1.53.6.108 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Broadband Service

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Jan 10 15:10:02 grey postfix/smtpd\[7281\]: NOQUEUE: reject: RCPT from unknown\[1.53.6.108\]: 554 5.7.1 Service unavailable\; Client host \[1.53.6.108\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[1.53.6.108\]\; from=\ to=\ proto=ESMTP helo=\<\[1.53.6.108\]\> ...	2020-01-11 00:45:57

类型

评论内容

时间

attackspambots

Jan 10 15:10:02 grey postfix/smtpd\[7281\]: NOQUEUE: reject: RCPT from unknown\[1.53.6.108\]: 554 5.7.1 Service unavailable\; Client host \[1.53.6.108\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[1.53.6.108\]\; from=\ to=\ proto=ESMTP helo=\<\[1.53.6.108\]\>
...

2020-01-11 00:45:57

相同子网IP讨论:

IP	类型	评论内容	时间
1.53.68.251	attack	Automatic report - Port Scan Attack	2020-09-13 00:37:36
1.53.68.251	attack	Automatic report - Port Scan Attack	2020-09-12 16:36:39
1.53.68.11	attack	Port probing on unauthorized port 88	2020-08-11 20:01:37
1.53.66.237	attackspam	firewall-block, port(s): 85/tcp	2020-07-09 20:05:37
1.53.69.31	attack	Unauthorized connection attempt from IP address 1.53.69.31 on Port 445(SMB)	2020-05-25 19:49:53
1.53.64.240	attackbotsspam	Unauthorized connection attempt detected from IP address 1.53.64.240 to port 23 [T]	2020-04-29 18:35:48
1.53.6.28	attackbotsspam	Unauthorized connection attempt from IP address 1.53.6.28 on Port 445(SMB)	2020-03-18 20:50:27
1.53.68.120	attackbots	Unauthorized connection attempt detected from IP address 1.53.68.120 to port 23 [T]	2020-01-30 16:46:33
1.53.68.146	attack	Unauthorized connection attempt detected from IP address 1.53.68.146 to port 23 [J]	2020-01-30 07:47:30
1.53.67.73	attack	Unauthorized connection attempt detected from IP address 1.53.67.73 to port 23 [J]	2020-01-29 08:05:03
1.53.6.114	attackbots	Unauthorized connection attempt from IP address 1.53.6.114 on Port 445(SMB)	2020-01-26 18:34:03
1.53.62.253	attack	Unauthorized connection attempt detected from IP address 1.53.62.253 to port 23 [J]	2020-01-21 00:12:55
1.53.68.111	attack	Unauthorized connection attempt detected from IP address 1.53.68.111 to port 23 [J]	2020-01-18 15:32:31
1.53.66.247	attackspam	Unauthorized connection attempt detected from IP address 1.53.66.247 to port 23 [T]	2020-01-16 00:13:08
1.53.66.173	attack	Unauthorized connection attempt detected from IP address 1.53.66.173 to port 23 [J]	2020-01-14 15:29:50

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.53.6.108
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62722
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.53.6.108.			IN	A

;; AUTHORITY SECTION:
.			298	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011000 1800 900 604800 86400

;; Query time: 397 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 11 00:45:54 CST 2020
;; MSG SIZE  rcvd: 114

HOST信息:

Host 108.6.53.1.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 108.6.53.1.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
2.184.47.147	attackspam	firewall-block, port(s): 8080/tcp	2020-05-10 17:27:09
45.142.195.8	attackspam	May 10 11:52:05 s1 postfix/submission/smtpd\[27452\]: warning: unknown\[45.142.195.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 10 11:52:32 s1 postfix/submission/smtpd\[27452\]: warning: unknown\[45.142.195.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 10 11:53:00 s1 postfix/submission/smtpd\[27452\]: warning: unknown\[45.142.195.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 10 11:53:27 s1 postfix/submission/smtpd\[27452\]: warning: unknown\[45.142.195.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 10 11:53:55 s1 postfix/submission/smtpd\[27452\]: warning: unknown\[45.142.195.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 10 11:54:22 s1 postfix/submission/smtpd\[27452\]: warning: unknown\[45.142.195.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 10 11:54:50 s1 postfix/submission/smtpd\[27452\]: warning: unknown\[45.142.195.8\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 10 11:55:17 s1 postfix/submission/smtpd\[27452\]: warning: unknown\[45.142.	2020-05-10 18:00:37
116.110.213.183	attackspam	SSH bruteforce more then 50 syn to 22 port per 10 seconds.	2020-05-10 17:38:25
112.85.42.178	attackspam	2020-05-10T12:51:48.635297afi-git.jinr.ru sshd[4468]: Failed password for root from 112.85.42.178 port 46878 ssh2 2020-05-10T12:51:52.712387afi-git.jinr.ru sshd[4468]: Failed password for root from 112.85.42.178 port 46878 ssh2 2020-05-10T12:51:56.176147afi-git.jinr.ru sshd[4468]: Failed password for root from 112.85.42.178 port 46878 ssh2 2020-05-10T12:51:56.176297afi-git.jinr.ru sshd[4468]: error: maximum authentication attempts exceeded for root from 112.85.42.178 port 46878 ssh2 [preauth] 2020-05-10T12:51:56.176315afi-git.jinr.ru sshd[4468]: Disconnecting: Too many authentication failures [preauth] ...	2020-05-10 18:00:06
1.186.61.185	attackbotsspam	(smtpauth) Failed SMTP AUTH login from 1.186.61.185 (IN/India/1.186.61.185.dvois.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-05-10 08:19:13 plain authenticator failed for ([1.186.61.185]) [1.186.61.185]: 535 Incorrect authentication data (set_id=job@samerco.com)	2020-05-10 17:54:14
92.222.78.178	attackbotsspam	frenzy	2020-05-10 17:49:07
183.88.48.84	attackbots	Port scanning	2020-05-10 18:04:57
139.170.150.251	attackspam	May 10 10:35:20 ns382633 sshd\[19117\]: Invalid user sleep from 139.170.150.251 port 9003 May 10 10:35:20 ns382633 sshd\[19117\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.170.150.251 May 10 10:35:22 ns382633 sshd\[19117\]: Failed password for invalid user sleep from 139.170.150.251 port 9003 ssh2 May 10 10:40:25 ns382633 sshd\[20180\]: Invalid user bng from 139.170.150.251 port 46848 May 10 10:40:25 ns382633 sshd\[20180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.170.150.251	2020-05-10 17:55:46
187.167.195.144	attack	Automatic report - Port Scan Attack	2020-05-10 18:04:33
180.249.75.252	attackspambots	1589082553 - 05/10/2020 05:49:13 Host: 180.249.75.252/180.249.75.252 Port: 445 TCP Blocked	2020-05-10 17:58:59
198.206.243.23	attackbotsspam	"Unauthorized connection attempt on SSHD detected"	2020-05-10 17:41:22
139.213.220.70	attackbots	May 10 05:49:51 vps639187 sshd\[14078\]: Invalid user test from 139.213.220.70 port 10187 May 10 05:49:51 vps639187 sshd\[14078\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.213.220.70 May 10 05:49:53 vps639187 sshd\[14078\]: Failed password for invalid user test from 139.213.220.70 port 10187 ssh2 ...	2020-05-10 17:30:59
193.32.163.44	attack	05/10/2020-05:48:40.491877 193.32.163.44 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-10 17:51:18
146.88.240.4	attack	GPL RPC portmap listing UDP 111 - port: 111 proto: UDP cat: Decode of an RPC Query	2020-05-10 17:28:04
179.93.149.17	attack	May 10 09:34:01 IngegnereFirenze sshd[13513]: Failed password for invalid user banking from 179.93.149.17 port 56902 ssh2 ...	2020-05-10 17:42:39

最近上报的IP列表

171.100.62.42	123.21.82.183	116.96.89.69	180.215.213.178
116.103.227.10	84.91.113.175	178.188.73.170	142.93.125.73
221.124.105.24	78.97.155.225	113.23.31.22	114.225.253.188
59.56.62.29	189.135.128.129	125.83.105.199	151.11.179.58
152.32.100.110	113.177.123.219	47.247.53.165	52.109.51.58