192.241.221.125

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	scan	2020-07-05 18:10:51

相同子网IP讨论:

IP	类型	评论内容	时间
192.241.221.20	proxy	VPN FALSE CONECT	2023-02-06 14:06:41
192.241.221.230	attack	192.241.221.230 - - [12/Sep/2021:05:41:59 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 404 196 192.241.221.230 - - [23/Sep/2021:06:21:35 +0000] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 404 196 192.241.221.230 - - [25/Sep/2021:05:14:53 +0000] "GET /owa/auth/x.js HTTP/1.1" 404 196	2021-10-01 20:00:47
192.241.221.158	attackspambots	[N1.H1.VM1] Port Scanner Detected Blocked by UFW	2020-10-09 06:27:24
192.241.221.158	attack	TCP (SYN) 192.241.221.158:33482 -> port 7070, len 44	2020-10-08 22:47:20
192.241.221.158	attackspambots	TCP (SYN) 192.241.221.158:33482 -> port 7070, len 44	2020-10-08 14:42:43
192.241.221.114	attackbots	IP 192.241.221.114 attacked honeypot on port: 1080 at 10/7/2020 6:56:42 AM	2020-10-07 23:22:32
192.241.221.114	attackspam	Port scanning [2 denied]	2020-10-07 15:27:20
192.241.221.46	attack	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-03 05:59:43
192.241.221.46	attackspambots	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-03 01:26:03
192.241.221.46	attackbots	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-02 21:54:49
192.241.221.46	attackbotsspam	Port scan denied	2020-10-02 18:26:26
192.241.221.46	attackbotsspam	Port scan denied	2020-10-02 14:58:36
192.241.221.114	attack	" "	2020-09-29 03:58:07
192.241.221.114	attackbots	firewall-block, port(s): 9200/tcp	2020-09-28 20:11:45
192.241.221.114	attackspam	firewall-block, port(s): 9200/tcp	2020-09-28 12:15:48

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 192.241.221.125
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27282
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;192.241.221.125.		IN	A

;; AUTHORITY SECTION:
.			593	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070500 1800 900 604800 86400

;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 05 18:10:47 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

125.221.241.192.in-addr.arpa domain name pointer zg-0626a-220.stretchoid.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
125.221.241.192.in-addr.arpa	name = zg-0626a-220.stretchoid.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
189.57.73.18	attackspam	Sep 5 13:51:04 web8 sshd\[16214\]: Invalid user oracle from 189.57.73.18 Sep 5 13:51:04 web8 sshd\[16214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.57.73.18 Sep 5 13:51:06 web8 sshd\[16214\]: Failed password for invalid user oracle from 189.57.73.18 port 58849 ssh2 Sep 5 13:59:41 web8 sshd\[20176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.57.73.18 user=root Sep 5 13:59:43 web8 sshd\[20176\]: Failed password for root from 189.57.73.18 port 9153 ssh2	2020-09-05 22:25:33
80.215.92.46	attack	Sep 4 18:51:03 mellenthin postfix/smtpd[32575]: NOQUEUE: reject: RCPT from unknown[80.215.92.46]: 554 5.7.1 Service unavailable; Client host [80.215.92.46] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/80.215.92.46; from= to= proto=ESMTP helo=<[80.215.92.46]>	2020-09-05 22:35:53
190.134.23.31	attack	Sep 4 18:51:09 mellenthin postfix/smtpd[32153]: NOQUEUE: reject: RCPT from r190-134-23-31.dialup.adsl.anteldata.net.uy[190.134.23.31]: 554 5.7.1 Service unavailable; Client host [190.134.23.31] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/190.134.23.31; from= to= proto=ESMTP helo=	2020-09-05 22:30:15
149.129.52.21	attackbots	149.129.52.21 - - [05/Sep/2020:15:43:35 +0200] "GET /wp-login.php HTTP/1.1" 200 8712 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.129.52.21 - - [05/Sep/2020:15:43:38 +0200] "POST /wp-login.php HTTP/1.1" 200 8942 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.129.52.21 - - [05/Sep/2020:15:43:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-05 22:34:56
88.202.190.138	attackspambots	[Wed Sep 02 09:59:59 2020] - DDoS Attack From IP: 88.202.190.138 Port: 119	2020-09-05 22:50:18
45.141.87.5	attackspambots	RDP brute forcing (d)	2020-09-05 22:51:10
222.186.173.142	attackbotsspam	Sep 5 16:05:15 jane sshd[5112]: Failed password for root from 222.186.173.142 port 31878 ssh2 Sep 5 16:05:18 jane sshd[5112]: Failed password for root from 222.186.173.142 port 31878 ssh2 ...	2020-09-05 22:15:33
192.42.116.27	attackbotsspam	Sep 5 19:54:26 itv-usvr-01 sshd[31861]: Invalid user admin from 192.42.116.27 Sep 5 19:54:26 itv-usvr-01 sshd[31861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.42.116.27 Sep 5 19:54:26 itv-usvr-01 sshd[31861]: Invalid user admin from 192.42.116.27 Sep 5 19:54:28 itv-usvr-01 sshd[31861]: Failed password for invalid user admin from 192.42.116.27 port 34050 ssh2	2020-09-05 22:11:42
185.220.101.203	attackspambots	Sep 5 15:29:16 shivevps sshd[31092]: error: maximum authentication attempts exceeded for root from 185.220.101.203 port 32994 ssh2 [preauth] Sep 5 15:34:10 shivevps sshd[31263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.203 user=root Sep 5 15:34:12 shivevps sshd[31263]: Failed password for root from 185.220.101.203 port 2764 ssh2 ...	2020-09-05 22:36:39
122.51.166.84	attackbots	prod8 ...	2020-09-05 22:27:36
67.207.82.47	attackspam	TCP (SYN) 67.207.82.47:32767 -> port 8545, len 44	2020-09-05 22:10:31
42.106.200.255	attackbotsspam	Sep 4 18:51:00 mellenthin postfix/smtpd[29582]: NOQUEUE: reject: RCPT from unknown[42.106.200.255]: 554 5.7.1 Service unavailable; Client host [42.106.200.255] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/42.106.200.255; from= to= proto=ESMTP helo=<[49.32.55.180]>	2020-09-05 22:38:23
51.68.198.113	attackbotsspam	Sep 5 13:48:21 santamaria sshd\[3181\]: Invalid user zihang from 51.68.198.113 Sep 5 13:48:21 santamaria sshd\[3181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.198.113 Sep 5 13:48:23 santamaria sshd\[3181\]: Failed password for invalid user zihang from 51.68.198.113 port 60372 ssh2 ...	2020-09-05 22:43:39
103.95.83.184	attackspam	103.95.83.184 - - [04/Sep/2020:18:44:31 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" 103.95.83.184 - - [04/Sep/2020:18:44:32 +0100] "POST /wp-login.php HTTP/1.1" 200 7644 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" 103.95.83.184 - - [04/Sep/2020:18:48:27 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" ...	2020-09-05 22:20:43
111.229.130.46	attackbotsspam	Sep 5 02:45:34 Host-KLAX-C sshd[6139]: Disconnected from invalid user admin6 111.229.130.46 port 44138 [preauth] ...	2020-09-05 22:34:18

最近上报的IP列表

109.100.159.102	123.20.57.155	102.189.251.83	181.79.56.31
123.20.0.81	51.91.239.11	218.58.215.46	134.15.235.113
14.231.87.238	161.35.9.189	132.209.100.55	46.109.212.150
39.181.228.74	85.103.185.220	45.93.99.226	72.116.123.228
165.227.92.35	145.255.173.125	109.162.240.103	185.24.233.32