42.119.241.107

基本信息:

城市(city): Vũng Tàu

省份(region): Tinh Ba Ria-Vung Tau

国家(country): Vietnam

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
42.119.241.114	attackspam	Automatic report - Port Scan Attack	2020-02-20 04:49:43
42.119.241.231	attack	Unauthorized connection attempt detected from IP address 42.119.241.231 to port 23 [J]	2020-01-29 20:53:10
42.119.241.231	attackspam	Unauthorized connection attempt detected from IP address 42.119.241.231 to port 23 [J]	2020-01-27 01:42:54
42.119.241.236	attack	Unauthorized connection attempt detected from IP address 42.119.241.236 to port 23 [J]	2020-01-27 01:19:34
42.119.241.13	attackspam	Unauthorized connection attempt detected from IP address 42.119.241.13 to port 23 [T]	2020-01-15 23:00:23

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.119.241.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6430
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;42.119.241.107.			IN	A

;; AUTHORITY SECTION:
.			138	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021102 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 12 11:54:51 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

Host 107.241.119.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 107.241.119.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
42.113.60.241	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-07 08:39:49
112.85.42.102	attack	Sep 7 05:54:29 mout sshd[28997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.102 user=root Sep 7 05:54:32 mout sshd[28997]: Failed password for root from 112.85.42.102 port 46008 ssh2	2020-09-07 12:04:39
185.54.156.5	attackspam	Port scan: Attack repeated for 24 hours	2020-09-07 08:38:03
192.241.220.88	attackbotsspam	Scanned 1 times in the last 24 hours on port 22	2020-09-07 12:10:25
51.195.7.14	attackspambots	[2020-09-07 00:05:38] NOTICE[1194] chan_sip.c: Registration from '' failed for '51.195.7.14:50445' - Wrong password [2020-09-07 00:05:38] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-07T00:05:38.878-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7057",SessionID="0x7f2ddc27a9a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.195.7.14/50445",Challenge="62781fb3",ReceivedChallenge="62781fb3",ReceivedHash="a619f9d1db93b51c3b6b153590330632" [2020-09-07 00:06:10] NOTICE[1194] chan_sip.c: Registration from '' failed for '51.195.7.14:62741' - Wrong password [2020-09-07 00:06:10] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-07T00:06:10.866-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3000",SessionID="0x7f2ddc00cc78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.195.7.14/62741", ...	2020-09-07 12:07:06
180.76.109.16	attack	Sep 7 00:45:30 *** sshd[9108]: User root from 180.76.109.16 not allowed because not listed in AllowUsers	2020-09-07 08:46:21
154.221.28.224	attack	Failed password for root from 154.221.28.224 port 49288 ssh2	2020-09-07 08:42:38
106.52.90.84	attack	Sep 7 06:04:20 root sshd[29373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.90.84 ...	2020-09-07 12:12:34
112.85.42.200	attackspam	Sep 7 06:20:36 ucs sshd\[10761\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.200 user=root Sep 7 06:20:38 ucs sshd\[10754\]: error: PAM: User not known to the underlying authentication module for root from 112.85.42.200 Sep 7 06:20:40 ucs sshd\[10764\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.200 user=root ...	2020-09-07 12:21:36
106.13.233.32	attack	Sep 6 19:52:26 h1745522 sshd[20789]: Invalid user andrew from 106.13.233.32 port 36800 Sep 6 19:52:26 h1745522 sshd[20789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.233.32 Sep 6 19:52:26 h1745522 sshd[20789]: Invalid user andrew from 106.13.233.32 port 36800 Sep 6 19:52:28 h1745522 sshd[20789]: Failed password for invalid user andrew from 106.13.233.32 port 36800 ssh2 Sep 6 19:55:07 h1745522 sshd[21248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.233.32 user=root Sep 6 19:55:09 h1745522 sshd[21248]: Failed password for root from 106.13.233.32 port 40630 ssh2 Sep 6 19:57:50 h1745522 sshd[21774]: Invalid user aDmin from 106.13.233.32 port 44432 Sep 6 19:57:50 h1745522 sshd[21774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.233.32 Sep 6 19:57:50 h1745522 sshd[21774]: Invalid user aDmin from 106.13.233.32 port 44432 Sep 6 1 ...	2020-09-07 08:52:40
112.119.33.54	attack	Honeypot attack, port: 5555, PTR: n11211933054.netvigator.com.	2020-09-07 12:15:59
144.217.60.239	attackbots	(sshd) Failed SSH login from 144.217.60.239 (CA/Canada/ip239.ip-144-217-60.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 6 20:38:50 server sshd[26541]: Failed password for root from 144.217.60.239 port 47380 ssh2 Sep 6 20:38:52 server sshd[26541]: Failed password for root from 144.217.60.239 port 47380 ssh2 Sep 6 20:38:56 server sshd[26541]: Failed password for root from 144.217.60.239 port 47380 ssh2 Sep 6 20:38:57 server sshd[26541]: Failed password for root from 144.217.60.239 port 47380 ssh2 Sep 6 20:39:00 server sshd[26541]: Failed password for root from 144.217.60.239 port 47380 ssh2	2020-09-07 08:39:15
117.61.241.147	attack	20/9/6@19:20:51: FAIL: Alarm-Network address from=117.61.241.147 ...	2020-09-07 12:20:45
218.92.0.133	attackspam	Sep 7 14:06:06 localhost sshd[2192553]: Unable to negotiate with 218.92.0.133 port 44972: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ...	2020-09-07 12:07:41
34.64.225.109	attackspambots	Forbidden directory scan :: 2020/09/06 18:54:51 [error] 1010#1010: *1652268 access forbidden by rule, client: 34.64.225.109, server: [censored_1], request: "GET //.env HTTP/1.1", host: "www.[censored_1]"	2020-09-07 08:52:59

最近上报的IP列表

42.119.241.249	42.224.125.68	42.224.252.243	42.224.25.134
42.224.44.200	42.224.27.179	2.101.143.15	42.224.25.30
42.224.66.219	42.225.210.211	42.226.85.181	42.226.73.36
42.226.82.138	42.227.224.146	42.228.102.73	42.227.210.66
42.228.44.96	42.226.113.67	42.227.208.244	42.228.99.220