113.23.42.31 - IPInfo

基本信息:

城市(city): Hanoi

省份(region): Hanoi

国家(country): Vietnam

运营商(isp): FPT Telecom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Jan 10 13:51:53 grey postfix/smtpd\[26110\]: NOQUEUE: reject: RCPT from unknown\[113.23.42.31\]: 554 5.7.1 Service unavailable\; Client host \[113.23.42.31\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[113.23.42.31\]\; from=\ to=\ proto=ESMTP helo=\<\[113.23.42.31\]\> ...	2020-01-11 04:29:10

类型

评论内容

时间

attackspam

Jan 10 13:51:53 grey postfix/smtpd\[26110\]: NOQUEUE: reject: RCPT from unknown\[113.23.42.31\]: 554 5.7.1 Service unavailable\; Client host \[113.23.42.31\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[113.23.42.31\]\; from=\ to=\ proto=ESMTP helo=\<\[113.23.42.31\]\>
...

2020-01-11 04:29:10

相同子网IP讨论:

IP	类型	评论内容	时间
113.23.42.158	attack	Unauthorized connection attempt from IP address 113.23.42.158 on Port 445(SMB)	2020-07-07 07:27:12
113.23.42.13	attackbotsspam	Unauthorized connection attempt from IP address 113.23.42.13 on Port 445(SMB)	2020-03-14 06:46:11
113.23.42.116	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-08 20:31:32
113.23.42.107	attackbotsspam	Unauthorized connection attempt from IP address 113.23.42.107 on Port 445(SMB)	2019-11-01 19:29:54

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.23.42.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58916
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.23.42.31.			IN	A

;; AUTHORITY SECTION:
.			417	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011001 1800 900 604800 86400

;; Query time: 120 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 11 04:29:07 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 31.42.23.113.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 31.42.23.113.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
174.135.156.170	attackbotsspam	Jun 17 18:21:36 srv sshd[22337]: Failed password for root from 174.135.156.170 port 37168 ssh2	2020-06-18 01:36:59
218.248.0.6	attack	odoo8 ...	2020-06-18 02:09:06
222.73.134.185	attack	Invalid user xyx from 222.73.134.185 port 37148	2020-06-18 01:49:07
111.229.204.62	attackspam	Lines containing failures of 111.229.204.62 Jun 17 17:59:26 kmh-wmh-001-nbg01 sshd[2792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.204.62 user=r.r Jun 17 17:59:28 kmh-wmh-001-nbg01 sshd[2792]: Failed password for r.r from 111.229.204.62 port 35866 ssh2 Jun 17 17:59:28 kmh-wmh-001-nbg01 sshd[2792]: Received disconnect from 111.229.204.62 port 35866:11: Bye Bye [preauth] Jun 17 17:59:28 kmh-wmh-001-nbg01 sshd[2792]: Disconnected from authenticating user r.r 111.229.204.62 port 35866 [preauth] Jun 17 18:05:59 kmh-wmh-001-nbg01 sshd[4102]: Invalid user josue from 111.229.204.62 port 58686 Jun 17 18:05:59 kmh-wmh-001-nbg01 sshd[4102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.204.62 Jun 17 18:06:01 kmh-wmh-001-nbg01 sshd[4102]: Failed password for invalid user josue from 111.229.204.62 port 58686 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=111.2	2020-06-18 01:46:13
122.155.17.174	attackspambots	Invalid user yanwei from 122.155.17.174 port 13366	2020-06-18 01:59:31
152.231.108.170	attack	Jun 17 23:15:02 dhoomketu sshd[829312]: Failed password for root from 152.231.108.170 port 50345 ssh2 Jun 17 23:18:13 dhoomketu sshd[829355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.231.108.170 user=root Jun 17 23:18:14 dhoomketu sshd[829355]: Failed password for root from 152.231.108.170 port 41006 ssh2 Jun 17 23:21:29 dhoomketu sshd[829405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.231.108.170 user=root Jun 17 23:21:31 dhoomketu sshd[829405]: Failed password for root from 152.231.108.170 port 59903 ssh2 ...	2020-06-18 01:55:56
93.123.96.138	attackbots	Jun 17 17:45:31 onepixel sshd[1627466]: Failed password for invalid user hank from 93.123.96.138 port 60680 ssh2 Jun 17 17:48:45 onepixel sshd[1627801]: Invalid user test1 from 93.123.96.138 port 60920 Jun 17 17:48:45 onepixel sshd[1627801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.123.96.138 Jun 17 17:48:45 onepixel sshd[1627801]: Invalid user test1 from 93.123.96.138 port 60920 Jun 17 17:48:48 onepixel sshd[1627801]: Failed password for invalid user test1 from 93.123.96.138 port 60920 ssh2	2020-06-18 02:02:00
82.67.138.184	attackbotsspam	TCP (SYN) 82.67.138.184:44816 -> port 22, len 44	2020-06-18 02:02:34
184.22.140.186	attackspambots	Invalid user mother from 184.22.140.186 port 23809	2020-06-18 01:53:38
133.167.114.151	attackspam	Unauthorized SSH login attempts	2020-06-18 02:12:47
185.97.116.165	attack	Jun 17 19:20:50 sip sshd[9574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.97.116.165 Jun 17 19:20:52 sip sshd[9574]: Failed password for invalid user manager from 185.97.116.165 port 52844 ssh2 Jun 17 19:32:52 sip sshd[13944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.97.116.165	2020-06-18 01:47:15
167.114.114.114	attackbots	Invalid user projects from 167.114.114.114 port 39630	2020-06-18 01:55:21
185.176.27.26	attack	firewall-block, port(s): 24482/tcp, 24494/tcp	2020-06-18 01:44:25
221.202.122.253	attack	Jun 17 18:33:34 pve1 sshd[5596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.202.122.253 Jun 17 18:33:36 pve1 sshd[5596]: Failed password for invalid user yh from 221.202.122.253 port 33560 ssh2 ...	2020-06-18 02:08:12
61.219.11.153	attackbots	Unauthorized connection attempt detected from IP address 61.219.11.153 to port 1900	2020-06-18 01:37:23

最近上报的IP列表

49.39.94.230	162.193.148.0	201.178.213.205	173.146.107.67
109.168.126.157	193.94.4.129	3.112.43.121	166.153.144.34
42.72.70.34	112.225.197.106	185.53.88.106	85.8.52.139
122.0.168.155	107.175.89.162	156.170.38.249	3.247.32.235
96.19.209.239	147.70.64.122	32.142.173.178	92.213.232.95