171.103.56.54 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): True Internet Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	(imapd) Failed IMAP login from 171.103.56.54 (TH/Thailand/171-103-56-54.static.asianet.co.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 22 16:31:44 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=171.103.56.54, lip=5.63.12.44, session=	2020-04-23 00:04:08
attack	Jul 8 10:21:42 dev sshd\[2756\]: Invalid user admin from 171.103.56.54 port 39703 Jul 8 10:21:42 dev sshd\[2756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.103.56.54 ...	2019-07-08 20:58:22

类型

评论内容

时间

attackspam

(imapd) Failed IMAP login from 171.103.56.54 (TH/Thailand/171-103-56-54.static.asianet.co.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 22 16:31:44 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=171.103.56.54, lip=5.63.12.44, session=

2020-04-23 00:04:08

attack

Jul  8 10:21:42 dev sshd\[2756\]: Invalid user admin from 171.103.56.54 port 39703
Jul  8 10:21:42 dev sshd\[2756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.103.56.54
...

2019-07-08 20:58:22

相同子网IP讨论:

IP	类型	评论内容	时间
171.103.56.218	attack	Brute force attempt	2020-06-03 05:51:40
171.103.56.218	attackspambots	Dovecot Invalid User Login Attempt.	2020-06-02 02:04:38
171.103.56.118	attackbots	Dovecot Invalid User Login Attempt.	2020-05-27 15:51:28
171.103.56.218	attackbots	'IP reached maximum auth failures for a one day block'	2020-05-16 00:39:57
171.103.56.134	attack	Invalid user admin from 171.103.56.134 port 38524	2020-05-03 08:15:07
171.103.56.118	attackbotsspam	Autoban 171.103.56.118 AUTH/CONNECT	2020-03-26 18:37:30
171.103.56.154	attackspambots	Brute force attempt	2020-03-08 22:01:56
171.103.56.106	attackbotsspam	1582520007 - 02/24/2020 05:53:27 Host: 171.103.56.106/171.103.56.106 Port: 445 TCP Blocked	2020-02-24 15:57:25
171.103.56.134	attackspambots	failed_logins	2020-01-29 14:29:44
171.103.56.86	attack	Jan 3 04:47:13 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=, method=PLAIN, rip=171.103.56.86, lip=10.140.194.78, TLS, session=	2020-01-03 17:49:17
171.103.56.86	attackspam	failed_logins	2019-11-26 19:56:01
171.103.56.74	attackspambots	Autoban 171.103.56.74 ABORTED AUTH	2019-11-18 21:17:07
171.103.56.74	attackspambots	B: Magento admin pass test (wrong country)	2019-11-14 20:15:12
171.103.56.218	attackspam	Invalid user guest from 171.103.56.218 port 52327	2019-10-25 00:17:56

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 171.103.56.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58269
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;171.103.56.54.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070800 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 08 20:58:14 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

54.56.103.171.in-addr.arpa domain name pointer 171-103-56-54.static.asianet.co.th.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
54.56.103.171.in-addr.arpa	name = 171-103-56-54.static.asianet.co.th.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
59.25.197.154	attackbots	" "	2019-11-07 13:36:21
182.72.178.114	attackbotsspam	Nov 7 06:06:17 venus sshd\[20602\]: Invalid user Pass@2020 from 182.72.178.114 port 28957 Nov 7 06:06:17 venus sshd\[20602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.72.178.114 Nov 7 06:06:18 venus sshd\[20602\]: Failed password for invalid user Pass@2020 from 182.72.178.114 port 28957 ssh2 ...	2019-11-07 14:17:08
99.29.90.25	attack	2019-11-07T04:55:52.690044abusebot-8.cloudsearch.cf sshd\[365\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=99.29.90.25 user=root	2019-11-07 13:56:19
104.42.158.117	attackbotsspam	Nov 7 06:20:13 dedicated sshd[10345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.158.117 user=root Nov 7 06:20:15 dedicated sshd[10345]: Failed password for root from 104.42.158.117 port 18368 ssh2	2019-11-07 13:43:46
139.59.238.14	attack	Nov 7 00:25:59 ny01 sshd[27283]: Failed password for root from 139.59.238.14 port 40680 ssh2 Nov 7 00:30:16 ny01 sshd[27832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.238.14 Nov 7 00:30:17 ny01 sshd[27832]: Failed password for invalid user gog from 139.59.238.14 port 50566 ssh2	2019-11-07 13:38:54
106.13.198.162	attack	Nov 7 06:56:16 dedicated sshd[16167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.198.162 user=root Nov 7 06:56:18 dedicated sshd[16167]: Failed password for root from 106.13.198.162 port 58730 ssh2	2019-11-07 14:02:12
92.119.160.97	attackspam	11/07/2019-00:07:42.484409 92.119.160.97 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-11-07 13:36:48
222.186.180.147	attackbotsspam	Nov 7 02:48:53 firewall sshd[25152]: Failed password for root from 222.186.180.147 port 15454 ssh2 Nov 7 02:48:57 firewall sshd[25152]: Failed password for root from 222.186.180.147 port 15454 ssh2 Nov 7 02:49:01 firewall sshd[25152]: Failed password for root from 222.186.180.147 port 15454 ssh2 ...	2019-11-07 13:51:42
80.211.159.118	attack	Nov 7 05:58:05 vps647732 sshd[21772]: Failed password for root from 80.211.159.118 port 49540 ssh2 ...	2019-11-07 14:11:07
49.88.112.117	attack	Nov 7 02:43:08 firewall sshd[25002]: Failed password for root from 49.88.112.117 port 57362 ssh2 Nov 7 02:44:33 firewall sshd[25044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.117 user=root Nov 7 02:44:35 firewall sshd[25044]: Failed password for root from 49.88.112.117 port 11992 ssh2 ...	2019-11-07 13:45:11
142.93.26.245	attackspam	Nov 7 05:35:22 game-panel sshd[31691]: Failed password for root from 142.93.26.245 port 51532 ssh2 Nov 7 05:41:09 game-panel sshd[31936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.26.245 Nov 7 05:41:10 game-panel sshd[31936]: Failed password for invalid user gast from 142.93.26.245 port 60658 ssh2	2019-11-07 13:57:11
2a01:7c8:aaaa:6f:5054:ff:fe90:4b67	attackbots	C1,WP GET /suche/wp-login.php	2019-11-07 13:42:04
123.118.125.78	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/123.118.125.78/ CN - 1H : (615) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4808 IP : 123.118.125.78 CIDR : 123.118.64.0/18 PREFIX COUNT : 1972 UNIQUE IP COUNT : 6728192 ATTACKS DETECTED ASN4808 : 1H - 5 3H - 6 6H - 10 12H - 19 24H - 33 DateTime : 2019-11-07 05:55:51 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-07 13:55:39
61.216.13.170	attack	Nov 7 07:29:00 sauna sshd[37576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.216.13.170 Nov 7 07:29:02 sauna sshd[37576]: Failed password for invalid user test from 61.216.13.170 port 39199 ssh2 ...	2019-11-07 13:54:23
222.186.175.217	attackspambots	Nov 7 02:53:25 firewall sshd[25240]: Failed password for root from 222.186.175.217 port 53672 ssh2 Nov 7 02:53:43 firewall sshd[25240]: error: maximum authentication attempts exceeded for root from 222.186.175.217 port 53672 ssh2 [preauth] Nov 7 02:53:43 firewall sshd[25240]: Disconnecting: Too many authentication failures [preauth] ...	2019-11-07 13:59:38

最近上报的IP列表

171.4.237.58	113.76.133.107	177.55.149.190	123.30.238.171
116.104.214.168	113.74.54.38	95.134.195.146	198.18.46.101
191.53.196.9	180.183.246.202	78.188.193.197	113.74.50.19
186.93.123.113	122.18.165.144	113.74.48.251	103.252.118.150
200.66.115.211	113.74.32.2	211.223.57.6	5.9.138.189