42.117.51.207 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	(Sep 28) LEN=40 TTL=47 ID=30457 TCP DPT=8080 WINDOW=42098 SYN (Sep 27) LEN=40 TTL=47 ID=7067 TCP DPT=8080 WINDOW=422 SYN (Sep 27) LEN=40 TTL=47 ID=43583 TCP DPT=8080 WINDOW=42098 SYN (Sep 27) LEN=40 TTL=47 ID=64090 TCP DPT=8080 WINDOW=42098 SYN (Sep 27) LEN=40 TTL=47 ID=11244 TCP DPT=8080 WINDOW=422 SYN (Sep 26) LEN=40 TTL=47 ID=11119 TCP DPT=8080 WINDOW=422 SYN (Sep 26) LEN=40 TTL=47 ID=58092 TCP DPT=8080 WINDOW=9375 SYN (Sep 26) LEN=40 TTL=47 ID=51140 TCP DPT=8080 WINDOW=9375 SYN (Sep 25) LEN=40 TTL=50 ID=10910 TCP DPT=8080 WINDOW=9375 SYN (Sep 25) LEN=40 TTL=47 ID=25597 TCP DPT=8080 WINDOW=422 SYN (Sep 24) LEN=40 TTL=47 ID=62053 TCP DPT=8080 WINDOW=42098 SYN (Sep 24) LEN=40 TTL=47 ID=21891 TCP DPT=8080 WINDOW=42098 SYN (Sep 23) LEN=40 TTL=47 ID=63217 TCP DPT=8080 WINDOW=9375 SYN (Sep 23) LEN=40 TTL=47 ID=41727 TCP DPT=8080 WINDOW=9375 SYN	2019-09-28 08:16:53

类型

评论内容

时间

attackbotsspam

(Sep 28)  LEN=40 TTL=47 ID=30457 TCP DPT=8080 WINDOW=42098 SYN 
 (Sep 27)  LEN=40 TTL=47 ID=7067 TCP DPT=8080 WINDOW=422 SYN 
 (Sep 27)  LEN=40 TTL=47 ID=43583 TCP DPT=8080 WINDOW=42098 SYN 
 (Sep 27)  LEN=40 TTL=47 ID=64090 TCP DPT=8080 WINDOW=42098 SYN 
 (Sep 27)  LEN=40 TTL=47 ID=11244 TCP DPT=8080 WINDOW=422 SYN 
 (Sep 26)  LEN=40 TTL=47 ID=11119 TCP DPT=8080 WINDOW=422 SYN 
 (Sep 26)  LEN=40 TTL=47 ID=58092 TCP DPT=8080 WINDOW=9375 SYN 
 (Sep 26)  LEN=40 TTL=47 ID=51140 TCP DPT=8080 WINDOW=9375 SYN 
 (Sep 25)  LEN=40 TTL=50 ID=10910 TCP DPT=8080 WINDOW=9375 SYN 
 (Sep 25)  LEN=40 TTL=47 ID=25597 TCP DPT=8080 WINDOW=422 SYN 
 (Sep 24)  LEN=40 TTL=47 ID=62053 TCP DPT=8080 WINDOW=42098 SYN 
 (Sep 24)  LEN=40 TTL=47 ID=21891 TCP DPT=8080 WINDOW=42098 SYN 
 (Sep 23)  LEN=40 TTL=47 ID=63217 TCP DPT=8080 WINDOW=9375 SYN 
 (Sep 23)  LEN=40 TTL=47 ID=41727 TCP DPT=8080 WINDOW=9375 SYN

2019-09-28 08:16:53

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.117.51.207
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12407
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.117.51.207.			IN	A

;; AUTHORITY SECTION:
.			430	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092701 1800 900 604800 86400

;; Query time: 131 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 28 08:16:49 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 207.51.117.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 207.51.117.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
58.214.255.41	attackspam	Unauthorized SSH login attempts	2019-11-29 20:00:12
181.41.216.144	attackbotsspam	Nov 29 13:20:09 relay postfix/smtpd\[18960\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.144\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Nov 29 13:20:09 relay postfix/smtpd\[18960\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.144\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Nov 29 13:20:09 relay postfix/smtpd\[18960\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.144\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\> Nov 29 13:20:09 relay postfix/smtpd\[18960\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.144\]: 554 5.7.1 \: Relay access denied\; from=\ to=\	2019-11-29 20:22:49
47.56.127.182	attackbots	Automatic report - XMLRPC Attack	2019-11-29 19:53:35
147.135.255.107	attackbotsspam	Failed password for invalid user roitsch from 147.135.255.107 port 44862 ssh2 Invalid user adi from 147.135.255.107 port 52676 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.255.107 Failed password for invalid user adi from 147.135.255.107 port 52676 ssh2 Invalid user fritschy from 147.135.255.107 port 60480	2019-11-29 20:19:46
92.118.37.86	attackspam	IPS SENSOR HIT - Export of IP address from IPS sensor - Port scan detected	2019-11-29 20:29:28
106.13.82.49	attack	$f2bV_matches	2019-11-29 19:54:48
188.225.26.211	attack	firewall-block, port(s): 5522/tcp, 8744/tcp, 9898/tcp, 23000/tcp	2019-11-29 20:08:58
186.225.19.6	attackspambots	Nov 29 17:21:31 areeb-Workstation sshd[23072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.225.19.6 Nov 29 17:21:32 areeb-Workstation sshd[23072]: Failed password for invalid user administrator from 186.225.19.6 port 50006 ssh2 ...	2019-11-29 19:51:55
185.175.93.101	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-11-29 20:21:27
198.108.67.98	attackspam	Port scan: Attack repeated for 24 hours	2019-11-29 20:07:54
113.161.149.47	attackbots	SSH Bruteforce attempt	2019-11-29 19:52:50
83.15.183.137	attackspambots	Repeated brute force against a port	2019-11-29 20:22:07
107.189.11.168	attackbots	Nov 29 08:06:20 XXXXXX sshd[64141]: Invalid user named from 107.189.11.168 port 60790	2019-11-29 20:29:06
182.61.32.8	attackbots	Nov 29 07:43:20 ws19vmsma01 sshd[14788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.32.8 Nov 29 07:43:22 ws19vmsma01 sshd[14788]: Failed password for invalid user emmanuelle123456. from 182.61.32.8 port 38268 ssh2 ...	2019-11-29 20:06:52
123.207.233.222	attack	SSH Bruteforce attack	2019-11-29 20:26:08

最近上报的IP列表

193.17.4.27	176.32.34.113	158.161.214.192	129.158.73.231
23.97.59.249	121.87.138.199	64.52.23.88	220.132.149.198
81.151.51.243	86.128.2.29	188.28.89.77	109.236.55.178
192.241.190.85	114.244.136.93	180.145.160.109	106.52.132.44
200.24.16.231	183.80.179.206	41.232.143.79	85.74.20.197