必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attack
1588507687 - 05/03/2020 14:08:07 Host: 42.117.22.118/42.117.22.118 Port: 445 TCP Blocked
2020-05-04 01:57:39
相同子网IP讨论:
IP 类型 评论内容 时间
42.117.220.92 attackspambots
Unauthorised access (Aug  8) SRC=42.117.220.92 LEN=40 TOS=0x10 PREC=0x40 TTL=52 ID=41640 TCP DPT=23 WINDOW=64002 SYN
2020-08-09 00:38:48
42.117.227.246 attack
Tried our host z.
2020-07-05 14:55:07
42.117.229.59 attack
Unauthorized connection attempt detected from IP address 42.117.229.59 to port 23 [J]
2020-03-01 17:46:23
42.117.229.211 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-28 22:57:32
42.117.229.82 attack
Unauthorized connection attempt detected from IP address 42.117.229.82 to port 23 [T]
2020-01-22 08:19:53
42.117.227.12 attackspam
Unauthorized connection attempt detected from IP address 42.117.227.12 to port 23 [J]
2020-01-16 01:45:23
42.117.228.223 attack
Unauthorized connection attempt detected from IP address 42.117.228.223 to port 23 [T]
2020-01-09 02:23:26
42.117.228.16 attack
Unauthorized connection attempt detected from IP address 42.117.228.16 to port 23
2019-12-31 01:09:16
42.117.228.91 attack
Dec 14 00:56:09 mc1 kernel: \[440200.538444\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=42.117.228.91 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=10203 PROTO=TCP SPT=13701 DPT=23 WINDOW=10133 RES=0x00 SYN URGP=0 
Dec 14 00:56:09 mc1 kernel: \[440200.561695\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=42.117.228.91 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=10203 PROTO=TCP SPT=13701 DPT=23 WINDOW=10133 RES=0x00 SYN URGP=0 
Dec 14 00:56:09 mc1 kernel: \[440200.599860\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=42.117.228.91 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=10203 PROTO=TCP SPT=13701 DPT=23 WINDOW=10133 RES=0x00 SYN URGP=0 
...
2019-12-14 08:28:06
42.117.228.109 attackspambots
Telnet/23 MH Probe, BF, Hack -
2019-11-20 22:34:00
42.117.229.20 attackspam
Unauthorized connection attempt from IP address 42.117.229.20 on Port 445(SMB)
2019-11-02 17:36:11
42.117.228.5 attack
(Oct  5)  LEN=40 TTL=47 ID=35175 TCP DPT=8080 WINDOW=35358 SYN 
 (Oct  5)  LEN=40 TTL=46 ID=60673 TCP DPT=8080 WINDOW=17829 SYN 
 (Oct  4)  LEN=40 TTL=46 ID=36584 TCP DPT=8080 WINDOW=26003 SYN 
 (Oct  4)  LEN=40 TTL=47 ID=7481 TCP DPT=8080 WINDOW=35358 SYN 
 (Oct  4)  LEN=40 TTL=46 ID=56957 TCP DPT=8080 WINDOW=26003 SYN 
 (Oct  3)  LEN=40 TTL=46 ID=43044 TCP DPT=8080 WINDOW=17829 SYN 
 (Oct  3)  LEN=40 TTL=46 ID=49026 TCP DPT=8080 WINDOW=17829 SYN 
 (Oct  3)  LEN=40 TTL=46 ID=3598 TCP DPT=8080 WINDOW=26003 SYN 
 (Oct  2)  LEN=40 TTL=46 ID=21057 TCP DPT=8080 WINDOW=26003 SYN 
 (Oct  2)  LEN=40 TTL=46 ID=6321 TCP DPT=8080 WINDOW=26003 SYN 
 (Oct  2)  LEN=40 TTL=47 ID=4849 TCP DPT=8080 WINDOW=35358 SYN 
 (Oct  2)  LEN=40 TTL=46 ID=6959 TCP DPT=8080 WINDOW=17829 SYN 
 (Oct  2)  LEN=40 TTL=46 ID=59640 TCP DPT=8080 WINDOW=26003 SYN 
 (Oct  1)  LEN=40 TTL=47 ID=52655 TCP DPT=8080 WINDOW=35358 SYN 
 (Oct  1)  LEN=40 TTL=47 ID=15654 TCP DPT=8080 WINDOW=35358 SYN 
 (Oct  1)  LEN=40 TTL=46 ID=40...
2019-10-05 19:18:06
42.117.226.51 attackspambots
Unauthorized connection attempt from IP address 42.117.226.51 on Port 445(SMB)
2019-09-27 19:57:52
42.117.229.209 attackspam
Honeypot attack, port: 23, PTR: PTR record not found
2019-07-08 22:39:55
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.117.22.118
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39380
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.117.22.118.			IN	A

;; AUTHORITY SECTION:
.			420	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050301 1800 900 604800 86400

;; Query time: 100 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 04 01:57:34 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 118.22.117.42.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 118.22.117.42.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
114.25.178.33 attackbotsspam
Unauthorized connection attempt from IP address 114.25.178.33 on Port 445(SMB)
2020-02-14 02:37:23
212.64.14.178 attackbots
"SSH brute force auth login attempt."
2020-02-14 02:39:54
34.87.15.210 attackspam
$f2bV_matches
2020-02-14 02:28:26
200.205.138.242 attack
Unauthorized connection attempt from IP address 200.205.138.242 on Port 445(SMB)
2020-02-14 02:40:28
34.213.87.129 attack
02/13/2020-19:13:34.110385 34.213.87.129 Protocol: 6 SURICATA TLS invalid record/traffic
2020-02-14 02:20:04
134.119.216.74 attackbotsspam
ssh brute force
2020-02-14 02:44:33
93.183.71.37 attackbots
Unauthorized connection attempt from IP address 93.183.71.37 on Port 445(SMB)
2020-02-14 02:45:27
41.238.172.182 attack
Feb 13 03:31:24 linuxrulz sshd[14076]: Invalid user admin from 41.238.172.182 port 50534
Feb 13 03:31:24 linuxrulz sshd[14076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.238.172.182
Feb 13 03:31:26 linuxrulz sshd[14076]: Failed password for invalid user admin from 41.238.172.182 port 50534 ssh2
Feb 13 03:31:27 linuxrulz sshd[14076]: Connection closed by 41.238.172.182 port 50534 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=41.238.172.182
2020-02-14 02:31:58
121.178.212.67 attackspambots
SSH login attempts.
2020-02-14 02:13:53
117.6.97.138 attack
$lgm
2020-02-14 02:14:33
156.251.178.11 attackspam
Feb 13 17:07:36 sso sshd[4770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.251.178.11
Feb 13 17:07:37 sso sshd[4770]: Failed password for invalid user lav from 156.251.178.11 port 49266 ssh2
...
2020-02-14 02:30:03
219.91.2.124 attackbotsspam
Invalid user test from 219.91.2.124 port 57557
2020-02-14 02:11:09
137.74.193.225 attackbotsspam
Feb 13 14:46:35  sshd[309]: Failed password for invalid user ubuntu from 137.74.193.225 port 60974 ssh2
2020-02-14 02:05:14
192.241.175.48 attackbots
Invalid user uploader from 192.241.175.48 port 53206
2020-02-14 02:37:42
111.225.216.4 attackbots
02/13/2020-08:47:01.364833 111.225.216.4 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2020-02-14 02:08:28

最近上报的IP列表

191.193.49.63 112.26.92.129 79.166.142.224 150.107.7.10
173.232.219.137 160.153.153.149 203.150.113.215 109.95.42.42
83.234.43.1 107.174.24.117 18.203.224.75 113.87.128.190
2.24.2.95 50.171.77.44 95.111.231.211 14.171.139.114
202.178.115.120 31.40.210.50 201.243.141.246 154.8.168.134