21.203.220.105

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 21.203.220.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36636
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;21.203.220.105.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024122601 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 27 02:14:29 CST 2024
;; MSG SIZE  rcvd: 107

HOST信息:

Host 105.220.203.21.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 105.220.203.21.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
189.130.155.8	attackbots	Port Scan detected from 189.130.155.8 (MX/Mexico/Mexico City/Mexico City (Centro)/dsl-189-130-155-8-dyn.prod-infinitum.com.mx). 4 hits in the last 75 seconds	2020-06-11 05:46:13
178.154.200.103	attack	[Thu Jun 11 02:24:42.012844 2020] [:error] [pid 6458:tid 140673117513472] [client 178.154.200.103:58294] [client 178.154.200.103] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XuEzenmwliXNF7a8gaYqJQAAAfA"] ...	2020-06-11 06:01:23
222.80.196.16	attackspam	$f2bV_matches	2020-06-11 05:45:08
13.127.249.46	attackspam	SSH brute-force: detected 16 distinct username(s) / 28 distinct password(s) within a 24-hour window.	2020-06-11 06:06:08
103.210.133.20	attack	2020-06-10T23:52:36.796873snf-827550 sshd[4745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.133.20 2020-06-10T23:52:36.782783snf-827550 sshd[4745]: Invalid user DUP from 103.210.133.20 port 41770 2020-06-10T23:52:38.697652snf-827550 sshd[4745]: Failed password for invalid user DUP from 103.210.133.20 port 41770 ssh2 ...	2020-06-11 06:09:27
62.171.144.195	attackspambots	[2020-06-10 17:30:04] NOTICE[1288] chan_sip.c: Registration from '' failed for '62.171.144.195:52964' - Wrong password [2020-06-10 17:30:04] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-10T17:30:04.789-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3728",SessionID="0x7f4d745af848",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.171.144.195/52964",Challenge="6f99835e",ReceivedChallenge="6f99835e",ReceivedHash="26d158d0858092c7c4fbc874b873c854" [2020-06-10 17:31:28] NOTICE[1288] chan_sip.c: Registration from '' failed for '62.171.144.195:38974' - Wrong password [2020-06-10 17:31:28] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-10T17:31:28.930-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3729",SessionID="0x7f4d74411058",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.171.144 ...	2020-06-11 05:39:51
159.65.149.139	attackspambots	Invalid user vagrant from 159.65.149.139 port 57302	2020-06-11 06:03:31
91.92.205.248	attackbots	Automatic report - Banned IP Access	2020-06-11 06:03:04
141.98.81.6	attackspambots	(sshd) Failed SSH login from 141.98.81.6 (NL/Netherlands/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 10 23:22:29 ubnt-55d23 sshd[2943]: Invalid user 1234 from 141.98.81.6 port 36712 Jun 10 23:22:31 ubnt-55d23 sshd[2943]: Failed password for invalid user 1234 from 141.98.81.6 port 36712 ssh2	2020-06-11 05:44:08
220.128.159.121	attackspam	Invalid user va from 220.128.159.121 port 57036	2020-06-11 06:13:38
178.62.27.144	attackspambots	SSH invalid-user multiple login try	2020-06-11 05:49:25
156.234.162.133	attackspambots	Jun 9 18:52:09 django sshd[75415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.234.162.133 user=r.r Jun 9 18:52:11 django sshd[75415]: Failed password for r.r from 156.234.162.133 port 34458 ssh2 Jun 9 18:52:11 django sshd[75416]: Received disconnect from 156.234.162.133: 11: Bye Bye Jun 9 19:04:17 django sshd[77408]: Invalid user cyan from 156.234.162.133 Jun 9 19:04:17 django sshd[77408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.234.162.133 Jun 9 19:04:19 django sshd[77408]: Failed password for invalid user cyan from 156.234.162.133 port 36830 ssh2 Jun 9 19:04:19 django sshd[77409]: Received disconnect from 156.234.162.133: 11: Bye Bye Jun 9 19:07:46 django sshd[78057]: Invalid user proxy from 156.234.162.133 Jun 9 19:07:46 django sshd[78057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.234.162.133 ........ ------------------------------------------	2020-06-11 05:50:35
222.186.190.14	attack	Jun 10 23:53:21 v22018053744266470 sshd[21945]: Failed password for root from 222.186.190.14 port 29480 ssh2 Jun 10 23:53:30 v22018053744266470 sshd[21957]: Failed password for root from 222.186.190.14 port 19470 ssh2 Jun 10 23:53:32 v22018053744266470 sshd[21957]: Failed password for root from 222.186.190.14 port 19470 ssh2 ...	2020-06-11 05:56:56
64.52.172.234	attack	Jun 9 19:08:03 mxgate1 postfix/postscreen[11347]: CONNECT from [64.52.172.234]:43956 to [176.31.12.44]:25 Jun 9 19:08:03 mxgate1 postfix/dnsblog[11351]: addr 64.52.172.234 listed by domain zen.spamhaus.org as 127.0.0.3 Jun 9 19:08:03 mxgate1 postfix/dnsblog[11348]: addr 64.52.172.234 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Jun 9 19:08:09 mxgate1 postfix/postscreen[11347]: DNSBL rank 3 for [64.52.172.234]:43956 Jun x@x Jun 9 19:08:09 mxgate1 postfix/postscreen[11347]: DISCONNECT [64.52.172.234]:43956 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=64.52.172.234	2020-06-11 05:54:56
113.131.139.22	attackspam	Rds Attack	2020-06-11 06:04:02

最近上报的IP列表

32.219.171.245	25.153.168.118	9.133.68.208	20.165.81.70
181.42.55.176	166.160.1.152	4.22.184.0	120.77.206.111
93.238.63.250	9.198.14.26	31.159.193.166	196.63.186.108
129.130.84.203	147.237.30.200	147.1.237.0	44.5.242.139
252.177.10.77	31.219.204.16	166.211.120.209	172.57.149.253