102.131.21.1 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): South Africa

运营商(isp): Voizacom (Pty) Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	NAME : Voizacom-v4 CIDR : 102.131.20.0/22 102.131.20.0/22 \| STATUS : 403 {Looking for resource vulnerabilities} DDoS Attack ZA - block certain countries :) IP: 102.131.21.1 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl	2019-09-01 08:08:13
attackspam	Sent Mail to target address hacked/leaked from Planet3DNow.de	2019-06-26 11:31:10
attack	SPF Fail sender not permitted to send mail for @lsys.it / Sent Mail to target address hacked/leaked from Planet3DNow.de	2019-06-23 14:35:20

类型

评论内容

时间

attack

NAME : Voizacom-v4 CIDR : 102.131.20.0/22 102.131.20.0/22 | STATUS : 403 {Looking for resource vulnerabilities} DDoS Attack ZA - block certain countries :) IP: 102.131.21.1  Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery https://help-dysk.pl

2019-09-01 08:08:13

attackspam

Sent Mail to target address hacked/leaked from Planet3DNow.de

2019-06-26 11:31:10

attack

SPF Fail sender not permitted to send mail for @lsys.it / Sent Mail to target address hacked/leaked from Planet3DNow.de

2019-06-23 14:35:20

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.131.21.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52139
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;102.131.21.1.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019061901 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jun 20 09:50:23 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 1.21.131.102.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 1.21.131.102.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
209.141.61.78	attack	TCP port : 445	2020-09-30 19:32:10
2a02:c205:2011:3497::1	attackbots	2a02:c205:2011:3497::1 - - [30/Sep/2020:02:42:48 +0100] "POST /wp-login.php HTTP/1.1" 200 2863 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2a02:c205:2011:3497::1 - - [30/Sep/2020:02:42:49 +0100] "POST /wp-login.php HTTP/1.1" 200 2813 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2a02:c205:2011:3497::1 - - [30/Sep/2020:02:42:50 +0100] "POST /wp-login.php HTTP/1.1" 200 2844 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-30 19:31:26
95.167.178.149	attack	Sep 30 10:40:30 ip-172-31-16-56 sshd\[11027\]: Failed password for root from 95.167.178.149 port 46446 ssh2\ Sep 30 10:44:33 ip-172-31-16-56 sshd\[11044\]: Invalid user student from 95.167.178.149\ Sep 30 10:44:35 ip-172-31-16-56 sshd\[11044\]: Failed password for invalid user student from 95.167.178.149 port 55866 ssh2\ Sep 30 10:48:41 ip-172-31-16-56 sshd\[11082\]: Invalid user debian from 95.167.178.149\ Sep 30 10:48:43 ip-172-31-16-56 sshd\[11082\]: Failed password for invalid user debian from 95.167.178.149 port 37084 ssh2\	2020-09-30 19:08:34
167.71.209.158	attack	Invalid user gitlab from 167.71.209.158 port 51744	2020-09-30 19:01:07
176.96.235.191	attackspambots	Automatic report - Port Scan Attack	2020-09-30 19:18:53
36.250.5.117	attack	Sep 30 12:19:48 ns382633 sshd\[26596\]: Invalid user newharmony from 36.250.5.117 port 34260 Sep 30 12:19:48 ns382633 sshd\[26596\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.250.5.117 Sep 30 12:19:51 ns382633 sshd\[26596\]: Failed password for invalid user newharmony from 36.250.5.117 port 34260 ssh2 Sep 30 12:30:57 ns382633 sshd\[29124\]: Invalid user cvs from 36.250.5.117 port 58874 Sep 30 12:30:57 ns382633 sshd\[29124\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.250.5.117	2020-09-30 19:04:35
172.105.43.21	attackbots	172.105.43.21 - - [30/Sep/2020:04:11:58 +0200] "\x16\x03\x01\x00u\x01\x00\x00q\x03\x03Z\xA25\xB2\x0E\x04\x1A\xCD,\xAA\x5C\xFE\xD6\x09" 400 166 "-" "-"	2020-09-30 19:22:52
39.65.200.100	attackspam	TCP (SYN) 39.65.200.100:28344 -> port 23, len 44	2020-09-30 19:27:51
104.248.66.115	attackbots	Banned for a week because repeated abuses, for example SSH, but not only	2020-09-30 19:35:49
5.187.237.56	attackspambots	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-09-30 19:04:59
240e:390:1040:22b9:246:5d23:4000:189c	attackbots	Attempted Email Sync. Password Hacking/Probing.	2020-09-30 19:17:24
194.61.27.244	attackspambots	TCP port : 3389	2020-09-30 19:33:16
5.8.179.52	attack	Unauthorized connection attempt from IP address 5.8.179.52 on Port 445(SMB)	2020-09-30 19:36:59
35.176.212.208	attackspambots	Fail2Ban Ban Triggered	2020-09-30 19:24:21
197.247.239.94	attackbots	$f2bV_matches	2020-09-30 20:15:31

最近上报的IP列表

188.131.141.187	89.18.211.128	118.89.35.125	144.76.96.236
74.91.58.42	184.105.247.218	221.154.147.235	244.194.59.173
66.249.79.142	153.165.72.155	109.228.58.164	34.74.238.180
192.126.187.229	91.202.198.49	123.206.21.48	180.171.28.243
83.87.49.141	79.68.137.136	180.97.28.86	73.169.107.244