110.55.109.42 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Philippines

运营商(isp): Bayan Telecommunications Incorporated

主机名(hostname): unknown

机构(organization): Bayan Telecommunications, Inc.

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Brute force SMTP login attempted. ...	2020-04-01 08:26:40
attackbots	Jul 31 00:58:00 thevastnessof sshd[10034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.55.109.42 ...	2019-07-31 09:03:14
attack	Jul 13 17:43:08 debian sshd\[27178\]: Invalid user test1 from 110.55.109.42 port 58651 Jul 13 17:43:08 debian sshd\[27178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.55.109.42 Jul 13 17:43:09 debian sshd\[27178\]: Failed password for invalid user test1 from 110.55.109.42 port 58651 ssh2 ...	2019-07-14 06:26:46
attackspambots	Invalid user pgsql from 110.55.109.42 port 48935	2019-06-22 14:03:39
attack	Jun 21 15:38:39 bouncer sshd\[28732\]: Invalid user banet from 110.55.109.42 port 45957 Jun 21 15:38:39 bouncer sshd\[28732\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.55.109.42 Jun 21 15:38:41 bouncer sshd\[28732\]: Failed password for invalid user banet from 110.55.109.42 port 45957 ssh2 ...	2019-06-21 21:50:28

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.55.109.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32184
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;110.55.109.42.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042200 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue Apr 23 00:46:45 +08 2019
;; MSG SIZE  rcvd: 117

HOST信息:

42.109.55.110.in-addr.arpa domain name pointer 110.55.109.42.BTI.NET.PH.

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
42.109.55.110.in-addr.arpa	name = 110.55.109.42.BTI.NET.PH.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
54.37.117.90	attackbots	"SMTPD" 1644 21029 "2020-08-19 10:18:58.575" "54.37.177.90" "RECEIVED: EHLO ayitiflix.com"	2020-08-20 03:18:21
136.243.72.5	attackspam	Aug 19 21:09:05 relay postfix/smtpd\[7846\]: warning: mon.risse-it.de\[136.243.72.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 19 21:09:05 relay postfix/smtpd\[6790\]: warning: mon.risse-it.de\[136.243.72.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 19 21:09:05 relay postfix/smtpd\[5915\]: warning: mon.risse-it.de\[136.243.72.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 19 21:09:05 relay postfix/smtpd\[5916\]: warning: mon.risse-it.de\[136.243.72.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 19 21:09:05 relay postfix/smtpd\[7813\]: warning: mon.risse-it.de\[136.243.72.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 19 21:09:05 relay postfix/smtpd\[6352\]: warning: mon.risse-it.de\[136.243.72.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 19 21:09:05 relay postfix/smtpd\[6774\]: warning: mon.risse-it.de\[136.243.72.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 19 21:09:05 relay postfix/smtpd\[6787\]: warning: mon.riss ...	2020-08-20 03:25:33
45.43.36.191	attackspam	Aug 19 14:17:20 vps-51d81928 sshd[739119]: Invalid user admin from 45.43.36.191 port 37360 Aug 19 14:17:20 vps-51d81928 sshd[739119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.43.36.191 Aug 19 14:17:20 vps-51d81928 sshd[739119]: Invalid user admin from 45.43.36.191 port 37360 Aug 19 14:17:23 vps-51d81928 sshd[739119]: Failed password for invalid user admin from 45.43.36.191 port 37360 ssh2 Aug 19 14:20:58 vps-51d81928 sshd[739162]: Invalid user divya from 45.43.36.191 port 59308 ...	2020-08-20 03:23:45
45.32.205.151	attack	Lines containing failures of 45.32.205.151 Aug 17 04:15:37 xxxxxxx postfix/submission/smtpd[29615]: warning: hostname 45.32.205.151.vultr.com does not resolve to address 45.32.205.151 Aug 17 04:15:37 xxxxxxx postfix/submission/smtpd[29615]: connect from unknown[45.32.205.151] Aug 17 04:15:37 xxxxxxx postfix/submission/smtpd[29615]: lost connection after CONNECT from unknown[45.32.205.151] Aug 17 04:15:37 xxxxxxx postfix/submission/smtpd[29615]: disconnect from unknown[45.32.205.151] commands=0/0 Aug 17 04:15:50 xxxxxxx postfix/submission/smtpd[29615]: warning: hostname 45.32.205.151.vultr.com does not resolve to address 45.32.205.151 Aug 17 04:15:50 xxxxxxx postfix/submission/smtpd[29615]: connect from unknown[45.32.205.151] Aug 17 04:15:50 xxxxxxx postfix/submission/smtpd[29615]: Anonymous TLS connection established from unknown[45.32.205.151]: TLSv1 whostnameh cipher DHE-RSA-AES256-SHA (256/256 bhostnames) Aug 17 04:15:53 xxxxxxx postfix/submission/smtpd[29615]: warnin........ ------------------------------	2020-08-20 03:18:41
62.234.59.145	attack	Aug 19 20:27:13 marvibiene sshd[7926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.59.145 Aug 19 20:27:15 marvibiene sshd[7926]: Failed password for invalid user vdi from 62.234.59.145 port 52592 ssh2	2020-08-20 03:15:03
170.233.36.14	attackspambots	"fail2ban match"	2020-08-20 03:31:49
178.32.219.66	attackbotsspam	SSH Brute-Force. Ports scanning.	2020-08-20 03:44:22
34.93.237.166	attackbotsspam	Aug 19 15:41:06 ws26vmsma01 sshd[199347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.93.237.166 Aug 19 15:41:08 ws26vmsma01 sshd[199347]: Failed password for invalid user deploy from 34.93.237.166 port 48510 ssh2 ...	2020-08-20 03:33:37
78.128.113.118	attackbotsspam	2020-08-19T21:07:27.384540web.dutchmasterserver.nl postfix/smtps/smtpd[699368]: warning: unknown[78.128.113.118]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-08-19T21:07:50.009363web.dutchmasterserver.nl postfix/smtps/smtpd[699387]: warning: unknown[78.128.113.118]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-08-19T21:08:10.286877web.dutchmasterserver.nl postfix/smtps/smtpd[699387]: warning: unknown[78.128.113.118]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-08-19T21:13:47.411651web.dutchmasterserver.nl postfix/smtps/smtpd[700111]: warning: unknown[78.128.113.118]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-08-19T21:14:09.154213web.dutchmasterserver.nl postfix/smtps/smtpd[700111]: warning: unknown[78.128.113.118]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-08-20 03:13:59
181.225.65.242	attackbotsspam	Dovecot Invalid User Login Attempt.	2020-08-20 03:28:23
51.210.111.223	attack	prod8 ...	2020-08-20 03:49:00
51.254.101.227	attackspambots	Aug 19 18:28:04 [host] sshd[8714]: Invalid user ju Aug 19 18:28:04 [host] sshd[8714]: pam_unix(sshd:a Aug 19 18:28:06 [host] sshd[8714]: Failed password	2020-08-20 03:42:18
103.219.112.47	attackspambots	2020-08-19T21:48:56.286818mail.standpoint.com.ua sshd[32568]: Failed password for root from 103.219.112.47 port 34132 ssh2 2020-08-19T21:53:03.227668mail.standpoint.com.ua sshd[780]: Invalid user anonymous from 103.219.112.47 port 40522 2020-08-19T21:53:03.230948mail.standpoint.com.ua sshd[780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.219.112.47 2020-08-19T21:53:03.227668mail.standpoint.com.ua sshd[780]: Invalid user anonymous from 103.219.112.47 port 40522 2020-08-19T21:53:05.132552mail.standpoint.com.ua sshd[780]: Failed password for invalid user anonymous from 103.219.112.47 port 40522 ssh2 ...	2020-08-20 03:36:35
60.16.80.242	attack	TCP (SYN) 60.16.80.242:48499 -> port 23, len 44	2020-08-20 03:36:49
181.188.219.42	attack	2020-08-18T13:21:17.241796hostname sshd[100717]: Failed password for invalid user adminrig from 181.188.219.42 port 49854 ssh2 ...	2020-08-20 03:22:30

最近上报的IP列表

2804:7f7:dc80:f15f:9da5:f2f0:35e2:bdbb	207.0.127.20	100.4.47.199	186.147.163.171
12.85.219.195	165.21.115.132	186.107.255.208	95.154.200.183
166.69.242.27	110.105.235.228	163.172.29.223	179.71.129.188
136.159.112.241	142.233.202.126	70.95.81.134	173.177.76.171
95.175.14.136	122.184.101.49	13.22.233.252	162.220.166.192