42.119.75.33 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Unauthorised access (Oct 3) SRC=42.119.75.33 LEN=40 TTL=47 ID=32612 TCP DPT=8080 WINDOW=18588 SYN Unauthorised access (Oct 2) SRC=42.119.75.33 LEN=40 TTL=47 ID=25187 TCP DPT=8080 WINDOW=18588 SYN Unauthorised access (Oct 2) SRC=42.119.75.33 LEN=40 TTL=47 ID=11213 TCP DPT=8080 WINDOW=30380 SYN Unauthorised access (Oct 2) SRC=42.119.75.33 LEN=40 TTL=47 ID=34414 TCP DPT=8080 WINDOW=61220 SYN Unauthorised access (Oct 2) SRC=42.119.75.33 LEN=40 TTL=47 ID=12385 TCP DPT=8080 WINDOW=20884 SYN Unauthorised access (Oct 2) SRC=42.119.75.33 LEN=40 TTL=47 ID=541 TCP DPT=8080 WINDOW=20884 SYN Unauthorised access (Oct 1) SRC=42.119.75.33 LEN=40 TTL=47 ID=10615 TCP DPT=8080 WINDOW=61220 SYN Unauthorised access (Oct 1) SRC=42.119.75.33 LEN=40 TTL=47 ID=34640 TCP DPT=8080 WINDOW=61220 SYN	2019-10-03 05:49:23

类型

评论内容

时间

attackspambots

Unauthorised access (Oct  3) SRC=42.119.75.33 LEN=40 TTL=47 ID=32612 TCP DPT=8080 WINDOW=18588 SYN 
Unauthorised access (Oct  2) SRC=42.119.75.33 LEN=40 TTL=47 ID=25187 TCP DPT=8080 WINDOW=18588 SYN 
Unauthorised access (Oct  2) SRC=42.119.75.33 LEN=40 TTL=47 ID=11213 TCP DPT=8080 WINDOW=30380 SYN 
Unauthorised access (Oct  2) SRC=42.119.75.33 LEN=40 TTL=47 ID=34414 TCP DPT=8080 WINDOW=61220 SYN 
Unauthorised access (Oct  2) SRC=42.119.75.33 LEN=40 TTL=47 ID=12385 TCP DPT=8080 WINDOW=20884 SYN 
Unauthorised access (Oct  2) SRC=42.119.75.33 LEN=40 TTL=47 ID=541 TCP DPT=8080 WINDOW=20884 SYN 
Unauthorised access (Oct  1) SRC=42.119.75.33 LEN=40 TTL=47 ID=10615 TCP DPT=8080 WINDOW=61220 SYN 
Unauthorised access (Oct  1) SRC=42.119.75.33 LEN=40 TTL=47 ID=34640 TCP DPT=8080 WINDOW=61220 SYN

2019-10-03 05:49:23

相同子网IP讨论:

IP	类型	评论内容	时间
42.119.75.120	attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-05-28 17:16:34
42.119.75.67	attack	Unauthorized connection attempt detected from IP address 42.119.75.67 to port 23 [J]	2020-02-05 21:24:12
42.119.75.67	attackbots	Unauthorized connection attempt detected from IP address 42.119.75.67 to port 23 [J]	2020-01-31 05:24:08
42.119.75.76	attack	Unauthorized connection attempt detected from IP address 42.119.75.76 to port 23 [J]	2020-01-30 23:56:32
42.119.75.31	attackbotsspam	Telnetd brute force attack detected by fail2ban	2019-10-30 01:10:12
42.119.75.72	attackbots	port scan and connect, tcp 23 (telnet)	2019-10-29 05:09:28
42.119.75.128	attack	port scan and connect, tcp 23 (telnet)	2019-10-23 23:22:22
42.119.75.25	attack	Unauthorised access (Oct 6) SRC=42.119.75.25 LEN=40 TTL=48 ID=44696 TCP DPT=8080 WINDOW=39814 SYN Unauthorised access (Oct 6) SRC=42.119.75.25 LEN=40 TTL=48 ID=43552 TCP DPT=8080 WINDOW=39814 SYN Unauthorised access (Oct 6) SRC=42.119.75.25 LEN=40 TTL=48 ID=60912 TCP DPT=8080 WINDOW=39814 SYN Unauthorised access (Oct 6) SRC=42.119.75.25 LEN=40 TTL=48 ID=50945 TCP DPT=8080 WINDOW=287 SYN	2019-10-07 01:10:08
42.119.75.25	attackspam	(Oct 5) LEN=40 TTL=47 ID=65261 TCP DPT=8080 WINDOW=39814 SYN (Oct 5) LEN=40 TTL=47 ID=51330 TCP DPT=8080 WINDOW=23298 SYN (Oct 5) LEN=40 TTL=47 ID=40892 TCP DPT=8080 WINDOW=39814 SYN (Oct 4) LEN=40 TTL=47 ID=16925 TCP DPT=8080 WINDOW=39814 SYN (Oct 4) LEN=40 TTL=47 ID=53265 TCP DPT=8080 WINDOW=35283 SYN (Oct 4) LEN=40 TTL=47 ID=15828 TCP DPT=8080 WINDOW=287 SYN (Oct 3) LEN=40 TTL=47 ID=10848 TCP DPT=8080 WINDOW=35283 SYN (Oct 3) LEN=40 TTL=47 ID=12964 TCP DPT=8080 WINDOW=23298 SYN (Oct 3) LEN=40 TTL=47 ID=50388 TCP DPT=8080 WINDOW=35283 SYN (Oct 3) LEN=40 TTL=47 ID=14031 TCP DPT=8080 WINDOW=23298 SYN (Oct 2) LEN=40 TTL=47 ID=12066 TCP DPT=8080 WINDOW=35283 SYN (Oct 2) LEN=40 TTL=47 ID=50850 TCP DPT=8080 WINDOW=287 SYN (Oct 2) LEN=40 TTL=47 ID=56638 TCP DPT=8080 WINDOW=23298 SYN (Oct 2) LEN=40 TTL=47 ID=33100 TCP DPT=8080 WINDOW=287 SYN (Oct 1) LEN=40 TTL=47 ID=42434 TCP DPT=8080 WINDOW=35283 SYN (Oct 1) LEN=40 TTL=47 ID=348...	2019-10-05 14:01:50
42.119.75.18	attackbots	Unauthorised access (Oct 1) SRC=42.119.75.18 LEN=40 TTL=47 ID=21481 TCP DPT=8080 WINDOW=42293 SYN Unauthorised access (Oct 1) SRC=42.119.75.18 LEN=40 TTL=47 ID=27621 TCP DPT=8080 WINDOW=13749 SYN Unauthorised access (Oct 1) SRC=42.119.75.18 LEN=40 TTL=47 ID=48053 TCP DPT=8080 WINDOW=42293 SYN Unauthorised access (Oct 1) SRC=42.119.75.18 LEN=40 TTL=47 ID=14772 TCP DPT=8080 WINDOW=7061 SYN	2019-10-01 21:48:40
42.119.75.149	attackspam	[portscan] Port scan	2019-10-01 12:51:26
42.119.75.53	attack	Port scan attempt detected by AWS-CCS, CTS, India	2019-09-01 08:50:19
42.119.75.213	attack	[portscan] tcp/23 [TELNET] *(RWIN=15867)(08041230)	2019-08-05 00:37:29

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.119.75.33
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55418
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.119.75.33.			IN	A

;; AUTHORITY SECTION:
.			537	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100203 1800 900 604800 86400

;; Query time: 499 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 03 05:49:20 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 33.75.119.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 33.75.119.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
164.160.34.5	attackbotsspam	ICMP MH Probe, Scan /Distributed -	2020-07-30 22:51:52
45.129.33.7	attackspam	TCP (SYN) 45.129.33.7:52386 -> port 5663, len 44	2020-07-30 22:53:45
66.68.187.145	attackspambots	2020-07-30T14:06:39.382543v22018076590370373 sshd[18954]: Failed password for root from 66.68.187.145 port 38024 ssh2 2020-07-30T14:11:00.182963v22018076590370373 sshd[13681]: Invalid user kcyong from 66.68.187.145 port 51712 2020-07-30T14:11:00.188522v22018076590370373 sshd[13681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.68.187.145 2020-07-30T14:11:00.182963v22018076590370373 sshd[13681]: Invalid user kcyong from 66.68.187.145 port 51712 2020-07-30T14:11:02.787658v22018076590370373 sshd[13681]: Failed password for invalid user kcyong from 66.68.187.145 port 51712 ssh2 ...	2020-07-30 22:43:28
183.66.65.203	attackspambots	Automatic report - Banned IP Access	2020-07-30 22:48:19
112.85.42.200	attackspam	Jul 30 19:43:46 gw1 sshd[18336]: Failed password for root from 112.85.42.200 port 39628 ssh2 Jul 30 19:43:50 gw1 sshd[18336]: Failed password for root from 112.85.42.200 port 39628 ssh2 ...	2020-07-30 22:52:08
123.241.133.30	attackbots	TCP (SYN) 123.241.133.30:31898 -> port 23, len 40	2020-07-30 22:21:01
106.54.65.139	attack	Jul 30 16:58:07 lukav-desktop sshd\[10035\]: Invalid user maze from 106.54.65.139 Jul 30 16:58:07 lukav-desktop sshd\[10035\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.65.139 Jul 30 16:58:09 lukav-desktop sshd\[10035\]: Failed password for invalid user maze from 106.54.65.139 port 58498 ssh2 Jul 30 17:01:31 lukav-desktop sshd\[10061\]: Invalid user choicelog from 106.54.65.139 Jul 30 17:01:31 lukav-desktop sshd\[10061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.65.139	2020-07-30 22:15:18
216.218.206.116	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-07-30 22:28:05
128.14.16.173	attackspam	Lines containing failures of 128.14.16.173 Jul 28 12:53:39 shared02 sshd[1803]: Invalid user gzy from 128.14.16.173 port 34524 Jul 28 12:53:39 shared02 sshd[1803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.14.16.173 Jul 28 12:53:42 shared02 sshd[1803]: Failed password for invalid user gzy from 128.14.16.173 port 34524 ssh2 Jul 28 12:53:42 shared02 sshd[1803]: Received disconnect from 128.14.16.173 port 34524:11: Bye Bye [preauth] Jul 28 12:53:42 shared02 sshd[1803]: Disconnected from invalid user gzy 128.14.16.173 port 34524 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=128.14.16.173	2020-07-30 22:24:45
187.141.128.42	attackspam	2020-07-30T16:12:37.445589vps751288.ovh.net sshd\[26687\]: Invalid user infusion-stoked from 187.141.128.42 port 37256 2020-07-30T16:12:37.453704vps751288.ovh.net sshd\[26687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.141.128.42 2020-07-30T16:12:39.800836vps751288.ovh.net sshd\[26687\]: Failed password for invalid user infusion-stoked from 187.141.128.42 port 37256 ssh2 2020-07-30T16:15:39.538640vps751288.ovh.net sshd\[26693\]: Invalid user licongyue from 187.141.128.42 port 34744 2020-07-30T16:15:39.549341vps751288.ovh.net sshd\[26693\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.141.128.42	2020-07-30 22:25:40
92.119.161.4	attackspam	Registration form abuse	2020-07-30 22:40:51
36.89.213.100	attackbotsspam	Jul 28 04:15:35 cumulus sshd[10493]: Invalid user baishan from 36.89.213.100 port 53442 Jul 28 04:15:35 cumulus sshd[10493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.89.213.100 Jul 28 04:15:37 cumulus sshd[10493]: Failed password for invalid user baishan from 36.89.213.100 port 53442 ssh2 Jul 28 04:15:37 cumulus sshd[10493]: Received disconnect from 36.89.213.100 port 53442:11: Bye Bye [preauth] Jul 28 04:15:37 cumulus sshd[10493]: Disconnected from 36.89.213.100 port 53442 [preauth] Jul 28 04:28:16 cumulus sshd[11574]: Invalid user zoujing from 36.89.213.100 port 36664 Jul 28 04:28:16 cumulus sshd[11574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.89.213.100 Jul 28 04:28:18 cumulus sshd[11574]: Failed password for invalid user zoujing from 36.89.213.100 port 36664 ssh2 Jul 28 04:28:19 cumulus sshd[11574]: Received disconnect from 36.89.213.100 port 36664:11: Bye Bye [preau........ -------------------------------	2020-07-30 22:14:33
142.217.140.186	attack	Lines containing failures of 142.217.140.186 Jul 28 13:49:28 shared04 sshd[32545]: Invalid user pi from 142.217.140.186 port 35400 Jul 28 13:49:28 shared04 sshd[32545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.217.140.186 Jul 28 13:49:28 shared04 sshd[32547]: Invalid user pi from 142.217.140.186 port 35410 Jul 28 13:49:28 shared04 sshd[32547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.217.140.186 Jul 28 13:49:31 shared04 sshd[32545]: Failed password for invalid user pi from 142.217.140.186 port 35400 ssh2 Jul 28 13:49:31 shared04 sshd[32545]: Connection closed by invalid user pi 142.217.140.186 port 35400 [preauth] Jul 28 13:49:31 shared04 sshd[32547]: Failed password for invalid user pi from 142.217.140.186 port 35410 ssh2 Jul 28 13:49:31 shared04 sshd[32547]: Connection closed by invalid user pi 142.217.140.186 port 35410 [preauth] ........ ----------------------------------------------- https://www.blockl	2020-07-30 22:29:46
152.231.93.130	attackbotsspam	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-07-30T11:40:55Z and 2020-07-30T12:08:13Z	2020-07-30 22:15:39
184.105.247.246	attack	TCP (SYN) 184.105.247.246:33963 -> port 4786, len 44	2020-07-30 22:26:03

最近上报的IP列表

69.207.124.83	215.211.216.188	182.133.247.238	185.129.113.227
32.31.230.193	154.70.108.201	187.159.144.17	209.107.95.174
117.143.159.12	83.13.150.206	218.86.143.246	101.103.46.159
78.96.177.153	168.186.138.49	61.185.127.133	51.68.126.44
203.74.132.232	2.58.229.213	167.114.67.46	166.62.84.17