81.96.53.106 - IPInfo

基本信息:

城市(city): Leicester

省份(region): England

国家(country): United Kingdom

运营商(isp): Virgin Media Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Automatic report - Port Scan Attack	2020-08-07 08:44:08

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.96.53.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46197
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.96.53.106.			IN	A

;; AUTHORITY SECTION:
.			181	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020080604 1800 900 604800 86400

;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 07 08:44:05 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

106.53.96.81.in-addr.arpa domain name pointer cpc81966-leic18-2-0-cust361.8-1.cable.virginm.net.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
106.53.96.81.in-addr.arpa	name = cpc81966-leic18-2-0-cust361.8-1.cable.virginm.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
203.190.55.213	attackspam	2019-10-26T02:02:17.693071 sshd[21445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.190.55.213 user=root 2019-10-26T02:02:20.059635 sshd[21445]: Failed password for root from 203.190.55.213 port 38202 ssh2 2019-10-26T02:06:24.286263 sshd[21498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.190.55.213 user=root 2019-10-26T02:06:26.226436 sshd[21498]: Failed password for root from 203.190.55.213 port 57372 ssh2 2019-10-26T02:10:30.782923 sshd[21541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.190.55.213 user=root 2019-10-26T02:10:33.164229 sshd[21541]: Failed password for root from 203.190.55.213 port 48307 ssh2 ...	2019-10-26 08:22:57
60.223.255.14	attack	abuseConfidenceScore blocked for 12h	2019-10-26 08:21:11
212.64.109.31	attackbots	2019-10-25T23:22:51.3434981495-001 sshd\[26269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.109.31 user=root 2019-10-25T23:22:53.4317001495-001 sshd\[26269\]: Failed password for root from 212.64.109.31 port 52250 ssh2 2019-10-25T23:40:43.2885591495-001 sshd\[27038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.109.31 user=root 2019-10-25T23:40:45.5477971495-001 sshd\[27038\]: Failed password for root from 212.64.109.31 port 41350 ssh2 2019-10-25T23:44:49.6211871495-001 sshd\[27182\]: Invalid user devol from 212.64.109.31 port 49006 2019-10-25T23:44:49.6315551495-001 sshd\[27182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.109.31 ...	2019-10-26 12:07:17
120.92.153.47	attack	Oct 26 05:54:18 mail postfix/smtpd[28121]: warning: unknown[120.92.153.47]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 26 05:54:26 mail postfix/smtpd[28121]: warning: unknown[120.92.153.47]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 26 05:54:40 mail postfix/smtpd[28121]: warning: unknown[120.92.153.47]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-10-26 12:10:49
119.29.53.107	attackbotsspam	Oct 25 23:54:43 debian sshd\[27433\]: Invalid user vrinda from 119.29.53.107 port 60937 Oct 25 23:54:43 debian sshd\[27433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.53.107 Oct 25 23:54:46 debian sshd\[27433\]: Failed password for invalid user vrinda from 119.29.53.107 port 60937 ssh2 ...	2019-10-26 12:07:39
142.44.160.173	attack	Oct 26 05:54:41 dedicated sshd[19853]: Invalid user spider from 142.44.160.173 port 47848	2019-10-26 12:10:16
89.248.172.85	attack	10/26/2019-01:39:40.606742 89.248.172.85 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-10-26 08:13:32
84.1.150.12	attackbotsspam	Oct 26 05:54:49 v22018076622670303 sshd\[23137\]: Invalid user xq from 84.1.150.12 port 58880 Oct 26 05:54:49 v22018076622670303 sshd\[23137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.1.150.12 Oct 26 05:54:51 v22018076622670303 sshd\[23137\]: Failed password for invalid user xq from 84.1.150.12 port 58880 ssh2 ...	2019-10-26 12:06:40
185.209.0.91	attackspam	10/25/2019-23:28:09.770177 185.209.0.91 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-10-26 08:04:03
180.76.58.76	attackspambots	Oct 25 17:50:25 kapalua sshd\[15783\]: Invalid user parola123321 from 180.76.58.76 Oct 25 17:50:25 kapalua sshd\[15783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.58.76 Oct 25 17:50:27 kapalua sshd\[15783\]: Failed password for invalid user parola123321 from 180.76.58.76 port 45164 ssh2 Oct 25 17:54:36 kapalua sshd\[16165\]: Invalid user randerson from 180.76.58.76 Oct 25 17:54:36 kapalua sshd\[16165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.58.76	2019-10-26 12:13:50
92.118.37.70	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 90 - port: 3389 proto: TCP cat: Misc Attack	2019-10-26 08:12:31
185.175.93.105	attack	10/26/2019-02:05:41.064640 185.175.93.105 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-10-26 08:06:31
193.32.160.151	attackbotsspam	Oct 26 05:58:52 server postfix/smtpd[15407]: NOQUEUE: reject: RCPT from unknown[193.32.160.151]: 554 5.7.1 Service unavailable; Client host [193.32.160.151] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/sbl/query/SBL462197; from= to= proto=ESMTP helo=<[193.32.160.150]> Oct 26 05:58:52 server postfix/smtpd[15407]: NOQUEUE: reject: RCPT from unknown[193.32.160.151]: 554 5.7.1 Service unavailable; Client host [193.32.160.151] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/sbl/query/SBL462197; from= to= proto=ESMTP helo=<[193.32.160.150]>	2019-10-26 12:10:36
37.49.231.104	attackbots	10/25/2019-23:31:51.485748 37.49.231.104 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 35	2019-10-26 08:01:05
118.24.173.104	attackspam	SSH Brute Force, server-1 sshd[17804]: Failed password for root from 118.24.173.104 port 41881 ssh2	2019-10-26 08:23:44

最近上报的IP列表

171.96.124.63	2.123.233.29	68.37.166.101	118.222.47.145
32.212.162.9	223.202.163.167	86.200.61.54	126.31.97.164
39.13.159.98	97.40.6.108	166.197.208.16	79.8.115.225
106.61.16.189	198.4.172.128	180.163.64.104	191.61.63.245
75.179.40.77	167.71.63.108	117.53.23.229	27.68.65.222