171.4.239.56 - IPInfo

基本信息:

城市(city): Chiang Mai

省份(region): Chiang Mai

国家(country): Thailand

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '171.4.0.0 - 171.5.255.255'

% Abuse contact for '171.4.0.0 - 171.5.255.255' is 'ipadmin3bb@ais.co.th'

inetnum:        171.4.0.0 - 171.5.255.255
netname:        TTBP-TH
descr:          Triple T Broadband Public Company Limited
country:        TH
admin-c:        TTBP2-AP
tech-c:         TTBP2-AP
abuse-c:        AT1597-AP
status:         ALLOCATED NON-PORTABLE
mnt-by:         MAINT-TTBP-TH
mnt-irt:        IRT-TTBP-TH
last-modified:  2026-04-30T06:40:41Z
source:         APNIC

irt:            IRT-TTBP-TH
address:        89 , Cosmo Office Park Building , Popular Road Ban Mai Subdistrict , Pakkret 11120
e-mail:         ipadmin3bb@ais.co.th
abuse-mailbox:  ipadmin3bb@ais.co.th
admin-c:        TTBP2-AP
tech-c:         TTBP2-AP
auth:           # Filtered
remarks:        ipadmin3bb@ais.co.th was validated on 2026-04-27
mnt-by:         MAINT-TTBP-TH
last-modified:  2026-07-15T08:15:47Z
source:         APNIC

role:           ABUSE TTBPTH
country:        ZZ
address:        89 , Cosmo Office Park Building , Popular Road Ban Mai Subdistrict , Pakkret 11120
phone:          +000000000
e-mail:         ipadmin3bb@ais.co.th
admin-c:        TTBP2-AP
tech-c:         TTBP2-AP
nic-hdl:        AT1597-AP
remarks:        Generated from irt object IRT-TTBP-TH
remarks:        ipadmin3bb@ais.co.th was validated on 2026-04-27
abuse-mailbox:  ipadmin3bb@ais.co.th
mnt-by:         APNIC-ABUSE
last-modified:  2026-04-30T06:41:06Z
source:         APNIC

person:         Triple T Broadband PCL administrator
address:        89 , Cosmo Office Park Building , Popular Road
                Ban Mai Subdistrict ,
                Pakkret
                11120
country:        TH
phone:          +6621008552
e-mail:         wanchati@ais.co.th
nic-hdl:        TTBP2-AP
mnt-by:         MAINT-TTBP-TH
last-modified:  2026-04-30T06:40:13Z
source:         APNIC

% Information related to '171.4.232.0/21AS138524'

route:          171.4.232.0/21
origin:         AS138524
descr:          Triple T Broadband Public Company Limited
                89 , Cosmo Office Park Building , Popular Road
                Ban Mai Subdistrict ,
mnt-by:         MAINT-TTBP-TH
last-modified:  2026-08-03T06:33:56Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 171.4.239.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62450
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;171.4.239.56.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026090402 1800 900 604800 86400

;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 05 12:32:02 CST 2026
;; MSG SIZE  rcvd: 105

HOST信息:

b'56.239.4.171.in-addr.arpa domain name pointer mx-ll-171.4.239-56.dynamic.3bb.co.th.
'

NSLOOKUP信息:

b'56.239.4.171.in-addr.arpa	name = mx-ll-171.4.239-56.dynamic.3bb.co.th.

Authoritative answers can be found from:

'

最新评论:

IP	类型	评论内容	时间
24.42.215.106	attack	20/8/2@16:48:00: FAIL: Alarm-Network address from=24.42.215.106 20/8/2@16:48:00: FAIL: Alarm-Network address from=24.42.215.106 ...	2020-08-03 07:20:19
49.235.148.116	attack	Lines containing failures of 49.235.148.116 Jul 27 07:08:01 Tosca sshd[29025]: User r.r from 49.235.148.116 not allowed because none of user's groups are listed in AllowGroups Jul 27 07:08:01 Tosca sshd[29025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.148.116 user=r.r Jul 27 07:08:03 Tosca sshd[29025]: Failed password for invalid user r.r from 49.235.148.116 port 35006 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.235.148.116	2020-08-03 07:20:59
91.139.196.141	attackbots	Aug 2 22:10:47 jumpserver sshd[361784]: Failed password for root from 91.139.196.141 port 52493 ssh2 Aug 2 22:14:43 jumpserver sshd[361869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.139.196.141 user=root Aug 2 22:14:46 jumpserver sshd[361869]: Failed password for root from 91.139.196.141 port 59164 ssh2 ...	2020-08-03 07:23:15
36.94.36.41	attackbotsspam	Aug 2 16:22:06 lanister sshd[932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.94.36.41 user=root Aug 2 16:22:08 lanister sshd[932]: Failed password for root from 36.94.36.41 port 51226 ssh2 Aug 2 16:22:06 lanister sshd[932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.94.36.41 user=root Aug 2 16:22:08 lanister sshd[932]: Failed password for root from 36.94.36.41 port 51226 ssh2	2020-08-03 07:38:30
168.232.213.74	attackspam	php WP PHPmyadamin ABUSE blocked for 12h	2020-08-03 07:04:17
34.80.135.20	attackspam	Aug 3 00:01:41 ip106 sshd[32177]: Failed password for root from 34.80.135.20 port 39098 ssh2 ...	2020-08-03 07:31:48
223.240.64.222	attackbotsspam	DATE:2020-08-02 22:22:48, IP:223.240.64.222, PORT:6379 REDIS brute force auth on honeypot server (epe-honey1-hq)	2020-08-03 07:04:54
111.229.39.187	attack	Aug 3 01:15:30 mellenthin sshd[29712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.39.187 user=root Aug 3 01:15:33 mellenthin sshd[29712]: Failed password for invalid user root from 111.229.39.187 port 37186 ssh2	2020-08-03 07:34:39
23.100.85.86	attackbotsspam	20 attempts against mh-ssh on grass	2020-08-03 07:35:12
222.186.180.223	attackspambots	Aug 2 23:24:21 django-0 sshd[5209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root Aug 2 23:24:23 django-0 sshd[5209]: Failed password for root from 222.186.180.223 port 60244 ssh2 ...	2020-08-03 07:17:36
104.248.158.95	attack	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-08-03 07:06:02
118.145.8.50	attackspam	2020-08-02T17:16:55.1620461495-001 sshd[45137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.8.50 user=root 2020-08-02T17:16:57.0979461495-001 sshd[45137]: Failed password for root from 118.145.8.50 port 41936 ssh2 2020-08-02T17:20:45.3929991495-001 sshd[45344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.8.50 user=root 2020-08-02T17:20:48.2371741495-001 sshd[45344]: Failed password for root from 118.145.8.50 port 44663 ssh2 2020-08-02T17:24:32.2813571495-001 sshd[45566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.8.50 user=root 2020-08-02T17:24:34.2875591495-001 sshd[45566]: Failed password for root from 118.145.8.50 port 47395 ssh2 ...	2020-08-03 07:12:42
50.115.170.70	attack	port scan and connect, tcp 22 (ssh)	2020-08-03 07:32:12
201.80.108.92	attack	Lines containing failures of 201.80.108.92 Aug 2 21:24:40 MAKserver05 sshd[4632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.92 user=r.r Aug 2 21:24:42 MAKserver05 sshd[4632]: Failed password for r.r from 201.80.108.92 port 60976 ssh2 Aug 2 21:24:44 MAKserver05 sshd[4632]: Received disconnect from 201.80.108.92 port 60976:11: Bye Bye [preauth] Aug 2 21:24:44 MAKserver05 sshd[4632]: Disconnected from authenticating user r.r 201.80.108.92 port 60976 [preauth] Aug 2 21:58:16 MAKserver05 sshd[6793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.92 user=r.r Aug 2 21:58:18 MAKserver05 sshd[6793]: Failed password for r.r from 201.80.108.92 port 47852 ssh2 Aug 2 21:58:18 MAKserver05 sshd[6793]: Received disconnect from 201.80.108.92 port 47852:11: Bye Bye [preauth] Aug 2 21:58:18 MAKserver05 sshd[6793]: Disconnected from authenticating user r.r 201.80.108.92 por........ ------------------------------	2020-08-03 07:36:38
194.180.224.118	attackspam	TCP (SYN) 194.180.224.118:54120 -> port 22, len 44	2020-08-03 07:39:55

最近上报的IP列表

222.138.168.100	221.13.208.152	207.175.64.206	183.200.98.248
120.82.85.161	120.229.212.206	120.14.82.166	112.51.66.25
111.199.219.24	101.73.190.3	101.31.162.80	84.200.16.127
58.16.230.13	42.239.148.87	42.234.192.233	42.228.115.213
211.156.92.6	157.61.161.125	1.30.73.41	123.5.101.89