123.21.138.2 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Chat Spam	2019-09-27 19:08:29

相同子网IP讨论:

IP	类型	评论内容	时间
123.21.138.166	attackspambots	Jan 5 05:54:41 dev sshd\[32754\]: Invalid user admin from 123.21.138.166 port 53248 Jan 5 05:54:41 dev sshd\[32754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.21.138.166 Jan 5 05:54:42 dev sshd\[32754\]: Failed password for invalid user admin from 123.21.138.166 port 53248 ssh2	2020-01-05 18:12:38

类型

评论内容

时间

123.21.138.166

attackspambots

Jan  5 05:54:41 dev sshd\[32754\]: Invalid user admin from 123.21.138.166 port 53248
Jan  5 05:54:41 dev sshd\[32754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.21.138.166
Jan  5 05:54:42 dev sshd\[32754\]: Failed password for invalid user admin from 123.21.138.166 port 53248 ssh2

2020-01-05 18:12:38

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.21.138.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41433
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;123.21.138.2.			IN	A

;; AUTHORITY SECTION:
.			429	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092700 1800 900 604800 86400

;; Query time: 125 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 27 19:08:24 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 2.138.21.123.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.138.21.123.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
125.215.207.40	attackspam	Feb 12 20:16:13 hpm sshd\[6141\]: Invalid user topgun from 125.215.207.40 Feb 12 20:16:13 hpm sshd\[6141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.215.207.40 Feb 12 20:16:14 hpm sshd\[6141\]: Failed password for invalid user topgun from 125.215.207.40 port 46740 ssh2 Feb 12 20:20:24 hpm sshd\[6568\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.215.207.40 user=root Feb 12 20:20:27 hpm sshd\[6568\]: Failed password for root from 125.215.207.40 port 37596 ssh2	2020-02-13 14:40:12
125.160.112.154	attack	1581569635 - 02/13/2020 05:53:55 Host: 125.160.112.154/125.160.112.154 Port: 445 TCP Blocked	2020-02-13 14:26:08
140.143.223.242	attack	Feb 13 07:11:28 silence02 sshd[24532]: Failed password for root from 140.143.223.242 port 37784 ssh2 Feb 13 07:15:14 silence02 sshd[24877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.223.242 Feb 13 07:15:15 silence02 sshd[24877]: Failed password for invalid user pou from 140.143.223.242 port 32980 ssh2	2020-02-13 15:00:22
222.252.20.68	attackbots	(sshd) Failed SSH login from 222.252.20.68 (VN/Vietnam/static.vnpt-hanoi.com.vn): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Feb 13 05:53:16 ubnt-55d23 sshd[2206]: Invalid user test from 222.252.20.68 port 51241 Feb 13 05:53:19 ubnt-55d23 sshd[2206]: Failed password for invalid user test from 222.252.20.68 port 51241 ssh2	2020-02-13 14:54:08
114.33.100.30	attack	DATE:2020-02-13 05:52:29, IP:114.33.100.30, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-02-13 14:25:45
222.186.180.130	attackbotsspam	Feb 13 03:29:22 firewall sshd[25615]: Failed password for root from 222.186.180.130 port 19144 ssh2 Feb 13 03:29:25 firewall sshd[25615]: Failed password for root from 222.186.180.130 port 19144 ssh2 Feb 13 03:29:27 firewall sshd[25615]: Failed password for root from 222.186.180.130 port 19144 ssh2 ...	2020-02-13 14:46:29
195.176.3.20	attackspambots	2,14-01/02 [bc01/m18] PostRequest-Spammer scoring: lisboa	2020-02-13 14:55:03
222.186.175.140	attackspambots	Feb 13 07:29:03 legacy sshd[29159]: Failed password for root from 222.186.175.140 port 40860 ssh2 Feb 13 07:29:16 legacy sshd[29159]: error: maximum authentication attempts exceeded for root from 222.186.175.140 port 40860 ssh2 [preauth] Feb 13 07:29:22 legacy sshd[29167]: Failed password for root from 222.186.175.140 port 54528 ssh2 ...	2020-02-13 14:43:38
122.117.23.198	attackspambots	1581569616 - 02/13/2020 05:53:36 Host: 122.117.23.198/122.117.23.198 Port: 445 TCP Blocked	2020-02-13 14:39:14
109.117.222.13	attackspam	Caught in portsentry honeypot	2020-02-13 14:52:57
177.73.118.196	attackbots	Port probing on unauthorized port 23	2020-02-13 14:30:18
113.168.64.69	attack	1581569645 - 02/13/2020 05:54:05 Host: 113.168.64.69/113.168.64.69 Port: 445 TCP Blocked	2020-02-13 14:18:10
189.11.172.52	attackspam	Tried sshing with brute force.	2020-02-13 14:34:21
84.201.157.119	attack	Invalid user secret from 84.201.157.119 port 41940	2020-02-13 14:24:56
185.143.223.173	attackspam	Feb 13 07:15:56 grey postfix/smtpd\[16596\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.173\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.173\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.173\]\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.97\]\>Feb 13 07:15:56 grey postfix/smtpd\[16596\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.173\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.173\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.173\]\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.97\]\>Feb 13 07:15:56 grey postfix/smtpd\[16596\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.173\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.173\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.173\]\; from=\	2020-02-13 15:05:15

最近上报的IP列表

112.172.130.24	41.202.168.85	60.17.70.153	159.203.201.182
125.26.169.17	159.236.106.166	67.205.169.58	244.69.166.172
117.138.221.233	185.220.31.237	248.152.181.233	196.252.40.214
118.125.14.96	183.13.14.132	91.70.248.241	5.11.232.42
50.108.238.211	235.108.53.146	107.179.19.244	42.37.184.233