42.117.57.93 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Vietnam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Unauthorized connection attempt detected from IP address 42.117.57.93 to port 23 [T]	2020-01-08 18:31:07

相同子网IP讨论:

IP	类型	评论内容	时间
42.117.57.45	attackbotsspam	TCP (SYN) 42.117.57.45:61896 -> port 23, len 40	2020-10-12 01:05:54
42.117.57.45	attackspambots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-10-11 16:58:50
42.117.57.45	attack	Unauthorised access (Oct 10) SRC=42.117.57.45 LEN=40 TOS=0x10 PREC=0x40 TTL=51 ID=45740 TCP DPT=23 WINDOW=44133 SYN	2020-10-11 10:19:03
42.117.57.69	attackspam	DATE:2020-02-10 05:52:06, IP:42.117.57.69, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-02-10 16:55:35

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.117.57.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48776
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.117.57.93.			IN	A

;; AUTHORITY SECTION:
.			590	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010800 1800 900 604800 86400

;; Query time: 208 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 08 18:31:03 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 93.57.117.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 100.100.2.136, trying next server
;; Got SERVFAIL reply from 100.100.2.138, trying next server
Server:		100.100.2.138
Address:	100.100.2.138#53

** server can't find 93.57.117.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
113.169.133.208	attack	Brute force attempt	2020-02-16 08:25:00
45.143.220.191	attackspambots	[2020-02-15 17:43:02] NOTICE[1148][C-0000980e] chan_sip.c: Call from '' (45.143.220.191:52480) to extension '901146586739261' rejected because extension not found in context 'public'. [2020-02-15 17:43:02] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-15T17:43:02.671-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="901146586739261",SessionID="0x7fd82cdc4bd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.191/52480",ACLName="no_extension_match" [2020-02-15 17:44:49] NOTICE[1148][C-0000980f] chan_sip.c: Call from '' (45.143.220.191:57552) to extension '801146586739261' rejected because extension not found in context 'public'. [2020-02-15 17:44:49] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-15T17:44:49.583-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="801146586739261",SessionID="0x7fd82c80d368",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/U ...	2020-02-16 07:45:20
45.125.66.68	attack	Rude login attack (4 tries in 1d)	2020-02-16 08:01:43
85.13.101.172	attack	Port probing on unauthorized port 23	2020-02-16 07:44:49
116.68.244.202	attackspambots	Feb 15 14:14:07 sachi sshd\[8320\]: Invalid user user4 from 116.68.244.202 Feb 15 14:14:07 sachi sshd\[8320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.68.244.202 Feb 15 14:14:08 sachi sshd\[8320\]: Failed password for invalid user user4 from 116.68.244.202 port 49520 ssh2 Feb 15 14:20:02 sachi sshd\[8886\]: Invalid user hotel from 116.68.244.202 Feb 15 14:20:02 sachi sshd\[8886\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.68.244.202	2020-02-16 08:24:01
45.134.179.57	attackbots	Feb 16 00:25:13 h2177944 kernel: \[5007046.354063\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.134.179.57 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=16188 PROTO=TCP SPT=55016 DPT=28951 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 16 00:25:13 h2177944 kernel: \[5007046.354076\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.134.179.57 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=16188 PROTO=TCP SPT=55016 DPT=28951 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 16 00:31:05 h2177944 kernel: \[5007398.245081\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.134.179.57 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=3042 PROTO=TCP SPT=55016 DPT=98 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 16 00:31:05 h2177944 kernel: \[5007398.245094\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.134.179.57 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=3042 PROTO=TCP SPT=55016 DPT=98 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 16 00:32:14 h2177944 kernel: \[5007466.982835\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.134.179.57 DST=85.214.117.9 LEN	2020-02-16 07:53:42
196.202.80.143	attackbotsspam	20/2/15@17:19:23: FAIL: Alarm-Network address from=196.202.80.143 20/2/15@17:19:23: FAIL: Alarm-Network address from=196.202.80.143 ...	2020-02-16 07:51:33
164.132.145.70	attackspambots	Feb 16 00:54:51 sd-53420 sshd\[27624\]: Invalid user daphne1 from 164.132.145.70 Feb 16 00:54:51 sd-53420 sshd\[27624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.145.70 Feb 16 00:54:53 sd-53420 sshd\[27624\]: Failed password for invalid user daphne1 from 164.132.145.70 port 53160 ssh2 Feb 16 00:57:20 sd-53420 sshd\[27987\]: Invalid user rje from 164.132.145.70 Feb 16 00:57:20 sd-53420 sshd\[27987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.145.70 ...	2020-02-16 07:59:37
171.240.138.48	attackspambots	Automatic report - Port Scan Attack	2020-02-16 08:16:33
14.171.30.47	attackbotsspam	Brute force attempt	2020-02-16 08:20:40
121.229.2.190	attack	Jan 13 17:45:57 pi sshd[12819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.2.190 Jan 13 17:45:59 pi sshd[12819]: Failed password for invalid user admin from 121.229.2.190 port 34394 ssh2	2020-02-16 08:09:21
31.211.65.102	attackspambots	Invalid user control from 31.211.65.102 port 58190	2020-02-16 08:18:59
197.50.26.248	attackspambots	Automatic report - Port Scan Attack	2020-02-16 07:45:43
92.118.37.99	attackspambots	Feb1601:11:25server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=92.118.37.99DST=136.243.224.57LEN=40TOS=0x00PREC=0x00TTL=249ID=38498PROTO=TCPSPT=52101DPT=1388WINDOW=1024RES=0x00SYNURGP=0Feb1601:11:28server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=92.118.37.99DST=136.243.224.55LEN=40TOS=0x00PREC=0x00TTL=249ID=27746PROTO=TCPSPT=52101DPT=1449WINDOW=1024RES=0x00SYNURGP=0Feb1601:11:29server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=92.118.37.99DST=136.243.224.55LEN=40TOS=0x00PREC=0x00TTL=249ID=14760PROTO=TCPSPT=52101DPT=166WINDOW=1024RES=0x00SYNURGP=0Feb1601:11:30server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=92.118.37.99DST=136.243.224.50LEN=40TOS=0x00PREC=0x00TTL=249ID=34867PROTO=TCPSPT=52101DPT=1388WINDOW=1024RES=0x00SYNURGP=0Feb1601:11:32server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43	2020-02-16 08:15:06
190.85.212.229	attackbotsspam	Unauthorized connection attempt detected from IP address 190.85.212.229 to port 23	2020-02-16 07:57:43

最近上报的IP列表

172.105.119.127	125.24.227.186	89.138.191.179	189.108.95.99
123.25.217.55	117.48.201.107	172.247.123.99	183.53.142.53
36.80.34.154	91.235.237.168	157.230.226.254	86.149.220.118
125.120.107.74	52.230.66.101	124.156.169.7	69.196.150.210
49.234.182.134	112.33.253.165	42.61.59.33	1.1.144.151

基本信息:

用户上报:

相同子网IP讨论:

WHOIS信息:

DIG信息:

HOST信息:

NSLOOKUP信息:

相关IP信息:

最新评论:

最近上报的IP列表