42.117.20.47 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt detected from IP address 42.117.20.47 to port 23 [J]	2020-01-05 05:10:24
attack	(Oct 4) LEN=40 TTL=47 ID=53551 TCP DPT=8080 WINDOW=42748 SYN (Oct 4) LEN=40 TTL=47 ID=8600 TCP DPT=8080 WINDOW=13423 SYN (Oct 4) LEN=40 TTL=47 ID=41843 TCP DPT=8080 WINDOW=9100 SYN (Oct 4) LEN=40 TTL=47 ID=23740 TCP DPT=8080 WINDOW=9100 SYN (Oct 4) LEN=40 TTL=47 ID=20970 TCP DPT=8080 WINDOW=42748 SYN (Oct 3) LEN=40 TTL=47 ID=52662 TCP DPT=8080 WINDOW=9100 SYN (Oct 3) LEN=40 TTL=47 ID=7344 TCP DPT=8080 WINDOW=42748 SYN (Oct 3) LEN=40 TTL=47 ID=40247 TCP DPT=8080 WINDOW=13423 SYN (Oct 2) LEN=40 TTL=47 ID=63914 TCP DPT=8080 WINDOW=13423 SYN (Oct 2) LEN=40 TTL=47 ID=16234 TCP DPT=8080 WINDOW=61779 SYN (Oct 2) LEN=40 TTL=47 ID=33229 TCP DPT=8080 WINDOW=61779 SYN	2019-10-04 22:48:28

类型

评论内容

时间

attack

Unauthorized connection attempt detected from IP address 42.117.20.47 to port 23 [J]

2020-01-05 05:10:24

attack

(Oct  4)  LEN=40 TTL=47 ID=53551 TCP DPT=8080 WINDOW=42748 SYN 
 (Oct  4)  LEN=40 TTL=47 ID=8600 TCP DPT=8080 WINDOW=13423 SYN 
 (Oct  4)  LEN=40 TTL=47 ID=41843 TCP DPT=8080 WINDOW=9100 SYN 
 (Oct  4)  LEN=40 TTL=47 ID=23740 TCP DPT=8080 WINDOW=9100 SYN 
 (Oct  4)  LEN=40 TTL=47 ID=20970 TCP DPT=8080 WINDOW=42748 SYN 
 (Oct  3)  LEN=40 TTL=47 ID=52662 TCP DPT=8080 WINDOW=9100 SYN 
 (Oct  3)  LEN=40 TTL=47 ID=7344 TCP DPT=8080 WINDOW=42748 SYN 
 (Oct  3)  LEN=40 TTL=47 ID=40247 TCP DPT=8080 WINDOW=13423 SYN 
 (Oct  2)  LEN=40 TTL=47 ID=63914 TCP DPT=8080 WINDOW=13423 SYN 
 (Oct  2)  LEN=40 TTL=47 ID=16234 TCP DPT=8080 WINDOW=61779 SYN 
 (Oct  2)  LEN=40 TTL=47 ID=33229 TCP DPT=8080 WINDOW=61779 SYN

2019-10-04 22:48:28

相同子网IP讨论:

IP	类型	评论内容	时间
42.117.20.146	attackspam	firewall-block, port(s): 23/tcp	2020-08-15 03:29:19
42.117.20.106	attackspambots	1596370021 - 08/02/2020 19:07:01 Host: 42.117.20.106/42.117.20.106 Port: 23 TCP Blocked ...	2020-08-03 01:47:29
42.117.20.103	attackbotsspam	Port probing on unauthorized port 23	2020-08-02 03:40:47
42.117.20.119	attackbots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-01 22:12:51
42.117.20.8	attackbotsspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-01 21:15:51
42.117.20.181	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-05-27 00:14:09
42.117.20.158	attackbotsspam	TCP (SYN) 42.117.20.158:55984 -> port 23, len 44	2020-05-26 00:13:31
42.117.20.14	attack	unauthorized connection attempt	2020-02-29 13:44:46
42.117.20.147	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:15:44
42.117.20.188	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:10:43
42.117.20.196	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:07:26
42.117.20.216	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 00:00:50
42.117.20.222	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:57:22
42.117.20.46	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:52:26
42.117.20.60	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 23:49:07

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.117.20.47
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34946
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.117.20.47.			IN	A

;; AUTHORITY SECTION:
.			516	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100400 1800 900 604800 86400

;; Query time: 83 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 04 22:48:23 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 47.20.117.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 47.20.117.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
143.208.185.88	attack	Email rejected due to spam filtering	2020-08-02 00:59:42
188.19.179.245	attackspambots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-02 01:26:10
129.28.142.81	attack	Aug 1 18:54:59 buvik sshd[9678]: Failed password for root from 129.28.142.81 port 45578 ssh2 Aug 1 18:57:25 buvik sshd[10057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.142.81 user=root Aug 1 18:57:27 buvik sshd[10057]: Failed password for root from 129.28.142.81 port 33036 ssh2 ...	2020-08-02 01:10:53
91.72.171.138	attackbots	Aug 1 16:09:11 vm0 sshd[16560]: Failed password for root from 91.72.171.138 port 47904 ssh2 ...	2020-08-02 01:03:56
5.173.66.236	attackbotsspam	Email rejected due to spam filtering	2020-08-02 00:58:16
129.226.67.78	attackbotsspam	Aug 1 19:03:57 debian-2gb-nbg1-2 kernel: \[18559916.870787\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=129.226.67.78 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x60 TTL=241 ID=58223 PROTO=TCP SPT=56708 DPT=13651 WINDOW=1024 RES=0x00 SYN URGP=0	2020-08-02 01:12:37
42.112.102.185	attackspambots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-02 00:57:33
101.91.210.117	attackspam	Tried our host z.	2020-08-02 01:09:50
80.66.146.84	attack	Aug 1 18:48:59 sip sshd[1157584]: Failed password for root from 80.66.146.84 port 38300 ssh2 Aug 1 18:53:01 sip sshd[1157628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.66.146.84 user=root Aug 1 18:53:02 sip sshd[1157628]: Failed password for root from 80.66.146.84 port 45988 ssh2 ...	2020-08-02 01:04:16
58.233.93.159	attackbots	Aug 1 09:25:00 mout sshd[21611]: Connection closed by authenticating user pi 58.233.93.159 port 55888 [preauth] Aug 1 17:50:12 mout sshd[22444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.233.93.159 user=pi Aug 1 17:50:14 mout sshd[22444]: Failed password for pi from 58.233.93.159 port 54512 ssh2	2020-08-02 01:04:33
122.51.167.108	attackbots	2020-07-28T03:10:40.448663correo.[domain] sshd[13148]: Invalid user suganya from 122.51.167.108 port 56818 2020-07-28T03:10:42.155775correo.[domain] sshd[13148]: Failed password for invalid user suganya from 122.51.167.108 port 56818 ssh2 2020-07-28T03:23:09.652481correo.[domain] sshd[15205]: Invalid user xuwei from 122.51.167.108 port 50004 ...	2020-08-02 00:55:37
95.85.28.125	attackbotsspam	2020-07-31T00:22:19.101258correo.[domain] sshd[10024]: Failed password for root from 95.85.28.125 port 49516 ssh2 2020-07-31T00:28:16.890584correo.[domain] sshd[11303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.28.125 user=root 2020-07-31T00:28:19.553552correo.[domain] sshd[11303]: Failed password for root from 95.85.28.125 port 33632 ssh2 ...	2020-08-02 01:11:26
86.49.80.204	attack	Email rejected due to spam filtering	2020-08-02 01:24:37
129.208.246.24	attack	Email rejected due to spam filtering	2020-08-02 01:00:49
116.255.190.176	attackbots	sshd	2020-08-02 01:07:29

最近上报的IP列表

69.108.43.108	141.71.74.64	69.168.113.185	191.136.144.214
183.82.100.141	41.242.137.28	219.250.29.108	122.112.249.76
5.39.6.29	66.165.239.58	183.110.242.68	46.176.132.63
89.245.247.183	89.46.104.188	190.67.247.73	216.192.174.68
121.249.207.64	138.13.133.88	55.53.175.83	176.90.0.248