131.0.21.12 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Brazil

运营商(isp): PS5 Internet

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Unauthorized connection attempt detected from IP address 131.0.21.12 to port 80 [J]	2020-02-04 00:37:44

相同子网IP讨论:

IP	类型	评论内容	时间
131.0.210.68	attack	[13/Jul/2020 x@x [13/Jul/2020 x@x [13/Jul/2020 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=131.0.210.68	2020-07-13 21:12:37
131.0.218.39	attackspam	Invalid user administrator from 131.0.218.39 port 58304	2020-05-23 15:04:15
131.0.210.150	attackbotsspam	$f2bV_matches	2020-02-22 15:00:39

类型

评论内容

时间

131.0.210.68

attack

[13/Jul/2020 x@x
[13/Jul/2020 x@x
[13/Jul/2020 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=131.0.210.68

2020-07-13 21:12:37

131.0.218.39

attackspam

Invalid user administrator from 131.0.218.39 port 58304

2020-05-23 15:04:15

131.0.210.150

attackbotsspam

$f2bV_matches

2020-02-22 15:00:39

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.0.21.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56292
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;131.0.21.12.			IN	A

;; AUTHORITY SECTION:
.			486	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020300 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 00:37:37 CST 2020
;; MSG SIZE  rcvd: 115

HOST信息:

Host 12.21.0.131.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 12.21.0.131.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
210.12.22.131	attackbotsspam	Invalid user mot from 210.12.22.131 port 35362	2020-10-02 20:08:31
165.227.46.89	attackbotsspam	sshd: Failed password for invalid user .... from 165.227.46.89 port 46752 ssh2	2020-10-02 19:54:33
106.53.220.103	attackspambots	Oct 2 06:59:54 gitlab sshd[2550140]: Invalid user renata from 106.53.220.103 port 58570 Oct 2 06:59:54 gitlab sshd[2550140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.220.103 Oct 2 06:59:54 gitlab sshd[2550140]: Invalid user renata from 106.53.220.103 port 58570 Oct 2 06:59:56 gitlab sshd[2550140]: Failed password for invalid user renata from 106.53.220.103 port 58570 ssh2 Oct 2 07:01:39 gitlab sshd[2550406]: Invalid user admin from 106.53.220.103 port 47708 ...	2020-10-02 20:20:46
125.119.42.238	attackspambots	Oct 1 20:35:24 CT3029 sshd[7748]: Invalid user user13 from 125.119.42.238 port 38654 Oct 1 20:35:24 CT3029 sshd[7748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.119.42.238 Oct 1 20:35:26 CT3029 sshd[7748]: Failed password for invalid user user13 from 125.119.42.238 port 38654 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=125.119.42.238	2020-10-02 20:10:12
81.70.22.3	attack	Port scan denied	2020-10-02 20:13:23
58.56.112.169	attack	Oct 1 20:41:05 jumpserver sshd[421144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.56.112.169 Oct 1 20:41:05 jumpserver sshd[421144]: Invalid user pi from 58.56.112.169 port 12041 Oct 1 20:41:07 jumpserver sshd[421144]: Failed password for invalid user pi from 58.56.112.169 port 12041 ssh2 ...	2020-10-02 20:09:10
122.51.64.115	attackspambots	SSH login attempts.	2020-10-02 20:15:28
220.180.119.192	attackbots	Oct 2 13:18:30 meumeu sshd[1226880]: Invalid user cactiuser from 220.180.119.192 port 49116 Oct 2 13:18:30 meumeu sshd[1226880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.180.119.192 Oct 2 13:18:30 meumeu sshd[1226880]: Invalid user cactiuser from 220.180.119.192 port 49116 Oct 2 13:18:31 meumeu sshd[1226880]: Failed password for invalid user cactiuser from 220.180.119.192 port 49116 ssh2 Oct 2 13:22:04 meumeu sshd[1227048]: Invalid user monica from 220.180.119.192 port 16507 Oct 2 13:22:04 meumeu sshd[1227048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.180.119.192 Oct 2 13:22:04 meumeu sshd[1227048]: Invalid user monica from 220.180.119.192 port 16507 Oct 2 13:22:05 meumeu sshd[1227048]: Failed password for invalid user monica from 220.180.119.192 port 16507 ssh2 Oct 2 13:25:37 meumeu sshd[1227253]: Invalid user ubuntu from 220.180.119.192 port 39434 ...	2020-10-02 20:14:17
193.106.175.55	attackspambots	2020-10-02 04:05:57.692272-0500 localhost smtpd[17887]: NOQUEUE: reject: RCPT from unknown[193.106.175.55]: 554 5.7.1 Service unavailable; Client host [193.106.175.55] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBL495727; from= to= proto=ESMTP helo=	2020-10-02 20:02:59
185.136.52.158	attackbots	Invalid user cvs1 from 185.136.52.158 port 39436	2020-10-02 20:20:04
14.63.125.204	attack	Found on Alienvault / proto=6 . srcport=30883 . dstport=5555 . (3848)	2020-10-02 20:06:50
120.53.31.96	attackspambots	Invalid user guest from 120.53.31.96 port 49448	2020-10-02 20:18:14
218.241.134.34	attackspam	Oct 2 11:50:50 localhost sshd[115240]: Invalid user tor from 218.241.134.34 port 19694 Oct 2 11:50:50 localhost sshd[115240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.241.134.34 Oct 2 11:50:50 localhost sshd[115240]: Invalid user tor from 218.241.134.34 port 19694 Oct 2 11:50:51 localhost sshd[115240]: Failed password for invalid user tor from 218.241.134.34 port 19694 ssh2 Oct 2 11:55:26 localhost sshd[115676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.241.134.34 user=root Oct 2 11:55:27 localhost sshd[115676]: Failed password for root from 218.241.134.34 port 51575 ssh2 ...	2020-10-02 20:02:42
185.200.118.43	attackbots	TCP ports : 1723 / 3128 / 3389	2020-10-02 20:10:31
124.70.66.245	attackbots	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-10-02 20:24:07

最近上报的IP列表

122.24.87.109	53.215.25.235	158.156.120.215	13.151.84.173
83.82.33.56	199.200.112.179	222.72.72.14	53.103.40.2
109.207.198.125	151.199.87.249	34.188.138.238	220.227.222.173
24.87.28.122	112.147.238.165	152.120.219.217	140.48.83.204
140.86.153.26	86.146.196.108	160.219.206.107	193.24.64.100