42.98.201.169 - IPInfo

基本信息:

城市(city): Central

省份(region): Central and Western District

国家(country): Hong Kong

运营商(isp): Hong Kong Telecommunications (HKT) Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Port 22 Scan, PTR: None	2019-12-26 17:21:52
attackspam	Automatic report - Banned IP Access	2019-11-27 05:40:36
attackspam	Oct 27 13:00:17 rdssrv1 sshd[4827]: Failed password for r.r from 42.98.201.169 port 42584 ssh2 Oct 27 13:00:22 rdssrv1 sshd[4843]: Failed password for r.r from 42.98.201.169 port 43050 ssh2 Oct 27 13:00:28 rdssrv1 sshd[4845]: Failed password for r.r from 42.98.201.169 port 43554 ssh2 Oct 27 13:00:34 rdssrv1 sshd[4855]: Failed password for r.r from 42.98.201.169 port 44016 ssh2 Oct 27 13:00:41 rdssrv1 sshd[4859]: Failed password for r.r from 42.98.201.169 port 44572 ssh2 Oct 27 13:00:46 rdssrv1 sshd[4861]: Failed password for r.r from 42.98.201.169 port 45120 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=42.98.201.169	2019-10-28 02:33:35

类型

评论内容

时间

attack

Port 22 Scan, PTR: None

2019-12-26 17:21:52

attackspam

Automatic report - Banned IP Access

2019-11-27 05:40:36

attackspam

Oct 27 13:00:17 rdssrv1 sshd[4827]: Failed password for r.r from 42.98.201.169 port 42584 ssh2
Oct 27 13:00:22 rdssrv1 sshd[4843]: Failed password for r.r from 42.98.201.169 port 43050 ssh2
Oct 27 13:00:28 rdssrv1 sshd[4845]: Failed password for r.r from 42.98.201.169 port 43554 ssh2
Oct 27 13:00:34 rdssrv1 sshd[4855]: Failed password for r.r from 42.98.201.169 port 44016 ssh2
Oct 27 13:00:41 rdssrv1 sshd[4859]: Failed password for r.r from 42.98.201.169 port 44572 ssh2
Oct 27 13:00:46 rdssrv1 sshd[4861]: Failed password for r.r from 42.98.201.169 port 45120 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=42.98.201.169

2019-10-28 02:33:35

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.98.201.169
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25659
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.98.201.169.			IN	A

;; AUTHORITY SECTION:
.			590	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102701 1800 900 604800 86400

;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 28 02:33:32 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

169.201.98.42.in-addr.arpa domain name pointer 42-98-201-169.static.netvigator.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
169.201.98.42.in-addr.arpa	name = 42-98-201-169.static.netvigator.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
51.223.213.73	attackspam	Unauthorized connection attempt from IP address 51.223.213.73 on Port 445(SMB)	2020-09-07 00:12:24
162.243.130.67	attackbots	9043/tcp 22/tcp 5632/udp... [2020-08-24/09-06]11pkt,10pt.(tcp),1pt.(udp)	2020-09-06 23:52:05
213.49.57.234	attackbots	Port Scan detected! ...	2020-09-07 00:27:41
90.151.180.215	attackspam	Dovecot Invalid User Login Attempt.	2020-09-06 23:58:28
177.129.137.119	attackbotsspam	2020-08-31 07:15:06 plain_virtual_exim authenticator failed for ([177.129.137.119]) [177.129.137.119]: 535 Incorrect authentication data ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=177.129.137.119	2020-09-07 00:09:46
110.86.183.70	attackbotsspam	Multiple SSH authentication failures from 110.86.183.70	2020-09-07 00:01:50
223.235.185.241	attack	2020-09-05 11:36:29.170007-0500 localhost smtpd[41784]: NOQUEUE: reject: RCPT from unknown[223.235.185.241]: 554 5.7.1 Service unavailable; Client host [223.235.185.241] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/223.235.185.241; from= to= proto=ESMTP helo=<[223.235.185.241]>	2020-09-07 00:15:52
63.83.79.103	attackspam	Aug 31 07:16:01 mxgate1 postfix/postscreen[25387]: CONNECT from [63.83.79.103]:42228 to [176.31.12.44]:25 Aug 31 07:16:02 mxgate1 postfix/dnsblog[25391]: addr 63.83.79.103 listed by domain zen.spamhaus.org as 127.0.0.3 Aug 31 07:16:02 mxgate1 postfix/dnsblog[25391]: addr 63.83.79.103 listed by domain zen.spamhaus.org as 127.0.0.2 Aug 31 07:16:02 mxgate1 postfix/dnsblog[25388]: addr 63.83.79.103 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Aug 31 07:16:02 mxgate1 postfix/dnsblog[25389]: addr 63.83.79.103 listed by domain b.barracudacentral.org as 127.0.0.2 Aug 31 07:16:07 mxgate1 postfix/postscreen[25387]: DNSBL rank 4 for [63.83.79.103]:42228 Aug x@x Aug 31 07:16:07 mxgate1 postfix/postscreen[25387]: DISCONNECT [63.83.79.103]:42228 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=63.83.79.103	2020-09-07 00:21:49
222.186.42.57	attackbotsspam	Sep 6 21:05:24 gw1 sshd[14134]: Failed password for root from 222.186.42.57 port 24596 ssh2 ...	2020-09-07 00:08:39
178.32.163.202	attackspambots	178.32.163.202 (FR/France/-), 7 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 6 10:21:15 server2 sshd[20192]: Failed password for root from 178.32.163.202 port 39872 ssh2 Sep 6 10:20:30 server2 sshd[19770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.150.77 user=root Sep 6 10:18:23 server2 sshd[18592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.235.94 user=root Sep 6 10:17:31 server2 sshd[18039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.52.68.21 user=root Sep 6 10:17:32 server2 sshd[18039]: Failed password for root from 60.52.68.21 port 35728 ssh2 Sep 6 10:20:32 server2 sshd[19770]: Failed password for root from 150.109.150.77 port 33414 ssh2 Sep 6 10:18:25 server2 sshd[18592]: Failed password for root from 167.172.235.94 port 40036 ssh2 IP Addresses Blocked:	2020-09-07 00:19:44
184.22.201.129	attack	2020-09-06 02:40:05.268076-0500 localhost smtpd[16817]: NOQUEUE: reject: RCPT from unknown[184.22.201.129]: 554 5.7.1 Service unavailable; Client host [184.22.201.129] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/184.22.201.129 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<184-22-201-0.24.myaisfibre.com>	2020-09-07 00:15:01
94.102.51.95	attack	TCP (SYN) 94.102.51.95:54697 -> port 46909, len 44	2020-09-07 00:06:48
45.95.168.96	attackbotsspam	2020-09-06T10:02:41.578651linuxbox-skyline auth[115562]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=support rhost=45.95.168.96 ...	2020-09-07 00:08:12
140.143.95.201	attackbotsspam	$f2bV_matches	2020-09-06 23:59:57
103.78.15.2	attackbotsspam	Automatic report - Banned IP Access	2020-09-06 23:45:03

最近上报的IP列表

214.65.114.119	217.68.217.37	157.33.81.244	220.11.240.205
217.68.217.36	217.68.217.32	128.194.88.210	131.252.213.235
116.210.11.15	217.68.217.3	75.39.50.97	77.15.157.158
198.1.82.247	68.233.221.41	195.24.255.157	168.194.53.205
61.166.232.178	153.210.36.0	172.83.156.148	90.43.160.197