42.117.20.32 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Unauthorized connection attempt detected from IP address 42.117.20.32 to port 8081 [J]	2020-01-31 00:50:28

相同子网IP讨论:

IP	类型	评论内容	时间
42.117.20.146	attackspam	firewall-block, port(s): 23/tcp	2020-08-15 03:29:19
42.117.20.106	attackspambots	1596370021 - 08/02/2020 19:07:01 Host: 42.117.20.106/42.117.20.106 Port: 23 TCP Blocked ...	2020-08-03 01:47:29
42.117.20.103	attackbotsspam	Port probing on unauthorized port 23	2020-08-02 03:40:47
42.117.20.119	attackbots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-01 22:12:51
42.117.20.8	attackbotsspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-01 21:15:51
42.117.20.181	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-05-27 00:14:09
42.117.20.158	attackbotsspam	TCP (SYN) 42.117.20.158:55984 -> port 23, len 44	2020-05-26 00:13:31
42.117.20.14	attack	unauthorized connection attempt	2020-02-29 13:44:46
42.117.20.147	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:15:44
42.117.20.188	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:10:43
42.117.20.196	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:07:26
42.117.20.216	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:00:50
42.117.20.222	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:57:22
42.117.20.46	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:52:26
42.117.20.60	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:49:07

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.117.20.32
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62954
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.117.20.32.			IN	A

;; AUTHORITY SECTION:
.			227	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020013002 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 00:50:22 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 32.20.117.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 32.20.117.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
186.0.102.97	attack	Lines containing failures of 186.0.102.97 Aug 15 01:14:52 server01 postfix/smtpd[30297]: warning: hostname pei-186-0-cii-xcvii.une.net.co does not resolve to address 186.0.102.97: Name or service not known Aug 15 01:14:52 server01 postfix/smtpd[30297]: connect from unknown[186.0.102.97] Aug x@x Aug x@x Aug 15 01:15:13 server01 postfix/policy-spf[30395]: : Policy action=550 Please see hxxp://www.openspf.org/Why?s=mfrom;id=ba3b5a246%40orisline.es;ip=186.0.102.97;r=server01.2800km.de Aug x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=186.0.102.97	2019-08-15 14:15:53
203.230.6.175	attack	Aug 15 07:28:35 debian sshd\[12216\]: Invalid user racquel from 203.230.6.175 port 50622 Aug 15 07:28:35 debian sshd\[12216\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.230.6.175 ...	2019-08-15 14:37:45
185.2.5.24	attack	185.2.5.24 - - [15/Aug/2019:06:15:56 +0200] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 185.2.5.24 - - [15/Aug/2019:06:15:57 +0200] "POST /wp-login.php HTTP/1.1" 200 1524 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 185.2.5.24 - - [15/Aug/2019:06:15:57 +0200] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 185.2.5.24 - - [15/Aug/2019:06:15:57 +0200] "POST /wp-login.php HTTP/1.1" 200 1507 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 185.2.5.24 - - [15/Aug/2019:06:15:58 +0200] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 185.2.5.24 - - [15/Aug/2019:06:15:58 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-08-15 14:30:21
58.243.182.85	attackspambots	Aug 15 00:17:46 TORMINT sshd\[9665\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.243.182.85 user=root Aug 15 00:17:48 TORMINT sshd\[9665\]: Failed password for root from 58.243.182.85 port 59456 ssh2 Aug 15 00:21:49 TORMINT sshd\[9827\]: Invalid user oracle from 58.243.182.85 Aug 15 00:21:49 TORMINT sshd\[9827\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.243.182.85 ...	2019-08-15 14:24:20
35.185.239.108	attackspambots	Aug 15 12:29:52 areeb-Workstation sshd\[8410\]: Invalid user steam from 35.185.239.108 Aug 15 12:29:52 areeb-Workstation sshd\[8410\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.185.239.108 Aug 15 12:29:53 areeb-Workstation sshd\[8410\]: Failed password for invalid user steam from 35.185.239.108 port 45578 ssh2 ...	2019-08-15 15:01:27
162.197.47.156	attack	2019-08-15T07:58:53.943560 sshd[19636]: Invalid user adonix from 162.197.47.156 port 47878 2019-08-15T07:58:53.956740 sshd[19636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.197.47.156 2019-08-15T07:58:53.943560 sshd[19636]: Invalid user adonix from 162.197.47.156 port 47878 2019-08-15T07:58:55.791862 sshd[19636]: Failed password for invalid user adonix from 162.197.47.156 port 47878 ssh2 2019-08-15T08:06:31.102477 sshd[19751]: Invalid user manas from 162.197.47.156 port 58582 ...	2019-08-15 14:08:54
138.68.226.175	attackbotsspam	Aug 15 07:36:12 h2177944 sshd\[2171\]: Failed password for invalid user seymour from 138.68.226.175 port 45508 ssh2 Aug 15 08:36:46 h2177944 sshd\[4589\]: Invalid user dp from 138.68.226.175 port 44768 Aug 15 08:36:46 h2177944 sshd\[4589\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.226.175 Aug 15 08:36:47 h2177944 sshd\[4589\]: Failed password for invalid user dp from 138.68.226.175 port 44768 ssh2 ...	2019-08-15 14:42:34
223.247.8.232	attackspam	Aug 15 01:18:05 h2421860 postfix/postscreen[2157]: CONNECT from [223.247.8.232]:63860 to [85.214.119.52]:25 Aug 15 01:18:05 h2421860 postfix/dnsblog[2165]: addr 223.247.8.232 listed by domain zen.spamhaus.org as 127.0.0.11 Aug 15 01:18:05 h2421860 postfix/dnsblog[2165]: addr 223.247.8.232 listed by domain zen.spamhaus.org as 127.0.0.4 Aug 15 01:18:05 h2421860 postfix/dnsblog[2166]: addr 223.247.8.232 listed by domain Unknown.trblspam.com as 185.53.179.7 Aug 15 01:18:05 h2421860 postfix/dnsblog[2165]: addr 223.247.8.232 listed by domain dnsbl.sorbs.net as 127.0.0.10 Aug 15 01:18:05 h2421860 postfix/dnsblog[2162]: addr 223.247.8.232 listed by domain b.barracudacentral.org as 127.0.0.2 Aug 15 01:18:11 h2421860 postfix/postscreen[2157]: DNSBL rank 7 for [223.247.8.232]:63860 Aug x@x Aug 15 01:18:12 h2421860 postfix/postscreen[2157]: HANGUP after 0.96 from [223.247.8.232]:63860 in tests after SMTP handshake Aug 15 01:18:12 h2421860 postfix/postscreen[2157]: DISCONNECT [223.2........ -------------------------------	2019-08-15 14:31:17
91.198.175.4	attackbots	[portscan] Port scan	2019-08-15 14:16:54
200.116.160.38	attackspambots	$f2bV_matches	2019-08-15 15:00:38
125.43.68.83	attack	Invalid user admin2 from 125.43.68.83 port 46208	2019-08-15 14:46:00
124.156.103.34	attackspam	2019-08-15T05:55:58.090922abusebot-8.cloudsearch.cf sshd\[13602\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.103.34 user=root	2019-08-15 14:19:02
113.178.65.65	attack	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2019-08-15 14:34:34
181.1.58.164	attackspambots	Unauthorised access (Aug 15) SRC=181.1.58.164 LEN=40 TTL=45 ID=40255 TCP DPT=23 WINDOW=18551 SYN	2019-08-15 14:55:26
159.65.188.101	attackbots	Port Scan: TCP/23	2019-08-15 14:44:51

最近上报的IP列表

112.133.203.139	103.23.237.239	96.22.18.120	86.165.65.77
78.170.217.164	58.209.153.32	58.178.92.208	5.54.163.179
5.15.133.86	1.53.116.92	223.15.222.241	221.163.62.118
211.235.220.42	201.238.154.174	200.236.121.40	128.187.247.225
200.194.31.140	191.7.4.37	190.13.138.164	187.163.121.62

基本信息:

用户上报:

相同子网IP讨论:

WHOIS信息:

DIG信息:

HOST信息:

NSLOOKUP信息:

相关IP信息:

最新评论:

最近上报的IP列表