106.1.20.111 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Republic of China (ROC)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
106.1.20.228	attackbots	Honeypot attack, port: 81, PTR: PTR record not found	2020-03-02 00:57:48

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.1.20.111
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51914
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.1.20.111.			IN	A

;; AUTHORITY SECTION:
.			371	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 143 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 09:27:24 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 111.20.1.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 111.20.1.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
115.97.253.231	attackspam	php WP PHPmyadamin ABUSE blocked for 12h	2020-08-27 13:09:45
185.172.215.148	attack	Port scan on 1 port(s): 1433	2020-08-27 14:35:30
185.147.215.12	attack	[2020-08-27 01:15:05] NOTICE[1185] chan_sip.c: Registration from '' failed for '185.147.215.12:65196' - Wrong password [2020-08-27 01:15:05] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-27T01:15:05.760-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3026",SessionID="0x7f10c405a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.12/65196",Challenge="48319416",ReceivedChallenge="48319416",ReceivedHash="043a2a992af2b64bb7514096f45c99d0" [2020-08-27 01:15:28] NOTICE[1185] chan_sip.c: Registration from '' failed for '185.147.215.12:61605' - Wrong password [2020-08-27 01:15:28] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-27T01:15:28.767-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="141",SessionID="0x7f10c451d0c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215. ...	2020-08-27 14:36:35
222.186.180.142	attackbotsspam	2020-08-27T06:47:09.749674mail.broermann.family sshd[32112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.142 user=root 2020-08-27T06:47:11.734133mail.broermann.family sshd[32112]: Failed password for root from 222.186.180.142 port 41529 ssh2 2020-08-27T06:47:09.749674mail.broermann.family sshd[32112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.142 user=root 2020-08-27T06:47:11.734133mail.broermann.family sshd[32112]: Failed password for root from 222.186.180.142 port 41529 ssh2 2020-08-27T06:47:14.237653mail.broermann.family sshd[32112]: Failed password for root from 222.186.180.142 port 41529 ssh2 ...	2020-08-27 12:56:14
46.101.31.59	attack	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-08-27 12:57:37
54.39.16.73	attackspambots	Flask-IPban - exploit URL requested:/wp-config.php_	2020-08-27 12:57:50
87.241.106.15	attackbots	Firewall Dropped Connection	2020-08-27 13:11:04
222.186.173.201	attack	(sshd) Failed SSH login from 222.186.173.201 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 27 06:48:15 amsweb01 sshd[17268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.201 user=root Aug 27 06:48:16 amsweb01 sshd[17268]: Failed password for root from 222.186.173.201 port 48534 ssh2 Aug 27 06:48:19 amsweb01 sshd[17268]: Failed password for root from 222.186.173.201 port 48534 ssh2 Aug 27 06:48:23 amsweb01 sshd[17268]: Failed password for root from 222.186.173.201 port 48534 ssh2 Aug 27 06:48:27 amsweb01 sshd[17268]: Failed password for root from 222.186.173.201 port 48534 ssh2	2020-08-27 12:48:53
112.85.42.174	attackbotsspam	Aug 27 08:22:30 ift sshd\[48739\]: Failed password for root from 112.85.42.174 port 39632 ssh2Aug 27 08:22:43 ift sshd\[48739\]: Failed password for root from 112.85.42.174 port 39632 ssh2Aug 27 08:22:49 ift sshd\[48782\]: Failed password for root from 112.85.42.174 port 64733 ssh2Aug 27 08:23:02 ift sshd\[48782\]: Failed password for root from 112.85.42.174 port 64733 ssh2Aug 27 08:23:05 ift sshd\[48782\]: Failed password for root from 112.85.42.174 port 64733 ssh2 ...	2020-08-27 14:41:06
85.209.0.103	attackspam	...	2020-08-27 12:48:31
193.228.91.123	attackspambots	Aug 27 04:42:49 XXX sshd[4480]: Invalid user user from 193.228.91.123 port 49778	2020-08-27 13:03:08
147.78.66.202	attack	Port scan on 25 port(s): 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 112 113 116 117 120 121 124 125	2020-08-27 14:38:34
45.95.168.172	attack	$f2bV_matches	2020-08-27 12:52:44
212.70.149.4	attack	2020-08-26 11:20 SMTP:25 IP autobanned - 1647 attempts a day	2020-08-27 14:34:53
142.4.22.236	attack	142.4.22.236 - - [27/Aug/2020:05:54:28 +0200] "GET /wp-login.php HTTP/1.1" 200 8537 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.22.236 - - [27/Aug/2020:05:54:32 +0200] "POST /wp-login.php HTTP/1.1" 200 8788 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.22.236 - - [27/Aug/2020:05:54:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-27 13:18:00

最近上报的IP列表

117.111.1.114	1.163.85.217	5.14.182.89	102.45.79.92
103.96.37.90	103.159.224.34	187.0.45.126	79.132.222.13
213.6.145.33	111.185.228.72	105.112.27.89	186.89.14.17
157.90.181.147	204.148.72.54	64.227.126.250	50.206.63.3
5.43.203.190	119.148.103.3	186.97.154.98	183.252.19.90