1.20.102.238 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
1.20.102.54	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/1.20.102.54/ TH - 1H : (31) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TH NAME ASN : ASN23969 IP : 1.20.102.54 CIDR : 1.20.102.0/24 PREFIX COUNT : 1783 UNIQUE IP COUNT : 1183744 ATTACKS DETECTED ASN23969 : 1H - 2 3H - 3 6H - 5 12H - 6 24H - 9 DateTime : 2019-10-20 14:02:17 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery	2019-10-20 22:46:58

类型

评论内容

时间

1.20.102.54

attackbotsspam

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/1.20.102.54/ 
 
 TH - 1H : (31)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TH 
 NAME ASN : ASN23969 
 
 IP : 1.20.102.54 
 
 CIDR : 1.20.102.0/24 
 
 PREFIX COUNT : 1783 
 
 UNIQUE IP COUNT : 1183744 
 
 
 ATTACKS DETECTED ASN23969 :  
  1H - 2 
  3H - 3 
  6H - 5 
 12H - 6 
 24H - 9 
 
 DateTime : 2019-10-20 14:02:17 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery

2019-10-20 22:46:58

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.102.238
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60246
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.102.238.			IN	A

;; AUTHORITY SECTION:
.			228	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022400 1800 900 604800 86400

;; Query time: 173 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 19:45:40 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 238.102.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 238.102.20.1.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
222.188.29.181	attackspambots	Sep 7 06:45:23 vserver sshd\[1845\]: Failed password for root from 222.188.29.181 port 46194 ssh2Sep 7 06:45:25 vserver sshd\[1845\]: Failed password for root from 222.188.29.181 port 46194 ssh2Sep 7 06:45:28 vserver sshd\[1845\]: Failed password for root from 222.188.29.181 port 46194 ssh2Sep 7 06:45:30 vserver sshd\[1845\]: Failed password for root from 222.188.29.181 port 46194 ssh2 ...	2019-09-07 15:50:18
59.27.7.220	attackbots	Lines containing failures of 59.27.7.220 Sep 7 05:18:51 zabbix sshd[78471]: Invalid user test from 59.27.7.220 port 61007 Sep 7 05:18:51 zabbix sshd[78471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.27.7.220 Sep 7 05:18:52 zabbix sshd[78471]: Failed password for invalid user test from 59.27.7.220 port 61007 ssh2 Sep 7 05:18:53 zabbix sshd[78471]: Received disconnect from 59.27.7.220 port 61007:11: Bye Bye [preauth] Sep 7 05:18:53 zabbix sshd[78471]: Disconnected from invalid user test 59.27.7.220 port 61007 [preauth] Sep 7 05:33:42 zabbix sshd[79324]: Invalid user dev from 59.27.7.220 port 65427 Sep 7 05:33:42 zabbix sshd[79324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.27.7.220 Sep 7 05:33:44 zabbix sshd[79324]: Failed password for invalid user dev from 59.27.7.220 port 65427 ssh2 Sep 7 05:33:45 zabbix sshd[79324]: Received disconnect from 59.27.7.220 port 65427:1........ ------------------------------	2019-09-07 15:18:08
218.98.26.165	attack	Sep 7 02:35:38 aat-srv002 sshd[3664]: Failed password for root from 218.98.26.165 port 19790 ssh2 Sep 7 02:35:47 aat-srv002 sshd[3667]: Failed password for root from 218.98.26.165 port 41014 ssh2 Sep 7 02:35:58 aat-srv002 sshd[3669]: Failed password for root from 218.98.26.165 port 59316 ssh2 ...	2019-09-07 15:42:53
37.49.227.109	attackbots	Scanning random ports - tries to find possible vulnerable services	2019-09-07 15:27:05
49.83.95.42	attack	Aug 31 23:53:34 itv-usvr-01 sshd[24059]: Invalid user admin from 49.83.95.42 Aug 31 23:53:34 itv-usvr-01 sshd[24059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.95.42 Aug 31 23:53:34 itv-usvr-01 sshd[24059]: Invalid user admin from 49.83.95.42 Aug 31 23:53:36 itv-usvr-01 sshd[24059]: Failed password for invalid user admin from 49.83.95.42 port 53398 ssh2 Aug 31 23:53:34 itv-usvr-01 sshd[24059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.95.42 Aug 31 23:53:34 itv-usvr-01 sshd[24059]: Invalid user admin from 49.83.95.42 Aug 31 23:53:36 itv-usvr-01 sshd[24059]: Failed password for invalid user admin from 49.83.95.42 port 53398 ssh2 Aug 31 23:53:40 itv-usvr-01 sshd[24059]: Failed password for invalid user admin from 49.83.95.42 port 53398 ssh2	2019-09-07 15:51:00
218.98.40.132	attackbotsspam	Sep 7 09:35:30 saschabauer sshd[17184]: Failed password for root from 218.98.40.132 port 49424 ssh2	2019-09-07 15:41:33
119.86.182.87	attackspam	2019-09-06 19:34:41 H=(119.86.182.87) [119.86.182.87]:65501 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-06 19:36:55 H=(119.86.182.87) [119.86.182.87]:64642 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/119.86.182.87) 2019-09-06 19:36:55 H=(119.86.182.87) [119.86.182.87]:64642 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/119.86.182.87) ...	2019-09-07 15:42:00
118.25.177.241	attackbots	Sep 7 06:53:25 hcbbdb sshd\[32226\]: Invalid user admin from 118.25.177.241 Sep 7 06:53:25 hcbbdb sshd\[32226\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.177.241 Sep 7 06:53:27 hcbbdb sshd\[32226\]: Failed password for invalid user admin from 118.25.177.241 port 59671 ssh2 Sep 7 06:58:52 hcbbdb sshd\[362\]: Invalid user tom from 118.25.177.241 Sep 7 06:58:52 hcbbdb sshd\[362\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.177.241	2019-09-07 15:02:34
36.71.158.246	attackspambots	Automatic report - Port Scan Attack	2019-09-07 15:42:26
81.100.188.235	attack	Sep 6 21:38:08 web1 sshd\[15148\]: Invalid user password from 81.100.188.235 Sep 6 21:38:08 web1 sshd\[15148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.100.188.235 Sep 6 21:38:11 web1 sshd\[15148\]: Failed password for invalid user password from 81.100.188.235 port 38542 ssh2 Sep 6 21:43:09 web1 sshd\[15659\]: Invalid user hduser@123 from 81.100.188.235 Sep 6 21:43:09 web1 sshd\[15659\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.100.188.235	2019-09-07 15:52:57
2001:19f0:ac01:845:5400:1ff:fe4d:f54	attackspam	WordPress login Brute force / Web App Attack on client site.	2019-09-07 15:17:13
149.62.173.99	attack	Caught in portsentry honeypot	2019-09-07 15:40:57
45.40.194.129	attackspam	Sep 6 21:19:38 lcprod sshd\[24886\]: Invalid user oracle123 from 45.40.194.129 Sep 6 21:19:38 lcprod sshd\[24886\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.40.194.129 Sep 6 21:19:40 lcprod sshd\[24886\]: Failed password for invalid user oracle123 from 45.40.194.129 port 60708 ssh2 Sep 6 21:25:16 lcprod sshd\[25396\]: Invalid user d3v from 45.40.194.129 Sep 6 21:25:16 lcprod sshd\[25396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.40.194.129	2019-09-07 15:38:59
193.32.160.142	attackspam	Postfix DNSBL listed. Trying to send SPAM.	2019-09-07 15:25:20
177.152.55.161	attack	Automatic report - Port Scan Attack	2019-09-07 15:12:44

最近上报的IP列表

160.198.72.154	1.20.102.243	1.20.102.246	1.20.102.249
1.20.102.3	1.20.102.39	1.20.102.40	1.20.102.56
1.20.102.58	105.66.159.171	1.20.108.197	1.20.109.123
1.20.110.107	1.20.110.114	1.20.110.125	1.20.110.152
1.20.110.165	1.20.110.225	1.20.110.233	1.20.110.251