42.6.171.57 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Unicom Liaoning Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Unauthorised access (Oct 8) SRC=42.6.171.57 LEN=40 TTL=49 ID=25107 TCP DPT=8080 WINDOW=42931 SYN Unauthorised access (Oct 8) SRC=42.6.171.57 LEN=40 TTL=49 ID=41805 TCP DPT=8080 WINDOW=42931 SYN Unauthorised access (Oct 7) SRC=42.6.171.57 LEN=40 TTL=49 ID=37673 TCP DPT=8080 WINDOW=42931 SYN	2019-10-09 07:57:43

类型

评论内容

时间

attackbotsspam

Unauthorised access (Oct  8) SRC=42.6.171.57 LEN=40 TTL=49 ID=25107 TCP DPT=8080 WINDOW=42931 SYN 
Unauthorised access (Oct  8) SRC=42.6.171.57 LEN=40 TTL=49 ID=41805 TCP DPT=8080 WINDOW=42931 SYN 
Unauthorised access (Oct  7) SRC=42.6.171.57 LEN=40 TTL=49 ID=37673 TCP DPT=8080 WINDOW=42931 SYN

2019-10-09 07:57:43

相同子网IP讨论:

IP	类型	评论内容	时间
42.6.171.122	attackspam	" "	2020-01-07 07:06:16
42.6.171.103	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-07-02 03:50:36

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.6.171.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27693
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.6.171.57.			IN	A

;; AUTHORITY SECTION:
.			538	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100802 1800 900 604800 86400

;; Query time: 131 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 09 07:57:40 CST 2019
;; MSG SIZE  rcvd: 115

HOST信息:

Host 57.171.6.42.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 57.171.6.42.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
209.88.94.138	attackbotsspam	Unauthorized connection attempt from IP address 209.88.94.138 on Port 445(SMB)	2020-08-31 23:29:15
173.225.106.10	attackspam	SSH invalid-user multiple login try	2020-08-31 23:15:01
106.52.33.247	attackbots	Aug 31 15:35:39 server sshd[2157]: Failed password for invalid user sati from 106.52.33.247 port 57034 ssh2 Aug 31 15:39:50 server sshd[4090]: Failed password for invalid user susi from 106.52.33.247 port 41468 ssh2 Aug 31 15:43:56 server sshd[6051]: Failed password for invalid user ex from 106.52.33.247 port 54128 ssh2	2020-08-31 23:50:13
165.227.181.118	attackspambots	$f2bV_matches	2020-08-31 23:35:25
185.147.215.8	attack	[2020-08-31 11:53:49] NOTICE[1185] chan_sip.c: Registration from '' failed for '185.147.215.8:62067' - Wrong password [2020-08-31 11:53:49] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-31T11:53:49.836-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2122",SessionID="0x7f10c43e3a48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/62067",Challenge="6b1deb87",ReceivedChallenge="6b1deb87",ReceivedHash="785c65521afe50d58c77246004c28628" [2020-08-31 11:54:12] NOTICE[1185] chan_sip.c: Registration from '' failed for '185.147.215.8:57401' - Wrong password [2020-08-31 11:54:12] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-31T11:54:12.295-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2448",SessionID="0x7f10c4286a78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8 ...	2020-08-31 23:57:11
58.56.198.122	attackbots	TCP (SYN) 58.56.198.122:56510 -> port 445, len 52	2020-08-31 23:25:58
142.44.211.57	attack	Repeated brute force against a port	2020-08-31 23:37:47
45.62.242.26	attackbotsspam	45.62.242.26 - - [31/Aug/2020:14:34:52 +0200] "GET /wp-login.php HTTP/1.1" 200 9040 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.62.242.26 - - [31/Aug/2020:14:34:55 +0200] "POST /wp-login.php HTTP/1.1" 200 9291 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.62.242.26 - - [31/Aug/2020:14:34:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-31 23:22:24
139.199.4.219	attackspam	SSH Login Bruteforce	2020-08-31 23:27:47
178.63.23.84	attack	178.63.23.84 - - [31/Aug/2020:13:22:36 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 178.63.23.84 - - [31/Aug/2020:13:35:03 +0100] "POST /wp-login.php HTTP/1.1" 200 1835 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 178.63.23.84 - - [31/Aug/2020:13:35:03 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-31 23:13:51
118.70.233.206	attack	2020-08-31T14:50:11.237696shield sshd\[14915\]: Invalid user test from 118.70.233.206 port 49588 2020-08-31T14:50:11.261510shield sshd\[14915\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.233.206 2020-08-31T14:50:13.600091shield sshd\[14915\]: Failed password for invalid user test from 118.70.233.206 port 49588 ssh2 2020-08-31T14:55:16.901628shield sshd\[16285\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.233.206 user=root 2020-08-31T14:55:19.110311shield sshd\[16285\]: Failed password for root from 118.70.233.206 port 57222 ssh2	2020-08-31 23:07:04
111.75.248.5	attackspam	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-08-31 23:54:50
49.49.45.28	attackbotsspam	Unauthorized connection attempt from IP address 49.49.45.28 on Port 445(SMB)	2020-08-31 23:32:50
193.218.118.130	attack	contact form abuse	2020-08-31 23:33:19
209.97.134.82	attack	Total attacks: 2	2020-08-31 23:47:17

最近上报的IP列表

33.199.113.166	208.13.182.52	61.89.103.228	206.195.0.62
159.65.136.141	184.67.105.182	177.93.79.18	189.42.132.143
240.229.224.220	200.46.103.162	212.139.106.179	38.196.230.129
125.113.135.104	135.22.114.249	23.79.47.132	214.255.181.251
113.28.189.189	236.194.100.10	116.76.155.240	244.142.238.124