171.103.56.54 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): True Internet Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	(imapd) Failed IMAP login from 171.103.56.54 (TH/Thailand/171-103-56-54.static.asianet.co.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 22 16:31:44 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=171.103.56.54, lip=5.63.12.44, session=	2020-04-23 00:04:08
attack	Jul 8 10:21:42 dev sshd\[2756\]: Invalid user admin from 171.103.56.54 port 39703 Jul 8 10:21:42 dev sshd\[2756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.103.56.54 ...	2019-07-08 20:58:22

类型

评论内容

时间

attackspam

(imapd) Failed IMAP login from 171.103.56.54 (TH/Thailand/171-103-56-54.static.asianet.co.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 22 16:31:44 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=171.103.56.54, lip=5.63.12.44, session=

2020-04-23 00:04:08

attack

Jul  8 10:21:42 dev sshd\[2756\]: Invalid user admin from 171.103.56.54 port 39703
Jul  8 10:21:42 dev sshd\[2756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.103.56.54
...

2019-07-08 20:58:22

相同子网IP讨论:

IP	类型	评论内容	时间
171.103.56.218	attack	Brute force attempt	2020-06-03 05:51:40
171.103.56.218	attackspambots	Dovecot Invalid User Login Attempt.	2020-06-02 02:04:38
171.103.56.118	attackbots	Dovecot Invalid User Login Attempt.	2020-05-27 15:51:28
171.103.56.218	attackbots	'IP reached maximum auth failures for a one day block'	2020-05-16 00:39:57
171.103.56.134	attack	Invalid user admin from 171.103.56.134 port 38524	2020-05-03 08:15:07
171.103.56.118	attackbotsspam	Autoban 171.103.56.118 AUTH/CONNECT	2020-03-26 18:37:30
171.103.56.154	attackspambots	Brute force attempt	2020-03-08 22:01:56
171.103.56.106	attackbotsspam	1582520007 - 02/24/2020 05:53:27 Host: 171.103.56.106/171.103.56.106 Port: 445 TCP Blocked	2020-02-24 15:57:25
171.103.56.134	attackspambots	failed_logins	2020-01-29 14:29:44
171.103.56.86	attack	Jan 3 04:47:13 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=, method=PLAIN, rip=171.103.56.86, lip=10.140.194.78, TLS, session=	2020-01-03 17:49:17
171.103.56.86	attackspam	failed_logins	2019-11-26 19:56:01
171.103.56.74	attackspambots	Autoban 171.103.56.74 ABORTED AUTH	2019-11-18 21:17:07
171.103.56.74	attackspambots	B: Magento admin pass test (wrong country)	2019-11-14 20:15:12
171.103.56.218	attackspam	Invalid user guest from 171.103.56.218 port 52327	2019-10-25 00:17:56

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 171.103.56.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58269
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;171.103.56.54.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070800 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 08 20:58:14 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

54.56.103.171.in-addr.arpa domain name pointer 171-103-56-54.static.asianet.co.th.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
54.56.103.171.in-addr.arpa	name = 171-103-56-54.static.asianet.co.th.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
213.61.215.54	attackbotsspam	Aug 2 08:57:13 tux-35-217 sshd\[17188\]: Invalid user device from 213.61.215.54 port 9914 Aug 2 08:57:13 tux-35-217 sshd\[17188\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.61.215.54 Aug 2 08:57:16 tux-35-217 sshd\[17188\]: Failed password for invalid user device from 213.61.215.54 port 9914 ssh2 Aug 2 08:57:21 tux-35-217 sshd\[17190\]: Invalid user eurek from 213.61.215.54 port 6762 Aug 2 08:57:21 tux-35-217 sshd\[17190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.61.215.54 ...	2019-08-02 15:14:19
218.92.0.155	attackspambots	Aug 2 07:14:13 vps sshd[3262]: Failed password for root from 218.92.0.155 port 37525 ssh2 Aug 2 07:14:16 vps sshd[3262]: Failed password for root from 218.92.0.155 port 37525 ssh2 Aug 2 07:14:20 vps sshd[3262]: Failed password for root from 218.92.0.155 port 37525 ssh2 Aug 2 07:14:24 vps sshd[3262]: Failed password for root from 218.92.0.155 port 37525 ssh2 ...	2019-08-02 14:16:18
104.194.69.10	attack	Aug 1 13:43:09 fv15 sshd[22604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.194.69.10.16clouds.com Aug 1 13:43:11 fv15 sshd[22604]: Failed password for invalid user toor from 104.194.69.10 port 55790 ssh2 Aug 1 13:43:11 fv15 sshd[22604]: Received disconnect from 104.194.69.10: 11: Bye Bye [preauth] Aug 1 13:57:17 fv15 sshd[24626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.194.69.10.16clouds.com user=r.r Aug 1 13:57:19 fv15 sshd[24626]: Failed password for r.r from 104.194.69.10 port 52366 ssh2 Aug 1 13:57:19 fv15 sshd[24626]: Received disconnect from 104.194.69.10: 11: Bye Bye [preauth] Aug 1 14:15:51 fv15 sshd[14022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.194.69.10.16clouds.com Aug 1 14:15:52 fv15 sshd[14022]: Failed password for invalid user jetty from 104.194.69.10 port 49570 ssh2 Aug 1 14:15:53 fv15 sshd[1........ -------------------------------	2019-08-02 15:22:08
106.75.8.129	attack	SSH authentication failure x 6 reported by Fail2Ban ...	2019-08-02 15:12:58
159.65.96.102	attack	Invalid user monitor from 159.65.96.102 port 58270	2019-08-02 14:16:54
41.43.114.60	attack	Lines containing failures of 41.43.114.60 Aug 2 01:06:14 ariston sshd[9873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.43.114.60 user=r.r Aug 2 01:06:16 ariston sshd[9873]: Failed password for r.r from 41.43.114.60 port 47858 ssh2 Aug 2 01:06:19 ariston sshd[9873]: Failed password for r.r from 41.43.114.60 port 47858 ssh2 Aug 2 01:06:21 ariston sshd[9873]: Failed password for r.r from 41.43.114.60 port 47858 ssh2 Aug 2 01:06:24 ariston sshd[9873]: Failed password for r.r from 41.43.114.60 port 47858 ssh2 Aug 2 01:06:28 ariston sshd[9873]: Failed password for r.r from 41.43.114.60 port 47858 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=41.43.114.60	2019-08-02 15:13:54
179.60.155.42	attack	Automatic report - Port Scan Attack	2019-08-02 14:17:48
186.211.185.106	attackbotsspam	proto=tcp . spt=46980 . dpt=25 . (listed on Blocklist de Aug 01) (25)	2019-08-02 14:42:34
125.124.167.213	attackspam	Aug 2 06:39:21 w sshd[1270]: Invalid user kevin from 125.124.167.213 Aug 2 06:39:21 w sshd[1270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.167.213 Aug 2 06:39:23 w sshd[1270]: Failed password for invalid user kevin from 125.124.167.213 port 53118 ssh2 Aug 2 06:39:23 w sshd[1270]: Received disconnect from 125.124.167.213: 11: Bye Bye [preauth] Aug 2 07:01:37 w sshd[1441]: Connection closed by 125.124.167.213 [preauth] Aug 2 07:04:43 w sshd[1454]: Invalid user view from 125.124.167.213 Aug 2 07:04:43 w sshd[1454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.167.213 Aug 2 07:04:44 w sshd[1454]: Failed password for invalid user view from 125.124.167.213 port 33494 ssh2 Aug 2 07:04:44 w sshd[1454]: Received disconnect from 125.124.167.213: 11: Bye Bye [preauth] Aug 2 07:07:59 w sshd[1468]: Invalid user linux1 from 125.124.167.213 Aug 2 07:07:59 w sshd[1468]........ -------------------------------	2019-08-02 14:44:06
198.108.66.41	attack	3389BruteforceFW23	2019-08-02 14:38:19
119.28.84.196	attack	Joomla HTTP User Agent Object Injection Vulnerability	2019-08-02 14:24:56
185.156.177.152	attack	SSH-bruteforce attempts	2019-08-02 15:26:26
82.50.185.220	attackbots	Automatic report - Port Scan Attack	2019-08-02 15:25:16
110.76.149.22	attack	proto=tcp . spt=43560 . dpt=25 . (listed on Blocklist de Aug 01) (23)	2019-08-02 14:45:37
79.137.84.144	attackspambots	Invalid user lighttpd from 79.137.84.144 port 44026	2019-08-02 14:47:59

最近上报的IP列表

171.4.237.58	113.76.133.107	177.55.149.190	123.30.238.171
116.104.214.168	113.74.54.38	95.134.195.146	198.18.46.101
191.53.196.9	180.183.246.202	78.188.193.197	113.74.50.19
186.93.123.113	122.18.165.144	113.74.48.251	103.252.118.150
200.66.115.211	113.74.32.2	211.223.57.6	5.9.138.189