必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Amazon.com Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:
类型 评论内容 时间
attack
Connection by 107.21.90.49 on port: 82 got caught by honeypot at 11/28/2019 3:58:25 AM
2019-11-28 13:22:47
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.21.90.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21727
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;107.21.90.49.			IN	A

;; AUTHORITY SECTION:
.			406	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112701 1800 900 604800 86400

;; Query time: 489 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 28 13:22:44 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
49.90.21.107.in-addr.arpa domain name pointer ec2-107-21-90-49.compute-1.amazonaws.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
49.90.21.107.in-addr.arpa	name = ec2-107-21-90-49.compute-1.amazonaws.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
103.145.13.201 attack
[2020-09-15 13:22:20] NOTICE[1239][C-000041b6] chan_sip.c: Call from '' (103.145.13.201:56383) to extension '011441904911054' rejected because extension not found in context 'public'.
[2020-09-15 13:22:20] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-15T13:22:20.497-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441904911054",SessionID="0x7f4d481972d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.13.201/56383",ACLName="no_extension_match"
[2020-09-15 13:22:20] NOTICE[1239][C-000041b7] chan_sip.c: Call from '' (103.145.13.201:58190) to extension '011441904911054' rejected because extension not found in context 'public'.
[2020-09-15 13:22:20] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-15T13:22:20.912-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441904911054",SessionID="0x7f4d482e4338",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/U
...
2020-09-16 04:13:18
78.199.19.89 attack
Banned for a week because repeated abuses, for example SSH, but not only
2020-09-16 03:46:26
81.4.110.153 attack
fail2ban -- 81.4.110.153
...
2020-09-16 04:20:55
104.131.231.109 attackspam
Bruteforce detected by fail2ban
2020-09-16 03:47:49
103.244.121.251 attack
Unauthorized connection attempt from IP address 103.244.121.251 on Port 445(SMB)
2020-09-16 04:01:36
14.98.213.14 attackbotsspam
Sep 15 21:51:13 * sshd[3223]: Failed password for root from 14.98.213.14 port 49086 ssh2
2020-09-16 04:17:43
122.51.95.90 attack
Sep 15 19:53:16 vps647732 sshd[22408]: Failed password for root from 122.51.95.90 port 54988 ssh2
...
2020-09-16 04:14:44
184.170.77.82 attackbotsspam
Fail2Ban Ban Triggered
2020-09-16 04:14:33
192.145.99.71 attackspam
Sep 15 03:42:48 our-server-hostname sshd[30783]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 15 03:42:48 our-server-hostname sshd[30783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.145.99.71  user=r.r
Sep 15 03:42:50 our-server-hostname sshd[30783]: Failed password for r.r from 192.145.99.71 port 60175 ssh2
Sep 15 03:59:06 our-server-hostname sshd[32531]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 15 03:59:06 our-server-hostname sshd[32531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.145.99.71  user=r.r
Sep 15 03:59:08 our-server-hostname sshd[32531]: Failed password for r.r from 192.145.99.71 port 40733 ssh2
Sep 15 04:03:54 our-server-hostname sshd[547]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address ........
-------------------------------
2020-09-16 03:49:22
45.129.33.44 attackbotsspam
ET DROP Dshield Block Listed Source group 1 - port: 12057 proto: tcp cat: Misc Attackbytes: 60
2020-09-16 03:59:14
152.136.149.160 attackspam
Sep 15 03:34:23 main sshd[16478]: Failed password for invalid user ftpuser from 152.136.149.160 port 33152 ssh2
2020-09-16 04:19:53
179.7.195.2 attackspam
1600189307 - 09/15/2020 19:01:47 Host: 179.7.195.2/179.7.195.2 Port: 445 TCP Blocked
2020-09-16 04:12:48
200.29.120.146 attackbots
Sep 15 16:20:32 host sshd[12111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=dsl-emcali-200.29.120.146.emcali.net.co  user=root
Sep 15 16:20:33 host sshd[12111]: Failed password for root from 200.29.120.146 port 37130 ssh2
...
2020-09-16 03:46:40
46.101.113.206 attackspambots
Sep 16 00:02:39 itv-usvr-02 sshd[25752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.113.206  user=root
Sep 16 00:06:22 itv-usvr-02 sshd[25875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.113.206  user=root
Sep 16 00:10:06 itv-usvr-02 sshd[26094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.113.206  user=root
2020-09-16 04:13:30
200.85.211.50 attack
Unauthorized connection attempt from IP address 200.85.211.50 on Port 445(SMB)
2020-09-16 04:19:02

最近上报的IP列表

158.94.51.54 244.20.232.96 209.157.54.185 26.170.131.74
244.179.251.91 192.95.108.127 62.210.148.175 197.188.203.247
163.47.36.14 81.213.102.96 160.20.13.28 24.133.193.181
223.11.158.211 79.94.190.16 76.162.11.143 142.146.178.38
105.15.65.250 130.172.137.218 67.49.79.176 204.50.126.91