105.124.96.83 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Nigeria

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.124.96.83
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63184
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;105.124.96.83.			IN	A

;; AUTHORITY SECTION:
.			304	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023112203 1800 900 604800 86400

;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 23 10:05:24 CST 2023
;; MSG SIZE  rcvd: 106

HOST信息:

Host 83.96.124.105.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 83.96.124.105.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
128.199.243.138	attackbotsspam	Oct 14 21:44:21 rotator sshd\[18809\]: Invalid user toor from 128.199.243.138Oct 14 21:44:23 rotator sshd\[18809\]: Failed password for invalid user toor from 128.199.243.138 port 56910 ssh2Oct 14 21:48:47 rotator sshd\[19609\]: Invalid user 2wsx\#EDC from 128.199.243.138Oct 14 21:48:49 rotator sshd\[19609\]: Failed password for invalid user 2wsx\#EDC from 128.199.243.138 port 40598 ssh2Oct 14 21:53:18 rotator sshd\[20399\]: Invalid user 123ASDasd$%\^ from 128.199.243.138Oct 14 21:53:19 rotator sshd\[20399\]: Failed password for invalid user 123ASDasd$%\^ from 128.199.243.138 port 52520 ssh2 ...	2019-10-15 07:52:43
140.207.114.222	attackspambots	Oct 14 18:00:01 web9 sshd\[7886\]: Invalid user vinci from 140.207.114.222 Oct 14 18:00:01 web9 sshd\[7886\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.207.114.222 Oct 14 18:00:03 web9 sshd\[7886\]: Failed password for invalid user vinci from 140.207.114.222 port 22085 ssh2 Oct 14 18:04:13 web9 sshd\[8456\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.207.114.222 user=root Oct 14 18:04:16 web9 sshd\[8456\]: Failed password for root from 140.207.114.222 port 61664 ssh2	2019-10-15 12:04:40
80.87.217.6	attack	Automatic report - XMLRPC Attack	2019-10-15 07:43:27
90.150.180.66	attack	Oct 14 21:51:18 imap-login: Info: Disconnected $no auth attempts in 0 secs$: user=\<\>, rip=90.150.180.66, lip=192.168.100.101, session=\\ Oct 14 21:51:22 imap-login: Info: Disconnected $auth failed, 1 attempts in 13 secs$: user=\, method=PLAIN, rip=90.150.180.66, lip=192.168.100.101, session=\\ Oct 14 21:51:24 imap-login: Info: Disconnected $auth failed, 1 attempts in 14 secs$: user=\, method=PLAIN, rip=90.150.180.66, lip=192.168.100.101, session=\\ Oct 14 21:51:28 imap-login: Info: Disconnected $auth failed, 1 attempts in 12 secs$: user=\, method=PLAIN, rip=90.150.180.66, lip=192.168.100.101, session=\\ Oct 14 21:51:40 imap-login: Info: Disconnected $no auth attempts in 0 secs$: user=\<\>, rip=90.150.180.66, lip=192.168.100.101, session=\\ Oct 14 21:51:55 imap-login: Info: Disconnected $auth failed, 1 attempts in 4 secs$: user=\	2019-10-15 07:45:48
96.44.133.110	attackbotsspam	Oct 14 21:51:16 imap-login: Info: Disconnected $auth failed, 1 attempts in 12 secs$: user=\, method=PLAIN, rip=96.44.133.110, lip=192.168.100.101, session=\\ Oct 14 21:51:34 imap-login: Info: Disconnected $no auth attempts in 0 secs$: user=\<\>, rip=96.44.133.110, lip=192.168.100.101, session=\\ Oct 14 21:51:35 imap-login: Info: Disconnected $no auth attempts in 0 secs$: user=\<\>, rip=96.44.133.110, lip=192.168.100.101, session=\\ Oct 14 21:51:41 imap-login: Info: Disconnected $auth failed, 1 attempts in 19 secs$: user=\, method=PLAIN, rip=96.44.133.110, lip=192.168.100.101, session=\<4gQ6MeSUUwBgLIVu\>\ Oct 14 21:51:50 imap-login: Info: Disconnected $no auth attempts in 0 secs$: user=\<\>, rip=96.44.133.110, lip=192.168.100.101, session=\\ Oct 14 21:52:13 imap-login: Info: Disconnected $no auth attempts in 0 secs$: user=\<\>, rip=96.44.133.110, lip=192.168.100.101, session=\<	2019-10-15 07:51:18
193.70.81.201	attackbotsspam	2019-10-15T06:08:06.2166431240 sshd\[26865\]: Invalid user testbed from 193.70.81.201 port 55142 2019-10-15T06:08:06.2193291240 sshd\[26865\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.81.201 2019-10-15T06:08:08.6651331240 sshd\[26865\]: Failed password for invalid user testbed from 193.70.81.201 port 55142 ssh2 ...	2019-10-15 12:14:21
185.90.116.38	attackbots	10/15/2019-00:07:56.299746 185.90.116.38 Protocol: 6 ET SCAN Potential SSH Scan	2019-10-15 12:09:45
79.137.87.44	attackspambots	Oct 15 06:15:17 legacy sshd[5885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.87.44 Oct 15 06:15:19 legacy sshd[5885]: Failed password for invalid user sr from 79.137.87.44 port 54476 ssh2 Oct 15 06:19:46 legacy sshd[6008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.87.44 ...	2019-10-15 12:20:35
124.204.36.138	attackbots	Port Scan detected from 124.204.36.138 (CN/China/-). 4 hits in the last 136 seconds	2019-10-15 12:02:13
134.249.133.197	attackbotsspam	$f2bV_matches	2019-10-15 07:46:01
27.124.47.221	attackbotsspam	Scanning and Vuln Attempts	2019-10-15 12:05:58
185.53.88.102	attack	\[2019-10-14 23:55:00\] NOTICE\[1887\] chan_sip.c: Registration from '"905" \' failed for '185.53.88.102:5553' - Wrong password \[2019-10-14 23:55:00\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-14T23:55:00.926-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="905",SessionID="0x7fc3ac686538",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.102/5553",Challenge="5896bd61",ReceivedChallenge="5896bd61",ReceivedHash="1abc82492d6a940936cd1e0885a71128" \[2019-10-14 23:55:01\] NOTICE\[1887\] chan_sip.c: Registration from '"905" \' failed for '185.53.88.102:5553' - Wrong password \[2019-10-14 23:55:01\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-14T23:55:01.033-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="905",SessionID="0x7fc3ad1ec8e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.	2019-10-15 12:00:29
31.171.1.53	attackspambots	[munged]::443 31.171.1.53 - - [15/Oct/2019:01:22:32 +0200] "POST /[munged]: HTTP/1.1" 200 8332 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 31.171.1.53 - - [15/Oct/2019:01:22:35 +0200] "POST /[munged]: HTTP/1.1" 200 4484 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 31.171.1.53 - - [15/Oct/2019:01:22:39 +0200] "POST /[munged]: HTTP/1.1" 200 4484 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 31.171.1.53 - - [15/Oct/2019:01:22:41 +0200] "POST /[munged]: HTTP/1.1" 200 4484 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 31.171.1.53 - - [15/Oct/2019:01:22:43 +0200] "POST /[munged]: HTTP/1.1" 200 4484 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 31.171.1.53 - - [15/Oct/2019:01:22:45 +0200] "POST	2019-10-15 07:53:41
207.154.246.152	attack	Oct 14 11:10:48 kmh-wsh-001-nbg03 sshd[15292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.246.152 user=r.r Oct 14 11:10:50 kmh-wsh-001-nbg03 sshd[15292]: Failed password for r.r from 207.154.246.152 port 40914 ssh2 Oct 14 11:10:50 kmh-wsh-001-nbg03 sshd[15292]: Received disconnect from 207.154.246.152 port 40914:11: Bye Bye [preauth] Oct 14 11:10:50 kmh-wsh-001-nbg03 sshd[15292]: Disconnected from 207.154.246.152 port 40914 [preauth] Oct 14 11:21:20 kmh-wsh-001-nbg03 sshd[15688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.246.152 user=r.r Oct 14 11:21:22 kmh-wsh-001-nbg03 sshd[15688]: Failed password for r.r from 207.154.246.152 port 34972 ssh2 Oct 14 11:21:22 kmh-wsh-001-nbg03 sshd[15688]: Received disconnect from 207.154.246.152 port 34972:11: Bye Bye [preauth] Oct 14 11:21:22 kmh-wsh-001-nbg03 sshd[15688]: Disconnected from 207.154.246.152 port 34972 [preauth] ........ -------------------------------	2019-10-15 07:43:59
68.183.147.213	attackspambots	C1,WP GET /wp-login.php	2019-10-15 12:08:53

最近上报的IP列表

105.124.220.124	105.124.213.72	105.125.139.138	105.124.18.68
105.124.167.160	105.124.82.147	105.124.221.23	105.124.227.192
105.124.189.190	105.124.120.63	105.124.242.240	105.124.134.6
105.124.139.55	105.124.182.67	105.124.158.175	105.124.240.5
105.124.15.117	105.124.140.115	105.124.237.182	105.124.172.114