42.118.2.1 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 04:55:16.	2019-12-20 14:27:31

相同子网IP讨论:

IP	类型	评论内容	时间
42.118.242.189	attackbotsspam	Oct 11 18:42:13 v2202009116398126984 sshd[2503456]: Invalid user tc from 42.118.242.189 port 38456 ...	2020-10-12 03:26:02
42.118.242.189	attack	<6 unauthorized SSH connections	2020-10-11 19:19:43
42.118.242.189	attack	SSH Brute Force	2020-09-26 07:08:26
42.118.242.189	attackbots	[f2b] sshd bruteforce, retries: 1	2020-09-26 00:17:30
42.118.242.189	attack	Sep 24 20:07:29 eddieflores sshd\[727\]: Invalid user mongodb from 42.118.242.189 Sep 24 20:07:29 eddieflores sshd\[727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.242.189 Sep 24 20:07:31 eddieflores sshd\[727\]: Failed password for invalid user mongodb from 42.118.242.189 port 54030 ssh2 Sep 24 20:11:56 eddieflores sshd\[1224\]: Invalid user ubuntu from 42.118.242.189 Sep 24 20:11:56 eddieflores sshd\[1224\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.242.189	2020-09-25 15:53:24
42.118.242.189	attackspam	Sep 14 07:55:25 email sshd\[10982\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.242.189 user=root Sep 14 07:55:28 email sshd\[10982\]: Failed password for root from 42.118.242.189 port 45400 ssh2 Sep 14 07:58:19 email sshd\[11496\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.242.189 user=root Sep 14 07:58:21 email sshd\[11496\]: Failed password for root from 42.118.242.189 port 54410 ssh2 Sep 14 08:01:10 email sshd\[12020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.242.189 user=root ...	2020-09-14 16:13:46
42.118.242.189	attackspambots	Sep 9 10:02:47 firewall sshd[22715]: Invalid user admin from 42.118.242.189 Sep 9 10:02:48 firewall sshd[22715]: Failed password for invalid user admin from 42.118.242.189 port 44148 ssh2 Sep 9 10:06:28 firewall sshd[22821]: Invalid user packer from 42.118.242.189 ...	2020-09-10 01:54:22
42.118.22.14	attackspambots	1599238064 - 09/04/2020 18:47:44 Host: 42.118.22.14/42.118.22.14 Port: 445 TCP Blocked	2020-09-06 01:39:02
42.118.242.189	attack	Invalid user test from 42.118.242.189 port 34510	2020-09-05 03:44:40
42.118.242.189	attackspam	Time: Fri Sep 4 07:01:04 2020 -0400 IP: 42.118.242.189 (VN/Vietnam/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 4 06:54:47 pv-11-ams1 sshd[18957]: Invalid user student from 42.118.242.189 port 60934 Sep 4 06:54:50 pv-11-ams1 sshd[18957]: Failed password for invalid user student from 42.118.242.189 port 60934 ssh2 Sep 4 06:58:28 pv-11-ams1 sshd[19186]: Invalid user website from 42.118.242.189 port 51436 Sep 4 06:58:30 pv-11-ams1 sshd[19186]: Failed password for invalid user website from 42.118.242.189 port 51436 ssh2 Sep 4 07:00:59 pv-11-ams1 sshd[19358]: Invalid user lixiang from 42.118.242.189 port 60026	2020-09-04 19:14:22
42.118.242.189	attackspambots	2020-08-22T16:57:08+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)	2020-08-23 00:10:04
42.118.242.189	attackspam	Aug 21 11:48:28 hosting sshd[24604]: Invalid user daniel from 42.118.242.189 port 54004 ...	2020-08-21 16:53:23
42.118.242.189	attackbots	Aug 17 16:11:53 sso sshd[8561]: Failed password for root from 42.118.242.189 port 58054 ssh2 Aug 17 16:16:35 sso sshd[9120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.242.189 ...	2020-08-17 23:06:45
42.118.242.189	attackspambots	Aug 16 16:05:11 [host] sshd[12689]: pam_unix(sshd: Aug 16 16:05:13 [host] sshd[12689]: Failed passwor Aug 16 16:10:08 [host] sshd[13145]: Invalid user y	2020-08-16 22:55:11
42.118.234.70	attackbots	SSH invalid-user multiple login try	2020-08-15 08:00:57

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.118.2.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32035
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.118.2.1.			IN	A

;; AUTHORITY SECTION:
.			592	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121902 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 20 14:27:25 CST 2019
;; MSG SIZE  rcvd: 114

HOST信息:

Host 1.2.118.42.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 1.2.118.42.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
218.104.128.54	attackbots	May 31 13:06:37 vps333114 sshd[8393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.104.128.54 user=root May 31 13:06:39 vps333114 sshd[8393]: Failed password for root from 218.104.128.54 port 58591 ssh2 ...	2020-05-31 19:37:57
190.64.64.77	attackspambots	Automatic report - Banned IP Access	2020-05-31 19:56:36
51.178.17.63	attack	May 31 04:41:24 dignus sshd[32568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.17.63 May 31 04:41:26 dignus sshd[32568]: Failed password for invalid user admin from 51.178.17.63 port 38542 ssh2 May 31 04:44:55 dignus sshd[1369]: Invalid user chiuan from 51.178.17.63 port 44752 May 31 04:44:55 dignus sshd[1369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.17.63 May 31 04:44:57 dignus sshd[1369]: Failed password for invalid user chiuan from 51.178.17.63 port 44752 ssh2 ...	2020-05-31 20:02:23
185.100.87.243	attack	Automatic report - Banned IP Access	2020-05-31 19:29:17
114.35.74.118	attackspambots	TCP (SYN) 114.35.74.118:36899 -> port 23, len 44	2020-05-31 19:39:33
89.134.126.89	attackspambots	May 31 07:12:35 firewall sshd[23958]: Invalid user test from 89.134.126.89 May 31 07:12:36 firewall sshd[23958]: Failed password for invalid user test from 89.134.126.89 port 42664 ssh2 May 31 07:16:13 firewall sshd[24075]: Invalid user sale from 89.134.126.89 ...	2020-05-31 19:42:24
49.235.212.7	attackspambots	no	2020-05-31 19:24:48
14.98.22.102	attackbotsspam	Failed password for invalid user memcached from 14.98.22.102 port 57072 ssh2	2020-05-31 19:40:38
159.89.164.199	attack	May 30 19:59:40 tdfoods sshd\[18230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.164.199 user=root May 30 19:59:42 tdfoods sshd\[18230\]: Failed password for root from 159.89.164.199 port 40706 ssh2 May 30 20:03:33 tdfoods sshd\[18541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.164.199 user=root May 30 20:03:35 tdfoods sshd\[18541\]: Failed password for root from 159.89.164.199 port 44070 ssh2 May 30 20:07:20 tdfoods sshd\[18846\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.164.199 user=root	2020-05-31 19:40:02
185.176.27.210	attackspam	TCP ports : 3411 / 3481 / 3489	2020-05-31 19:30:47
189.239.90.217	attack	May 31 11:52:19 debian-2gb-nbg1-2 kernel: \[13177516.583330\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=189.239.90.217 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=43 ID=36312 PROTO=TCP SPT=20930 DPT=81 WINDOW=43927 RES=0x00 SYN URGP=0	2020-05-31 19:49:31
101.109.85.196	attackbotsspam	Port Scan detected! ...	2020-05-31 19:46:25
162.12.210.122	attack	Attempted connection to port 445.	2020-05-31 19:55:15
110.77.148.247	attackspambots	Unauthorized connection attempt from IP address 110.77.148.247 on Port 445(SMB)	2020-05-31 20:00:03
45.46.222.55	attack	Unauthorized connection attempt detected from IP address 45.46.222.55 to port 80	2020-05-31 19:31:55

最近上报的IP列表

213.245.118.115	3.72.54.224	230.155.139.78	38.58.248.104
3.164.45.58	124.160.164.126	112.54.26.191	254.212.99.250
129.69.237.42	146.174.207.191	190.207.127.133	57.6.8.71
57.7.182.87	26.81.3.114	47.222.117.18	120.29.85.172
90.189.113.55	14.236.207.99	14.17.76.176	38.38.143.157

基本信息:

用户上报:

相同子网IP讨论:

WHOIS信息:

DIG信息:

HOST信息:

NSLOOKUP信息:

相关IP信息:

最新评论:

最近上报的IP列表