1.20.102.19 - IPInfo

基本信息:

城市(city): Nakhon Ratchasima

省份(region): Nakhon Ratchasima

国家(country): Thailand

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
1.20.102.54	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/1.20.102.54/ TH - 1H : (31) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TH NAME ASN : ASN23969 IP : 1.20.102.54 CIDR : 1.20.102.0/24 PREFIX COUNT : 1783 UNIQUE IP COUNT : 1183744 ATTACKS DETECTED ASN23969 : 1H - 2 3H - 3 6H - 5 12H - 6 24H - 9 DateTime : 2019-10-20 14:02:17 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery	2019-10-20 22:46:58

类型

评论内容

时间

1.20.102.54

attackbotsspam

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/1.20.102.54/ 
 
 TH - 1H : (31)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TH 
 NAME ASN : ASN23969 
 
 IP : 1.20.102.54 
 
 CIDR : 1.20.102.0/24 
 
 PREFIX COUNT : 1783 
 
 UNIQUE IP COUNT : 1183744 
 
 
 ATTACKS DETECTED ASN23969 :  
  1H - 2 
  3H - 3 
  6H - 5 
 12H - 6 
 24H - 9 
 
 DateTime : 2019-10-20 14:02:17 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery

2019-10-20 22:46:58

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.102.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1898
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.102.19.			IN	A

;; AUTHORITY SECTION:
.			146	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022011101 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 12 10:27:42 CST 2022
;; MSG SIZE  rcvd: 104

HOST信息:

Host 19.102.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 19.102.20.1.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
188.166.234.31	attackspam	xmlrpc attack	2019-09-29 04:47:40
119.42.175.200	attack	Sep 28 22:49:27 ns3110291 sshd\[21032\]: Invalid user org from 119.42.175.200 Sep 28 22:49:27 ns3110291 sshd\[21032\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.42.175.200 Sep 28 22:49:28 ns3110291 sshd\[21032\]: Failed password for invalid user org from 119.42.175.200 port 52266 ssh2 Sep 28 22:53:59 ns3110291 sshd\[21199\]: Invalid user ftpuser from 119.42.175.200 Sep 28 22:53:59 ns3110291 sshd\[21199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.42.175.200 ...	2019-09-29 05:04:22
104.236.231.149	attackbots	SSH-bruteforce attempts	2019-09-29 04:57:10
91.136.177.159	attack	Sep 28 14:20:03 relay dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 12 secs\): user=\, method=PLAIN, rip=91.136.177.159, lip=176.9.177.164, TLS: Disconnected, session=\ Sep 28 14:21:07 relay dovecot: imap-login: Disconnected \(auth failed, 2 attempts in 64 secs\): user=\, method=PLAIN, rip=91.136.177.159, lip=176.9.177.164, TLS: Disconnected, session=\<2hm6BZyTM9ZbiLGf\> Sep 28 14:21:31 relay dovecot: imap-login: Disconnected \(auth failed, 3 attempts in 24 secs\): user=\, method=PLAIN, rip=91.136.177.159, lip=176.9.177.164, TLS: Disconnected, session=\ Sep 28 14:22:13 relay dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 42 secs\): user=\, method=PLAIN, rip=91.136.177.159, lip=176.9.177.164, TLS: Disconnected, session=\ Sep 28 14:25:34 relay dovecot: imap-login: Disconnected \(auth failed, 1 attempt ...	2019-09-29 04:50:12
46.38.144.202	attack	2019-09-19 02:32:03 -> 2019-09-28 23:02:26 : 5842 login attempts (46.38.144.202)	2019-09-29 05:07:55
211.219.80.99	attackspambots	Sep 28 22:48:44 MainVPS sshd[7625]: Invalid user admin from 211.219.80.99 port 52256 Sep 28 22:48:44 MainVPS sshd[7625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.219.80.99 Sep 28 22:48:44 MainVPS sshd[7625]: Invalid user admin from 211.219.80.99 port 52256 Sep 28 22:48:46 MainVPS sshd[7625]: Failed password for invalid user admin from 211.219.80.99 port 52256 ssh2 Sep 28 22:53:33 MainVPS sshd[8034]: Invalid user noob from 211.219.80.99 port 37164 ...	2019-09-29 05:18:53
49.51.34.136	attackbotsspam	3389BruteforceFW21	2019-09-29 04:57:26
164.132.196.98	attackspam	2019-09-19T12:27:43.686702suse-nuc sshd[31003]: Invalid user lll from 164.132.196.98 port 54134 ...	2019-09-29 04:49:01
185.185.68.66	attack	Sep 28 02:35:41 php1 sshd\[16810\]: Invalid user lv from 185.185.68.66 Sep 28 02:35:41 php1 sshd\[16810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=marlin-aquarium.ru Sep 28 02:35:43 php1 sshd\[16810\]: Failed password for invalid user lv from 185.185.68.66 port 50458 ssh2 Sep 28 02:40:54 php1 sshd\[17528\]: Invalid user redhat from 185.185.68.66 Sep 28 02:40:54 php1 sshd\[17528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=marlin-aquarium.ru	2019-09-29 04:54:27
5.189.142.120	attack	09/28/2019-08:25:30.530383 5.189.142.120 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-09-29 04:52:44
190.121.25.248	attackspam	SSH Brute-Force reported by Fail2Ban	2019-09-29 05:14:26
103.76.14.250	attackbots	Sep 28 20:48:24 web8 sshd\[6603\]: Invalid user sinusbot from 103.76.14.250 Sep 28 20:48:24 web8 sshd\[6603\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.76.14.250 Sep 28 20:48:25 web8 sshd\[6603\]: Failed password for invalid user sinusbot from 103.76.14.250 port 39670 ssh2 Sep 28 20:53:46 web8 sshd\[9335\]: Invalid user trendimsa1.0 from 103.76.14.250 Sep 28 20:53:46 web8 sshd\[9335\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.76.14.250	2019-09-29 05:11:24
146.0.209.72	attack	Sep 28 22:53:59 MK-Soft-VM7 sshd[10774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.0.209.72 Sep 28 22:54:02 MK-Soft-VM7 sshd[10774]: Failed password for invalid user hadoop from 146.0.209.72 port 52508 ssh2 ...	2019-09-29 05:02:35
81.47.128.178	attackspam	Sep 28 12:33:13 xtremcommunity sshd\[3507\]: Invalid user interchange from 81.47.128.178 port 46626 Sep 28 12:33:13 xtremcommunity sshd\[3507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.47.128.178 Sep 28 12:33:15 xtremcommunity sshd\[3507\]: Failed password for invalid user interchange from 81.47.128.178 port 46626 ssh2 Sep 28 12:36:58 xtremcommunity sshd\[3662\]: Invalid user smbprint from 81.47.128.178 port 58998 Sep 28 12:36:58 xtremcommunity sshd\[3662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.47.128.178 ...	2019-09-29 04:44:46
78.0.23.41	attackbots	Sep 28 13:16:34 *** sshd[25281]: Failed password for invalid user customer from 78.0.23.41 port 42438 ssh2	2019-09-29 04:42:14

最近上报的IP列表

174.160.154.111	66.7.247.187	9.15.190.1	226.3.26.86
190.94.149.191	7.155.162.168	206.24.161.183	54.196.243.15
224.100.106.58	248.71.191.62	147.217.176.215	251.71.112.113
199.74.220.50	117.141.100.249	209.129.64.217	211.231.106.243
185.189.182.234	14.128.38.222	42.247.104.151	71.102.246.166