42.117.20.47 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt detected from IP address 42.117.20.47 to port 23 [J]	2020-01-05 05:10:24
attack	(Oct 4) LEN=40 TTL=47 ID=53551 TCP DPT=8080 WINDOW=42748 SYN (Oct 4) LEN=40 TTL=47 ID=8600 TCP DPT=8080 WINDOW=13423 SYN (Oct 4) LEN=40 TTL=47 ID=41843 TCP DPT=8080 WINDOW=9100 SYN (Oct 4) LEN=40 TTL=47 ID=23740 TCP DPT=8080 WINDOW=9100 SYN (Oct 4) LEN=40 TTL=47 ID=20970 TCP DPT=8080 WINDOW=42748 SYN (Oct 3) LEN=40 TTL=47 ID=52662 TCP DPT=8080 WINDOW=9100 SYN (Oct 3) LEN=40 TTL=47 ID=7344 TCP DPT=8080 WINDOW=42748 SYN (Oct 3) LEN=40 TTL=47 ID=40247 TCP DPT=8080 WINDOW=13423 SYN (Oct 2) LEN=40 TTL=47 ID=63914 TCP DPT=8080 WINDOW=13423 SYN (Oct 2) LEN=40 TTL=47 ID=16234 TCP DPT=8080 WINDOW=61779 SYN (Oct 2) LEN=40 TTL=47 ID=33229 TCP DPT=8080 WINDOW=61779 SYN	2019-10-04 22:48:28

类型

评论内容

时间

attack

Unauthorized connection attempt detected from IP address 42.117.20.47 to port 23 [J]

2020-01-05 05:10:24

attack

(Oct  4)  LEN=40 TTL=47 ID=53551 TCP DPT=8080 WINDOW=42748 SYN 
 (Oct  4)  LEN=40 TTL=47 ID=8600 TCP DPT=8080 WINDOW=13423 SYN 
 (Oct  4)  LEN=40 TTL=47 ID=41843 TCP DPT=8080 WINDOW=9100 SYN 
 (Oct  4)  LEN=40 TTL=47 ID=23740 TCP DPT=8080 WINDOW=9100 SYN 
 (Oct  4)  LEN=40 TTL=47 ID=20970 TCP DPT=8080 WINDOW=42748 SYN 
 (Oct  3)  LEN=40 TTL=47 ID=52662 TCP DPT=8080 WINDOW=9100 SYN 
 (Oct  3)  LEN=40 TTL=47 ID=7344 TCP DPT=8080 WINDOW=42748 SYN 
 (Oct  3)  LEN=40 TTL=47 ID=40247 TCP DPT=8080 WINDOW=13423 SYN 
 (Oct  2)  LEN=40 TTL=47 ID=63914 TCP DPT=8080 WINDOW=13423 SYN 
 (Oct  2)  LEN=40 TTL=47 ID=16234 TCP DPT=8080 WINDOW=61779 SYN 
 (Oct  2)  LEN=40 TTL=47 ID=33229 TCP DPT=8080 WINDOW=61779 SYN

2019-10-04 22:48:28

相同子网IP讨论:

IP	类型	评论内容	时间
42.117.20.146	attackspam	firewall-block, port(s): 23/tcp	2020-08-15 03:29:19
42.117.20.106	attackspambots	1596370021 - 08/02/2020 19:07:01 Host: 42.117.20.106/42.117.20.106 Port: 23 TCP Blocked ...	2020-08-03 01:47:29
42.117.20.103	attackbotsspam	Port probing on unauthorized port 23	2020-08-02 03:40:47
42.117.20.119	attackbots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-01 22:12:51
42.117.20.8	attackbotsspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-01 21:15:51
42.117.20.181	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-05-27 00:14:09
42.117.20.158	attackbotsspam	TCP (SYN) 42.117.20.158:55984 -> port 23, len 44	2020-05-26 00:13:31
42.117.20.14	attack	unauthorized connection attempt	2020-02-29 13:44:46
42.117.20.147	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:15:44
42.117.20.188	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:10:43
42.117.20.196	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:07:26
42.117.20.216	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:00:50
42.117.20.222	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:57:22
42.117.20.46	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:52:26
42.117.20.60	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:49:07

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.117.20.47
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34946
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.117.20.47.			IN	A

;; AUTHORITY SECTION:
.			516	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100400 1800 900 604800 86400

;; Query time: 83 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 04 22:48:23 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 47.20.117.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 47.20.117.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
176.114.238.33	attackspambots	Honeypot attack, port: 4567, PTR: klient.box3.pl.	2020-02-14 20:44:16
200.149.231.50	attack	Automatic report - Banned IP Access	2020-02-14 21:03:24
36.66.193.213	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 14-02-2020 04:50:14.	2020-02-14 21:09:17
119.202.137.50	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-14 21:04:15
222.186.42.136	attackbotsspam	Feb 14 09:48:31 firewall sshd[25850]: Failed password for root from 222.186.42.136 port 39452 ssh2 Feb 14 09:48:33 firewall sshd[25850]: Failed password for root from 222.186.42.136 port 39452 ssh2 Feb 14 09:48:36 firewall sshd[25850]: Failed password for root from 222.186.42.136 port 39452 ssh2 ...	2020-02-14 20:59:41
218.95.137.193	attackspam	Feb 14 10:20:48 h1745522 sshd[23678]: Invalid user bananapi from 218.95.137.193 port 32956 Feb 14 10:20:48 h1745522 sshd[23678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.95.137.193 Feb 14 10:20:48 h1745522 sshd[23678]: Invalid user bananapi from 218.95.137.193 port 32956 Feb 14 10:20:50 h1745522 sshd[23678]: Failed password for invalid user bananapi from 218.95.137.193 port 32956 ssh2 Feb 14 10:23:58 h1745522 sshd[23757]: Invalid user openproject from 218.95.137.193 port 49030 Feb 14 10:23:58 h1745522 sshd[23757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.95.137.193 Feb 14 10:23:58 h1745522 sshd[23757]: Invalid user openproject from 218.95.137.193 port 49030 Feb 14 10:24:00 h1745522 sshd[23757]: Failed password for invalid user openproject from 218.95.137.193 port 49030 ssh2 Feb 14 10:27:07 h1745522 sshd[23869]: Invalid user cen from 218.95.137.193 port 36870 ...	2020-02-14 20:47:34
222.186.30.145	attackspambots	Feb 14 14:13:19 MK-Soft-VM5 sshd[17507]: Failed password for root from 222.186.30.145 port 21325 ssh2 Feb 14 14:13:22 MK-Soft-VM5 sshd[17507]: Failed password for root from 222.186.30.145 port 21325 ssh2 ...	2020-02-14 21:16:24
113.181.120.157	attackbots	Automatic report - Port Scan Attack	2020-02-14 20:46:09
144.217.214.13	attackbots	2020-02-14T12:29:42.949571abusebot-8.cloudsearch.cf sshd[14615]: Invalid user coeadrc from 144.217.214.13 port 40598 2020-02-14T12:29:42.961867abusebot-8.cloudsearch.cf sshd[14615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip13.ip-144-217-214.net 2020-02-14T12:29:42.949571abusebot-8.cloudsearch.cf sshd[14615]: Invalid user coeadrc from 144.217.214.13 port 40598 2020-02-14T12:29:44.988904abusebot-8.cloudsearch.cf sshd[14615]: Failed password for invalid user coeadrc from 144.217.214.13 port 40598 ssh2 2020-02-14T12:33:56.318262abusebot-8.cloudsearch.cf sshd[14870]: Invalid user aerobics from 144.217.214.13 port 42040 2020-02-14T12:33:56.331040abusebot-8.cloudsearch.cf sshd[14870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip13.ip-144-217-214.net 2020-02-14T12:33:56.318262abusebot-8.cloudsearch.cf sshd[14870]: Invalid user aerobics from 144.217.214.13 port 42040 2020-02-14T12:33:58.228258abusebot ...	2020-02-14 20:50:34
165.22.186.178	attack	Feb 14 06:32:54 silence02 sshd[7812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.186.178 Feb 14 06:32:56 silence02 sshd[7812]: Failed password for invalid user monday from 165.22.186.178 port 50780 ssh2 Feb 14 06:35:56 silence02 sshd[8098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.186.178	2020-02-14 20:38:29
119.202.139.186	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-14 20:56:02
176.194.200.72	attack	Honeypot attack, port: 445, PTR: ip-176-194-200-72.bb.netbynet.ru.	2020-02-14 20:40:59
159.203.189.152	attack	Feb 14 02:11:44 hpm sshd\[15441\]: Invalid user user0 from 159.203.189.152 Feb 14 02:11:44 hpm sshd\[15441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.189.152 Feb 14 02:11:46 hpm sshd\[15441\]: Failed password for invalid user user0 from 159.203.189.152 port 50534 ssh2 Feb 14 02:15:06 hpm sshd\[15755\]: Invalid user rodda from 159.203.189.152 Feb 14 02:15:06 hpm sshd\[15755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.189.152	2020-02-14 20:34:11
106.13.140.52	attackspambots	Invalid user bjfrihauf from 106.13.140.52 port 58400	2020-02-14 21:01:04
113.190.150.61	attackbots	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-02-14 20:58:13

最近上报的IP列表

69.108.43.108	141.71.74.64	69.168.113.185	191.136.144.214
183.82.100.141	41.242.137.28	219.250.29.108	122.112.249.76
5.39.6.29	66.165.239.58	183.110.242.68	46.176.132.63
89.245.247.183	89.46.104.188	190.67.247.73	216.192.174.68
121.249.207.64	138.13.133.88	55.53.175.83	176.90.0.248