42.117.20.209 - IPInfo

基本信息:

城市(city): Ho Chi Minh City

省份(region): Ho Chi Minh

国家(country): Vietnam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-12-31 03:45:43

相同子网IP讨论:

IP	类型	评论内容	时间
42.117.20.146	attackspam	firewall-block, port(s): 23/tcp	2020-08-15 03:29:19
42.117.20.106	attackspambots	1596370021 - 08/02/2020 19:07:01 Host: 42.117.20.106/42.117.20.106 Port: 23 TCP Blocked ...	2020-08-03 01:47:29
42.117.20.103	attackbotsspam	Port probing on unauthorized port 23	2020-08-02 03:40:47
42.117.20.119	attackbots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-01 22:12:51
42.117.20.8	attackbotsspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-01 21:15:51
42.117.20.181	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-05-27 00:14:09
42.117.20.158	attackbotsspam	TCP (SYN) 42.117.20.158:55984 -> port 23, len 44	2020-05-26 00:13:31
42.117.20.14	attack	unauthorized connection attempt	2020-02-29 13:44:46
42.117.20.147	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:15:44
42.117.20.188	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:10:43
42.117.20.196	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:07:26
42.117.20.216	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:00:50
42.117.20.222	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:57:22
42.117.20.46	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:52:26
42.117.20.60	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:49:07

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.117.20.209
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56576
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.117.20.209.			IN	A

;; AUTHORITY SECTION:
.			470	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019123001 1800 900 604800 86400

;; Query time: 369 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 31 03:45:40 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 209.20.117.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 209.20.117.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
170.81.148.7	attack	Jan 10 03:23:30 vpn sshd[1778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.81.148.7 Jan 10 03:23:32 vpn sshd[1778]: Failed password for invalid user aravind from 170.81.148.7 port 38526 ssh2 Jan 10 03:27:34 vpn sshd[1781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.81.148.7	2019-07-19 07:27:10
58.213.166.140	attackbotsspam	Jul 19 00:39:26 debian sshd\[26033\]: Invalid user davis from 58.213.166.140 port 43392 Jul 19 00:39:26 debian sshd\[26033\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.166.140 ...	2019-07-19 07:45:17
170.130.203.178	attackspambots	Jan 16 00:08:15 vpn sshd[14989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.130.203.178 Jan 16 00:08:17 vpn sshd[14989]: Failed password for invalid user kiwi from 170.130.203.178 port 54804 ssh2 Jan 16 00:11:10 vpn sshd[15002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.130.203.178	2019-07-19 07:51:02
169.51.67.85	attackbots	Dec 26 21:34:22 vpn sshd[9954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.51.67.85 Dec 26 21:34:24 vpn sshd[9954]: Failed password for invalid user jenkins from 169.51.67.85 port 52084 ssh2 Dec 26 21:37:44 vpn sshd[9970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.51.67.85	2019-07-19 08:10:56
31.135.64.3	attack	[portscan] Port scan	2019-07-19 07:44:20
222.186.15.217	attackbots	2019-07-18T23:18:53.407669abusebot-7.cloudsearch.cf sshd\[22862\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.217 user=root	2019-07-19 07:45:50
169.62.88.13	attack	Jan 14 14:12:41 vpn sshd[8442]: Failed password for bin from 169.62.88.13 port 40886 ssh2 Jan 14 14:12:59 vpn sshd[8444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.62.88.13 Jan 14 14:13:01 vpn sshd[8444]: Failed password for invalid user oracle from 169.62.88.13 port 47302 ssh2	2019-07-19 07:52:47
170.244.86.228	attackbots	Dec 26 11:16:01 vpn sshd[6908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.244.86.228 Dec 26 11:16:03 vpn sshd[6908]: Failed password for invalid user admin from 170.244.86.228 port 4038 ssh2 Dec 26 11:16:05 vpn sshd[6908]: Failed password for invalid user admin from 170.244.86.228 port 4038 ssh2 Dec 26 11:16:07 vpn sshd[6908]: Failed password for invalid user admin from 170.244.86.228 port 4038 ssh2	2019-07-19 07:29:20
89.248.167.131	attackspambots	18.07.2019 23:21:24 Connection to port 8000 blocked by firewall	2019-07-19 07:55:57
170.238.198.28	attackbots	Jan 23 08:56:26 vpn sshd[26511]: Failed password for root from 170.238.198.28 port 43314 ssh2 Jan 23 08:56:36 vpn sshd[26511]: error: maximum authentication attempts exceeded for root from 170.238.198.28 port 43314 ssh2 [preauth] Jan 23 08:56:45 vpn sshd[26513]: Failed password for root from 170.238.198.28 port 44781 ssh2	2019-07-19 07:31:24
169.50.156.134	attack	Mar 20 01:17:18 vpn sshd[27116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.50.156.134 Mar 20 01:17:20 vpn sshd[27116]: Failed password for invalid user anotherstar from 169.50.156.134 port 52332 ssh2 Mar 20 01:25:23 vpn sshd[27147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.50.156.134	2019-07-19 08:11:56
94.191.68.83	attack	Jan 22 14:49:39 vpn sshd[20115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.68.83 Jan 22 14:49:41 vpn sshd[20115]: Failed password for invalid user odilon from 94.191.68.83 port 45156 ssh2 Jan 22 14:58:00 vpn sshd[20125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.68.83	2019-07-19 07:47:06
170.244.6.231	attackspambots	Mar 8 07:39:34 vpn sshd[16031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.244.6.231 Mar 8 07:39:36 vpn sshd[16031]: Failed password for invalid user webadmin from 170.244.6.231 port 53583 ssh2 Mar 8 07:46:13 vpn sshd[16065]: Failed password for root from 170.244.6.231 port 38743 ssh2	2019-07-19 07:30:00
45.40.166.136	attackbots	45.40.166.136 - - [19/Jul/2019:00:00:43 +0200] "GET /wp-login.php HTTP/1.1" 200 1256 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.40.166.136 - - [19/Jul/2019:00:00:43 +0200] "POST /wp-login.php HTTP/1.1" 200 1651 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.40.166.136 - - [19/Jul/2019:00:00:44 +0200] "GET /wp-login.php HTTP/1.1" 200 1256 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.40.166.136 - - [19/Jul/2019:00:00:45 +0200] "POST /wp-login.php HTTP/1.1" 200 1629 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.40.166.136 - - [19/Jul/2019:00:00:45 +0200] "GET /wp-login.php HTTP/1.1" 200 1256 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.40.166.136 - - [19/Jul/2019:00:00:46 +0200] "POST /wp-login.php HTTP/1.1" 200 1626 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-07-19 07:36:19
36.89.247.26	attack	Jul 19 01:22:55 mail sshd\[20471\]: Invalid user python from 36.89.247.26 port 42223 Jul 19 01:22:55 mail sshd\[20471\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.89.247.26 Jul 19 01:22:57 mail sshd\[20471\]: Failed password for invalid user python from 36.89.247.26 port 42223 ssh2 Jul 19 01:29:19 mail sshd\[21427\]: Invalid user gpadmin from 36.89.247.26 port 41155 Jul 19 01:29:19 mail sshd\[21427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.89.247.26	2019-07-19 07:32:29

最近上报的IP列表

31.207.215.213	129.125.240.180	107.178.54.53	93.75.56.243
126.195.37.45	27.3.121.3	32.95.75.20	35.155.144.173
122.201.31.213	75.148.21.12	14.48.41.168	12.91.203.194
1.215.71.86	209.158.227.161	54.69.132.58	1.214.214.170
130.125.120.92	68.5.147.26	12.108.17.220	209.59.241.105