1.52.244.126 - IPInfo

基本信息:

城市(city): Ho Chi Minh City

省份(region): Ho Chi Minh

国家(country): Vietnam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	1584881801 - 03/22/2020 13:56:41 Host: 1.52.244.126/1.52.244.126 Port: 445 TCP Blocked	2020-03-23 05:01:30

相同子网IP讨论:

IP	类型	评论内容	时间
1.52.244.63	attack	Unauthorized connection attempt detected from IP address 1.52.244.63 to port 23 [J]	2020-03-03 00:23:15

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.52.244.126
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1151
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.52.244.126.			IN	A

;; AUTHORITY SECTION:
.			191	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032201 1800 900 604800 86400

;; Query time: 154 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 23 05:01:27 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 126.244.52.1.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 126.244.52.1.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
212.33.199.104	attackbots	Lines containing failures of 212.33.199.104 Sep 4 01:17:32 kmh-sql-001-nbg01 sshd[18075]: Did not receive identification string from 212.33.199.104 port 41640 Sep 4 01:17:54 kmh-sql-001-nbg01 sshd[18076]: Invalid user ansible from 212.33.199.104 port 53712 Sep 4 01:17:54 kmh-sql-001-nbg01 sshd[18076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.33.199.104 Sep 4 01:17:55 kmh-sql-001-nbg01 sshd[18076]: Failed password for invalid user ansible from 212.33.199.104 port 53712 ssh2 Sep 4 01:17:56 kmh-sql-001-nbg01 sshd[18076]: Received disconnect from 212.33.199.104 port 53712:11: Normal Shutdown, Thank you for playing [preauth] Sep 4 01:17:56 kmh-sql-001-nbg01 sshd[18076]: Disconnected from invalid user ansible 212.33.199.104 port 53712 [preauth] Sep 4 01:18:11 kmh-sql-001-nbg01 sshd[18172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.33.199.104 user=r.r Sep 4 01:18:13 km........ ------------------------------	2020-09-07 00:48:19
134.17.94.214	attack	Sep 6 05:40:14 ws22vmsma01 sshd[95394]: Failed password for root from 134.17.94.214 port 12212 ssh2 Sep 6 08:32:48 ws22vmsma01 sshd[218811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.17.94.214 ...	2020-09-07 01:11:09
74.220.169.212	attackbots	Honeypot attack, port: 5555, PTR: dhcp-b0-4e-26-7b-b9-88.cpe.wightman.ca.	2020-09-07 00:57:43
104.206.119.3	attack	Aug 31 15:25:09 our-server-hostname postfix/smtpd[7575]: connect from unknown[104.206.119.3] Aug 31 15:25:09 our-server-hostname postfix/smtpd[5270]: connect from unknown[104.206.119.3] Aug 31 15:25:09 our-server-hostname postfix/smtpd[7549]: connect from unknown[104.206.119.3] Aug 31 15:25:09 our-server-hostname postfix/smtpd[5255]: connect from unknown[104.206.119.3] Aug 31 15:25:10 our-server-hostname postfix/smtpd[5253]: connect from unknown[104.206.119.3] Aug 31 15:25:10 our-server-hostname postfix/smtpd[5271]: connect from unknown[104.206.119.3] Aug 31 15:25:10 our-server-hostname postfix/smtpd[7576]: connect from unknown[104.206.119.3] Aug x@x .... truncated .... nown[104.206.119.3] Aug 31 15:28:24 our-server-hostname postfix/smtpd[10864]: 73D37A40113: client=unknown[127.0.0.1], orig_client=unknown[104.206.119.3] Aug 31 15:28:24 our-server-hostname amavis[11028]: (11028-02) Passed BAD-HEADER, [104.206.119.3] [104.206.119.3] , mail_id: 8lgroUw7lVht, Hhostnam........ -------------------------------	2020-09-07 00:46:31
2.92.159.63	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-07 01:12:27
190.98.53.86	attack	6-9-2020 01:24:39 Unauthorized connection attempt (Brute-Force). 6-9-2020 01:24:39 Connection from IP address: 190.98.53.86 on port: 587 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=190.98.53.86	2020-09-07 00:53:09
218.102.106.61	attackbotsspam	Honeypot attack, port: 5555, PTR: pcd574061.netvigator.com.	2020-09-07 01:25:18
116.109.234.188	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-07 01:01:36
191.53.236.102	attackbots	Brute force attempt	2020-09-07 00:44:29
185.142.236.40	attackspam	Scanning an empty webserver with deny all robots.txt	2020-09-07 00:50:28
137.101.136.251	attackbots	Automatic report - Port Scan Attack	2020-09-07 00:52:26
190.39.30.148	attackbots	1599324387 - 09/05/2020 18:46:27 Host: 190.39.30.148/190.39.30.148 Port: 445 TCP Blocked	2020-09-07 01:10:02
50.196.46.20	attackspam	Honeypot attack, port: 81, PTR: 50-196-46-20-static.hfc.comcastbusiness.net.	2020-09-07 01:05:50
185.239.242.231	attackbotsspam	Sep 5 01:13:19 www sshd[21928]: Invalid user ubnt from 185.239.242.231 Sep 5 01:13:22 www sshd[21928]: Failed password for invalid user ubnt from 185.239.242.231 port 42866 ssh2 Sep 5 01:13:23 www sshd[21930]: Invalid user admin from 185.239.242.231 Sep 5 01:13:25 www sshd[21930]: Failed password for invalid user admin from 185.239.242.231 port 47274 ssh2 Sep 5 01:13:27 www sshd[21932]: Failed password for r.r from 185.239.242.231 port 51272 ssh2 Sep 5 01:13:27 www sshd[21934]: Invalid user 1234 from 185.239.242.231 Sep 5 01:13:29 www sshd[21934]: Failed password for invalid user 1234 from 185.239.242.231 port 54262 ssh2 Sep 5 01:13:30 www sshd[21936]: Invalid user usuario from 185.239.242.231 Sep 5 01:13:32 www sshd[21936]: Failed password for invalid user usuario from 185.239.242.231 port 57808 ssh2 Sep 5 01:13:32 www sshd[21938]: Invalid user support from 185.239.242.231 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=185.239.242.231	2020-09-07 01:05:22
91.178.134.94	attackbotsspam	Attempts against non-existent wp-login	2020-09-07 01:24:02

最近上报的IP列表

132.33.129.175	212.227.27.224	60.127.196.151	184.253.59.40
198.146.128.109	124.101.163.81	92.254.113.123	153.151.20.164
112.2.222.149	125.143.14.251	212.146.12.156	153.195.255.130
191.147.76.238	211.198.95.0	63.201.246.110	123.24.40.201
84.137.106.64	106.253.172.137	197.39.218.250	2.220.250.90