123.20.50.132 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-26 00:05:55

相同子网IP讨论:

IP	类型	评论内容	时间
123.20.50.38	attackbotsspam	Jan 30 22:29:19 xeon postfix/smtpd[35343]: warning: unknown[123.20.50.38]: SASL PLAIN authentication failed: authentication failure	2020-01-31 05:56:38
123.20.50.184	attack	Dec 14 05:55:40 ns3367391 sshd[8844]: Invalid user guest from 123.20.50.184 port 47799 Dec 14 05:55:40 ns3367391 sshd[8844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.50.184 Dec 14 05:55:40 ns3367391 sshd[8844]: Invalid user guest from 123.20.50.184 port 47799 Dec 14 05:55:42 ns3367391 sshd[8844]: Failed password for invalid user guest from 123.20.50.184 port 47799 ssh2 ...	2019-12-14 13:39:54

类型

评论内容

时间

123.20.50.38

attackbotsspam

Jan 30 22:29:19 xeon postfix/smtpd[35343]: warning: unknown[123.20.50.38]: SASL PLAIN authentication failed: authentication failure

2020-01-31 05:56:38

123.20.50.184

attack

Dec 14 05:55:40 ns3367391 sshd[8844]: Invalid user guest from 123.20.50.184 port 47799
Dec 14 05:55:40 ns3367391 sshd[8844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.50.184
Dec 14 05:55:40 ns3367391 sshd[8844]: Invalid user guest from 123.20.50.184 port 47799
Dec 14 05:55:42 ns3367391 sshd[8844]: Failed password for invalid user guest from 123.20.50.184 port 47799 ssh2
...

2019-12-14 13:39:54

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.20.50.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23168
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;123.20.50.132.			IN	A

;; AUTHORITY SECTION:
.			354	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032500 1800 900 604800 86400

;; Query time: 99 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 26 00:05:47 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 132.50.20.123.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 132.50.20.123.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
186.42.103.181	attackspam	Aug 26 17:01:47 aiointranet sshd\[22609\]: Invalid user hello from 186.42.103.181 Aug 26 17:01:47 aiointranet sshd\[22609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.42.103.181 Aug 26 17:01:49 aiointranet sshd\[22609\]: Failed password for invalid user hello from 186.42.103.181 port 42170 ssh2 Aug 26 17:06:37 aiointranet sshd\[23024\]: Invalid user patrick from 186.42.103.181 Aug 26 17:06:37 aiointranet sshd\[23024\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.42.103.181	2019-08-27 11:15:19
171.244.9.27	attackbotsspam	Aug 27 04:43:20 localhost sshd\[29401\]: Invalid user matilda from 171.244.9.27 port 34954 Aug 27 04:43:20 localhost sshd\[29401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.9.27 Aug 27 04:43:22 localhost sshd\[29401\]: Failed password for invalid user matilda from 171.244.9.27 port 34954 ssh2	2019-08-27 10:51:40
178.46.128.103	attack	Aug 27 02:39:09 srv-4 sshd\[18916\]: Invalid user admin from 178.46.128.103 Aug 27 02:39:09 srv-4 sshd\[18916\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.46.128.103 Aug 27 02:39:11 srv-4 sshd\[18916\]: Failed password for invalid user admin from 178.46.128.103 port 34311 ssh2 ...	2019-08-27 11:06:55
94.42.178.137	attackspam	Aug 26 16:37:52 tdfoods sshd\[5067\]: Invalid user chen from 94.42.178.137 Aug 26 16:37:52 tdfoods sshd\[5067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.42.178.137 Aug 26 16:37:54 tdfoods sshd\[5067\]: Failed password for invalid user chen from 94.42.178.137 port 44871 ssh2 Aug 26 16:43:32 tdfoods sshd\[5639\]: Invalid user lilin from 94.42.178.137 Aug 26 16:43:32 tdfoods sshd\[5639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.42.178.137	2019-08-27 10:49:39
35.228.75.23	attackbotsspam	Aug 27 03:26:01 srv206 sshd[30038]: Invalid user adsl from 35.228.75.23 ...	2019-08-27 11:05:00
190.145.7.42	attackbots	DATE:2019-08-27 04:09:18, IP:190.145.7.42, PORT:ssh SSH brute force auth (ermes)	2019-08-27 10:39:10
62.210.180.84	attack	\[2019-08-26 22:44:33\] NOTICE\[1829\] chan_sip.c: Registration from '"100"\' failed for '62.210.180.84:54285' - Wrong password \[2019-08-26 22:44:33\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-26T22:44:33.964-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7f7b302cefa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.180.84/54285",Challenge="262241cb",ReceivedChallenge="262241cb",ReceivedHash="d6cef61a3cfec8df596872d065754806" \[2019-08-26 22:49:54\] NOTICE\[1829\] chan_sip.c: Registration from '"55"\' failed for '62.210.180.84:37871' - Wrong password \[2019-08-26 22:49:54\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-26T22:49:54.971-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="55",SessionID="0x7f7b302cefa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.180.84/3787	2019-08-27 11:11:49
103.76.188.52	attackbots	Brute force attempt	2019-08-27 11:01:48
76.74.170.93	attackspambots	Aug 27 05:42:20 srv-4 sshd\[23278\]: Invalid user cj from 76.74.170.93 Aug 27 05:42:20 srv-4 sshd\[23278\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.74.170.93 Aug 27 05:42:22 srv-4 sshd\[23278\]: Failed password for invalid user cj from 76.74.170.93 port 54685 ssh2 ...	2019-08-27 10:53:36
116.202.25.67	attackbots	Wordpress attack	2019-08-27 11:22:25
154.66.113.78	attack	Aug 27 04:39:54 mail sshd\[2138\]: Invalid user maurta from 154.66.113.78 port 50802 Aug 27 04:39:54 mail sshd\[2138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.66.113.78 Aug 27 04:39:57 mail sshd\[2138\]: Failed password for invalid user maurta from 154.66.113.78 port 50802 ssh2 Aug 27 04:45:16 mail sshd\[2839\]: Invalid user train5 from 154.66.113.78 port 39130 Aug 27 04:45:16 mail sshd\[2839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.66.113.78	2019-08-27 11:00:13
158.69.112.178	attackspambots	C1,WP GET /suche/wp-login.php	2019-08-27 10:52:22
111.93.128.90	attackspambots	Aug 27 01:34:46 dev0-dcde-rnet sshd[2456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.128.90 Aug 27 01:34:48 dev0-dcde-rnet sshd[2456]: Failed password for invalid user spa from 111.93.128.90 port 2912 ssh2 Aug 27 01:38:43 dev0-dcde-rnet sshd[2481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.128.90	2019-08-27 11:33:22
181.91.207.210	attackbotsspam	" "	2019-08-27 11:27:07
167.71.217.70	attackbots	Aug 26 22:44:42 ny01 sshd[18873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.217.70 Aug 26 22:44:43 ny01 sshd[18873]: Failed password for invalid user applmgr from 167.71.217.70 port 38394 ssh2 Aug 26 22:49:33 ny01 sshd[19626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.217.70	2019-08-27 10:55:48

最近上报的IP列表

95.79.104.175	49.4.8.30	181.171.59.25	85.143.219.197
162.243.131.39	223.85.222.14	86.122.202.11	104.54.58.196
143.201.210.112	14.53.57.54	55.160.58.145	3.228.63.52
223.95.254.183	212.129.240.194	197.210.71.241	231.25.136.104
119.204.104.31	93.148.127.233	8.73.130.4	187.19.249.47