必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): South Africa

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.213.116.201
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61850
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;105.213.116.201.		IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022801 1800 900 604800 86400

;; Query time: 89 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 01 03:15:35 CST 2022
;; MSG SIZE  rcvd: 108
HOST信息:
201.116.213.105.in-addr.arpa domain name pointer 105-213-116-201.access.mtnbusiness.co.za.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
201.116.213.105.in-addr.arpa	name = 105-213-116-201.access.mtnbusiness.co.za.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
122.51.45.200 attackbotsspam
Invalid user vbox from 122.51.45.200 port 35286
2020-08-21 19:58:16
106.54.139.117 attack
Aug 21 08:13:59 OPSO sshd\[21583\]: Invalid user happy from 106.54.139.117 port 57302
Aug 21 08:13:59 OPSO sshd\[21583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.139.117
Aug 21 08:14:01 OPSO sshd\[21583\]: Failed password for invalid user happy from 106.54.139.117 port 57302 ssh2
Aug 21 08:18:38 OPSO sshd\[22967\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.139.117  user=root
Aug 21 08:18:40 OPSO sshd\[22967\]: Failed password for root from 106.54.139.117 port 51386 ssh2
2020-08-21 19:35:42
81.68.142.128 attackbots
2020-08-21T12:01:49.832556shield sshd\[5863\]: Invalid user www-data from 81.68.142.128 port 34780
2020-08-21T12:01:49.841357shield sshd\[5863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.142.128
2020-08-21T12:01:51.530005shield sshd\[5863\]: Failed password for invalid user www-data from 81.68.142.128 port 34780 ssh2
2020-08-21T12:02:41.735923shield sshd\[5938\]: Invalid user stefan from 81.68.142.128 port 42852
2020-08-21T12:02:41.744103shield sshd\[5938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.142.128
2020-08-21 20:09:38
94.102.57.179 attackspambots
part of a distributed port scan from multiple address in 94.102.57.
2020-08-21 19:58:51
184.105.247.247 attack
TCP port : 50070
2020-08-21 20:08:06
120.53.23.24 attack
sshd jail - ssh hack attempt
2020-08-21 19:50:00
106.12.7.86 attack
Aug 21 13:40:15 ns381471 sshd[27515]: Failed password for root from 106.12.7.86 port 45844 ssh2
2020-08-21 19:54:32
181.65.51.159 attackspambots
20 attempts against mh-misbehave-ban on pluto
2020-08-21 19:56:23
218.73.57.109 attackspam
" "
2020-08-21 19:46:48
192.241.235.214 attack
[Fri Aug 21 18:30:53.468561 2020] [:error] [pid 8627:tid 140428586252032] [client 192.241.235.214:56108] [client 192.241.235.214] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "972"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "Xz@wbUROvd9H5O2acuvQWAAAAcI"]
...
2020-08-21 19:50:35
118.35.149.18 attackbots
Icarus honeypot on github
2020-08-21 19:31:22
188.166.211.194 attackspambots
Aug 21 10:53:19 ns382633 sshd\[30989\]: Invalid user drl from 188.166.211.194 port 54533
Aug 21 10:53:19 ns382633 sshd\[30989\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.211.194
Aug 21 10:53:21 ns382633 sshd\[30989\]: Failed password for invalid user drl from 188.166.211.194 port 54533 ssh2
Aug 21 11:06:26 ns382633 sshd\[1174\]: Invalid user squid from 188.166.211.194 port 45834
Aug 21 11:06:26 ns382633 sshd\[1174\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.211.194
2020-08-21 19:38:30
113.87.160.129 attack
Aug 21 08:11:11 saturn sshd[922781]: Failed password for invalid user plc from 113.87.160.129 port 2451 ssh2
Aug 21 08:24:58 saturn sshd[923293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.87.160.129  user=root
Aug 21 08:25:00 saturn sshd[923293]: Failed password for root from 113.87.160.129 port 2452 ssh2
...
2020-08-21 19:57:45
37.202.84.91 attackbotsspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-08-21 20:09:09
152.89.105.192 attackbotsspam
Invalid user odoo2 from 152.89.105.192 port 45264
2020-08-21 20:06:02

最近上报的IP列表

105.213.116.171 105.213.116.229 105.213.116.210 105.213.116.21
105.213.116.231 105.213.116.32 105.213.116.243 105.213.116.55
105.213.116.57 105.213.116.71 105.213.117.116 221.233.101.172
105.213.126.62 105.213.130.75 105.213.125.21 105.213.141.16
105.213.141.184 105.213.141.75 105.213.140.48 105.213.140.36