauthorised access (Oct 1) SRC=42.117.20.18 LEN=40 TTL=47 ID=4836 TCP DPT=8080 WINDOW=24181 SYN Unauthorised access (Oct 1) SRC=42.117.20.18 LEN=40 TTL=47 ID=44435 TCP DPT=8080 WINDOW=15909 SYN Unauthorised access (Oct 1) SRC=42.117.20.18 LEN=40 TTL=43 ID=31980 TCP DPT=8080 WINDOW=15909 SYN Unauthorised access (Sep 30) SRC=42.117.20.18 LEN=40 TTL=43 ID=34270 TCP DPT=8080 WINDOW=15909 SYN	2019-10-03 05:34:58

类型

评论内容

时间

attackspambots

Unauthorised access (Oct  3) SRC=42.117.20.18 LEN=40 TTL=47 ID=42474 TCP DPT=8080 WINDOW=15909 SYN 
Unauthorised access (Oct  2) SRC=42.117.20.18 LEN=40 TTL=47 ID=15918 TCP DPT=8080 WINDOW=23228 SYN 
Unauthorised access (Oct  1) SRC=42.117.20.18 LEN=40 TTL=47 ID=4836 TCP DPT=8080 WINDOW=24181 SYN 
Unauthorised access (Oct  1) SRC=42.117.20.18 LEN=40 TTL=47 ID=44435 TCP DPT=8080 WINDOW=15909 SYN 
Unauthorised access (Oct  1) SRC=42.117.20.18 LEN=40 TTL=43 ID=31980 TCP DPT=8080 WINDOW=15909 SYN 
Unauthorised access (Sep 30) SRC=42.117.20.18 LEN=40 TTL=43 ID=34270 TCP DPT=8080 WINDOW=15909 SYN

2019-10-03 05:34:58

相同子网IP讨论:

IP	类型	评论内容	时间
42.117.20.146	attackspam	firewall-block, port(s): 23/tcp	2020-08-15 03:29:19
42.117.20.106	attackspambots	1596370021 - 08/02/2020 19:07:01 Host: 42.117.20.106/42.117.20.106 Port: 23 TCP Blocked ...	2020-08-03 01:47:29
42.117.20.103	attackbotsspam	Port probing on unauthorized port 23	2020-08-02 03:40:47
42.117.20.119	attackbots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-01 22:12:51
42.117.20.8	attackbotsspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-01 21:15:51
42.117.20.181	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-05-27 00:14:09
42.117.20.158	attackbotsspam	TCP (SYN) 42.117.20.158:55984 -> port 23, len 44	2020-05-26 00:13:31
42.117.20.14	attack	unauthorized connection attempt	2020-02-29 13:44:46
42.117.20.147	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:15:44
42.117.20.188	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:10:43
42.117.20.196	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:07:26
42.117.20.216	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:00:50
42.117.20.222	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:57:22
42.117.20.46	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:52:26
42.117.20.60	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:49:07

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.117.20.18
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7694
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.117.20.18.			IN	A

;; AUTHORITY SECTION:
.			418	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100203 1800 900 604800 86400

;; Query time: 210 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 03 05:34:55 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 18.20.117.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 18.20.117.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
49.204.231.251	attack	Unauthorized connection attempt from IP address 49.204.231.251 on Port 445(SMB)	2020-06-19 23:28:36
78.128.113.42	attack	Jun 19 17:01:29 debian-2gb-nbg1-2 kernel: \[14837577.966937\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=78.128.113.42 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=2485 PROTO=TCP SPT=40385 DPT=2955 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-19 23:42:46
142.93.104.32	attackbotsspam	$f2bV_matches	2020-06-19 23:39:20
37.140.192.23	attackbotsspam	sie-Direct access to plugin not allowed	2020-06-19 23:49:19
79.120.54.174	attackbots	Jun 19 15:19:18 cdc sshd[17661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.120.54.174 Jun 19 15:19:21 cdc sshd[17661]: Failed password for invalid user ts from 79.120.54.174 port 53396 ssh2	2020-06-19 23:45:38
181.73.197.37	attackbots	Telnet Honeypot -> Telnet Bruteforce / Login	2020-06-19 23:23:53
66.70.160.187	attack	66.70.160.187 - - \[19/Jun/2020:14:15:33 +0200\] "POST /wp-login.php HTTP/1.0" 200 5924 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 66.70.160.187 - - \[19/Jun/2020:14:15:35 +0200\] "POST /wp-login.php HTTP/1.0" 200 5902 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 66.70.160.187 - - \[19/Jun/2020:14:15:36 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2020-06-19 23:30:06
103.142.68.94	attack	SMB Server BruteForce Attack	2020-06-19 23:39:54
46.101.81.132	attackspambots	Automatic report - Banned IP Access	2020-06-19 23:57:08
186.67.27.174	attack	2020-06-19T09:37:34.391609linuxbox-skyline sshd[1509]: Invalid user palm from 186.67.27.174 port 34244 ...	2020-06-19 23:51:07
103.66.79.48	attackbots	1592568933 - 06/19/2020 14:15:33 Host: 103.66.79.48/103.66.79.48 Port: 445 TCP Blocked	2020-06-19 23:37:04
106.55.26.56	attack	Jun 19 16:22:48 nextcloud sshd\[18327\]: Invalid user user from 106.55.26.56 Jun 19 16:22:48 nextcloud sshd\[18327\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.26.56 Jun 19 16:22:50 nextcloud sshd\[18327\]: Failed password for invalid user user from 106.55.26.56 port 40082 ssh2	2020-06-19 23:16:23
201.39.70.186	attackbots	Jun 19 14:54:02 vps639187 sshd\[30053\]: Invalid user apache from 201.39.70.186 port 54914 Jun 19 14:54:02 vps639187 sshd\[30053\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.39.70.186 Jun 19 14:54:04 vps639187 sshd\[30053\]: Failed password for invalid user apache from 201.39.70.186 port 54914 ssh2 ...	2020-06-19 23:34:57
45.235.107.10	attackbots	SSH Brute-Forcing (server1)	2020-06-19 23:40:21
109.236.60.34	attackbots	SIPVicious Scanner Detection	2020-06-19 23:48:27

最近上报的IP列表

86.175.78.190	47.91.245.169	101.51.26.81	183.82.145.214
139.11.80.201	72.169.179.205	210.241.198.26	84.217.181.22
111.205.196.145	71.223.34.87	36.86.178.236	41.234.43.74
104.3.242.25	94.114.8.176	100.48.45.116	128.134.15.45
180.16.112.177	45.131.25.82	183.80.112.55	42.119.75.33