1.20.97.157 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
1.20.97.181	attackbots	VNC brute force attack detected by fail2ban	2020-07-05 13:11:08
1.20.97.204	attack	Blocked Thailand, hacker netname: TOT-MOBILE-AS-AP descr: TOT Mobile Co LTD descr: 89/2 Moo3 Chaengwattana Rd Thungsonghong Laksi country: TH IP: 1.20.97.204 Hostname: 1.20.97.204 Human/Bot: Human Browser: Chrome version 63.0 running on Win7	2019-07-25 21:15:08

类型

评论内容

时间

1.20.97.181

attackbots

VNC brute force attack detected by fail2ban

2020-07-05 13:11:08

1.20.97.204

attack

Blocked Thailand, hacker
netname: TOT-MOBILE-AS-AP
descr: TOT Mobile Co LTD
descr: 89/2 Moo3 Chaengwattana Rd Thungsonghong Laksi
country: TH
 IP: 1.20.97.204 Hostname: 1.20.97.204
Human/Bot: Human
Browser: Chrome version 63.0 running on Win7

2019-07-25 21:15:08

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.97.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 299
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.97.157.			IN	A

;; AUTHORITY SECTION:
.			348	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022400 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 21:25:39 CST 2022
;; MSG SIZE  rcvd: 104

HOST信息:

Host 157.97.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 157.97.20.1.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
14.192.144.242	attackbotsspam	445/tcp [2020-10-03]1pkt	2020-10-05 00:58:20
138.118.138.147	attack	Automatic report - Port Scan	2020-10-05 01:07:09
218.92.0.249	attack	Oct 4 19:11:25 theomazars sshd[6227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.249 user=root Oct 4 19:11:28 theomazars sshd[6227]: Failed password for root from 218.92.0.249 port 16080 ssh2	2020-10-05 01:17:59
119.28.4.12	attackbots	Oct 4 18:35:33 host1 sshd[1006833]: Failed password for root from 119.28.4.12 port 42686 ssh2 Oct 4 18:41:01 host1 sshd[1010325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.4.12 user=root Oct 4 18:41:04 host1 sshd[1010325]: Failed password for root from 119.28.4.12 port 48266 ssh2 Oct 4 18:41:01 host1 sshd[1010325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.4.12 user=root Oct 4 18:41:04 host1 sshd[1010325]: Failed password for root from 119.28.4.12 port 48266 ssh2 ...	2020-10-05 01:13:45
58.216.141.114	attackspambots	1432/tcp 1433/tcp 1434/tcp... [2020-10-03]30pkt,30pt.(tcp)	2020-10-05 01:24:30
50.65.72.127	attackspam	37215/tcp [2020-10-03]1pkt	2020-10-05 01:00:42
104.129.4.186	attackspambots	2020-10-04 dovecot_login authenticator failed for \(wwAIXv8\) \[104.129.4.186\]: 535 Incorrect authentication data \(set_id=REMOVEDREMOVEDREMOVED_perl\) 2020-10-04 dovecot_login authenticator failed for \(DiHFaHM\) \[104.129.4.186\]: 535 Incorrect authentication data \(set_id=REMOVEDREMOVEDREMOVED_perl\) 2020-10-04 dovecot_login authenticator failed for \(vQ7mJL\) \[104.129.4.186\]: 535 Incorrect authentication data \(set_id=REMOVEDREMOVEDREMOVED_perl\)	2020-10-05 01:19:24
112.85.42.91	attack	Sep 27 12:18:42 roki-contabo sshd\[23541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.91 user=root Sep 27 12:18:44 roki-contabo sshd\[23541\]: Failed password for root from 112.85.42.91 port 63554 ssh2 Sep 27 12:19:02 roki-contabo sshd\[23549\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.91 user=root Sep 27 12:19:04 roki-contabo sshd\[23549\]: Failed password for root from 112.85.42.91 port 1586 ssh2 Sep 27 12:19:24 roki-contabo sshd\[23551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.91 user=root ...	2020-10-05 01:14:12
183.105.172.46	attackbotsspam	8080/udp [2020-10-03]1pkt	2020-10-05 00:58:48
23.94.160.28	attack	TCP (SYN) 23.94.160.28:43051 -> port 3306, len 44	2020-10-05 01:25:16
183.103.115.2	attack	SSH Brute-force	2020-10-05 00:55:51
80.229.157.225	attackspam	TCP (SYN) 80.229.157.225:54729 -> port 22, len 44	2020-10-05 00:52:12
103.140.83.18	attackbots	Sep 17 01:48:19 roki-contabo sshd\[12013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.140.83.18 user=root Sep 17 01:48:22 roki-contabo sshd\[12013\]: Failed password for root from 103.140.83.18 port 50614 ssh2 Sep 17 04:34:41 roki-contabo sshd\[13731\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.140.83.18 user=root Sep 17 04:34:43 roki-contabo sshd\[13731\]: Failed password for root from 103.140.83.18 port 58440 ssh2 Sep 17 04:42:48 roki-contabo sshd\[13774\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.140.83.18 user=root ...	2020-10-05 01:30:46
51.77.66.35	attack	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-10-04T14:10:11Z and 2020-10-04T14:57:04Z	2020-10-05 01:21:23
174.243.114.84	attackbotsspam	Brute forcing email accounts	2020-10-05 01:23:06

最近上报的IP列表

1.20.97.155	1.20.97.158	1.20.97.160	1.20.97.163
1.20.97.166	1.20.97.173	1.20.97.174	1.20.97.178
1.20.97.184	1.20.97.186	1.20.97.189	1.20.97.190
1.20.97.194	255.73.6.194	1.20.97.198	1.20.97.202
1.20.97.21	1.20.97.212	1.20.97.214	1.20.97.216