必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Ho Chi Minh City

省份(region): Ho Chi Minh

国家(country): Vietnam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackspambots
Unauthorized connection attempt detected from IP address 42.117.20.180 to port 23
2019-12-31 03:54:14
相同子网IP讨论:
IP 类型 评论内容 时间
42.117.20.146 attackspam
firewall-block, port(s): 23/tcp
2020-08-15 03:29:19
42.117.20.106 attackspambots
1596370021 - 08/02/2020 19:07:01 Host: 42.117.20.106/42.117.20.106 Port: 23 TCP Blocked
...
2020-08-03 01:47:29
42.117.20.103 attackbotsspam
Port probing on unauthorized port 23
2020-08-02 03:40:47
42.117.20.119 attackbots
Telnet/23 MH Probe, Scan, BF, Hack -
2020-08-01 22:12:51
42.117.20.8 attackbotsspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-08-01 21:15:51
42.117.20.181 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-05-27 00:14:09
42.117.20.158 attackbotsspam
 TCP (SYN) 42.117.20.158:55984 -> port 23, len 44
2020-05-26 00:13:31
42.117.20.14 attack
unauthorized connection attempt
2020-02-29 13:44:46
42.117.20.147 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-29 00:15:44
42.117.20.188 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-29 00:10:43
42.117.20.196 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-29 00:07:26
42.117.20.216 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-29 00:00:50
42.117.20.222 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-28 23:57:22
42.117.20.46 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-28 23:52:26
42.117.20.60 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-28 23:49:07
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.117.20.180
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11739
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.117.20.180.			IN	A

;; AUTHORITY SECTION:
.			483	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019123001 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 31 03:54:11 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 180.20.117.42.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 180.20.117.42.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
68.232.62.69 attack
Unauthorised access (Sep  8) SRC=68.232.62.69 LEN=40 TOS=0x10 PREC=0x40 TTL=55 ID=52607 TCP DPT=8080 WINDOW=44313 SYN 
Unauthorised access (Sep  8) SRC=68.232.62.69 LEN=40 TOS=0x10 PREC=0x40 TTL=55 ID=39580 TCP DPT=8080 WINDOW=61760 SYN
2019-09-09 10:46:35
27.254.90.106 attack
Sep  9 04:22:12 vtv3 sshd\[8663\]: Invalid user postgres from 27.254.90.106 port 47577
Sep  9 04:22:12 vtv3 sshd\[8663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.90.106
Sep  9 04:22:14 vtv3 sshd\[8663\]: Failed password for invalid user postgres from 27.254.90.106 port 47577 ssh2
Sep  9 04:29:22 vtv3 sshd\[12024\]: Invalid user vagrant from 27.254.90.106 port 51835
Sep  9 04:29:22 vtv3 sshd\[12024\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.90.106
Sep  9 04:43:00 vtv3 sshd\[19084\]: Invalid user test from 27.254.90.106 port 57106
Sep  9 04:43:00 vtv3 sshd\[19084\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.90.106
Sep  9 04:43:02 vtv3 sshd\[19084\]: Failed password for invalid user test from 27.254.90.106 port 57106 ssh2
Sep  9 04:50:01 vtv3 sshd\[22365\]: Invalid user ftpadmin from 27.254.90.106 port 59744
Sep  9 04:50:01 vtv3 sshd\[22365\]:
2019-09-09 11:24:20
207.154.192.36 attack
$f2bV_matches
2019-09-09 11:31:47
141.98.9.67 attackbots
Sep  9 05:26:46 mail postfix/smtpd\[11675\]: warning: unknown\[141.98.9.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  9 05:27:29 mail postfix/smtpd\[1845\]: warning: unknown\[141.98.9.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  9 05:28:13 mail postfix/smtpd\[4942\]: warning: unknown\[141.98.9.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-09-09 11:34:07
159.203.199.142 attackspam
2525/tcp 43521/tcp 1400/tcp...
[2019-09-06/08]4pkt,4pt.(tcp)
2019-09-09 11:25:53
104.131.185.1 attack
miraniessen.de 104.131.185.1 \[09/Sep/2019:04:36:51 +0200\] "POST /wp-login.php HTTP/1.1" 200 5972 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
miraniessen.de 104.131.185.1 \[09/Sep/2019:04:36:52 +0200\] "POST /wp-login.php HTTP/1.1" 200 5976 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-09-09 11:22:35
68.183.50.0 attackbotsspam
Sep  8 17:09:58 hiderm sshd\[30347\]: Invalid user sftptest from 68.183.50.0
Sep  8 17:09:58 hiderm sshd\[30347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.50.0
Sep  8 17:09:59 hiderm sshd\[30347\]: Failed password for invalid user sftptest from 68.183.50.0 port 56620 ssh2
Sep  8 17:16:03 hiderm sshd\[30931\]: Invalid user demo from 68.183.50.0
Sep  8 17:16:03 hiderm sshd\[30931\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.50.0
2019-09-09 11:22:04
174.127.16.113 attackbotsspam
Sep  8 16:45:20 hiderm sshd\[27672\]: Invalid user server1 from 174.127.16.113
Sep  8 16:45:20 hiderm sshd\[27672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174-127-16-113.static-ip.telepacific.net
Sep  8 16:45:22 hiderm sshd\[27672\]: Failed password for invalid user server1 from 174.127.16.113 port 45050 ssh2
Sep  8 16:52:55 hiderm sshd\[28466\]: Invalid user upload from 174.127.16.113
Sep  8 16:52:55 hiderm sshd\[28466\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174-127-16-113.static-ip.telepacific.net
2019-09-09 11:05:18
182.74.131.90 attackspambots
Sep  9 09:49:37 itv-usvr-01 sshd[10447]: Invalid user squadserver from 182.74.131.90
Sep  9 09:49:37 itv-usvr-01 sshd[10447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.74.131.90
Sep  9 09:49:37 itv-usvr-01 sshd[10447]: Invalid user squadserver from 182.74.131.90
Sep  9 09:49:39 itv-usvr-01 sshd[10447]: Failed password for invalid user squadserver from 182.74.131.90 port 54520 ssh2
Sep  9 09:59:23 itv-usvr-01 sshd[10802]: Invalid user admin from 182.74.131.90
2019-09-09 11:09:23
188.93.234.85 attack
Sep  8 11:13:45 friendsofhawaii sshd\[16270\]: Invalid user admin from 188.93.234.85
Sep  8 11:13:45 friendsofhawaii sshd\[16270\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.93.234.85
Sep  8 11:13:47 friendsofhawaii sshd\[16270\]: Failed password for invalid user admin from 188.93.234.85 port 49798 ssh2
Sep  8 11:20:05 friendsofhawaii sshd\[16748\]: Invalid user sinusbot from 188.93.234.85
Sep  8 11:20:05 friendsofhawaii sshd\[16748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.93.234.85
2019-09-09 11:01:38
92.118.37.74 attackspam
Sep  9 04:52:11 h2177944 kernel: \[874080.887960\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=52638 PROTO=TCP SPT=46525 DPT=37607 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep  9 04:55:27 h2177944 kernel: \[874277.207128\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=17196 PROTO=TCP SPT=46525 DPT=49076 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep  9 04:58:49 h2177944 kernel: \[874479.123292\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=50548 PROTO=TCP SPT=46525 DPT=53897 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep  9 04:59:03 h2177944 kernel: \[874492.873512\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=35660 PROTO=TCP SPT=46525 DPT=52170 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep  9 04:59:50 h2177944 kernel: \[874539.727034\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=4
2019-09-09 10:59:56
198.108.66.164 attackbotsspam
591/tcp 1521/tcp 1911/tcp...
[2019-07-18/09-08]15pkt,8pt.(tcp),1pt.(udp)
2019-09-09 11:08:00
159.203.199.7 attackbots
8088/tcp 1527/tcp 587/tcp...
[2019-09-06/08]5pkt,5pt.(tcp)
2019-09-09 11:28:31
203.106.166.45 attackspam
Sep  9 01:35:58 SilenceServices sshd[28069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.106.166.45
Sep  9 01:36:00 SilenceServices sshd[28069]: Failed password for invalid user jenkins from 203.106.166.45 port 46168 ssh2
Sep  9 01:40:59 SilenceServices sshd[31872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.106.166.45
2019-09-09 11:07:41
89.248.160.193 attack
Port scan attempt detected by AWS-CCS, CTS, India
2019-09-09 11:21:29

最近上报的IP列表

85.49.70.254 183.101.112.49 177.194.139.69 188.155.77.161
217.84.52.242 18.221.189.132 106.61.233.57 81.6.37.59
23.123.166.209 77.65.100.197 65.7.2.63 60.190.10.42
101.241.192.190 42.117.20.16 69.41.94.242 196.38.80.147
166.247.102.30 60.183.107.24 84.210.68.15 95.134.243.40