42.118.98.169 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Attempt to attack host OS, exploiting network vulnerabilities, on 16-03-2020 14:45:15.	2020-03-16 23:52:10

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.118.98.169
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55679
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.118.98.169.			IN	A

;; AUTHORITY SECTION:
.			592	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031600 1800 900 604800 86400

;; Query time: 99 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 16 23:51:52 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 169.98.118.42.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 169.98.118.42.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
34.89.124.188	attackbots	34.89.124.188 - - [27/Apr/2020:05:56:48 +0200] "GET /wp-login.php HTTP/1.1" 200 5686 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.89.124.188 - - [27/Apr/2020:05:56:49 +0200] "POST /wp-login.php HTTP/1.1" 200 5991 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.89.124.188 - - [27/Apr/2020:05:56:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-27 14:37:07
222.186.52.39	attack	Automatic report BANNED IP	2020-04-27 14:21:11
173.240.42.171	attackbots	Automatic report - Port Scan Attack	2020-04-27 14:05:10
73.224.88.169	attackbotsspam	Apr 27 09:20:08 pkdns2 sshd\[11008\]: Invalid user hiwi from 73.224.88.169Apr 27 09:20:10 pkdns2 sshd\[11008\]: Failed password for invalid user hiwi from 73.224.88.169 port 43028 ssh2Apr 27 09:24:25 pkdns2 sshd\[11152\]: Invalid user da from 73.224.88.169Apr 27 09:24:28 pkdns2 sshd\[11152\]: Failed password for invalid user da from 73.224.88.169 port 55312 ssh2Apr 27 09:28:45 pkdns2 sshd\[11338\]: Invalid user rock from 73.224.88.169Apr 27 09:28:46 pkdns2 sshd\[11338\]: Failed password for invalid user rock from 73.224.88.169 port 39316 ssh2 ...	2020-04-27 14:45:05
198.245.53.163	attack	Invalid user email from 198.245.53.163 port 39776	2020-04-27 14:14:07
113.190.253.147	attackspambots	Unauthorised connection attempt detected at AUO NODE 1. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-04-27 14:37:55
119.28.132.211	attackbotsspam	Apr 27 06:20:59 web8 sshd\[14217\]: Invalid user patrick from 119.28.132.211 Apr 27 06:20:59 web8 sshd\[14217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.132.211 Apr 27 06:21:01 web8 sshd\[14217\]: Failed password for invalid user patrick from 119.28.132.211 port 37720 ssh2 Apr 27 06:23:45 web8 sshd\[15646\]: Invalid user gmod from 119.28.132.211 Apr 27 06:23:45 web8 sshd\[15646\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.132.211	2020-04-27 14:34:20
185.22.142.197	attackspam	Apr 27 07:37:43 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\<5K90Ej+kEZG5Fo7F\> Apr 27 07:37:45 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Apr 27 07:38:08 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Apr 27 07:43:19 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Apr 27 07:43:21 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 ...	2020-04-27 14:00:53
45.55.184.78	attackspambots	Apr 27 07:47:34 ns381471 sshd[16733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.184.78 Apr 27 07:47:36 ns381471 sshd[16733]: Failed password for invalid user salgado from 45.55.184.78 port 53684 ssh2	2020-04-27 14:02:41
89.222.181.58	attack	Apr 27 12:41:53 webhost01 sshd[11466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.222.181.58 Apr 27 12:41:55 webhost01 sshd[11466]: Failed password for invalid user lm from 89.222.181.58 port 38820 ssh2 ...	2020-04-27 14:12:53
222.186.180.6	attack	Apr 27 08:04:42 ArkNodeAT sshd\[12783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6 user=root Apr 27 08:04:44 ArkNodeAT sshd\[12783\]: Failed password for root from 222.186.180.6 port 64030 ssh2 Apr 27 08:04:47 ArkNodeAT sshd\[12783\]: Failed password for root from 222.186.180.6 port 64030 ssh2	2020-04-27 14:07:32
177.43.236.178	attack	Invalid user peihongtao from 177.43.236.178 port 43608	2020-04-27 14:14:57
50.194.122.164	attack	ssh brute force	2020-04-27 14:42:47
139.59.95.60	attack	SSH brutforce	2020-04-27 14:15:19
61.160.96.90	attack	Apr 27 08:09:31 jane sshd[25313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.160.96.90 Apr 27 08:09:33 jane sshd[25313]: Failed password for invalid user root01 from 61.160.96.90 port 5186 ssh2 ...	2020-04-27 14:16:01

最近上报的IP列表

83.135.154.156	212.227.17.21	44.142.143.158	192.107.128.64
30.128.112.165	189.50.42.154	8.43.153.91	200.149.177.251
185.135.184.214	197.237.39.39	5.2.64.121	208.122.245.207
247.96.4.138	172.247.123.207	63.190.190.86	120.34.19.150
76.134.108.30	137.136.115.245	103.238.203.246	195.231.0.210