42.118.1.20 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Jun 26 20:02:20 itv-usvr-01 sshd[5083]: Invalid user support from 42.118.1.20 Jun 26 20:02:20 itv-usvr-01 sshd[5083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.1.20 Jun 26 20:02:20 itv-usvr-01 sshd[5083]: Invalid user support from 42.118.1.20 Jun 26 20:02:21 itv-usvr-01 sshd[5083]: Failed password for invalid user support from 42.118.1.20 port 47788 ssh2 Jun 26 20:02:22 itv-usvr-01 sshd[5085]: Invalid user admin from 42.118.1.20	2019-06-27 05:48:58

类型

评论内容

时间

attack

Jun 26 20:02:20 itv-usvr-01 sshd[5083]: Invalid user support from 42.118.1.20
Jun 26 20:02:20 itv-usvr-01 sshd[5083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.1.20
Jun 26 20:02:20 itv-usvr-01 sshd[5083]: Invalid user support from 42.118.1.20
Jun 26 20:02:21 itv-usvr-01 sshd[5083]: Failed password for invalid user support from 42.118.1.20 port 47788 ssh2
Jun 26 20:02:22 itv-usvr-01 sshd[5085]: Invalid user admin from 42.118.1.20

2019-06-27 05:48:58

相同子网IP讨论:

IP	类型	评论内容	时间
42.118.1.184	attackbotsspam	445/tcp 445/tcp [2020-10-11]2pkt	2020-10-12 20:45:21
42.118.1.184	attackspambots	445/tcp 445/tcp [2020-10-11]2pkt	2020-10-12 12:14:21
42.118.121.252	attackspambots	2020-09-14T20:08:24.373954hostname sshd[70063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.121.252 user=root 2020-09-14T20:08:26.670612hostname sshd[70063]: Failed password for root from 42.118.121.252 port 22598 ssh2 ...	2020-09-14 22:23:05
42.118.121.252	attack	Sep 14 06:07:17 ns382633 sshd\[2233\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.121.252 user=root Sep 14 06:07:20 ns382633 sshd\[2233\]: Failed password for root from 42.118.121.252 port 20196 ssh2 Sep 14 06:18:27 ns382633 sshd\[4167\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.121.252 user=root Sep 14 06:18:29 ns382633 sshd\[4167\]: Failed password for root from 42.118.121.252 port 40642 ssh2 Sep 14 06:23:03 ns382633 sshd\[4993\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.121.252 user=root	2020-09-14 14:14:24
42.118.145.176	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-07 22:35:22
42.118.145.176	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-07 14:16:20
42.118.145.176	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-07 06:49:10
42.118.129.58	attack	Automatic report - Port Scan Attack	2020-09-01 12:35:23
42.118.180.109	attack	Attempted connection to port 445.	2020-08-30 17:27:31
42.118.142.1	attack	2020-08-26 22:36:52.049113-0500 localhost smtpd[75750]: NOQUEUE: reject: RCPT from unknown[42.118.142.1]: 554 5.7.1 Service unavailable; Client host [42.118.142.1] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/42.118.142.1; from= to= proto=ESMTP helo=<[42.118.142.1]>	2020-08-27 15:43:35
42.118.141.198	attackbots	Unauthorized connection attempt from IP address 42.118.141.198 on Port 445(SMB)	2020-08-19 03:27:50
42.118.157.62	attackbotsspam	1597665897 - 08/17/2020 14:04:57 Host: 42.118.157.62/42.118.157.62 Port: 445 TCP Blocked	2020-08-17 22:29:19
42.118.16.3	attackspam	TCP (SYN) 42.118.16.3:8268 -> port 445, len 52	2020-08-13 03:08:36
42.118.100.2	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-08-12 21:36:22
42.118.140.188	attackbotsspam	Unauthorized connection attempt from IP address 42.118.140.188 on Port 445(SMB)	2020-08-12 19:15:13

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.118.1.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16711
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.118.1.20.			IN	A

;; AUTHORITY SECTION:
.			3219	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062602 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jun 27 05:48:53 CST 2019
;; MSG SIZE  rcvd: 115

HOST信息:

Host 20.1.118.42.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 20.1.118.42.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
129.226.225.56	attackbotsspam	k+ssh-bruteforce	2020-07-24 13:45:24
218.92.0.175	attackspam	Jul 24 07:56:05 nextcloud sshd\[13439\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175 user=root Jul 24 07:56:07 nextcloud sshd\[13439\]: Failed password for root from 218.92.0.175 port 64126 ssh2 Jul 24 07:56:29 nextcloud sshd\[13897\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175 user=root	2020-07-24 14:13:39
91.121.162.198	attackspambots	Jul 23 19:14:00 wbs sshd\[10850\]: Invalid user kite from 91.121.162.198 Jul 23 19:14:00 wbs sshd\[10850\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.162.198 Jul 23 19:14:01 wbs sshd\[10850\]: Failed password for invalid user kite from 91.121.162.198 port 38796 ssh2 Jul 23 19:20:52 wbs sshd\[11418\]: Invalid user brn from 91.121.162.198 Jul 23 19:20:52 wbs sshd\[11418\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.162.198	2020-07-24 13:36:31
31.6.99.218	attackbotsspam	20/7/24@01:20:46: FAIL: Alarm-Network address from=31.6.99.218 ...	2020-07-24 13:46:53
182.151.15.175	attackbots	2020-07-24T07:27:31.226604mail.broermann.family sshd[12223]: Invalid user walter from 182.151.15.175 port 36794 2020-07-24T07:27:31.232602mail.broermann.family sshd[12223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.151.15.175 2020-07-24T07:27:31.226604mail.broermann.family sshd[12223]: Invalid user walter from 182.151.15.175 port 36794 2020-07-24T07:27:33.064904mail.broermann.family sshd[12223]: Failed password for invalid user walter from 182.151.15.175 port 36794 ssh2 2020-07-24T07:29:59.633674mail.broermann.family sshd[12311]: Invalid user ftpuser from 182.151.15.175 port 49818 ...	2020-07-24 13:42:04
189.57.73.18	attackbotsspam	Jul 23 19:52:46 web9 sshd\[4919\]: Invalid user gramm from 189.57.73.18 Jul 23 19:52:46 web9 sshd\[4919\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.57.73.18 Jul 23 19:52:48 web9 sshd\[4919\]: Failed password for invalid user gramm from 189.57.73.18 port 57153 ssh2 Jul 23 19:57:39 web9 sshd\[5620\]: Invalid user booking from 189.57.73.18 Jul 23 19:57:39 web9 sshd\[5620\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.57.73.18	2020-07-24 13:59:47
194.180.224.103	attackbots	Unauthorized connection attempt detected from IP address 194.180.224.103 to port 22	2020-07-24 13:49:34
182.187.95.194	attack	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-07-24 13:52:42
79.148.131.233	attackbotsspam	Automatic report - Port Scan Attack	2020-07-24 14:13:16
159.89.196.75	attackbots	Jul 24 07:35:38 abendstille sshd\[15482\]: Invalid user css from 159.89.196.75 Jul 24 07:35:38 abendstille sshd\[15482\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.196.75 Jul 24 07:35:40 abendstille sshd\[15482\]: Failed password for invalid user css from 159.89.196.75 port 43342 ssh2 Jul 24 07:40:47 abendstille sshd\[20681\]: Invalid user jiao from 159.89.196.75 Jul 24 07:40:47 abendstille sshd\[20681\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.196.75 ...	2020-07-24 14:00:10
47.50.246.114	attack	Jul 24 05:52:33 rush sshd[8401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.50.246.114 Jul 24 05:52:36 rush sshd[8401]: Failed password for invalid user deva from 47.50.246.114 port 53284 ssh2 Jul 24 05:57:22 rush sshd[8549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.50.246.114 ...	2020-07-24 13:58:05
71.6.232.4	attackspam	Unauthorized connection attempt detected from IP address 71.6.232.4 to port 21	2020-07-24 13:56:50
148.70.208.187	attackbotsspam	Jul 24 06:33:47 rocket sshd[28745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.208.187 Jul 24 06:33:49 rocket sshd[28745]: Failed password for invalid user deploy from 148.70.208.187 port 54926 ssh2 ...	2020-07-24 13:46:35
150.136.208.168	attackbotsspam	Jul 23 19:13:57 php1 sshd\[25996\]: Invalid user pumch from 150.136.208.168 Jul 23 19:13:57 php1 sshd\[25996\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.208.168 Jul 23 19:13:59 php1 sshd\[25996\]: Failed password for invalid user pumch from 150.136.208.168 port 37702 ssh2 Jul 23 19:20:34 php1 sshd\[26679\]: Invalid user test from 150.136.208.168 Jul 23 19:20:34 php1 sshd\[26679\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.208.168	2020-07-24 14:00:41
144.217.89.55	attackspam	$f2bV_matches	2020-07-24 13:48:18

最近上报的IP列表

62.234.77.136	187.10.255.1	92.168.126.193	85.191.126.130
54.36.148.54	5.149.105.154	212.142.140.81	191.14.113.99
40.77.167.66	186.236.125.72	10.182.42.193	79.107.227.20
131.100.77.24	49.67.141.231	213.202.162.141	210.56.27.173
206.117.25.88	202.137.134.108	201.81.101.16	192.182.124.9