42.118.6.125 - IPInfo

基本信息:

城市(city): Hanoi

省份(region): Hanoi

国家(country): Vietnam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): The Corporation for Financing & Promoting Technology

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Unauthorised access (Aug 16) SRC=42.118.6.125 LEN=48 TTL=108 ID=27047 DF TCP DPT=445 WINDOW=8192 SYN	2019-08-17 00:26:34

相同子网IP讨论:

IP	类型	评论内容	时间
42.118.69.79	attackspam	Unauthorized connection attempt from IP address 42.118.69.79 on Port 445(SMB)	2020-07-04 06:41:30
42.118.6.194	attackspam	Hit honeypot r.	2020-06-22 23:54:33
42.118.68.135	attackspam	Automatic report - Port Scan Attack	2020-03-24 17:03:50
42.118.60.162	attackbots	port scan and connect, tcp 23 (telnet)	2020-02-10 05:43:00
42.118.6.34	attackbots	Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:10:26.	2019-09-28 01:01:35
42.118.6.134	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:10:26.	2019-09-28 01:01:01
42.118.6.87	attackbotsspam	Sun, 21 Jul 2019 18:27:02 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 09:13:08

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.118.6.125
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35762
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.118.6.125.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081600 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 17 00:26:11 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 125.6.118.42.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 125.6.118.42.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
51.91.120.67	attackspambots	$f2bV_matches	2020-07-31 17:11:48
49.233.182.205	attackbots	Invalid user eisp from 49.233.182.205 port 35754	2020-07-31 17:02:08
35.233.219.188	attackspambots	Fail2Ban	2020-07-31 17:10:52
60.165.100.122	attackbots	Unauthorized connection attempt detected from IP address 60.165.100.122 to port 10314	2020-07-31 17:34:09
27.121.86.191	attack	(ID/Indonesia/-) SMTP Bruteforcing attempts	2020-07-31 17:26:14
37.189.29.12	attackbotsspam	Jul 31 03:49:53 hermescis postfix/smtpd[2028]: NOQUEUE: reject: RCPT from unknown[37.189.29.12]: 550 5.1.1 : Recipient address rejected:* from= to= proto=ESMTP helo=	2020-07-31 17:38:08
177.10.240.213	attack	Jul 31 05:17:31 mail.srvfarm.net postfix/smtps/smtpd[150912]: warning: unknown[177.10.240.213]: SASL PLAIN authentication failed: Jul 31 05:17:32 mail.srvfarm.net postfix/smtps/smtpd[150912]: lost connection after AUTH from unknown[177.10.240.213] Jul 31 05:22:41 mail.srvfarm.net postfix/smtps/smtpd[167741]: warning: unknown[177.10.240.213]: SASL PLAIN authentication failed: Jul 31 05:22:41 mail.srvfarm.net postfix/smtps/smtpd[167741]: lost connection after AUTH from unknown[177.10.240.213] Jul 31 05:24:07 mail.srvfarm.net postfix/smtps/smtpd[167985]: warning: unknown[177.10.240.213]: SASL PLAIN authentication failed:	2020-07-31 17:19:25
103.207.7.114	attackspam	Jul 31 10:16:05 mail.srvfarm.net postfix/smtps/smtpd[274328]: warning: unknown[103.207.7.114]: SASL PLAIN authentication failed: Jul 31 10:16:06 mail.srvfarm.net postfix/smtps/smtpd[274328]: lost connection after AUTH from unknown[103.207.7.114] Jul 31 10:18:18 mail.srvfarm.net postfix/smtpd[276190]: warning: unknown[103.207.7.114]: SASL PLAIN authentication failed: Jul 31 10:18:18 mail.srvfarm.net postfix/smtpd[276190]: lost connection after AUTH from unknown[103.207.7.114] Jul 31 10:19:10 mail.srvfarm.net postfix/smtpd[261746]: warning: unknown[103.207.7.114]: SASL PLAIN authentication failed:	2020-07-31 17:21:02
186.216.67.84	attack	Jul 31 05:28:40 mail.srvfarm.net postfix/smtpd[156599]: warning: unknown[186.216.67.84]: SASL PLAIN authentication failed: Jul 31 05:28:40 mail.srvfarm.net postfix/smtpd[156599]: lost connection after AUTH from unknown[186.216.67.84] Jul 31 05:37:30 mail.srvfarm.net postfix/smtpd[168885]: warning: unknown[186.216.67.84]: SASL PLAIN authentication failed: Jul 31 05:37:30 mail.srvfarm.net postfix/smtpd[168885]: lost connection after AUTH from unknown[186.216.67.84] Jul 31 05:37:38 mail.srvfarm.net postfix/smtps/smtpd[167986]: warning: unknown[186.216.67.84]: SASL PLAIN authentication failed:	2020-07-31 17:16:34
77.3.2.52	attackbotsspam	SSH invalid-user multiple login try	2020-07-31 17:37:50
222.186.173.238	attackbots	Jul 31 11:25:36 host sshd\[6908\]: Unable to negotiate with 222.186.173.238 port 49150: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 \[preauth\]	2020-07-31 17:31:05
177.86.166.78	attack	Jul 31 05:16:33 mail.srvfarm.net postfix/smtps/smtpd[150916]: warning: 177-86-166-78.ruraltec.net.br[177.86.166.78]: SASL PLAIN authentication failed: Jul 31 05:16:33 mail.srvfarm.net postfix/smtps/smtpd[150916]: lost connection after AUTH from 177-86-166-78.ruraltec.net.br[177.86.166.78] Jul 31 05:19:09 mail.srvfarm.net postfix/smtps/smtpd[150918]: warning: 177-86-166-78.ruraltec.net.br[177.86.166.78]: SASL PLAIN authentication failed: Jul 31 05:19:09 mail.srvfarm.net postfix/smtps/smtpd[150918]: lost connection after AUTH from 177-86-166-78.ruraltec.net.br[177.86.166.78] Jul 31 05:22:52 mail.srvfarm.net postfix/smtps/smtpd[167740]: warning: 177-86-166-78.ruraltec.net.br[177.86.166.78]: SASL PLAIN authentication failed:	2020-07-31 17:18:25
188.226.131.171	attackspam	2020-07-31T11:27:06.950263mail.broermann.family sshd[24474]: Failed password for root from 188.226.131.171 port 56426 ssh2 2020-07-31T11:32:02.005240mail.broermann.family sshd[24706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.131.171 user=root 2020-07-31T11:32:04.278684mail.broermann.family sshd[24706]: Failed password for root from 188.226.131.171 port 39948 ssh2 2020-07-31T11:36:34.296462mail.broermann.family sshd[24973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.131.171 user=root 2020-07-31T11:36:36.715296mail.broermann.family sshd[24973]: Failed password for root from 188.226.131.171 port 51700 ssh2 ...	2020-07-31 17:42:51
77.45.84.250	attackbotsspam	Jul 31 05:13:22 mail.srvfarm.net postfix/smtps/smtpd[151052]: warning: 77-45-84-250.sta.asta-net.com.pl[77.45.84.250]: SASL PLAIN authentication failed: Jul 31 05:13:22 mail.srvfarm.net postfix/smtps/smtpd[151052]: lost connection after AUTH from 77-45-84-250.sta.asta-net.com.pl[77.45.84.250] Jul 31 05:15:02 mail.srvfarm.net postfix/smtpd[165373]: warning: 77-45-84-250.sta.asta-net.com.pl[77.45.84.250]: SASL PLAIN authentication failed: Jul 31 05:15:02 mail.srvfarm.net postfix/smtpd[165373]: lost connection after AUTH from 77-45-84-250.sta.asta-net.com.pl[77.45.84.250] Jul 31 05:19:11 mail.srvfarm.net postfix/smtps/smtpd[150911]: warning: 77-45-84-250.sta.asta-net.com.pl[77.45.84.250]: SASL PLAIN authentication failed:	2020-07-31 17:25:06
206.189.154.38	attackbots	Jul 31 05:31:24 firewall sshd[7400]: Failed password for root from 206.189.154.38 port 59262 ssh2 Jul 31 05:35:44 firewall sshd[7529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.154.38 user=root Jul 31 05:35:46 firewall sshd[7529]: Failed password for root from 206.189.154.38 port 42386 ssh2 ...	2020-07-31 17:02:35

最近上报的IP列表

47.172.216.191	162.253.42.29	168.198.33.106	218.255.150.226
93.36.112.135	36.153.155.97	219.21.83.86	155.49.27.21
198.50.172.218	136.247.192.238	76.93.32.74	162.216.67.184
63.175.159.27	108.213.56.31	109.39.124.1	4.57.42.124
154.48.66.101	125.157.79.107	8.136.45.222	111.67.205.230