200.55.239.55 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Ecuador

运营商(isp): Etapa EP

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Mar 19 00:33:47 ArkNodeAT sshd\[11576\]: Invalid user user11 from 200.55.239.55 Mar 19 00:33:47 ArkNodeAT sshd\[11576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.55.239.55 Mar 19 00:33:49 ArkNodeAT sshd\[11576\]: Failed password for invalid user user11 from 200.55.239.55 port 58221 ssh2	2020-03-19 08:19:30

类型

评论内容

时间

attack

Mar 19 00:33:47 ArkNodeAT sshd\[11576\]: Invalid user user11 from 200.55.239.55
Mar 19 00:33:47 ArkNodeAT sshd\[11576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.55.239.55
Mar 19 00:33:49 ArkNodeAT sshd\[11576\]: Failed password for invalid user user11 from 200.55.239.55 port 58221 ssh2

2020-03-19 08:19:30

相同子网IP讨论:

IP	类型	评论内容	时间
200.55.239.87	attack	Unauthorized connection attempt detected from IP address 200.55.239.87 to port 8089	2020-04-13 04:13:51

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 200.55.239.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64828
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;200.55.239.55.			IN	A

;; AUTHORITY SECTION:
.			294	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031801 1800 900 604800 86400

;; Query time: 88 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 19 08:19:22 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

55.239.55.200.in-addr.arpa domain name pointer 55.200-55-239.etapanet.net.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
55.239.55.200.in-addr.arpa	name = 55.200-55-239.etapanet.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
212.81.57.181	attack	Apr 9 14:58:32 exim[10846]: [1\50] 1jMWlL-0002ow-E2 H=seemly.chocualo.com (seemly.mbmhukuk.com) [212.81.57.181] F= rejected after DATA: This message scored 102.5 spam points.	2020-04-10 03:17:36
106.124.131.214	attack	2020-04-09T19:14:00.680101centos sshd[17144]: Invalid user deploy from 106.124.131.214 port 42907 2020-04-09T19:14:02.313510centos sshd[17144]: Failed password for invalid user deploy from 106.124.131.214 port 42907 ssh2 2020-04-09T19:18:26.800786centos sshd[17459]: Invalid user guest from 106.124.131.214 port 36172 ...	2020-04-10 03:11:40
49.234.189.19	attackspambots	Apr 9 19:26:28 vps58358 sshd\[17974\]: Invalid user qytech02 from 49.234.189.19Apr 9 19:26:29 vps58358 sshd\[17974\]: Failed password for invalid user qytech02 from 49.234.189.19 port 54260 ssh2Apr 9 19:29:08 vps58358 sshd\[18002\]: Invalid user keith from 49.234.189.19Apr 9 19:29:10 vps58358 sshd\[18002\]: Failed password for invalid user keith from 49.234.189.19 port 56772 ssh2Apr 9 19:32:00 vps58358 sshd\[18029\]: Invalid user teampspeak from 49.234.189.19Apr 9 19:32:03 vps58358 sshd\[18029\]: Failed password for invalid user teampspeak from 49.234.189.19 port 59302 ssh2 ...	2020-04-10 02:42:30
134.175.32.95	attackspam	Apr 9 18:22:44 ns382633 sshd\[4448\]: Invalid user licongcong from 134.175.32.95 port 55714 Apr 9 18:22:44 ns382633 sshd\[4448\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.32.95 Apr 9 18:22:46 ns382633 sshd\[4448\]: Failed password for invalid user licongcong from 134.175.32.95 port 55714 ssh2 Apr 9 18:29:39 ns382633 sshd\[5775\]: Invalid user postgres from 134.175.32.95 port 41438 Apr 9 18:29:39 ns382633 sshd\[5775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.32.95	2020-04-10 02:58:57
165.227.113.2	attack	Apr 9 15:24:58 eventyay sshd[25332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.113.2 Apr 9 15:24:59 eventyay sshd[25332]: Failed password for invalid user admin from 165.227.113.2 port 46096 ssh2 Apr 9 15:28:44 eventyay sshd[25381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.113.2 ...	2020-04-10 02:50:48
159.203.74.227	attackspam	SSH brute force attempt @ 2020-04-09 18:37:11	2020-04-10 03:10:16
169.239.56.28	attack	20/4/9@08:59:26: FAIL: Alarm-Intrusion address from=169.239.56.28 20/4/9@08:59:26: FAIL: Alarm-Intrusion address from=169.239.56.28 ...	2020-04-10 03:02:17
62.82.75.58	attackspambots	Apr 10 01:12:44 itv-usvr-01 sshd[27513]: Invalid user deploy from 62.82.75.58 Apr 10 01:12:44 itv-usvr-01 sshd[27513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.82.75.58 Apr 10 01:12:44 itv-usvr-01 sshd[27513]: Invalid user deploy from 62.82.75.58 Apr 10 01:12:46 itv-usvr-01 sshd[27513]: Failed password for invalid user deploy from 62.82.75.58 port 7225 ssh2 Apr 10 01:16:32 itv-usvr-01 sshd[27688]: Invalid user git-administrator2 from 62.82.75.58	2020-04-10 03:03:18
107.170.129.141	attackbotsspam	Port Scan detected from 107.170.129.141 (US/United States/New York/New York/-). 4 hits in the last 265 seconds	2020-04-10 02:52:02
41.224.59.78	attack	Apr 9 20:18:28 ns382633 sshd\[30594\]: Invalid user ajith from 41.224.59.78 port 49054 Apr 9 20:18:28 ns382633 sshd\[30594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.224.59.78 Apr 9 20:18:29 ns382633 sshd\[30594\]: Failed password for invalid user ajith from 41.224.59.78 port 49054 ssh2 Apr 9 20:28:52 ns382633 sshd\[32605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.224.59.78 user=root Apr 9 20:28:53 ns382633 sshd\[32605\]: Failed password for root from 41.224.59.78 port 40132 ssh2	2020-04-10 02:42:52
182.61.105.127	attack	Apr 9 20:09:08 santamaria sshd\[17113\]: Invalid user ts3sleep from 182.61.105.127 Apr 9 20:09:08 santamaria sshd\[17113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.105.127 Apr 9 20:09:10 santamaria sshd\[17113\]: Failed password for invalid user ts3sleep from 182.61.105.127 port 56798 ssh2 ...	2020-04-10 02:40:49
51.75.18.215	attackspambots	Apr 9 21:05:31 mailserver sshd\[1890\]: Invalid user maricaxx from 51.75.18.215 ...	2020-04-10 03:14:04
46.38.145.4	attackspambots	Apr 9 19:58:06 mail postfix/smtpd\[31324\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 9 20:28:27 mail postfix/smtpd\[32290\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 9 20:28:57 mail postfix/smtpd\[32289\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 9 20:29:27 mail postfix/smtpd\[32290\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\	2020-04-10 03:12:23
60.171.208.199	attack	Apr 9 18:01:13 l03 sshd[25859]: Invalid user test from 60.171.208.199 port 52626 ...	2020-04-10 03:19:38
60.166.110.190	attackspambots	(ftpd) Failed FTP login from 60.166.110.190 (CN/China/-): 10 in the last 3600 secs	2020-04-10 02:51:02

最近上报的IP列表

162.243.132.74	193.107.32.155	110.74.168.234	91.106.195.180
51.144.84.163	171.99.202.145	217.112.128.221	184.131.123.64
93.163.159.78	203.105.232.237	137.118.22.77	185.172.110.227
202.137.155.129	185.202.1.124	51.91.129.68	178.142.123.103
87.251.74.9	93.26.237.177	41.46.86.89	157.245.38.212