42.117.57.45 - IPInfo

基本信息:

城市(city): Tan Phu Hai

省份(region): Tinh GJong Thap

国家(country): Vietnam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	TCP (SYN) 42.117.57.45:61896 -> port 23, len 40	2020-10-12 01:05:54
attackspambots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-10-11 16:58:50
attack	Unauthorised access (Oct 10) SRC=42.117.57.45 LEN=40 TOS=0x10 PREC=0x40 TTL=51 ID=45740 TCP DPT=23 WINDOW=44133 SYN	2020-10-11 10:19:03

相同子网IP讨论:

IP	类型	评论内容	时间
42.117.57.69	attackspam	DATE:2020-02-10 05:52:06, IP:42.117.57.69, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-02-10 16:55:35
42.117.57.93	attackbotsspam	Unauthorized connection attempt detected from IP address 42.117.57.93 to port 23 [T]	2020-01-08 18:31:07

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.117.57.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35616
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.117.57.45.			IN	A

;; AUTHORITY SECTION:
.			460	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020101002 1800 900 604800 86400

;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 11 10:18:57 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 45.57.117.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 45.57.117.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
202.95.14.94	attack	Jul 16 07:00:36 microserver sshd[37395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.95.14.94 user=root Jul 16 07:00:38 microserver sshd[37395]: Failed password for root from 202.95.14.94 port 55089 ssh2 Jul 16 07:05:46 microserver sshd[38438]: Invalid user user21 from 202.95.14.94 port 52636 Jul 16 07:05:46 microserver sshd[38438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.95.14.94 Jul 16 07:05:48 microserver sshd[38438]: Failed password for invalid user user21 from 202.95.14.94 port 52636 ssh2 Jul 16 07:16:32 microserver sshd[40431]: Invalid user vanessa from 202.95.14.94 port 47735 Jul 16 07:16:32 microserver sshd[40431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.95.14.94 Jul 16 07:16:34 microserver sshd[40431]: Failed password for invalid user vanessa from 202.95.14.94 port 47735 ssh2 Jul 16 07:21:44 microserver sshd[41288]: Invalid user ubuntu from 202.95.14	2019-07-16 17:11:04
202.70.65.193	attack	MagicSpam Rule: valid_helo_domain; Spammer IP: 202.70.65.193	2019-07-16 16:44:34
185.222.211.246	attackspam	$f2bV_matches	2019-07-16 16:57:49
58.186.0.76	attackspambots	MagicSpam Rule: valid_helo_domain; Spammer IP: 58.186.0.76	2019-07-16 16:51:39
59.148.43.97	attack	Invalid user admin from 59.148.43.97 port 37788	2019-07-16 16:37:59
120.7.155.235	attackbotsspam	Automatic report - Port Scan Attack	2019-07-16 16:24:29
54.219.237.58	attackbotsspam	masters-of-media.de 54.219.237.58 \[16/Jul/2019:03:30:30 +0200\] "POST /wp-login.php HTTP/1.1" 200 5855 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" masters-of-media.de 54.219.237.58 \[16/Jul/2019:03:30:32 +0200\] "POST /wp-login.php HTTP/1.1" 200 5810 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-07-16 16:31:41
82.64.8.132	attack	Jul 16 09:28:30 shared02 sshd[7516]: Invalid user mao from 82.64.8.132 Jul 16 09:28:30 shared02 sshd[7516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.8.132 Jul 16 09:28:32 shared02 sshd[7516]: Failed password for invalid user mao from 82.64.8.132 port 37144 ssh2 Jul 16 09:28:32 shared02 sshd[7516]: Received disconnect from 82.64.8.132 port 37144:11: Bye Bye [preauth] Jul 16 09:28:32 shared02 sshd[7516]: Disconnected from 82.64.8.132 port 37144 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=82.64.8.132	2019-07-16 17:09:25
109.100.109.235	attackspambots	MagicSpam Rule: valid_helo_domain; Spammer IP: 109.100.109.235	2019-07-16 16:48:54
122.54.198.219	attack	Unauthorized connection attempt from IP address 122.54.198.219 on Port 445(SMB)	2019-07-16 16:23:29
106.66.205.187	attackspambots	MagicSpam Rule: valid_helo_domain; Spammer IP: 106.66.205.187	2019-07-16 16:49:38
119.93.40.241	attack	Unauthorized connection attempt from IP address 119.93.40.241 on Port 445(SMB)	2019-07-16 16:22:10
51.75.32.149	attack	6 2019-07-16 15:54:54 notice Firewall Match default rule, DROP 51.75.32.149:49792 192.168.3.108:33903 ACCESS BLOCK	2019-07-16 16:56:11
122.49.222.250	attack	DATE:2019-07-16 03:31:12, IP:122.49.222.250, PORT:1433 - MSSQL brute force auth on a honeypot server (epe-dc)	2019-07-16 16:55:50
185.222.211.13	attack	Jul 16 08:15:24 relay postfix/smtpd\[12455\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.13\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.222.211.2\]\> Jul 16 08:15:24 relay postfix/smtpd\[12455\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.13\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.222.211.2\]\> Jul 16 08:15:24 relay postfix/smtpd\[12455\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.13\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.222.211.2\]\> Jul 16 08:15:24 relay postfix/smtpd\[12455\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.13\]: 554 5.7.1 \: Relay access denied\; from=\	2019-07-16 16:46:40

最近上报的IP列表

200.158.188.144	140.206.55.6	112.85.42.233	118.126.109.155
221.182.164.10	179.219.96.69	113.23.144.50	179.219.97.149
95.15.117.115	94.138.129.212	89.178.18.43	82.65.166.65
189.41.6.81	59.177.38.94	3.227.233.48	136.232.186.138
180.191.243.160	107.77.249.53	107.77.249.134	186.0.137.194