190.106.130.20

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Romania

运营商(isp): Cyberghost VPN

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	"Path Traversal Attack (/../) - Matched Data: /../ found within REQUEST_URI_RAW: /wp-content/plugins/mygallery/myfunctions/mygallerybrowser.php?myPath=../../../../wp-config.php"	2020-08-07 15:53:22

相同子网IP讨论:

IP	类型	评论内容	时间
190.106.130.42	attackspambots	20 attempts against mh-misbehave-ban on twig	2020-08-07 02:16:40

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 190.106.130.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49498
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;190.106.130.20.			IN	A

;; AUTHORITY SECTION:
.			309	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020080700 1800 900 604800 86400

;; Query time: 80 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 07 15:53:16 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 20.130.106.190.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.130.106.190.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
222.186.175.148	attack	Feb 24 16:08:04 v22018076622670303 sshd\[11789\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.148 user=root Feb 24 16:08:06 v22018076622670303 sshd\[11789\]: Failed password for root from 222.186.175.148 port 13964 ssh2 Feb 24 16:08:10 v22018076622670303 sshd\[11789\]: Failed password for root from 222.186.175.148 port 13964 ssh2 ...	2020-02-24 23:21:25
218.166.120.56	attackspambots	Brute force blocker - service: proftpd1 - aantal: 30 - Wed Jul 25 17:55:14 2018	2020-02-24 22:44:36
112.230.187.206	attackspambots	Brute force blocker - service: proftpd1, proftpd2 - aantal: 45 - Tue Jul 24 09:15:17 2018	2020-02-24 22:52:24
112.185.212.72	attack	Brute force blocker - service: proftpd1 - aantal: 70 - Thu Jul 26 01:05:15 2018	2020-02-24 22:45:09
183.164.27.13	attackbots	Brute force blocker - service: proftpd1, proftpd2 - aantal: 75 - Tue Jul 24 07:40:15 2018	2020-02-24 22:51:57
185.212.168.150	attackbotsspam	0,11-01/03 [bc01/m11] PostRequest-Spammer scoring: Durban01	2020-02-24 23:28:40
218.92.0.202	attackbotsspam	Feb 24 15:29:14 MK-Soft-Root1 sshd[22871]: Failed password for root from 218.92.0.202 port 38444 ssh2 Feb 24 15:29:17 MK-Soft-Root1 sshd[22871]: Failed password for root from 218.92.0.202 port 38444 ssh2 ...	2020-02-24 22:59:15
42.232.192.245	attackspam	Brute force blocker - service: proftpd1 - aantal: 42 - Thu Jul 26 02:55:14 2018	2020-02-24 22:41:35
213.57.123.18	attack	[2020-02-24 08:22:55] NOTICE[1148] chan_sip.c: Registration from '"2222"' failed for '213.57.123.18:8232' - Wrong password [2020-02-24 08:22:55] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-24T08:22:55.171-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="2222",SessionID="0x7fd82c4c0778",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/213.57.123.18/8232",Challenge="254ee7f1",ReceivedChallenge="254ee7f1",ReceivedHash="bdad31e2bdaa4fc7f73fc32653d0a8a3" [2020-02-24 08:28:55] NOTICE[1148] chan_sip.c: Registration from '"9002"' failed for '213.57.123.18:5973' - Wrong password [2020-02-24 08:28:55] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-24T08:28:55.855-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="9002",SessionID="0x7fd82c9bc688",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/213. ...	2020-02-24 22:53:18
144.178.129.139	attackbotsspam	Automatic report - Port Scan Attack	2020-02-24 23:12:35
117.57.92.242	attack	lfd: (smtpauth) Failed SMTP AUTH login from 117.57.92.242 (CN/China/-): 5 in the last 3600 secs - Tue Jul 24 20:58:05 2018	2020-02-24 22:54:24
185.143.223.161	attack	Feb 24 15:51:00 grey postfix/smtpd\[10808\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.161\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.161\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.161\]\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.163\]\> ...	2020-02-24 23:25:46
218.92.0.165	attackspam	Feb 24 16:08:20 mail sshd\[18262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.165 user=root Feb 24 16:08:23 mail sshd\[18262\]: Failed password for root from 218.92.0.165 port 40920 ssh2 Feb 24 16:08:28 mail sshd\[18262\]: Failed password for root from 218.92.0.165 port 40920 ssh2 ...	2020-02-24 23:23:23
167.172.61.151	attack	MALWARE-CNC Win.Trojan.Pmabot outbound connection	2020-02-24 23:17:38
42.93.128.243	attackspambots	Brute force blocker - service: proftpd1, proftpd2 - aantal: 33 - Sat Jul 21 05:25:19 2018	2020-02-24 23:30:50

最近上报的IP列表

91.121.150.229	27.44.117.181	1.75.2.162	186.219.219.30
168.61.209.45	61.94.93.253	180.149.125.160	92.63.109.78
183.80.89.32	187.177.58.209	206.189.117.9	113.161.131.18
1.6.182.220	182.1.234.60	114.99.103.115	51.178.30.154
220.135.117.24	156.67.181.58	46.142.3.78	189.90.209.201