42.2.216.123 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Hong Kong Telecommunications (HKT) Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	(sshd) Failed SSH login from 42.2.216.123 (HK/Hong Kong/42-2-216-123.static.netvigator.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 13 19:19:58 ubnt-55d23 sshd[29420]: Invalid user ftpuser from 42.2.216.123 port 56520 Apr 13 19:20:01 ubnt-55d23 sshd[29420]: Failed password for invalid user ftpuser from 42.2.216.123 port 56520 ssh2	2020-04-14 02:26:39
attackbots	Invalid user odroid from 42.2.216.123	2020-04-06 21:43:21

类型

评论内容

时间

attack

(sshd) Failed SSH login from 42.2.216.123 (HK/Hong Kong/42-2-216-123.static.netvigator.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 13 19:19:58 ubnt-55d23 sshd[29420]: Invalid user ftpuser from 42.2.216.123 port 56520
Apr 13 19:20:01 ubnt-55d23 sshd[29420]: Failed password for invalid user ftpuser from 42.2.216.123 port 56520 ssh2

2020-04-14 02:26:39

attackbots

Invalid user odroid from 42.2.216.123

2020-04-06 21:43:21

相同子网IP讨论:

IP	类型	评论内容	时间
42.2.216.18	attackspambots	Honeypot attack, port: 5555, PTR: 42-2-216-018.static.netvigator.com.	2020-01-04 22:36:36

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.2.216.123
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42169
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.2.216.123.			IN	A

;; AUTHORITY SECTION:
.			486	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020040600 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 06 21:43:15 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

123.216.2.42.in-addr.arpa domain name pointer 42-2-216-123.static.netvigator.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
123.216.2.42.in-addr.arpa	name = 42-2-216-123.static.netvigator.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
42.231.162.228	attackspam	Brute force attempt	2020-02-20 23:21:06
118.174.232.237	attackbotsspam	suspicious action Thu, 20 Feb 2020 10:29:21 -0300	2020-02-20 23:06:07
185.175.93.34	attack	900/tcp 6693/tcp 1000/tcp... [2019-12-21/2020-02-20]477pkt,111pt.(tcp)	2020-02-20 22:58:34
104.148.90.102	attackbotsspam	suspicious action Thu, 20 Feb 2020 10:28:47 -0300	2020-02-20 23:31:55
167.89.100.227	attackbots	Feb 20 14:29:07 grey postfix/smtpd\[15189\]: NOQUEUE: reject: RCPT from o1.31pqt.s2shared.sendgrid.net\[167.89.100.227\]: 554 5.7.1 Service unavailable\; Client host \[167.89.100.227\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?167.89.100.227\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-20 23:13:15
222.186.175.215	attackspambots	Feb 20 22:05:58 lcl-usvr-01 sshd[13046]: refused connect from 222.186.175.215 (222.186.175.215) Feb 20 22:06:49 lcl-usvr-01 sshd[13323]: refused connect from 222.186.175.215 (222.186.175.215) Feb 20 22:10:35 lcl-usvr-01 sshd[14491]: refused connect from 222.186.175.215 (222.186.175.215)	2020-02-20 23:23:50
179.127.193.166	attack	Fail2Ban Ban Triggered	2020-02-20 23:20:11
222.186.30.167	attackbots	Feb 20 20:57:04 areeb-Workstation sshd[10885]: Failed password for root from 222.186.30.167 port 48860 ssh2 Feb 20 20:57:08 areeb-Workstation sshd[10885]: Failed password for root from 222.186.30.167 port 48860 ssh2 ...	2020-02-20 23:30:19
51.178.52.185	attackspam	Lines containing failures of 51.178.52.185 Feb 19 06:16:52 myhost sshd[2093]: Invalid user user1 from 51.178.52.185 port 36313 Feb 19 06:16:52 myhost sshd[2093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.52.185 Feb 19 06:16:54 myhost sshd[2093]: Failed password for invalid user user1 from 51.178.52.185 port 36313 ssh2 Feb 19 06:16:54 myhost sshd[2093]: Received disconnect from 51.178.52.185 port 36313:11: Bye Bye [preauth] Feb 19 06:16:54 myhost sshd[2093]: Disconnected from invalid user user1 51.178.52.185 port 36313 [preauth] Feb 19 06:41:00 myhost sshd[2782]: Invalid user pengcan from 51.178.52.185 port 44637 Feb 19 06:41:00 myhost sshd[2782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.52.185 Feb 19 06:41:03 myhost sshd[2782]: Failed password for invalid user pengcan from 51.178.52.185 port 44637 ssh2 Feb 19 06:41:03 myhost sshd[2782]: Received disconnect from 51.1........ ------------------------------	2020-02-20 23:19:49
178.33.229.120	attack	Feb 20 14:50:31 host sshd[42430]: Invalid user tanwei from 178.33.229.120 port 55091 ...	2020-02-20 23:29:33
183.88.234.159	attackspam	1582205326 - 02/20/2020 14:28:46 Host: 183.88.234.159/183.88.234.159 Port: 445 TCP Blocked	2020-02-20 23:31:14
89.144.47.246	attackspambots	Unauthorised access (Feb 20) SRC=89.144.47.246 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=796 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 19) SRC=89.144.47.246 LEN=40 TTL=246 ID=61760 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 19) SRC=89.144.47.246 LEN=40 TTL=248 ID=12661 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 19) SRC=89.144.47.246 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=33747 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 18) SRC=89.144.47.246 LEN=40 TTL=246 ID=52430 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 18) SRC=89.144.47.246 LEN=40 TTL=246 ID=42575 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 17) SRC=89.144.47.246 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=44560 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 17) SRC=89.144.47.246 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=28706 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 16) SRC=89.144.47.246 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=23437 TCP DPT=3389 WINDOW=1024 SYN	2020-02-20 23:01:38
140.143.58.46	attackspam	Feb 20 13:28:52 *** sshd[3773]: Invalid user michael from 140.143.58.46	2020-02-20 23:21:28
92.63.194.106	attack	$f2bV_matches	2020-02-20 23:36:01
206.81.12.209	attackbots	DATE:2020-02-20 14:28:51, IP:206.81.12.209, PORT:ssh SSH brute force auth (docker-dc)	2020-02-20 23:25:59

最近上报的IP列表

14.231.218.69	203.171.25.202	181.52.249.177	59.93.50.122
36.67.75.225	5.114.163.245	206.189.205.124	178.205.245.12
171.232.253.1	156.222.151.49	194.27.251.214	106.13.59.224
189.69.97.253	13.81.222.209	93.92.10.108	208.176.151.217
38.51.102.143	45.63.107.23	115.214.234.53	229.168.39.235