31.20.106.199 - IPInfo

基本信息:

城市(city): Roermond

省份(region): Limburg

国家(country): Netherlands

运营商(isp): T-Mobile Netherlands BV.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Mobile ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Apr 11 20:54:36 work-partkepr sshd\[28963\]: Invalid user pi from 31.20.106.199 port 62888 Apr 11 20:54:42 work-partkepr sshd\[28963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.20.106.199 ...	2020-04-12 07:07:56

类型

评论内容

时间

attack

Apr 11 20:54:36 work-partkepr sshd\[28963\]: Invalid user pi from 31.20.106.199 port 62888
Apr 11 20:54:42 work-partkepr sshd\[28963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.20.106.199
...

2020-04-12 07:07:56

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 31.20.106.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21596
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;31.20.106.199.			IN	A

;; AUTHORITY SECTION:
.			581	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041101 1800 900 604800 86400

;; Query time: 156 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 12 07:07:52 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

199.106.20.31.in-addr.arpa domain name pointer 199-106-20-31.ftth.glasoperator.nl.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
199.106.20.31.in-addr.arpa	name = 199-106-20-31.ftth.glasoperator.nl.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
117.33.253.49	attackspam	2020-06-10T12:57:53.0299581240 sshd\[26737\]: Invalid user sinusbot5 from 117.33.253.49 port 55646 2020-06-10T12:57:53.0335751240 sshd\[26737\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.33.253.49 2020-06-10T12:57:55.2791781240 sshd\[26737\]: Failed password for invalid user sinusbot5 from 117.33.253.49 port 55646 ssh2 ...	2020-06-11 01:47:08
182.75.139.26	attackspam	2020-06-10T17:30:24.261014shield sshd\[4126\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.139.26 user=root 2020-06-10T17:30:26.317624shield sshd\[4126\]: Failed password for root from 182.75.139.26 port 46869 ssh2 2020-06-10T17:34:06.819556shield sshd\[5842\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.139.26 user=root 2020-06-10T17:34:08.685530shield sshd\[5842\]: Failed password for root from 182.75.139.26 port 36229 ssh2 2020-06-10T17:37:46.731058shield sshd\[7109\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.139.26 user=root	2020-06-11 01:42:16
118.68.220.165	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-06-11 01:30:53
49.149.78.110	attackbots	1591786682 - 06/10/2020 12:58:02 Host: 49.149.78.110/49.149.78.110 Port: 445 TCP Blocked	2020-06-11 01:40:25
222.186.30.76	attack	2020-06-10T17:52:40.302728shield sshd\[15214\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76 user=root 2020-06-10T17:52:42.097874shield sshd\[15214\]: Failed password for root from 222.186.30.76 port 23743 ssh2 2020-06-10T17:52:44.398909shield sshd\[15214\]: Failed password for root from 222.186.30.76 port 23743 ssh2 2020-06-10T17:52:45.961319shield sshd\[15214\]: Failed password for root from 222.186.30.76 port 23743 ssh2 2020-06-10T17:52:48.804229shield sshd\[15259\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76 user=root	2020-06-11 01:57:44
185.156.73.42	attackspambots	TCP (SYN) 185.156.73.42:46245 -> port 3381, len 44	2020-06-11 01:41:51
193.19.145.213	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-06-11 01:52:00
51.222.19.63	attack	Honeypot attack, port: 445, PTR: ip63.ip-51-222-19.net.	2020-06-11 01:56:22
49.235.75.19	attackbots	Invalid user admin from 49.235.75.19 port 23378	2020-06-11 01:54:52
211.210.219.71	attackspambots	Unauthorized connection attempt detected from IP address 211.210.219.71 to port 22	2020-06-11 01:43:52
142.93.212.10	attackbots	$f2bV_matches	2020-06-11 01:25:31
43.226.146.129	attack	Jun 10 19:24:02 h1745522 sshd[14566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.146.129 user=root Jun 10 19:24:04 h1745522 sshd[14566]: Failed password for root from 43.226.146.129 port 57968 ssh2 Jun 10 19:26:30 h1745522 sshd[14738]: Invalid user wujh from 43.226.146.129 port 53544 Jun 10 19:26:30 h1745522 sshd[14738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.146.129 Jun 10 19:26:30 h1745522 sshd[14738]: Invalid user wujh from 43.226.146.129 port 53544 Jun 10 19:26:32 h1745522 sshd[14738]: Failed password for invalid user wujh from 43.226.146.129 port 53544 ssh2 Jun 10 19:28:57 h1745522 sshd[14882]: Invalid user ldy from 43.226.146.129 port 49130 Jun 10 19:28:57 h1745522 sshd[14882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.146.129 Jun 10 19:28:57 h1745522 sshd[14882]: Invalid user ldy from 43.226.146.129 port 49130 Jun 10 19 ...	2020-06-11 01:56:47
43.228.245.151	attack	Automatic report - XMLRPC Attack	2020-06-11 01:41:21
62.171.144.195	attackbotsspam	[2020-06-10 13:17:28] NOTICE[1288] chan_sip.c: Registration from '' failed for '62.171.144.195:55020' - Wrong password [2020-06-10 13:17:28] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-10T13:17:28.153-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3548",SessionID="0x7f4d7455fd68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.171.144.195/55020",Challenge="7478f675",ReceivedChallenge="7478f675",ReceivedHash="36aee83f2f3eaf19a96ded5bfeb8b2be" [2020-06-10 13:18:52] NOTICE[1288] chan_sip.c: Registration from '' failed for '62.171.144.195:53652' - Wrong password [2020-06-10 13:18:52] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-10T13:18:52.721-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3549",SessionID="0x7f4d7455fd68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.171.144 ...	2020-06-11 01:39:41
190.85.50.62	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-06-11 01:25:14

最近上报的IP列表

85.166.94.26	37.71.82.17	32.230.151.184	5.99.70.244
62.234.178.25	89.206.88.221	216.180.105.132	76.186.170.199
166.185.4.185	193.52.34.123	104.10.30.164	59.10.66.175
71.28.92.83	107.173.85.55	221.59.126.165	111.197.26.34
179.252.207.149	202.191.157.69	125.47.82.14	41.197.118.235