94.154.113.221

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.154.113.221
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49754
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.154.113.221.			IN	A

;; AUTHORITY SECTION:
.			472	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022100700 1800 900 604800 86400

;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 07 20:26:13 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

Host 221.113.154.94.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 221.113.154.94.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
61.161.237.38	attack	(sshd) Failed SSH login from 61.161.237.38 (CN/China/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Feb 17 03:18:42 ubnt-55d23 sshd[10107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.161.237.38 user=root Feb 17 03:18:44 ubnt-55d23 sshd[10107]: Failed password for root from 61.161.237.38 port 51222 ssh2	2020-02-17 10:38:02
14.169.211.29	attack	Email SMTP authentication failure	2020-02-17 10:46:28
218.92.0.199	attackspam	Feb 17 03:35:09 vmanager6029 sshd\[29827\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.199 user=root Feb 17 03:35:11 vmanager6029 sshd\[29827\]: Failed password for root from 218.92.0.199 port 13059 ssh2 Feb 17 03:35:13 vmanager6029 sshd\[29827\]: Failed password for root from 218.92.0.199 port 13059 ssh2	2020-02-17 10:36:39
197.249.44.195	attackbots	Feb 16 23:44:13 odroid64 sshd\[30303\]: Invalid user admin from 197.249.44.195 Feb 16 23:44:13 odroid64 sshd\[30303\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.249.44.195 ...	2020-02-17 10:42:39
189.208.60.113	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-17 10:40:54
64.235.96.162	attackspambots	SSH login attempts.	2020-02-17 13:21:14
222.186.31.83	attackspam	Feb 17 03:22:15 * sshd[29526]: Failed password for root from 222.186.31.83 port 13256 ssh2	2020-02-17 10:32:37
182.1.115.182	attackspam	[Mon Feb 17 05:23:14.630935 2020] [:error] [pid 22230:tid 139656805431040] [client 182.1.115.182:62470] [client 182.1.115.182] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "118"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/citra-satelit-bmkg"] [unique_id "XknAyUDcx7KffueAQ4GEkgAAAAE"], referer: https://www.google.com/ ...	2020-02-17 10:48:28
139.59.69.76	attackbotsspam	Feb 17 01:22:36 sd-53420 sshd\[26624\]: Invalid user test2 from 139.59.69.76 Feb 17 01:22:36 sd-53420 sshd\[26624\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.69.76 Feb 17 01:22:39 sd-53420 sshd\[26624\]: Failed password for invalid user test2 from 139.59.69.76 port 48340 ssh2 Feb 17 01:25:47 sd-53420 sshd\[26915\]: Invalid user kelly from 139.59.69.76 Feb 17 01:25:47 sd-53420 sshd\[26915\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.69.76 ...	2020-02-17 10:41:28
183.91.68.148	attack	Brute force attack stopped by firewall	2020-02-17 10:32:50
196.219.68.254	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-17 13:03:41
123.58.177.85	attackspambots	SSH login attempts.	2020-02-17 13:08:52
51.89.99.24	attack	[2020-02-16 23:59:45] NOTICE[1148] chan_sip.c: Registration from '"10000" ' failed for '51.89.99.24:6157' - Wrong password [2020-02-16 23:59:45] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-16T23:59:45.003-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="10000",SessionID="0x7fd82c28adc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.89.99.24/6157",Challenge="7d64141f",ReceivedChallenge="7d64141f",ReceivedHash="9ffdef86593ba9adf73a05c49483a77b" [2020-02-16 23:59:45] NOTICE[1148] chan_sip.c: Registration from '"10000" ' failed for '51.89.99.24:6157' - Wrong password [2020-02-16 23:59:45] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-16T23:59:45.105-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="10000",SessionID="0x7fd82cb725a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51 ...	2020-02-17 13:12:09
170.244.188.62	attack	Automatic report - Port Scan Attack	2020-02-17 10:37:40
196.219.194.141	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-17 13:18:17

最近上报的IP列表

165.22.212.230	122.187.234.175	121.121.223.25	119.201.201.222
119.202.236.194	177.228.21.27	220.122.113.240	122.252.219.83
93.236.45.122	92.212.1.131	218.241.197.186	91.188.247.126
27.74.198.230	39.119.54.121	125.41.242.107	5.62.63.167
154.202.110.220	104.144.110.196	37.32.14.162	74.208.150.113