城市(city): Ho Chi Minh City
省份(region): Ho Chi Minh
国家(country): Vietnam
运营商(isp): FPT Telecom Company
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): Fixed Line ISP
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attack | Unauthorized connection attempt detected from IP address 42.119.75.67 to port 23 [J] |
2020-02-05 21:24:12 |
| attackbots | Unauthorized connection attempt detected from IP address 42.119.75.67 to port 23 [J] |
2020-01-31 05:24:08 |
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 42.119.75.120 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-05-28 17:16:34 |
| 42.119.75.76 | attack | Unauthorized connection attempt detected from IP address 42.119.75.76 to port 23 [J] |
2020-01-30 23:56:32 |
| 42.119.75.31 | attackbotsspam | Telnetd brute force attack detected by fail2ban |
2019-10-30 01:10:12 |
| 42.119.75.72 | attackbots | port scan and connect, tcp 23 (telnet) |
2019-10-29 05:09:28 |
| 42.119.75.128 | attack | port scan and connect, tcp 23 (telnet) |
2019-10-23 23:22:22 |
| 42.119.75.25 | attack | Unauthorised access (Oct 6) SRC=42.119.75.25 LEN=40 TTL=48 ID=44696 TCP DPT=8080 WINDOW=39814 SYN Unauthorised access (Oct 6) SRC=42.119.75.25 LEN=40 TTL=48 ID=43552 TCP DPT=8080 WINDOW=39814 SYN Unauthorised access (Oct 6) SRC=42.119.75.25 LEN=40 TTL=48 ID=60912 TCP DPT=8080 WINDOW=39814 SYN Unauthorised access (Oct 6) SRC=42.119.75.25 LEN=40 TTL=48 ID=50945 TCP DPT=8080 WINDOW=287 SYN |
2019-10-07 01:10:08 |
| 42.119.75.25 | attackspam | (Oct 5) LEN=40 TTL=47 ID=65261 TCP DPT=8080 WINDOW=39814 SYN (Oct 5) LEN=40 TTL=47 ID=51330 TCP DPT=8080 WINDOW=23298 SYN (Oct 5) LEN=40 TTL=47 ID=40892 TCP DPT=8080 WINDOW=39814 SYN (Oct 4) LEN=40 TTL=47 ID=16925 TCP DPT=8080 WINDOW=39814 SYN (Oct 4) LEN=40 TTL=47 ID=53265 TCP DPT=8080 WINDOW=35283 SYN (Oct 4) LEN=40 TTL=47 ID=15828 TCP DPT=8080 WINDOW=287 SYN (Oct 3) LEN=40 TTL=47 ID=10848 TCP DPT=8080 WINDOW=35283 SYN (Oct 3) LEN=40 TTL=47 ID=12964 TCP DPT=8080 WINDOW=23298 SYN (Oct 3) LEN=40 TTL=47 ID=50388 TCP DPT=8080 WINDOW=35283 SYN (Oct 3) LEN=40 TTL=47 ID=14031 TCP DPT=8080 WINDOW=23298 SYN (Oct 2) LEN=40 TTL=47 ID=12066 TCP DPT=8080 WINDOW=35283 SYN (Oct 2) LEN=40 TTL=47 ID=50850 TCP DPT=8080 WINDOW=287 SYN (Oct 2) LEN=40 TTL=47 ID=56638 TCP DPT=8080 WINDOW=23298 SYN (Oct 2) LEN=40 TTL=47 ID=33100 TCP DPT=8080 WINDOW=287 SYN (Oct 1) LEN=40 TTL=47 ID=42434 TCP DPT=8080 WINDOW=35283 SYN (Oct 1) LEN=40 TTL=47 ID=348... |
2019-10-05 14:01:50 |
| 42.119.75.33 | attackspambots | Unauthorised access (Oct 3) SRC=42.119.75.33 LEN=40 TTL=47 ID=32612 TCP DPT=8080 WINDOW=18588 SYN Unauthorised access (Oct 2) SRC=42.119.75.33 LEN=40 TTL=47 ID=25187 TCP DPT=8080 WINDOW=18588 SYN Unauthorised access (Oct 2) SRC=42.119.75.33 LEN=40 TTL=47 ID=11213 TCP DPT=8080 WINDOW=30380 SYN Unauthorised access (Oct 2) SRC=42.119.75.33 LEN=40 TTL=47 ID=34414 TCP DPT=8080 WINDOW=61220 SYN Unauthorised access (Oct 2) SRC=42.119.75.33 LEN=40 TTL=47 ID=12385 TCP DPT=8080 WINDOW=20884 SYN Unauthorised access (Oct 2) SRC=42.119.75.33 LEN=40 TTL=47 ID=541 TCP DPT=8080 WINDOW=20884 SYN Unauthorised access (Oct 1) SRC=42.119.75.33 LEN=40 TTL=47 ID=10615 TCP DPT=8080 WINDOW=61220 SYN Unauthorised access (Oct 1) SRC=42.119.75.33 LEN=40 TTL=47 ID=34640 TCP DPT=8080 WINDOW=61220 SYN |
2019-10-03 05:49:23 |
| 42.119.75.18 | attackbots | Unauthorised access (Oct 1) SRC=42.119.75.18 LEN=40 TTL=47 ID=21481 TCP DPT=8080 WINDOW=42293 SYN Unauthorised access (Oct 1) SRC=42.119.75.18 LEN=40 TTL=47 ID=27621 TCP DPT=8080 WINDOW=13749 SYN Unauthorised access (Oct 1) SRC=42.119.75.18 LEN=40 TTL=47 ID=48053 TCP DPT=8080 WINDOW=42293 SYN Unauthorised access (Oct 1) SRC=42.119.75.18 LEN=40 TTL=47 ID=14772 TCP DPT=8080 WINDOW=7061 SYN |
2019-10-01 21:48:40 |
| 42.119.75.149 | attackspam | [portscan] Port scan |
2019-10-01 12:51:26 |
| 42.119.75.53 | attack | Port scan attempt detected by AWS-CCS, CTS, India |
2019-09-01 08:50:19 |
| 42.119.75.213 | attack | [portscan] tcp/23 [TELNET] *(RWIN=15867)(08041230) |
2019-08-05 00:37:29 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.119.75.67
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29062
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.119.75.67. IN A
;; AUTHORITY SECTION:
. 447 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020013003 1800 900 604800 86400
;; Query time: 111 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 05:24:04 CST 2020
;; MSG SIZE rcvd: 116Host 67.75.119.42.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 67.75.119.42.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 59.56.69.16 | attackbotsspam | Trying ports that it shouldn't be. |
2019-12-28 17:08:29 |
| 103.79.154.104 | attackbotsspam | Dec 28 07:40:58 jane sshd[16914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.79.154.104 Dec 28 07:41:00 jane sshd[16914]: Failed password for invalid user kinnaird from 103.79.154.104 port 42208 ssh2 ... |
2019-12-28 17:08:14 |
| 106.13.22.60 | attackbots | Invalid user sys from 106.13.22.60 port 36030 |
2019-12-28 17:11:30 |
| 218.92.0.141 | attack | Dec 28 10:15:36 ns381471 sshd[31081]: Failed password for root from 218.92.0.141 port 32416 ssh2 Dec 28 10:15:49 ns381471 sshd[31081]: error: maximum authentication attempts exceeded for root from 218.92.0.141 port 32416 ssh2 [preauth] |
2019-12-28 17:16:52 |
| 128.199.142.148 | attackspambots | IP blocked |
2019-12-28 17:21:26 |
| 138.99.216.171 | attack | spam |
2019-12-28 17:42:16 |
| 132.148.105.132 | attackspambots | 132.148.105.132 - - [28/Dec/2019:06:25:57 +0000] "POST /wp-login.php HTTP/1.1" 200 6393 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 132.148.105.132 - - [28/Dec/2019:06:25:57 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-12-28 17:34:54 |
| 218.92.0.157 | attackbots | 2019-12-28T09:23:33.300444shield sshd\[13870\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.157 user=root 2019-12-28T09:23:35.351806shield sshd\[13870\]: Failed password for root from 218.92.0.157 port 51513 ssh2 2019-12-28T09:23:38.391834shield sshd\[13870\]: Failed password for root from 218.92.0.157 port 51513 ssh2 2019-12-28T09:23:41.522854shield sshd\[13870\]: Failed password for root from 218.92.0.157 port 51513 ssh2 2019-12-28T09:23:45.025273shield sshd\[13870\]: Failed password for root from 218.92.0.157 port 51513 ssh2 |
2019-12-28 17:24:22 |
| 92.63.194.90 | attackspambots | Dec 28 09:48:07 localhost sshd\[8638\]: Invalid user admin from 92.63.194.90 port 44906 Dec 28 09:48:07 localhost sshd\[8638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.90 Dec 28 09:48:09 localhost sshd\[8638\]: Failed password for invalid user admin from 92.63.194.90 port 44906 ssh2 |
2019-12-28 17:05:18 |
| 185.143.221.85 | attackbotsspam | unauthorized access on port 443 [https] FO |
2019-12-28 17:37:13 |
| 94.255.130.161 | attack | Honeypot attack, port: 23, PTR: 94-255-130-161.cust.bredband2.com. |
2019-12-28 17:31:11 |
| 106.13.168.150 | attackspam | Dec 28 09:09:55 server sshd\[7020\]: Invalid user admin from 106.13.168.150 Dec 28 09:09:55 server sshd\[7020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150 Dec 28 09:09:57 server sshd\[7020\]: Failed password for invalid user admin from 106.13.168.150 port 49302 ssh2 Dec 28 09:26:41 server sshd\[10611\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150 user=root Dec 28 09:26:43 server sshd\[10611\]: Failed password for root from 106.13.168.150 port 56000 ssh2 ... |
2019-12-28 17:06:58 |
| 144.91.71.205 | attack | Honeypot attack, port: 23, PTR: vmi310767.contaboserver.net. |
2019-12-28 17:34:42 |
| 222.186.175.155 | attack | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155 user=root Failed password for root from 222.186.175.155 port 38266 ssh2 Failed password for root from 222.186.175.155 port 38266 ssh2 Failed password for root from 222.186.175.155 port 38266 ssh2 Failed password for root from 222.186.175.155 port 38266 ssh2 |
2019-12-28 17:18:44 |
| 31.13.191.85 | attack | 0,45-13/06 [bc01/m08] PostRequest-Spammer scoring: essen |
2019-12-28 17:27:33 |