42.119.63.125 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Lines containing failures of 42.119.63.125 Mar 11 11:34:12 shared11 sshd[5411]: Did not receive identification string from 42.119.63.125 port 11749 Mar 11 11:34:42 shared11 sshd[5414]: Invalid user thostname0nich from 42.119.63.125 port 12506 Mar 11 11:34:46 shared11 sshd[5414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.119.63.125 Mar 11 11:34:49 shared11 sshd[5414]: Failed password for invalid user thostname0nich from 42.119.63.125 port 12506 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=42.119.63.125	2020-03-12 00:52:34

类型

评论内容

时间

attackspambots

Lines containing failures of 42.119.63.125
Mar 11 11:34:12 shared11 sshd[5411]: Did not receive identification string from 42.119.63.125 port 11749
Mar 11 11:34:42 shared11 sshd[5414]: Invalid user thostname0nich from 42.119.63.125 port 12506
Mar 11 11:34:46 shared11 sshd[5414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.119.63.125
Mar 11 11:34:49 shared11 sshd[5414]: Failed password for invalid user thostname0nich from 42.119.63.125 port 12506 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=42.119.63.125

2020-03-12 00:52:34

相同子网IP讨论:

IP	类型	评论内容	时间
42.119.63.216	attackbotsspam	Unauthorized connection attempt from IP address 42.119.63.216 on Port 445(SMB)	2020-08-21 00:52:53
42.119.63.130	attackspam	Invalid user Administrator from 42.119.63.130 port 63569	2020-04-04 04:14:24
42.119.63.207	attack	445/tcp [2020-03-16]1pkt	2020-03-17 07:03:34
42.119.63.241	attackbots	1583383750 - 03/05/2020 05:49:10 Host: 42.119.63.241/42.119.63.241 Port: 445 TCP Blocked	2020-03-05 17:29:57
42.119.63.215	attack	1581601657 - 02/13/2020 14:47:37 Host: 42.119.63.215/42.119.63.215 Port: 445 TCP Blocked	2020-02-14 01:33:27
42.119.63.57	attack	Unauthorized connection attempt detected from IP address 42.119.63.57 to port 445 [T]	2020-01-21 04:18:26
42.119.63.197	attackbots	Unauthorized connection attempt from IP address 42.119.63.197 on Port 445(SMB)	2019-12-23 05:55:01
42.119.63.27	attackbotsspam	[WedDec1815:29:49.8071222019][:error][pid17598:tid140308599772928][client42.119.63.27:51320][client42.119.63.27]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\\|WormlyBot\\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"398"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(DisableifyouwanttoallowMSIE6\)"][severity"WARNING"][hostname"galardi.ch"][uri"/"][unique_id"Xfo33dqHSgKeT0vYKHLiSAAAAMo"][WedDec1815:29:57.1412392019][:error][pid30501:tid140308762294016][client42.119.63.27:40294][client42.119.63.27]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\\|WormlyBot\\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"398"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(Disableifyouwant	2019-12-19 06:39:10
42.119.63.55	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 06-11-2019 14:40:34.	2019-11-07 00:14:54

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.119.63.125
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49982
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.119.63.125.			IN	A

;; AUTHORITY SECTION:
.			235	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031100 1800 900 604800 86400

;; Query time: 93 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 12 00:52:29 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 125.63.119.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 125.63.119.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
112.172.147.34	attackbotsspam	SASL PLAIN auth failed: ruser=...	2020-01-11 05:05:12
113.253.18.124	attack	Honeypot attack, port: 5555, PTR: 124-18-253-113-on-nets.com.	2020-01-11 05:13:24
218.92.0.168	attackspambots	Jan 10 21:12:51 sshgateway sshd\[29912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root Jan 10 21:12:53 sshgateway sshd\[29912\]: Failed password for root from 218.92.0.168 port 51409 ssh2 Jan 10 21:12:57 sshgateway sshd\[29912\]: Failed password for root from 218.92.0.168 port 51409 ssh2	2020-01-11 05:14:09
36.69.130.176	attackspam	1578660657 - 01/10/2020 13:50:57 Host: 36.69.130.176/36.69.130.176 Port: 445 TCP Blocked	2020-01-11 05:00:41
37.59.224.39	attackbots	Jan 10 05:10:41 web9 sshd\[18427\]: Invalid user oah from 37.59.224.39 Jan 10 05:10:41 web9 sshd\[18427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.224.39 Jan 10 05:10:43 web9 sshd\[18427\]: Failed password for invalid user oah from 37.59.224.39 port 55213 ssh2 Jan 10 05:13:33 web9 sshd\[18954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.224.39 user=root Jan 10 05:13:35 web9 sshd\[18954\]: Failed password for root from 37.59.224.39 port 39360 ssh2	2020-01-11 05:09:15
79.186.63.199	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/79.186.63.199/ PL - 1H : (51) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : PL NAME ASN : ASN5617 IP : 79.186.63.199 CIDR : 79.184.0.0/14 PREFIX COUNT : 183 UNIQUE IP COUNT : 5363456 ATTACKS DETECTED ASN5617 : 1H - 1 3H - 3 6H - 5 12H - 12 24H - 25 DateTime : 2020-01-10 13:51:04 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2020-01-11 04:55:17
31.207.47.72	attackbotsspam	3389BruteforceFW22	2020-01-11 04:55:00
112.207.103.112	attackspam	1578660642 - 01/10/2020 13:50:42 Host: 112.207.103.112/112.207.103.112 Port: 445 TCP Blocked	2020-01-11 05:08:28
123.28.12.175	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-11 05:24:01
200.1.208.172	attack	Jan 10 13:50:59 grey postfix/smtpd\[26112\]: NOQUEUE: reject: RCPT from unknown\[200.1.208.172\]: 554 5.7.1 Service unavailable\; Client host \[200.1.208.172\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?200.1.208.172\; from=\ to=\ proto=ESMTP helo=\<200-1-208-172-revzone.parbo.net\> ...	2020-01-11 04:58:36
102.114.199.63	attackbots	Jan 10 13:50:47 grey postfix/smtpd\[11956\]: NOQUEUE: reject: RCPT from unknown\[102.114.199.63\]: 554 5.7.1 Service unavailable\; Client host \[102.114.199.63\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=102.114.199.63\; from=\ to=\ proto=ESMTP helo=\<\[102.114.199.63\]\> ...	2020-01-11 05:05:43
122.252.239.5	attack	2020-01-10T21:08:19.467031shield sshd\[8849\]: Invalid user kkr from 122.252.239.5 port 54462 2020-01-10T21:08:19.471843shield sshd\[8849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.252.239.5 2020-01-10T21:08:21.449404shield sshd\[8849\]: Failed password for invalid user kkr from 122.252.239.5 port 54462 ssh2 2020-01-10T21:11:47.318681shield sshd\[10108\]: Invalid user hdfs from 122.252.239.5 port 55812 2020-01-10T21:11:47.327872shield sshd\[10108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.252.239.5	2020-01-11 05:19:34
128.71.113.88	attack	port 23	2020-01-11 05:08:13
94.102.56.181	attackspambots	firewall-block, port(s): 3855/tcp, 3860/tcp	2020-01-11 04:51:30
54.38.139.210	attackbots	Jan 10 21:08:12 v22018076622670303 sshd\[1456\]: Invalid user nn from 54.38.139.210 port 34826 Jan 10 21:08:12 v22018076622670303 sshd\[1456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.139.210 Jan 10 21:08:14 v22018076622670303 sshd\[1456\]: Failed password for invalid user nn from 54.38.139.210 port 34826 ssh2 ...	2020-01-11 04:51:07

最近上报的IP列表

181.80.92.91	46.4.159.197	39.36.53.89	171.237.188.76
111.32.171.44	110.191.210.70	124.123.42.25	123.58.5.36
58.8.208.127	7.127.209.128	216.228.209.168	199.35.74.89
114.41.84.76	45.205.212.222	50.181.79.123	23.196.195.59
1.77.235.89	176.106.180.155	156.96.60.157	14.172.121.195