1.20.131.105 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.131.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49759
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.131.105.			IN	A

;; AUTHORITY SECTION:
.			336	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022401 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 11:40:06 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 105.131.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 105.131.20.1.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
188.165.255.134	attackbotsspam	188.165.255.134 - - [26/Jul/2020:17:29:42 +0100] "POST /wp-login.php HTTP/1.1" 200 1968 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 188.165.255.134 - - [26/Jul/2020:17:29:43 +0100] "POST /wp-login.php HTTP/1.1" 200 1952 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 188.165.255.134 - - [26/Jul/2020:17:29:43 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-27 01:31:14
45.143.223.167	attackspam	Jul 26 14:02:23 v22019058497090703 postfix/smtpd[14937]: warning: unknown[45.143.223.167]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 26 14:02:29 v22019058497090703 postfix/smtpd[14944]: warning: unknown[45.143.223.167]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 26 14:02:50 v22019058497090703 postfix/smtpd[14995]: warning: unknown[45.143.223.167]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-07-27 01:22:09
103.10.46.108	attackspambots	2020-07-26 07:03:48.371118-0500 localhost smtpd[92496]: NOQUEUE: reject: RCPT from unknown[103.10.46.108]: 554 5.7.1 Service unavailable; Client host [103.10.46.108] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<009be248.earingsafe.co>	2020-07-27 01:24:37
88.132.66.26	attack	Bruteforce detected by fail2ban	2020-07-27 01:26:14
167.71.242.140	attack	(sshd) Failed SSH login from 167.71.242.140 (US/United States/-): 10 in the last 3600 secs	2020-07-27 01:34:44
43.243.127.98	attackspam	Jul 26 20:02:41 vps768472 sshd\[2708\]: Invalid user asteriskpbx from 43.243.127.98 port 40164 Jul 26 20:02:41 vps768472 sshd\[2708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.243.127.98 Jul 26 20:02:43 vps768472 sshd\[2708\]: Failed password for invalid user asteriskpbx from 43.243.127.98 port 40164 ssh2 ...	2020-07-27 01:19:11
88.214.26.13	attackspam	10 attempts against mh-misc-ban on bolt	2020-07-27 01:31:47
92.222.216.222	attackspambots	Jul 26 19:09:28 vpn01 sshd[9942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.216.222 Jul 26 19:09:30 vpn01 sshd[9942]: Failed password for invalid user saurabh from 92.222.216.222 port 45166 ssh2 ...	2020-07-27 01:16:19
101.71.3.53	attackspam	k+ssh-bruteforce	2020-07-27 01:29:16
159.65.158.172	attackspambots	Jul 26 14:04:50 sip sshd[4104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.158.172 Jul 26 14:04:52 sip sshd[4104]: Failed password for invalid user prakash from 159.65.158.172 port 54144 ssh2 Jul 26 14:16:49 sip sshd[8578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.158.172	2020-07-27 01:36:10
5.252.229.90	attackbotsspam	Automatic report generated by Wazuh	2020-07-27 01:42:10
41.38.183.209	attackbots	Unauthorized connection attempt from IP address 41.38.183.209 on Port 445(SMB)	2020-07-27 01:38:15
178.62.252.206	attackbots	178.62.252.206 - - [26/Jul/2020:19:29:51 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 178.62.252.206 - - [26/Jul/2020:19:29:51 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 178.62.252.206 - - [26/Jul/2020:19:29:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-07-27 01:47:26
192.223.123.86	attackspambots	Unauthorized connection attempt from IP address 192.223.123.86 on Port 445(SMB)	2020-07-27 01:52:31
164.163.25.213	attackspam	DATE:2020-07-26 14:02:45, IP:164.163.25.213, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-07-27 01:28:01

最近上报的IP列表

1.20.131.151	104.156.254.45	1.20.131.232	1.20.131.175
1.20.130.84	1.20.131.209	1.20.131.201	104.156.48.29
104.156.49.66	1.20.158.83	1.20.158.6	1.20.158.38
1.20.158.53	1.20.158.40	1.20.158.33	1.20.158.90
1.20.158.81	1.20.159.180	1.20.158.84	1.20.160.142