42.118.17.52 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Vietnam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Unauthorised access (Dec 25) SRC=42.118.17.52 LEN=52 TTL=108 ID=18849 DF TCP DPT=445 WINDOW=8192 SYN	2019-12-26 04:29:11

相同子网IP讨论:

IP	类型	评论内容	时间
42.118.177.100	attackspambots	Unauthorized connection attempt detected from IP address 42.118.177.100 to port 445	2020-04-13 17:54:47
42.118.17.62	attackspam	Sun, 21 Jul 2019 07:37:15 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-21 19:27:58
42.118.17.159	attackspam	Unauthorized connection attempt from IP address 42.118.17.159 on Port 445(SMB)	2019-06-30 20:11:35

类型

评论内容

时间

42.118.177.100

attackspambots

Unauthorized connection attempt detected from IP address 42.118.177.100 to port 445

2020-04-13 17:54:47

42.118.17.62

attackspam

Sun, 21 Jul 2019 07:37:15 +0000 likely compromised host or open proxy. ddos rate spidering

2019-07-21 19:27:58

42.118.17.159

attackspam

Unauthorized connection attempt from IP address 42.118.17.159 on Port 445(SMB)

2019-06-30 20:11:35

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.118.17.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54811
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.118.17.52.			IN	A

;; AUTHORITY SECTION:
.			310	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122502 1800 900 604800 86400

;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 26 04:29:08 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 52.17.118.42.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.17.118.42.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
132.145.101.248	attackspam	port scan and connect, tcp 22 (ssh)	2020-04-17 18:01:18
129.211.49.227	attack	Apr 17 11:49:36 vmd17057 sshd[26783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.49.227 Apr 17 11:49:38 vmd17057 sshd[26783]: Failed password for invalid user ubuntu from 129.211.49.227 port 34620 ssh2 ...	2020-04-17 18:04:43
178.128.49.135	attack	SSH Brute-Forcing (server2)	2020-04-17 18:05:58
37.187.117.187	attackbots	2020-04-16 UTC: (20x) - admin,be,ci,dm,ea,john,nobody,postgres,root(7x),test(3x),test001,ubuntu	2020-04-17 18:31:53
158.69.194.115	attack	prod3 ...	2020-04-17 17:56:29
171.103.142.2	attack	Dovecot Invalid User Login Attempt.	2020-04-17 18:19:16
51.77.203.192	attackbotsspam	Apr 17 12:01:48 vps sshd[297374]: Failed password for invalid user harry from 51.77.203.192 port 45428 ssh2 Apr 17 12:01:52 vps sshd[297748]: Invalid user harry from 51.77.203.192 port 50832 Apr 17 12:01:52 vps sshd[297748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.ip-51-77-203.eu Apr 17 12:01:54 vps sshd[297748]: Failed password for invalid user harry from 51.77.203.192 port 50832 ssh2 Apr 17 12:01:57 vps sshd[298058]: Invalid user hata from 51.77.203.192 port 56236 ...	2020-04-17 18:07:09
212.129.50.137	attack	[2020-04-17 05:54:15] NOTICE[1170] chan_sip.c: Registration from '"410"' failed for '212.129.50.137:8720' - Wrong password [2020-04-17 05:54:15] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-17T05:54:15.403-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="410",SessionID="0x7f6c0824ccd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.129.50.137/8720",Challenge="392248a2",ReceivedChallenge="392248a2",ReceivedHash="d86863d50ffe4d52eadd9b2fb57961ad" [2020-04-17 05:54:26] NOTICE[1170] chan_sip.c: Registration from '"411"' failed for '212.129.50.137:8738' - Wrong password [2020-04-17 05:54:26] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-17T05:54:26.922-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="411",SessionID="0x7f6c0825cda8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.129 ...	2020-04-17 18:10:37
77.247.181.165	attack	sshd jail - ssh hack attempt	2020-04-17 18:13:22
111.229.49.239	attackspambots	SSH Brute-Force attacks	2020-04-17 18:25:04
171.15.61.4	attackbotsspam	Port probing on unauthorized port 445	2020-04-17 18:20:50
159.203.219.38	attackbots	Apr 17 06:12:20 ip-172-31-62-245 sshd\[32379\]: Invalid user tp from 159.203.219.38\ Apr 17 06:12:22 ip-172-31-62-245 sshd\[32379\]: Failed password for invalid user tp from 159.203.219.38 port 54997 ssh2\ Apr 17 06:15:50 ip-172-31-62-245 sshd\[32404\]: Invalid user admin1 from 159.203.219.38\ Apr 17 06:15:52 ip-172-31-62-245 sshd\[32404\]: Failed password for invalid user admin1 from 159.203.219.38 port 57963 ssh2\ Apr 17 06:19:24 ip-172-31-62-245 sshd\[32431\]: Invalid user ur from 159.203.219.38\	2020-04-17 18:24:12
106.12.92.246	attackspam	prod11 ...	2020-04-17 18:09:29
218.92.0.184	attackspam	$f2bV_matches	2020-04-17 18:05:05
14.161.36.150	attackspambots	Fail2Ban - SSH Bruteforce Attempt	2020-04-17 18:34:53

最近上报的IP列表

93.74.212.105	47.119.65.181	61.0.14.132	183.91.14.90
41.254.15.229	141.133.254.46	121.14.11.163	106.67.221.82
93.84.85.213	84.33.80.68	79.98.116.129	167.71.205.13
121.138.134.71	191.242.51.160	121.136.37.239	204.31.72.176
93.62.254.230	117.200.128.87	104.129.32.9	253.49.125.139