1.20.158.102 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.158.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65328
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.158.102.			IN	A

;; AUTHORITY SECTION:
.			383	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022400 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 20:02:48 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 102.158.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 102.158.20.1.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
125.25.83.71	attack	Automatic report - Port Scan Attack	2020-02-08 00:05:32
193.112.72.126	attack	invalid user	2020-02-08 00:04:21
202.106.133.200	attackbotsspam	20/2/7@09:48:15: FAIL: Alarm-Network address from=202.106.133.200 20/2/7@09:48:15: FAIL: Alarm-Network address from=202.106.133.200 ...	2020-02-08 00:10:20
163.172.247.10	attackspam	fraudulent SSH attempt	2020-02-07 23:45:03
37.57.189.201	attackspambots	Unauthorised access (Feb 7) SRC=37.57.189.201 LEN=40 TTL=247 ID=38899 TCP DPT=139 WINDOW=1024 SYN Unauthorised access (Feb 5) SRC=37.57.189.201 LEN=40 TTL=247 ID=4806 TCP DPT=139 WINDOW=1024 SYN	2020-02-08 00:08:10
34.244.194.13	attackbots	Lines containing failures of 34.244.194.13 Feb 6 07:31:32 myhost sshd[29543]: Invalid user fnu from 34.244.194.13 port 58140 Feb 6 07:31:32 myhost sshd[29543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.244.194.13 Feb 6 07:31:35 myhost sshd[29543]: Failed password for invalid user fnu from 34.244.194.13 port 58140 ssh2 Feb 6 07:31:35 myhost sshd[29543]: Received disconnect from 34.244.194.13 port 58140:11: Bye Bye [preauth] Feb 6 07:31:35 myhost sshd[29543]: Disconnected from invalid user fnu 34.244.194.13 port 58140 [preauth] Feb 6 07:47:06 myhost sshd[29634]: Invalid user edj from 34.244.194.13 port 33072 Feb 6 07:47:06 myhost sshd[29634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.244.194.13 Feb 6 07:47:07 myhost sshd[29634]: Failed password for invalid user edj from 34.244.194.13 port 33072 ssh2 Feb 6 07:47:07 myhost sshd[29634]: Received disconnect from 34.244.19........ ------------------------------	2020-02-07 23:54:10
210.121.223.61	attackbotsspam	Automatic report - SSH Brute-Force Attack	2020-02-08 00:01:56
139.199.48.216	attackspambots	Feb 7 16:15:43 mout sshd[27823]: Invalid user wcn from 139.199.48.216 port 56298	2020-02-07 23:21:51
169.38.82.150	attackbots	ICMP MH Probe, Scan /Distributed -	2020-02-07 23:21:34
93.174.93.27	attackspam	Feb 7 16:13:07 debian-2gb-nbg1-2 kernel: \[3347629.111312\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=93.174.93.27 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=28883 PROTO=TCP SPT=46186 DPT=723 WINDOW=1024 RES=0x00 SYN URGP=0	2020-02-07 23:23:29
218.92.0.178	attackspambots	Feb 7 16:33:16 nextcloud sshd\[16865\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.178 user=root Feb 7 16:33:18 nextcloud sshd\[16865\]: Failed password for root from 218.92.0.178 port 43584 ssh2 Feb 7 16:33:21 nextcloud sshd\[16865\]: Failed password for root from 218.92.0.178 port 43584 ssh2	2020-02-07 23:50:56
185.147.212.12	attackspambots	[2020-02-07 10:59:12] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.147.212.12:54786' - Wrong password [2020-02-07 10:59:12] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-07T10:59:12.190-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1499",SessionID="0x7fd82c307128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.212.12/54786",Challenge="23c0ddbe",ReceivedChallenge="23c0ddbe",ReceivedHash="ff5bab61bd81202b3cb5be332c3de82f" [2020-02-07 10:59:58] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.147.212.12:50701' - Wrong password [2020-02-07 10:59:58] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-07T10:59:58.298-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="4774",SessionID="0x7fd82c3c1c38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.21 ...	2020-02-08 00:02:26
123.209.253.81	attack	/phpmyadmin/	2020-02-08 00:02:58
112.164.241.217	attack	Honeypot attack, port: 81, PTR: PTR record not found	2020-02-07 23:57:54
203.128.244.210	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-07 23:55:44

最近上报的IP列表

1.20.157.83	147.103.35.142	1.20.158.106	1.20.158.11
1.20.158.152	1.20.158.166	83.102.248.134	1.20.158.175
1.20.165.91	1.20.165.94	1.20.165.96	1.20.166.110
1.20.166.128	213.165.186.62	1.20.166.158	243.205.238.226
1.20.166.162	1.20.166.176	115.84.94.219	1.20.166.209