1.34.1.148 - IPInfo

Basic Info

City: Taipei

Region: Taipei City

Country: Taiwan, China

Internet Service Provider: Chunghwa Telecom Co. Ltd.

Hostname: unknown

Organization: Data Communication Business Group

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	TW_MAINT-TW-TWNIC_<177>1585225417 [1:2403302:56258] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 2 [Classification: Misc Attack] [Priority: 2]: {TCP} 1.34.1.148:61990	2020-03-27 00:04:08
attackspam	23/tcp [2019-10-06/11-01]2pkt	2019-11-01 17:06:51
attack	Honeypot attack, port: 23, PTR: 1-34-1-148.HINET-IP.hinet.net.	2019-08-12 02:25:11

Type

Details

Datetime

attackspambots

TW_MAINT-TW-TWNIC_<177>1585225417 [1:2403302:56258] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 2 [Classification: Misc Attack] [Priority: 2]:  {TCP} 1.34.1.148:61990

2020-03-27 00:04:08

attackspam

23/tcp
[2019-10-06/11-01]2pkt

2019-11-01 17:06:51

attack

Honeypot attack, port: 23, PTR: 1-34-1-148.HINET-IP.hinet.net.

2019-08-12 02:25:11

Comments on same subnet:

IP	Type	Details	Datetime
1.34.16.210	attackbots	TCP (SYN) 1.34.16.210:2676 -> port 23, len 44	2020-10-05 06:54:30
1.34.16.210	attack	TCP (SYN) 1.34.16.210:2676 -> port 23, len 44	2020-10-04 23:00:08
1.34.16.210	attackbotsspam	TCP (SYN) 1.34.16.210:34293 -> port 2323, len 44	2020-10-04 14:46:03
1.34.107.92	attack	2019-12-12T22:33:27.009332suse-nuc sshd[25101]: Invalid user guest from 1.34.107.92 port 37998 ...	2020-09-27 04:26:36
1.34.117.251	attackbotsspam	2019-11-25T20:06:03.734670suse-nuc sshd[27511]: Invalid user user from 1.34.117.251 port 44506 ...	2020-09-27 04:25:39
1.34.195.88	attack	2020-09-10T07:02:08.767291suse-nuc sshd[19245]: User root from 1.34.195.88 not allowed because listed in DenyUsers ...	2020-09-27 04:25:19
1.34.107.92	attackbotsspam	2019-12-12T22:33:27.009332suse-nuc sshd[25101]: Invalid user guest from 1.34.107.92 port 37998 ...	2020-09-26 20:34:06
1.34.117.251	attackspam	2019-11-25T20:06:03.734670suse-nuc sshd[27511]: Invalid user user from 1.34.117.251 port 44506 ...	2020-09-26 20:33:08
1.34.195.88	attackbots	2020-09-10T07:02:08.767291suse-nuc sshd[19245]: User root from 1.34.195.88 not allowed because listed in DenyUsers ...	2020-09-26 20:32:52
1.34.107.92	attack	2019-12-12T22:33:27.009332suse-nuc sshd[25101]: Invalid user guest from 1.34.107.92 port 37998 ...	2020-09-26 12:18:01
1.34.195.88	attackbotsspam	2020-09-10T07:02:08.767291suse-nuc sshd[19245]: User root from 1.34.195.88 not allowed because listed in DenyUsers ...	2020-09-26 12:16:55
1.34.19.58	attackspam	firewall-block, port(s): 23/tcp	2020-09-25 11:44:19
1.34.164.204	attack	invalid user	2020-09-22 01:48:10
1.34.141.44	attackbots	Found on CINS badguys / proto=6 . srcport=44251 . dstport=23 . (2323)	2020-09-21 23:13:04
1.34.164.204	attack	Port scan followed by SSH.	2020-09-21 17:31:52

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.34.1.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41678
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.34.1.148.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081100 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 12 02:25:03 CST 2019
;; MSG SIZE  rcvd: 114

Host info

148.1.34.1.in-addr.arpa domain name pointer 1-34-1-148.HINET-IP.hinet.net.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
148.1.34.1.in-addr.arpa	name = 1-34-1-148.HINET-IP.hinet.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.173.183	attackspam	Nov 26 06:41:57 amit sshd\[11284\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183 user=root Nov 26 06:41:59 amit sshd\[11284\]: Failed password for root from 222.186.173.183 port 37916 ssh2 Nov 26 06:42:03 amit sshd\[11284\]: Failed password for root from 222.186.173.183 port 37916 ssh2 ...	2019-11-26 13:44:47
185.173.35.29	attack	88/tcp 3389/tcp 111/tcp... [2019-09-26/11-26]44pkt,31pt.(tcp),4pt.(udp)	2019-11-26 14:05:41
118.24.114.192	attackspam	Nov 26 05:44:24 icinga sshd[24360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.114.192 Nov 26 05:44:26 icinga sshd[24360]: Failed password for invalid user roeising from 118.24.114.192 port 50634 ssh2 Nov 26 05:55:07 icinga sshd[34644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.114.192 ...	2019-11-26 13:29:37
223.4.70.106	attackbots	Nov 25 18:44:59 web1 sshd\[14288\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.4.70.106 user=root Nov 25 18:45:01 web1 sshd\[14288\]: Failed password for root from 223.4.70.106 port 32780 ssh2 Nov 25 18:50:50 web1 sshd\[14792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.4.70.106 user=nobody Nov 25 18:50:53 web1 sshd\[14792\]: Failed password for nobody from 223.4.70.106 port 37108 ssh2 Nov 25 18:54:50 web1 sshd\[15113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.4.70.106 user=root	2019-11-26 13:40:58
218.92.0.145	attackspam	Nov 26 06:43:58 v22018076622670303 sshd\[1277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145 user=root Nov 26 06:44:00 v22018076622670303 sshd\[1277\]: Failed password for root from 218.92.0.145 port 14463 ssh2 Nov 26 06:44:03 v22018076622670303 sshd\[1277\]: Failed password for root from 218.92.0.145 port 14463 ssh2 ...	2019-11-26 13:44:24
163.172.207.104	attackspam	\[2019-11-26 00:06:07\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-26T00:06:07.918-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="900972595725668",SessionID="0x7f26c4e0e2d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/62756",ACLName="no_extension_match" \[2019-11-26 00:09:57\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-26T00:09:57.945-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="6100011972592277524",SessionID="0x7f26c4715dc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/57757",ACLName="no_extension_match" \[2019-11-26 00:15:14\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-26T00:15:14.008-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="7100011972592277524",SessionID="0x7f26c4715dc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/56704",A	2019-11-26 13:33:46
91.121.9.92	attack	Automatic report - Banned IP Access	2019-11-26 13:43:52
49.88.112.58	attackbotsspam	2019-11-26T05:49:56.363747abusebot-7.cloudsearch.cf sshd\[20618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.58 user=root	2019-11-26 13:51:42
114.242.236.140	attack	Nov 26 06:07:21 OPSO sshd\[27699\]: Invalid user www-data from 114.242.236.140 port 33590 Nov 26 06:07:21 OPSO sshd\[27699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.242.236.140 Nov 26 06:07:23 OPSO sshd\[27699\]: Failed password for invalid user www-data from 114.242.236.140 port 33590 ssh2 Nov 26 06:11:32 OPSO sshd\[28565\]: Invalid user towles from 114.242.236.140 port 38632 Nov 26 06:11:32 OPSO sshd\[28565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.242.236.140	2019-11-26 13:29:55
62.4.17.32	attack	Nov 26 07:54:45 debian sshd\[11726\]: Invalid user winston from 62.4.17.32 port 40752 Nov 26 07:54:45 debian sshd\[11726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.4.17.32 Nov 26 07:54:47 debian sshd\[11726\]: Failed password for invalid user winston from 62.4.17.32 port 40752 ssh2 ...	2019-11-26 13:46:19
23.254.203.51	attack	Nov 25 19:24:49 eddieflores sshd\[30868\]: Invalid user admin from 23.254.203.51 Nov 25 19:24:49 eddieflores sshd\[30868\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-541461.hostwindsdns.com Nov 25 19:24:51 eddieflores sshd\[30868\]: Failed password for invalid user admin from 23.254.203.51 port 36330 ssh2 Nov 25 19:30:59 eddieflores sshd\[31338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hwsrv-541461.hostwindsdns.com user=root Nov 25 19:31:02 eddieflores sshd\[31338\]: Failed password for root from 23.254.203.51 port 43174 ssh2	2019-11-26 14:05:58
209.141.43.166	attackbotsspam	6100/tcp 7300/tcp 7800/tcp... [2019-11-09/25]76pkt,23pt.(tcp)	2019-11-26 13:58:11
51.83.98.104	attackspam	Nov 26 05:54:58 MK-Soft-VM3 sshd[4254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.98.104 Nov 26 05:55:00 MK-Soft-VM3 sshd[4254]: Failed password for invalid user admin from 51.83.98.104 port 38878 ssh2 ...	2019-11-26 13:34:01
123.232.156.28	attack	Nov 25 20:01:49 server sshd\[14622\]: Failed password for invalid user oracle from 123.232.156.28 port 43970 ssh2 Nov 26 03:40:25 server sshd\[4003\]: Invalid user zabbix from 123.232.156.28 Nov 26 03:40:25 server sshd\[4003\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.232.156.28 Nov 26 03:40:27 server sshd\[4003\]: Failed password for invalid user zabbix from 123.232.156.28 port 46250 ssh2 Nov 26 07:54:44 server sshd\[1665\]: Invalid user sysadmin from 123.232.156.28 Nov 26 07:54:44 server sshd\[1665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.232.156.28 ...	2019-11-26 13:48:37
222.186.175.140	attackbots	Nov 26 06:48:17 vps691689 sshd[26489]: Failed password for root from 222.186.175.140 port 31690 ssh2 Nov 26 06:48:20 vps691689 sshd[26489]: Failed password for root from 222.186.175.140 port 31690 ssh2 Nov 26 06:48:23 vps691689 sshd[26489]: Failed password for root from 222.186.175.140 port 31690 ssh2 ...	2019-11-26 13:50:51

Recently Reported IPs

222.189.245.215	71.72.172.156	222.153.172.9	117.239.193.48
196.221.91.215	186.92.0.245	210.160.13.110	173.49.171.120
195.14.244.104	155.252.219.135	85.109.95.199	125.231.135.248
45.111.49.21	203.205.41.21	156.194.110.89	35.239.8.123
139.162.31.103	186.204.146.61	214.145.129.236	81.42.219.153