1.54.112.24 - IPInfo

Basic Info

City: Ho Chi Minh City

Region: Ho Chi Minh

Country: Vietnam

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.54.112.19	attackspam	2020-09-19 11:54:51.029951-0500 localhost smtpd[24990]: NOQUEUE: reject: RCPT from unknown[1.54.112.19]: 554 5.7.1 Service unavailable; Client host [1.54.112.19] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/1.54.112.19; from= to= proto=ESMTP helo=<[1.54.112.19]>	2020-09-20 20:42:02
1.54.112.19	attackbots	2020-09-19 11:54:51.029951-0500 localhost smtpd[24990]: NOQUEUE: reject: RCPT from unknown[1.54.112.19]: 554 5.7.1 Service unavailable; Client host [1.54.112.19] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/1.54.112.19; from= to= proto=ESMTP helo=<[1.54.112.19]>	2020-09-20 12:37:53
1.54.112.19	attack	2020-09-19 11:54:51.029951-0500 localhost smtpd[24990]: NOQUEUE: reject: RCPT from unknown[1.54.112.19]: 554 5.7.1 Service unavailable; Client host [1.54.112.19] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/1.54.112.19; from= to= proto=ESMTP helo=<[1.54.112.19]>	2020-09-20 04:37:09

Type

Details

Datetime

1.54.112.19

attackspam

2020-09-19 11:54:51.029951-0500  localhost smtpd[24990]: NOQUEUE: reject: RCPT from unknown[1.54.112.19]: 554 5.7.1 Service unavailable; Client host [1.54.112.19] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/1.54.112.19; from= to= proto=ESMTP helo=<[1.54.112.19]>

2020-09-20 20:42:02

1.54.112.19

attackbots

2020-09-19 11:54:51.029951-0500  localhost smtpd[24990]: NOQUEUE: reject: RCPT from unknown[1.54.112.19]: 554 5.7.1 Service unavailable; Client host [1.54.112.19] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/1.54.112.19; from= to= proto=ESMTP helo=<[1.54.112.19]>

2020-09-20 12:37:53

1.54.112.19

attack

2020-09-19 11:54:51.029951-0500  localhost smtpd[24990]: NOQUEUE: reject: RCPT from unknown[1.54.112.19]: 554 5.7.1 Service unavailable; Client host [1.54.112.19] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/1.54.112.19; from= to= proto=ESMTP helo=<[1.54.112.19]>

2020-09-20 04:37:09

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.54.112.24
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8647
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.54.112.24.			IN	A

;; AUTHORITY SECTION:
.			100	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030501 1800 900 604800 86400

;; Query time: 85 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 06 06:00:57 CST 2022
;; MSG SIZE  rcvd: 104

Host info

b';; connection timed out; no servers could be reached
'

Nslookup info:

server can't find 1.54.112.24.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
60.13.6.197	attack	Unauthorized connection attempt detected from IP address 60.13.6.197 to port 167 [T]	2020-01-07 00:00:23
217.219.70.155	attackspambots	01/06/2020-08:12:54.026969 217.219.70.155 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-01-06 23:40:54
217.16.11.235	attackbots	Unauthorized access or intrusion attempt detected from Thor banned IP	2020-01-06 23:35:37
166.139.6.95	attackbotsspam	Unauthorized connection attempt detected from IP address 166.139.6.95 to port 2222 [J]	2020-01-06 23:29:48
85.98.59.60	attack	Automatic report - Port Scan Attack	2020-01-06 23:22:35
139.162.122.110	attackspam	Unauthorized connection attempt detected from IP address 139.162.122.110 to port 22 [J]	2020-01-06 23:44:05
190.110.212.195	attackbotsspam	firewall-block, port(s): 1433/tcp	2020-01-06 23:53:23
120.92.153.47	attackbotsspam	SMTP:25. Blocked 73 login attempts over 120.8 days.	2020-01-06 23:54:10
61.179.198.243	attack	Unauthorized connection attempt detected from IP address 61.179.198.243 to port 23 [J]	2020-01-06 23:59:51
113.85.63.231	attack	Unauthorized connection attempt detected from IP address 113.85.63.231 to port 23 [J]	2020-01-06 23:58:46
80.211.50.102	attack	80.211.50.102 - - \[06/Jan/2020:15:47:40 +0100\] "POST /wp-login.php HTTP/1.0" 200 4128 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 80.211.50.102 - - \[06/Jan/2020:15:47:41 +0100\] "POST /wp-login.php HTTP/1.0" 200 3955 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 80.211.50.102 - - \[06/Jan/2020:15:47:41 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-01-06 23:27:04
70.132.63.86	attackbots	Automatic report generated by Wazuh	2020-01-06 23:38:42
139.219.8.185	attackspambots	2020-01-06T15:16:36.568791beta postfix/smtpd[4683]: warning: unknown[139.219.8.185]: SASL LOGIN authentication failed: authentication failure 2020-01-06T15:16:40.412485beta postfix/smtpd[4683]: warning: unknown[139.219.8.185]: SASL LOGIN authentication failed: authentication failure 2020-01-06T15:16:44.440987beta postfix/smtpd[4683]: warning: unknown[139.219.8.185]: SASL LOGIN authentication failed: authentication failure ...	2020-01-06 23:48:40
118.99.105.83	attack	20/1/6@08:56:41: FAIL: Alarm-Network address from=118.99.105.83 20/1/6@08:56:41: FAIL: Alarm-Network address from=118.99.105.83 ...	2020-01-06 23:25:20
72.80.19.63	attackbots	Unauthorized connection attempt detected from IP address 72.80.19.63 to port 8080 [J]	2020-01-06 23:23:51

Recently Reported IPs

1.53.89.73	1.54.115.168	1.54.142.156	1.54.162.53
1.54.170.216	1.54.18.30	100.19.54.80	100.20.202.205
100.20.223.213	100.20.4.72	100.21.117.225	100.21.164.37
100.21.203.4	100.21.242.212	100.21.54.104	100.21.55.111
100.21.57.205	100.22.10.182	100.22.14.184	100.24.111.51