1.55.142.178 - IPInfo

基本信息:

城市(city): Hanoi

省份(region): Hanoi

国家(country): Vietnam

运营商(isp): FPT Broadband Service

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Jan 10 15:14:07 grey postfix/smtpd\[14160\]: NOQUEUE: reject: RCPT from unknown\[1.55.142.178\]: 554 5.7.1 Service unavailable\; Client host \[1.55.142.178\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[1.55.142.178\]\; from=\ to=\ proto=ESMTP helo=\<\[1.55.142.178\]\> ...	2020-01-11 03:52:45

类型

评论内容

时间

attackbotsspam

Jan 10 15:14:07 grey postfix/smtpd\[14160\]: NOQUEUE: reject: RCPT from unknown\[1.55.142.178\]: 554 5.7.1 Service unavailable\; Client host \[1.55.142.178\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[1.55.142.178\]\; from=\ to=\ proto=ESMTP helo=\<\[1.55.142.178\]\>
...

2020-01-11 03:52:45

相同子网IP讨论:

IP	类型	评论内容	时间
1.55.142.12	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-05 21:39:03
1.55.142.12	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-05 13:16:12
1.55.142.12	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-05 06:02:28
1.55.142.60	attackspambots	Automated report (2020-08-20T11:47:57+08:00). Referrer spam originating from this address detected (anti-crisis-seo.com).	2020-08-20 19:20:48
1.55.142.3	attackbotsspam	Attempted connection to port 445.	2020-05-31 19:56:04
1.55.142.99	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 12-03-2020 03:50:08.	2020-03-12 17:03:02
1.55.142.110	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-07 22:24:56
1.55.142.212	attackspambots	Unauthorized connection attempt from IP address 1.55.142.212 on Port 445(SMB)	2020-03-07 00:44:44
1.55.142.136	attack	Unauthorized connection attempt from IP address 1.55.142.136 on Port 445(SMB)	2020-02-13 20:38:28
1.55.142.115	attack	1581483056 - 02/12/2020 05:50:56 Host: 1.55.142.115/1.55.142.115 Port: 445 TCP Blocked	2020-02-12 19:01:36
1.55.142.26	attackbots	1577946406 - 01/02/2020 07:26:46 Host: 1.55.142.26/1.55.142.26 Port: 445 TCP Blocked	2020-01-02 17:50:55
1.55.142.125	attackbots	Autoban 1.55.142.125 AUTH/CONNECT	2019-11-18 22:12:44
1.55.142.251	attackspambots	Unauthorized connection attempt from IP address 1.55.142.251 on Port 445(SMB)	2019-10-27 00:08:54
1.55.142.108	attackbotsspam	B: Magento admin pass /admin/ test (wrong country)	2019-10-22 15:20:14

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.55.142.178
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41663
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.55.142.178.			IN	A

;; AUTHORITY SECTION:
.			448	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011001 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 11 03:52:41 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 178.142.55.1.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 178.142.55.1.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
45.36.105.206	attackspam	fail2ban	2019-12-02 23:51:13
54.37.230.141	attackbotsspam	Dec 2 05:18:52 php1 sshd\[11910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.230.141 user=root Dec 2 05:18:54 php1 sshd\[11910\]: Failed password for root from 54.37.230.141 port 52434 ssh2 Dec 2 05:24:32 php1 sshd\[12417\]: Invalid user tmackenzie from 54.37.230.141 Dec 2 05:24:32 php1 sshd\[12417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.230.141 Dec 2 05:24:34 php1 sshd\[12417\]: Failed password for invalid user tmackenzie from 54.37.230.141 port 35632 ssh2	2019-12-02 23:34:53
112.85.42.171	attack	Dec 2 16:44:03 eventyay sshd[15089]: Failed password for root from 112.85.42.171 port 42429 ssh2 Dec 2 16:44:20 eventyay sshd[15089]: error: maximum authentication attempts exceeded for root from 112.85.42.171 port 42429 ssh2 [preauth] Dec 2 16:44:28 eventyay sshd[15096]: Failed password for root from 112.85.42.171 port 17231 ssh2 ...	2019-12-02 23:45:51
39.42.148.107	attackbotsspam	2019-12-02 07:35:19 H=(customer.worldstream.nl) [39.42.148.107]:51842 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11) (https://www.spamhaus.org/query/ip/39.42.148.107) 2019-12-02 07:35:20 H=(customer.worldstream.nl) [39.42.148.107]:51842 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11) (https://www.spamhaus.org/query/ip/39.42.148.107) 2019-12-02 07:35:21 H=(customer.worldstream.nl) [39.42.148.107]:51842 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11) (https://www.spamhaus.org/query/ip/39.42.148.107) ...	2019-12-02 23:44:32
51.75.160.215	attackspambots	Dec 2 15:38:00 tux-35-217 sshd\[2353\]: Invalid user adm321 from 51.75.160.215 port 45030 Dec 2 15:38:00 tux-35-217 sshd\[2353\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.160.215 Dec 2 15:38:02 tux-35-217 sshd\[2353\]: Failed password for invalid user adm321 from 51.75.160.215 port 45030 ssh2 Dec 2 15:43:39 tux-35-217 sshd\[2399\]: Invalid user zzzzzzz from 51.75.160.215 port 56518 Dec 2 15:43:39 tux-35-217 sshd\[2399\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.160.215 ...	2019-12-02 23:41:38
218.92.0.189	attack	Dec 2 16:16:15 legacy sshd[28000]: Failed password for root from 218.92.0.189 port 57644 ssh2 Dec 2 16:16:17 legacy sshd[28000]: Failed password for root from 218.92.0.189 port 57644 ssh2 Dec 2 16:16:20 legacy sshd[28000]: Failed password for root from 218.92.0.189 port 57644 ssh2 ...	2019-12-02 23:35:26
217.182.170.81	attackbotsspam	2019-12-02T15:16:53.282031abusebot-8.cloudsearch.cf sshd\[6606\]: Invalid user muthia from 217.182.170.81 port 45582	2019-12-02 23:43:08
94.45.132.65	attackspam	[portscan] Port scan	2019-12-02 23:55:26
180.76.105.165	attackbotsspam	Jun 21 04:10:51 vtv3 sshd[27890]: Invalid user test1 from 180.76.105.165 port 56576 Jun 21 04:10:51 vtv3 sshd[27890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.105.165 Jun 21 04:10:53 vtv3 sshd[27890]: Failed password for invalid user test1 from 180.76.105.165 port 56576 ssh2 Jun 21 04:22:24 vtv3 sshd[734]: Invalid user ts3 from 180.76.105.165 port 46132 Jun 21 04:22:24 vtv3 sshd[734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.105.165 Jun 21 04:22:26 vtv3 sshd[734]: Failed password for invalid user ts3 from 180.76.105.165 port 46132 ssh2 Jun 21 04:23:49 vtv3 sshd[1281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.105.165 user=root Jun 21 04:23:51 vtv3 sshd[1281]: Failed password for root from 180.76.105.165 port 58932 ssh2 Dec 2 13:19:49 vtv3 sshd[18622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.105.	2019-12-02 23:37:00
42.112.164.85	normal		2019-12-02 23:26:56
106.13.22.60	attackspam	Dec 2 16:39:20 MK-Soft-Root1 sshd[17841]: Failed password for root from 106.13.22.60 port 52004 ssh2 Dec 2 16:46:54 MK-Soft-Root1 sshd[19472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.22.60 ...	2019-12-02 23:57:21
112.111.0.245	attackspam	ssh brute force	2019-12-02 23:26:27
176.31.69.108	attack	2019-12-02T15:53:17.437320abusebot-8.cloudsearch.cf sshd\[6852\]: Invalid user guest from 176.31.69.108 port 1978	2019-12-02 23:54:30
161.132.184.3	attackbots	Unauthorised access (Dec 2) SRC=161.132.184.3 LEN=52 TOS=0x10 PREC=0x40 TTL=112 ID=19234 DF TCP DPT=445 WINDOW=8192 SYN	2019-12-02 23:22:50
188.166.109.87	attackspam	Dec 2 14:47:56 root sshd[10392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.109.87 Dec 2 14:47:58 root sshd[10392]: Failed password for invalid user endride from 188.166.109.87 port 38964 ssh2 Dec 2 14:54:03 root sshd[10487]: Failed password for root from 188.166.109.87 port 32956 ssh2 ...	2019-12-02 23:27:38

最近上报的IP列表

61.13.23.87	73.12.108.228	204.120.62.137	180.39.153.224
3.242.231.94	187.131.204.199	94.144.58.43	178.46.209.44
68.62.66.27	100.150.1.151	147.129.159.164	141.105.120.187
80.24.32.182	86.75.214.39	169.226.99.10	60.179.41.81
136.25.7.118	17.34.88.118	115.224.100.78	69.178.58.109