1.34.1.148 - IPInfo

基本信息:

城市(city): Taipei

省份(region): Taipei City

国家(country): Taiwan, China

运营商(isp): Chunghwa Telecom Co. Ltd.

主机名(hostname): unknown

机构(organization): Data Communication Business Group

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	TW_MAINT-TW-TWNIC_<177>1585225417 [1:2403302:56258] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 2 [Classification: Misc Attack] [Priority: 2]: {TCP} 1.34.1.148:61990	2020-03-27 00:04:08
attackspam	23/tcp [2019-10-06/11-01]2pkt	2019-11-01 17:06:51
attack	Honeypot attack, port: 23, PTR: 1-34-1-148.HINET-IP.hinet.net.	2019-08-12 02:25:11

类型

评论内容

时间

attackspambots

TW_MAINT-TW-TWNIC_<177>1585225417 [1:2403302:56258] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 2 [Classification: Misc Attack] [Priority: 2]:  {TCP} 1.34.1.148:61990

2020-03-27 00:04:08

attackspam

23/tcp
[2019-10-06/11-01]2pkt

2019-11-01 17:06:51

attack

Honeypot attack, port: 23, PTR: 1-34-1-148.HINET-IP.hinet.net.

2019-08-12 02:25:11

相同子网IP讨论:

IP	类型	评论内容	时间
1.34.16.210	attackbots	TCP (SYN) 1.34.16.210:2676 -> port 23, len 44	2020-10-05 06:54:30
1.34.16.210	attack	TCP (SYN) 1.34.16.210:2676 -> port 23, len 44	2020-10-04 23:00:08
1.34.16.210	attackbotsspam	TCP (SYN) 1.34.16.210:34293 -> port 2323, len 44	2020-10-04 14:46:03
1.34.107.92	attack	2019-12-12T22:33:27.009332suse-nuc sshd[25101]: Invalid user guest from 1.34.107.92 port 37998 ...	2020-09-27 04:26:36
1.34.117.251	attackbotsspam	2019-11-25T20:06:03.734670suse-nuc sshd[27511]: Invalid user user from 1.34.117.251 port 44506 ...	2020-09-27 04:25:39
1.34.195.88	attack	2020-09-10T07:02:08.767291suse-nuc sshd[19245]: User root from 1.34.195.88 not allowed because listed in DenyUsers ...	2020-09-27 04:25:19
1.34.107.92	attackbotsspam	2019-12-12T22:33:27.009332suse-nuc sshd[25101]: Invalid user guest from 1.34.107.92 port 37998 ...	2020-09-26 20:34:06
1.34.117.251	attackspam	2019-11-25T20:06:03.734670suse-nuc sshd[27511]: Invalid user user from 1.34.117.251 port 44506 ...	2020-09-26 20:33:08
1.34.195.88	attackbots	2020-09-10T07:02:08.767291suse-nuc sshd[19245]: User root from 1.34.195.88 not allowed because listed in DenyUsers ...	2020-09-26 20:32:52
1.34.107.92	attack	2019-12-12T22:33:27.009332suse-nuc sshd[25101]: Invalid user guest from 1.34.107.92 port 37998 ...	2020-09-26 12:18:01
1.34.195.88	attackbotsspam	2020-09-10T07:02:08.767291suse-nuc sshd[19245]: User root from 1.34.195.88 not allowed because listed in DenyUsers ...	2020-09-26 12:16:55
1.34.19.58	attackspam	firewall-block, port(s): 23/tcp	2020-09-25 11:44:19
1.34.164.204	attack	invalid user	2020-09-22 01:48:10
1.34.141.44	attackbots	Found on CINS badguys / proto=6 . srcport=44251 . dstport=23 . (2323)	2020-09-21 23:13:04
1.34.164.204	attack	Port scan followed by SSH.	2020-09-21 17:31:52

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.34.1.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41678
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.34.1.148.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081100 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 12 02:25:03 CST 2019
;; MSG SIZE  rcvd: 114

HOST信息:

148.1.34.1.in-addr.arpa domain name pointer 1-34-1-148.HINET-IP.hinet.net.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
148.1.34.1.in-addr.arpa	name = 1-34-1-148.HINET-IP.hinet.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
222.186.42.213	attackbots	Sep 8 16:08:56 santamaria sshd\[31496\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.213 user=root Sep 8 16:08:58 santamaria sshd\[31496\]: Failed password for root from 222.186.42.213 port 50398 ssh2 Sep 8 16:09:01 santamaria sshd\[31496\]: Failed password for root from 222.186.42.213 port 50398 ssh2 ...	2020-09-08 22:15:00
114.5.103.178	attackspam	Email rejected due to spam filtering	2020-09-08 22:22:09
61.64.54.207	attackspambots	Unauthorized connection attempt	2020-09-08 22:22:50
118.70.170.120	attack	Sep 8 16:24:37 buvik sshd[9369]: Invalid user rocco from 118.70.170.120 Sep 8 16:24:37 buvik sshd[9369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.170.120 Sep 8 16:24:40 buvik sshd[9369]: Failed password for invalid user rocco from 118.70.170.120 port 36518 ssh2 ...	2020-09-08 22:34:13
122.51.218.104	attackbots	2020-09-08T10:02:01.393923abusebot-2.cloudsearch.cf sshd[13393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.218.104 user=root 2020-09-08T10:02:03.507224abusebot-2.cloudsearch.cf sshd[13393]: Failed password for root from 122.51.218.104 port 47816 ssh2 2020-09-08T10:11:03.980637abusebot-2.cloudsearch.cf sshd[13406]: Invalid user admin from 122.51.218.104 port 35114 2020-09-08T10:11:03.986362abusebot-2.cloudsearch.cf sshd[13406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.218.104 2020-09-08T10:11:03.980637abusebot-2.cloudsearch.cf sshd[13406]: Invalid user admin from 122.51.218.104 port 35114 2020-09-08T10:11:05.836138abusebot-2.cloudsearch.cf sshd[13406]: Failed password for invalid user admin from 122.51.218.104 port 35114 ssh2 2020-09-08T10:11:45.592417abusebot-2.cloudsearch.cf sshd[13408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122. ...	2020-09-08 22:27:04
218.92.0.172	attackspam	$f2bV_matches	2020-09-08 22:08:10
116.63.33.66	attack	SP-Scan 36130:6379 detected 2020.09.07 11:17:45 blocked until 2020.10.27 03:20:32	2020-09-08 22:16:16
213.230.110.107	attack	Sep 7 16:52:46 rush sshd[741]: Failed password for root from 213.230.110.107 port 44286 ssh2 Sep 7 16:52:57 rush sshd[741]: error: maximum authentication attempts exceeded for root from 213.230.110.107 port 44286 ssh2 [preauth] Sep 7 16:53:01 rush sshd[743]: Failed password for root from 213.230.110.107 port 45322 ssh2 ...	2020-09-08 22:25:50
189.13.249.27	attack	Tried sshing with brute force.	2020-09-08 22:44:36
49.73.177.108	attack	Brute forcing email accounts	2020-09-08 22:46:47
201.22.95.52	attackbotsspam	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-08T09:58:37Z and 2020-09-08T10:07:26Z	2020-09-08 22:33:11
212.70.149.52	attackbots	Sep 8 16:46:37 relay postfix/smtpd\[28189\]: warning: unknown\[212.70.149.52\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 16:47:04 relay postfix/smtpd\[1572\]: warning: unknown\[212.70.149.52\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 16:47:31 relay postfix/smtpd\[30961\]: warning: unknown\[212.70.149.52\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 16:47:57 relay postfix/smtpd\[32613\]: warning: unknown\[212.70.149.52\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 16:48:23 relay postfix/smtpd\[1576\]: warning: unknown\[212.70.149.52\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-09-08 22:51:52
177.92.247.48	attack	Sep 7 11:52:23 mailman postfix/smtpd[13543]: warning: 177-92-247-48.tecportnet.com.br[177.92.247.48]: SASL PLAIN authentication failed: authentication failure	2020-09-08 22:47:20
45.142.120.20	attackspambots	Sep 8 16:15:56 srv01 postfix/smtpd\[21573\]: warning: unknown\[45.142.120.20\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 16:16:09 srv01 postfix/smtpd\[29277\]: warning: unknown\[45.142.120.20\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 16:16:14 srv01 postfix/smtpd\[15724\]: warning: unknown\[45.142.120.20\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 16:16:22 srv01 postfix/smtpd\[29347\]: warning: unknown\[45.142.120.20\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 16:16:36 srv01 postfix/smtpd\[29277\]: warning: unknown\[45.142.120.20\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-09-08 22:20:18
177.220.174.187	attack	Lines containing failures of 177.220.174.187 Sep 7 18:46:58 shared06 sshd[13187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.220.174.187 user=r.r Sep 7 18:47:00 shared06 sshd[13187]: Failed password for r.r from 177.220.174.187 port 1800 ssh2 Sep 7 18:47:00 shared06 sshd[13187]: Received disconnect from 177.220.174.187 port 1800:11: Bye Bye [preauth] Sep 7 18:47:00 shared06 sshd[13187]: Disconnected from authenticating user r.r 177.220.174.187 port 1800 [preauth] Sep 7 18:53:15 shared06 sshd[15175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.220.174.187 user=r.r Sep 7 18:53:17 shared06 sshd[15175]: Failed password for r.r from 177.220.174.187 port 7317 ssh2 Sep 7 18:53:17 shared06 sshd[15175]: Received disconnect from 177.220.174.187 port 7317:11: Bye Bye [preauth] Sep 7 18:53:17 shared06 sshd[15175]: Disconnected from authenticating user r.r 177.220.174.187 port 7........ ------------------------------	2020-09-08 22:42:56

最近上报的IP列表

222.189.245.215	71.72.172.156	222.153.172.9	117.239.193.48
196.221.91.215	186.92.0.245	210.160.13.110	173.49.171.120
195.14.244.104	155.252.219.135	85.109.95.199	125.231.135.248
45.111.49.21	203.205.41.21	156.194.110.89	35.239.8.123
139.162.31.103	186.204.146.61	214.145.129.236	81.42.219.153