102.131.21.1 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): South Africa

运营商(isp): Voizacom (Pty) Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	NAME : Voizacom-v4 CIDR : 102.131.20.0/22 102.131.20.0/22 \| STATUS : 403 {Looking for resource vulnerabilities} DDoS Attack ZA - block certain countries :) IP: 102.131.21.1 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl	2019-09-01 08:08:13
attackspam	Sent Mail to target address hacked/leaked from Planet3DNow.de	2019-06-26 11:31:10
attack	SPF Fail sender not permitted to send mail for @lsys.it / Sent Mail to target address hacked/leaked from Planet3DNow.de	2019-06-23 14:35:20

类型

评论内容

时间

attack

NAME : Voizacom-v4 CIDR : 102.131.20.0/22 102.131.20.0/22 | STATUS : 403 {Looking for resource vulnerabilities} DDoS Attack ZA - block certain countries :) IP: 102.131.21.1  Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery https://help-dysk.pl

2019-09-01 08:08:13

attackspam

Sent Mail to target address hacked/leaked from Planet3DNow.de

2019-06-26 11:31:10

attack

SPF Fail sender not permitted to send mail for @lsys.it / Sent Mail to target address hacked/leaked from Planet3DNow.de

2019-06-23 14:35:20

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.131.21.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52139
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;102.131.21.1.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019061901 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jun 20 09:50:23 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 1.21.131.102.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 1.21.131.102.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
118.25.96.30	attackbots	Too many connections or unauthorized access detected from Arctic banned ip	2019-08-22 08:50:38
81.130.234.235	attackbots	2019-08-22T00:41:08.791898abusebot.cloudsearch.cf sshd\[6705\]: Invalid user emc from 81.130.234.235 port 46050	2019-08-22 08:48:19
134.209.99.27	attack	Aug 22 02:21:44 ArkNodeAT sshd\[17772\]: Invalid user vboxuser from 134.209.99.27 Aug 22 02:21:44 ArkNodeAT sshd\[17772\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.99.27 Aug 22 02:21:46 ArkNodeAT sshd\[17772\]: Failed password for invalid user vboxuser from 134.209.99.27 port 44578 ssh2	2019-08-22 09:10:13
142.93.232.222	attack	Aug 22 02:12:48 ks10 sshd[20742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.222 Aug 22 02:12:50 ks10 sshd[20742]: Failed password for invalid user erica from 142.93.232.222 port 57538 ssh2 ...	2019-08-22 08:29:42
98.144.230.245	attackbotsspam	vps1:sshd-InvalidUser	2019-08-22 08:38:33
123.206.41.12	attackbotsspam	Aug 22 03:28:26 srv-4 sshd\[17869\]: Invalid user unseen from 123.206.41.12 Aug 22 03:28:26 srv-4 sshd\[17869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.41.12 Aug 22 03:28:27 srv-4 sshd\[17869\]: Failed password for invalid user unseen from 123.206.41.12 port 48724 ssh2 ...	2019-08-22 09:03:22
113.176.89.116	attackspam	Aug 22 00:14:11 hb sshd\[16683\]: Invalid user mpalin from 113.176.89.116 Aug 22 00:14:11 hb sshd\[16683\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.176.89.116 Aug 22 00:14:12 hb sshd\[16683\]: Failed password for invalid user mpalin from 113.176.89.116 port 38978 ssh2 Aug 22 00:18:51 hb sshd\[17086\]: Invalid user christ from 113.176.89.116 Aug 22 00:18:51 hb sshd\[17086\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.176.89.116	2019-08-22 08:32:18
223.16.216.92	attackbotsspam	Aug 21 13:56:20 web1 sshd\[8450\]: Invalid user brix from 223.16.216.92 Aug 21 13:56:20 web1 sshd\[8450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.16.216.92 Aug 21 13:56:22 web1 sshd\[8450\]: Failed password for invalid user brix from 223.16.216.92 port 40222 ssh2 Aug 21 14:01:09 web1 sshd\[8901\]: Invalid user 123456 from 223.16.216.92 Aug 21 14:01:09 web1 sshd\[8901\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.16.216.92	2019-08-22 09:00:12
187.87.204.202	attackbots	Sent mail to target address hacked/leaked from abandonia in 2016	2019-08-22 09:11:55
111.125.70.22	attack	Unauthorized SSH login attempts	2019-08-22 09:08:14
118.201.39.225	attackspambots	Invalid user claudio from 118.201.39.225 port 54648	2019-08-22 09:16:18
208.102.113.11	attackspam	Aug 22 11:03:05 [hidden] sshd[11332]: refused connect from 208.102.113.11 (208.102.113.11) Aug 22 11:15:56 [hidden] sshd[11809]: refused connect from 208.102.113.11 (208.102.113.11) Aug 22 11:21:20 [hidden] sshd[12023]: refused connect from 208.102.113.11 (208.102.113.11)	2019-08-22 09:30:43
37.252.65.235	attackbots	2019-08-21 17:26:58 H=(host-235.65.252.37.ucom.am) [37.252.65.235]:51734 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-08-21 17:26:58 H=(host-235.65.252.37.ucom.am) [37.252.65.235]:51734 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-08-21 17:26:59 H=(host-235.65.252.37.ucom.am) [37.252.65.235]:51734 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-08-22 09:05:06
82.233.232.25	attackbots	Automatic report - Port Scan Attack	2019-08-22 08:39:04
14.136.118.138	attackbotsspam	2019-08-22T01:00:28.334217abusebot-8.cloudsearch.cf sshd\[29957\]: Invalid user flanamacca from 14.136.118.138 port 39821	2019-08-22 09:14:20

最近上报的IP列表

188.131.141.187	89.18.211.128	118.89.35.125	144.76.96.236
74.91.58.42	184.105.247.218	221.154.147.235	244.194.59.173
66.249.79.142	153.165.72.155	109.228.58.164	34.74.238.180
192.126.187.229	91.202.198.49	123.206.21.48	180.171.28.243
83.87.49.141	79.68.137.136	180.97.28.86	73.169.107.244