66.42.5.20 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Telastic

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Unauthorized connection attempt detected from IP address 66.42.5.20 to port 23	2020-05-13 03:01:00
attack	Unauthorized connection attempt detected from IP address 66.42.5.20 to port 23	2020-05-04 16:45:03

相同子网IP讨论:

IP	类型	评论内容	时间
66.42.55.203	attackspambots	66.42.55.203 - - [03/Sep/2020:07:45:15 +0100] "POST /wp-login.php HTTP/1.1" 200 1791 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 66.42.55.203 - - [03/Sep/2020:07:45:18 +0100] "POST /wp-login.php HTTP/1.1" 200 1772 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 66.42.55.203 - - [03/Sep/2020:07:45:19 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-03 23:10:39
66.42.55.203	attackspambots	66.42.55.203 - - [03/Sep/2020:06:39:06 +0100] "POST /wp-login.php HTTP/1.1" 200 2420 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 66.42.55.203 - - [03/Sep/2020:06:39:08 +0100] "POST /wp-login.php HTTP/1.1" 200 2415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 66.42.55.203 - - [03/Sep/2020:06:39:10 +0100] "POST /wp-login.php HTTP/1.1" 200 2415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-03 14:44:53
66.42.55.203	attack	66.42.55.203 - - [02/Sep/2020:22:46:26 +0100] "POST /wp-login.php HTTP/1.1" 200 1948 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 66.42.55.203 - - [02/Sep/2020:22:46:28 +0100] "POST /wp-login.php HTTP/1.1" 200 1890 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 66.42.55.203 - - [02/Sep/2020:22:46:31 +0100] "POST /wp-login.php HTTP/1.1" 200 1887 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-03 06:58:02
66.42.50.81	attack	WordPress wp-login brute force :: 66.42.50.81 0.124 - [10/Aug/2020:12:09:06 0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 1837 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1"	2020-08-10 20:46:18
66.42.5.235	attackbotsspam	Unauthorized connection attempt detected from IP address 66.42.5.235 to port 23	2020-07-09 06:50:12
66.42.5.241	attackspambots	Unauthorized connection attempt detected from IP address 66.42.5.241 to port 23	2020-07-09 06:07:59
66.42.5.241	attack	Unauthorized connection attempt detected from IP address 66.42.5.241 to port 23	2020-07-07 04:04:23
66.42.52.214	attackbots	[Aegis] @ 2019-07-26 05:30:25 0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack	2020-04-29 20:22:51
66.42.56.21	attackbots	66.42.56.21 - - \[22/Apr/2020:09:27:32 +0200\] "POST /wp-login.php HTTP/1.0" 200 6811 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 66.42.56.21 - - \[22/Apr/2020:09:27:35 +0200\] "POST /wp-login.php HTTP/1.0" 200 6809 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 66.42.56.21 - - \[22/Apr/2020:09:27:37 +0200\] "POST /wp-login.php HTTP/1.0" 200 6657 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2020-04-22 19:26:46
66.42.52.160	attackspam	Automatic report - XMLRPC Attack	2020-04-22 19:05:09
66.42.56.21	attackspam	Apr 21 23:49:37 wordpress wordpress(www.ruhnke.cloud)[97586]: Blocked authentication attempt for admin from ::ffff:66.42.56.21	2020-04-22 06:11:39
66.42.52.160	attackspambots	ENG,WP GET /wp-login.php	2020-04-22 03:58:45
66.42.5.164	attackbots	Unauthorized connection attempt detected from IP address 66.42.5.164 to port 23	2020-04-13 04:03:16
66.42.56.21	attack	Automatic report - XMLRPC Attack	2020-04-01 19:37:51
66.42.56.21	attackspambots	xmlrpc attack	2020-03-08 13:21:40

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.42.5.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59407
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;66.42.5.20.			IN	A

;; AUTHORITY SECTION:
.			467	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050400 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 04 16:44:54 CST 2020
;; MSG SIZE  rcvd: 114

HOST信息:

Host 20.5.42.66.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 100.100.2.136, trying next server
;; Got SERVFAIL reply from 100.100.2.138, trying next server
Server:		100.100.2.136
Address:	100.100.2.136#53

** server can't find 20.5.42.66.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
173.239.37.152	attackspam	[Aegis] @ 2019-10-10 04:50:55 0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack	2019-10-10 15:00:48
222.186.31.145	attack	$f2bV_matches	2019-10-10 15:01:52
103.230.155.6	attackspam	2019-10-09 22:50:32 H=(loveless.it) [103.230.155.6]:46388 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.11, 127.0.0.3) (https://www.spamhaus.org/query/ip/103.230.155.6) 2019-10-09 22:50:33 H=(loveless.it) [103.230.155.6]:46388 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-10-09 22:50:33 H=(loveless.it) [103.230.155.6]:46388 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-10-10 15:23:16
164.132.107.245	attackbots	2019-10-10T04:21:51.062124abusebot-2.cloudsearch.cf sshd\[11318\]: Invalid user P4SSW0RD2017 from 164.132.107.245 port 44048	2019-10-10 15:11:02
103.92.84.102	attack	Oct 10 06:32:28 ns381471 sshd[1259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.92.84.102 Oct 10 06:32:29 ns381471 sshd[1259]: Failed password for invalid user 123Panel from 103.92.84.102 port 39904 ssh2 Oct 10 06:37:44 ns381471 sshd[1461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.92.84.102	2019-10-10 14:58:54
5.244.159.106	attackbotsspam	B: Magento admin pass /admin/ test (wrong country)	2019-10-10 15:36:26
54.37.154.254	attack	Oct 10 05:43:53 SilenceServices sshd[20473]: Failed password for root from 54.37.154.254 port 35318 ssh2 Oct 10 05:47:32 SilenceServices sshd[21470]: Failed password for root from 54.37.154.254 port 55123 ssh2	2019-10-10 15:03:26
91.121.109.45	attackspam	Oct 10 07:44:33 OPSO sshd\[28287\]: Invalid user Atlantique-123 from 91.121.109.45 port 59081 Oct 10 07:44:33 OPSO sshd\[28287\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.109.45 Oct 10 07:44:35 OPSO sshd\[28287\]: Failed password for invalid user Atlantique-123 from 91.121.109.45 port 59081 ssh2 Oct 10 07:48:38 OPSO sshd\[28940\]: Invalid user Atlantique@123 from 91.121.109.45 port 50901 Oct 10 07:48:38 OPSO sshd\[28940\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.109.45	2019-10-10 15:16:14
94.177.240.4	attackbotsspam	2019-10-10T07:02:02.483177abusebot.cloudsearch.cf sshd\[9176\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.240.4 user=root	2019-10-10 15:03:12
117.71.57.170	attackspambots	RDP Bruteforce	2019-10-10 15:14:35
106.13.165.94	attackspambots	Oct 6 19:35:34 carla sshd[31963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.165.94 user=r.r Oct 6 19:35:36 carla sshd[31963]: Failed password for r.r from 106.13.165.94 port 58850 ssh2 Oct 6 19:35:36 carla sshd[31964]: Received disconnect from 106.13.165.94: 11: Bye Bye Oct 6 19:55:23 carla sshd[32152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.165.94 user=r.r Oct 6 19:55:26 carla sshd[32152]: Failed password for r.r from 106.13.165.94 port 52336 ssh2 Oct 6 19:55:26 carla sshd[32153]: Received disconnect from 106.13.165.94: 11: Bye Bye Oct 6 19:59:34 carla sshd[32160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.165.94 user=r.r Oct 6 19:59:36 carla sshd[32160]: Failed password for r.r from 106.13.165.94 port 32830 ssh2 Oct 6 19:59:36 carla sshd[32161]: Received disconnect from 106.13.165.94: 11: Bye Bye ........ -------------------------------	2019-10-10 15:02:43
96.57.28.210	attackspambots	Fail2Ban - SSH Bruteforce Attempt	2019-10-10 15:14:06
62.234.73.104	attackspam	Oct 10 07:36:37 markkoudstaal sshd[19578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.73.104 Oct 10 07:36:39 markkoudstaal sshd[19578]: Failed password for invalid user Result2017 from 62.234.73.104 port 39522 ssh2 Oct 10 07:41:30 markkoudstaal sshd[20104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.73.104	2019-10-10 15:05:44
23.129.64.150	attackbotsspam	2019-10-10T03:50:27.036533abusebot.cloudsearch.cf sshd\[5692\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.129.64.150 user=root	2019-10-10 15:31:45
165.227.47.36	attack	SSH/22 MH Probe, BF, Hack -	2019-10-10 15:32:52

最近上报的IP列表

176.142.126.157	39.96.172.31	88.27.167.184	192.168.1.21
187.225.212.147	178.46.212.55	165.227.106.12	95.47.61.48
103.17.38.249	185.203.208.178	91.195.35.124	182.123.206.221
176.113.115.39	113.165.54.168	27.254.68.108	172.69.35.50
192.168.1.142	110.138.150.174	162.243.138.119	106.12.47.131