134.0.103.21 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): Iskratelecom CJSC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools	2020-01-31 13:15:29

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.0.103.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29142
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.0.103.21.			IN	A

;; AUTHORITY SECTION:
.			153	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020013003 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 13:15:22 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 21.103.0.134.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 21.103.0.134.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
177.36.40.113	attackspam	2020-07-1021:57:43dovecot_plainauthenticatorfailedfor\([201.48.220.69]\)[201.48.220.69]:52365:535Incorrectauthenticationdata\(set_id=info\)2020-07-1022:24:03dovecot_plainauthenticatorfailedfor\([177.36.40.113]\)[177.36.40.113]:38340:535Incorrectauthenticationdata\(set_id=info\)2020-07-1022:33:07dovecot_plainauthenticatorfailedfor\([186.224.156.152]\)[186.224.156.152]:55039:535Incorrectauthenticationdata\(set_id=info\)2020-07-1022:35:07dovecot_plainauthenticatorfailedfor\([46.174.214.36]\)[46.174.214.36]:2646:535Incorrectauthenticationdata\(set_id=info\)2020-07-1021:55:03dovecot_plainauthenticatorfailedfor\([93.93.193.78]\)[93.93.193.78]:35382:535Incorrectauthenticationdata\(set_id=info\)2020-07-1021:58:59dovecot_plainauthenticatorfailedfor\([168.167.92.85]\)[168.167.92.85]:43395:535Incorrectauthenticationdata\(set_id=info\)2020-07-1022:11:27dovecot_plainauthenticatorfailedfor\([187.111.33.10]\)[187.111.33.10]:55305:535Incorrectauthenticationdata\(set_id=info\)2020-07-1022:18:44dovecot_plainauthenticatorfailed	2020-07-11 04:50:53
134.122.84.97	attack	TCP (SYN) 134.122.84.97:16854 -> port 23, len 44	2020-07-11 04:51:39
198.12.225.100	attack	[Fri Jul 10 07:31:37.055445 2020] [php7:error] [pid 22592] [client 198.12.225.100:49551] script /Library/Server/Web/Data/Sites/interfaithministryservices.com/wp-login.php not found or unable to stat, referer: http://interfaithministryservices.com/wp-login.php	2020-07-11 05:01:53
106.13.160.249	attackbots	ET CINS Active Threat Intelligence Poor Reputation IP group 100 - port: 17899 proto: TCP cat: Misc Attack	2020-07-11 05:09:47
106.12.68.244	attack	Jul 10 23:23:31 lukav-desktop sshd\[12935\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.244 user=mail Jul 10 23:23:32 lukav-desktop sshd\[12935\]: Failed password for mail from 106.12.68.244 port 36292 ssh2 Jul 10 23:27:29 lukav-desktop sshd\[13009\]: Invalid user vio from 106.12.68.244 Jul 10 23:27:29 lukav-desktop sshd\[13009\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.244 Jul 10 23:27:32 lukav-desktop sshd\[13009\]: Failed password for invalid user vio from 106.12.68.244 port 58548 ssh2	2020-07-11 05:00:44
70.113.242.146	attack	Jul 10 21:56:44 sso sshd[32048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.113.242.146 Jul 10 21:56:46 sso sshd[32048]: Failed password for invalid user seminar from 70.113.242.146 port 43860 ssh2 ...	2020-07-11 05:08:52
197.252.161.40	attackbotsspam	Unauthorized connection attempt from IP address 197.252.161.40 on Port 445(SMB)	2020-07-11 05:17:00
59.46.70.107	attackbots	Jul 10 22:46:06 srv-ubuntu-dev3 sshd[21372]: Invalid user lhb from 59.46.70.107 Jul 10 22:46:06 srv-ubuntu-dev3 sshd[21372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.46.70.107 Jul 10 22:46:06 srv-ubuntu-dev3 sshd[21372]: Invalid user lhb from 59.46.70.107 Jul 10 22:46:08 srv-ubuntu-dev3 sshd[21372]: Failed password for invalid user lhb from 59.46.70.107 port 43960 ssh2 Jul 10 22:48:41 srv-ubuntu-dev3 sshd[21743]: Invalid user hlab from 59.46.70.107 Jul 10 22:48:41 srv-ubuntu-dev3 sshd[21743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.46.70.107 Jul 10 22:48:41 srv-ubuntu-dev3 sshd[21743]: Invalid user hlab from 59.46.70.107 Jul 10 22:48:43 srv-ubuntu-dev3 sshd[21743]: Failed password for invalid user hlab from 59.46.70.107 port 37120 ssh2 Jul 10 22:51:14 srv-ubuntu-dev3 sshd[22176]: Invalid user sambauser from 59.46.70.107 ...	2020-07-11 04:59:08
170.130.16.68	attackspambots	Spam	2020-07-11 04:53:23
125.167.122.221	attackspambots	Unauthorised access (Jul 10) SRC=125.167.122.221 LEN=52 TOS=0x10 PREC=0x40 TTL=117 ID=13688 DF TCP DPT=445 WINDOW=8192 SYN	2020-07-11 05:14:16
206.189.132.8	attackspambots	bruteforce detected	2020-07-11 05:21:37
170.106.9.125	attackbots	SSH Brute-Force reported by Fail2Ban	2020-07-11 04:53:44
45.227.254.30	attackspambots	TCP (SYN) 45.227.254.30:58003 -> port 3392, len 44	2020-07-11 04:52:26
197.232.53.182	attackbotsspam	197.232.53.182 - - [10/Jul/2020:23:15:41 +0200] "GET /wp-login.php HTTP/1.1" 302 536 ...	2020-07-11 05:19:24
107.77.172.107	attackspambots	Brute forcing email accounts	2020-07-11 04:54:52

最近上报的IP列表

1.1.182.171	125.164.100.31	185.243.180.216	180.243.187.61
119.42.107.211	183.196.114.102	37.151.31.185	105.216.60.165
40.92.255.99	101.51.9.97	47.103.32.157	178.15.113.184
123.245.174.230	249.48.159.244	109.200.188.94	125.166.224.158
186.23.63.70	47.103.126.52	180.182.245.77	49.234.61.180