42.119.97.6 - IPInfo

基本信息:

城市(city): Da Nang

省份(region): Da Nang

国家(country): Vietnam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Unauthorized connection attempt detected from IP address 42.119.97.6 to port 23	2020-01-01 03:52:00

相同子网IP讨论:

IP	类型	评论内容	时间
42.119.97.155	attackbotsspam	Unauthorized connection attempt detected from IP address 42.119.97.155 to port 23 [J]	2020-01-29 00:49:07
42.119.97.203	attackspam	Unauthorized connection attempt detected from IP address 42.119.97.203 to port 23 [J]	2020-01-21 04:01:42
42.119.97.203	attackspambots	Unauthorized connection attempt detected from IP address 42.119.97.203 to port 23 [J]	2020-01-18 14:58:28

类型

评论内容

时间

42.119.97.155

attackbotsspam

Unauthorized connection attempt detected from IP address 42.119.97.155 to port 23 [J]

2020-01-29 00:49:07

42.119.97.203

attackspam

Unauthorized connection attempt detected from IP address 42.119.97.203 to port 23 [J]

2020-01-21 04:01:42

42.119.97.203

attackspambots

Unauthorized connection attempt detected from IP address 42.119.97.203 to port 23 [J]

2020-01-18 14:58:28

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.119.97.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57473
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.119.97.6.			IN	A

;; AUTHORITY SECTION:
.			490	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019123101 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 01 03:51:57 CST 2020
;; MSG SIZE  rcvd: 115

HOST信息:

Host 6.97.119.42.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 6.97.119.42.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
188.166.244.121	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-07-12T03:45:42Z and 2020-07-12T03:55:07Z	2020-07-12 13:33:37
185.220.100.252	attackspambots	Unauthorized connection attempt detected from IP address 185.220.100.252 to port 10001	2020-07-12 13:48:15
218.92.0.192	attackbotsspam	07/12/2020-01:41:55.276082 218.92.0.192 Protocol: 6 ET SCAN Potential SSH Scan	2020-07-12 13:43:52
115.221.244.169	attackbotsspam	spam (f2b h2)	2020-07-12 13:19:40
97.74.229.113	attackspambots	Port Scan detected from 97.74.229.113 (US/United States/Arizona/Scottsdale (North Scottsdale)/ip-97-74-229-113.ip.secureserver.net). 4 hits in the last 210 seconds	2020-07-12 13:29:54
200.27.212.22	attackbotsspam	Invalid user lutiantian from 200.27.212.22 port 43810	2020-07-12 13:15:00
182.151.58.230	attackbotsspam	SSH Login Bruteforce	2020-07-12 13:48:46
54.36.182.244	attackbotsspam	Jul 12 01:02:15 ws19vmsma01 sshd[55068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.182.244 Jul 12 01:02:17 ws19vmsma01 sshd[55068]: Failed password for invalid user renzh from 54.36.182.244 port 49805 ssh2 ...	2020-07-12 13:12:29
190.128.175.6	attack	Jul 12 05:51:25 v22019038103785759 sshd\[31226\]: Invalid user www from 190.128.175.6 port 27510 Jul 12 05:51:25 v22019038103785759 sshd\[31226\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.175.6 Jul 12 05:51:27 v22019038103785759 sshd\[31226\]: Failed password for invalid user www from 190.128.175.6 port 27510 ssh2 Jul 12 05:55:12 v22019038103785759 sshd\[31366\]: Invalid user evelyn from 190.128.175.6 port 54279 Jul 12 05:55:12 v22019038103785759 sshd\[31366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.175.6 ...	2020-07-12 13:25:55
75.31.93.181	attackbots	Port Scan detected from 75.31.93.181 (US/United States/Texas/Plano/-). 4 hits in the last 256 seconds	2020-07-12 13:31:26
45.67.229.177	attackbotsspam	[2020-07-12 01:18:22] NOTICE[1150] chan_sip.c: Registration from '"111" ' failed for '45.67.229.177:5398' - Wrong password [2020-07-12 01:18:22] SECURITY[1167] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-12T01:18:22.794-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="111",SessionID="0x7fcb4c25c888",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.67.229.177/5398",Challenge="517f2ab1",ReceivedChallenge="517f2ab1",ReceivedHash="566a19ebfe9519273dceda7e4eda5cf7" [2020-07-12 01:18:23] NOTICE[1150] chan_sip.c: Registration from '"111" ' failed for '45.67.229.177:5398' - Wrong password [2020-07-12 01:18:23] SECURITY[1167] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-12T01:18:23.013-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="111",SessionID="0x7fcb4c39fbd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.67.22 ...	2020-07-12 13:20:37
113.193.243.35	attackbotsspam	Jul 12 05:14:21 hcbbdb sshd\[17472\]: Invalid user caron from 113.193.243.35 Jul 12 05:14:21 hcbbdb sshd\[17472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.193.243.35 Jul 12 05:14:24 hcbbdb sshd\[17472\]: Failed password for invalid user caron from 113.193.243.35 port 43274 ssh2 Jul 12 05:18:14 hcbbdb sshd\[17891\]: Invalid user octavius from 113.193.243.35 Jul 12 05:18:14 hcbbdb sshd\[17891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.193.243.35	2020-07-12 13:21:21
89.136.142.244	attackbotsspam	Invalid user gongmq from 89.136.142.244 port 38384	2020-07-12 13:12:03
62.234.74.168	attack	Jul 12 07:03:51 pkdns2 sshd\[912\]: Invalid user liup from 62.234.74.168Jul 12 07:03:52 pkdns2 sshd\[912\]: Failed password for invalid user liup from 62.234.74.168 port 39804 ssh2Jul 12 07:07:53 pkdns2 sshd\[1132\]: Invalid user ralph from 62.234.74.168Jul 12 07:07:55 pkdns2 sshd\[1132\]: Failed password for invalid user ralph from 62.234.74.168 port 54584 ssh2Jul 12 07:12:01 pkdns2 sshd\[1411\]: Invalid user takushi from 62.234.74.168Jul 12 07:12:02 pkdns2 sshd\[1411\]: Failed password for invalid user takushi from 62.234.74.168 port 41136 ssh2 ...	2020-07-12 13:28:02
182.254.244.109	attackspam	Jul 12 07:33:04 haigwepa sshd[4968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.254.244.109 Jul 12 07:33:07 haigwepa sshd[4968]: Failed password for invalid user boreas from 182.254.244.109 port 37204 ssh2 ...	2020-07-12 13:42:37

最近上报的IP列表

176.165.197.82	192.169.117.205	223.152.38.82	207.153.0.31
223.149.182.32	175.75.101.48	199.74.182.202	71.114.221.13
50.4.224.235	220.194.201.125	74.130.83.32	219.71.35.55
60.231.139.88	111.76.233.144	202.121.40.103	116.189.194.125
210.22.82.231	3.125.29.177	194.135.233.150	158.119.107.174