42.4.244.145 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Unicom Liaoning Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorised access (Oct 10) SRC=42.4.244.145 LEN=40 TTL=49 ID=12867 TCP DPT=8080 WINDOW=44534 SYN Unauthorised access (Oct 10) SRC=42.4.244.145 LEN=40 TTL=49 ID=36005 TCP DPT=8080 WINDOW=44534 SYN Unauthorised access (Oct 8) SRC=42.4.244.145 LEN=40 TTL=49 ID=63998 TCP DPT=8080 WINDOW=58294 SYN	2019-10-10 14:12:06

类型

评论内容

时间

attack

Unauthorised access (Oct 10) SRC=42.4.244.145 LEN=40 TTL=49 ID=12867 TCP DPT=8080 WINDOW=44534 SYN 
Unauthorised access (Oct 10) SRC=42.4.244.145 LEN=40 TTL=49 ID=36005 TCP DPT=8080 WINDOW=44534 SYN 
Unauthorised access (Oct  8) SRC=42.4.244.145 LEN=40 TTL=49 ID=63998 TCP DPT=8080 WINDOW=58294 SYN

2019-10-10 14:12:06

相同子网IP讨论:

IP	类型	评论内容	时间
42.4.244.67	attackbots	firewall-block, port(s): 23/tcp	2020-01-26 16:02:50

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.4.244.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56186
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.4.244.145.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101000 1800 900 604800 86400

;; Query time: 353 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 10 14:12:03 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 145.244.4.42.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 145.244.4.42.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
89.121.172.28	attack	Automatic report - Port Scan Attack	2020-02-24 17:53:18
85.93.20.70	attack	RDP Bruteforce	2020-02-24 17:56:09
74.62.91.28	attack	suspicious action Mon, 24 Feb 2020 01:48:54 -0300	2020-02-24 18:02:53
118.24.99.163	attackbots	suspicious action Mon, 24 Feb 2020 01:49:23 -0300	2020-02-24 17:50:41
182.138.158.211	attackspambots	Fail2Ban Ban Triggered	2020-02-24 17:47:25
208.93.191.5	attackbots	Feb 23 23:47:24 auw2 sshd\[31553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.360pc.com user=root Feb 23 23:47:26 auw2 sshd\[31553\]: Failed password for root from 208.93.191.5 port 41138 ssh2 Feb 23 23:50:58 auw2 sshd\[31789\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.360pc.com user=mysql Feb 23 23:51:00 auw2 sshd\[31789\]: Failed password for mysql from 208.93.191.5 port 38908 ssh2 Feb 23 23:54:29 auw2 sshd\[32024\]: Invalid user admin from 208.93.191.5 Feb 23 23:54:29 auw2 sshd\[32024\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.360pc.com	2020-02-24 18:12:56
182.75.104.140	attack	suspicious action Mon, 24 Feb 2020 01:49:36 -0300	2020-02-24 17:46:01
49.34.172.150	attackbots	1582519766 - 02/24/2020 05:49:26 Host: 49.34.172.150/49.34.172.150 Port: 445 TCP Blocked	2020-02-24 17:49:27
117.247.178.206	attackspam	DATE:2020-02-24 05:48:03, IP:117.247.178.206, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc)	2020-02-24 18:19:33
202.178.120.26	attack	Feb 24 05:48:16 server postfix/smtpd[12063]: NOQUEUE: reject: RCPT from unknown[202.178.120.26]: 554 5.7.1 Service unavailable; Client host [202.178.120.26] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/202.178.120.26; from= to= proto=SMTP helo=	2020-02-24 18:13:56
203.57.58.221	attackspambots	ssh brute force	2020-02-24 18:10:48
162.243.135.230	attackbots	smtp	2020-02-24 18:04:51
114.116.141.49	attack	Feb 24 07:56:43 debian-2gb-nbg1-2 kernel: \[4786604.595465\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=114.116.141.49 DST=195.201.40.59 LEN=60 TOS=0x00 PREC=0x00 TTL=34 ID=60518 DF PROTO=TCP SPT=53558 DPT=6379 WINDOW=29200 RES=0x00 SYN URGP=0	2020-02-24 17:58:20
14.237.154.119	attackbots	Automatic report - Port Scan Attack	2020-02-24 18:08:31
39.36.85.238	attack	Port probing on unauthorized port 445	2020-02-24 18:10:23

最近上报的IP列表

171.96.239.200	167.71.249.84	183.7.176.64	149.154.65.156
36.161.37.76	27.205.202.72	121.206.41.188	210.214.105.49
123.133.252.106	113.27.54.21	122.53.51.73	222.92.61.242
124.120.148.83	244.9.185.240	45.118.132.11	160.168.105.98
137.194.37.173	138.117.149.13	175.6.247.195	114.228.77.154