1.181.139.28 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Neimenggu Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Port probing on unauthorized port 23	2020-08-12 16:56:26

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.181.139.28
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3435
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.181.139.28.			IN	A

;; AUTHORITY SECTION:
.			398	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081200 1800 900 604800 86400

;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 12 16:56:21 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 28.139.181.1.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 28.139.181.1.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
202.83.36.167	attackspam	Email rejected due to spam filtering	2020-08-13 20:39:57
159.89.194.160	attack	Aug 13 14:17:06 marvibiene sshd[26233]: Failed password for root from 159.89.194.160 port 58394 ssh2	2020-08-13 20:34:17
116.58.239.143	attackbots	trying to access non-authorized port	2020-08-13 20:42:43
183.111.204.148	attackbots	Aug 13 02:33:33 web9 sshd\[12334\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.111.204.148 user=root Aug 13 02:33:35 web9 sshd\[12334\]: Failed password for root from 183.111.204.148 port 45614 ssh2 Aug 13 02:36:45 web9 sshd\[12842\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.111.204.148 user=root Aug 13 02:36:47 web9 sshd\[12842\]: Failed password for root from 183.111.204.148 port 60562 ssh2 Aug 13 02:40:07 web9 sshd\[13315\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.111.204.148 user=root	2020-08-13 20:55:50
103.205.180.188	attackbotsspam	2020-08-13T07:20:18.558774morrigan.ad5gb.com sshd[2446204]: Failed password for root from 103.205.180.188 port 52270 ssh2 2020-08-13T07:20:20.507712morrigan.ad5gb.com sshd[2446204]: Disconnected from authenticating user root 103.205.180.188 port 52270 [preauth]	2020-08-13 21:02:54
133.130.97.166	attackbotsspam	(sshd) Failed SSH login from 133.130.97.166 (JP/Japan/v133-130-97-166.a026.g.tyo1.static.cnode.io): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 13 15:01:46 s1 sshd[9027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.130.97.166 user=root Aug 13 15:01:47 s1 sshd[9027]: Failed password for root from 133.130.97.166 port 38692 ssh2 Aug 13 15:16:06 s1 sshd[10466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.130.97.166 user=root Aug 13 15:16:08 s1 sshd[10466]: Failed password for root from 133.130.97.166 port 44336 ssh2 Aug 13 15:20:33 s1 sshd[10657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.130.97.166 user=root	2020-08-13 20:48:02
222.186.173.201	attack	Aug 13 14:34:57 cosmoit sshd[2075]: Failed password for root from 222.186.173.201 port 56080 ssh2	2020-08-13 20:43:44
117.48.227.152	attack	$f2bV_matches	2020-08-13 21:13:03
71.72.94.86	attackspam	Fail2Ban Ban Triggered	2020-08-13 20:48:24
195.54.160.38	attack	Aug 13 13:55:37 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=195.54.160.38 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=9496 PROTO=TCP SPT=49233 DPT=42294 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 13 14:04:19 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=195.54.160.38 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=30244 PROTO=TCP SPT=49233 DPT=55871 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 13 14:10:57 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=195.54.160.38 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=63087 PROTO=TCP SPT=49233 DPT=21160 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 13 14:15:46 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=195.54.160.38 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=45235 PROTO=TCP SPT=49233 DPT=52636 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 13 14:20:42 * ...	2020-08-13 20:38:19
111.229.194.130	attackspambots	Aug 13 14:07:24 pve1 sshd[6353]: Failed password for root from 111.229.194.130 port 54324 ssh2 ...	2020-08-13 20:43:56
222.186.173.215	attackspambots	Aug 13 12:44:15 ns3033917 sshd[18587]: Failed password for root from 222.186.173.215 port 61066 ssh2 Aug 13 12:44:19 ns3033917 sshd[18587]: Failed password for root from 222.186.173.215 port 61066 ssh2 Aug 13 12:44:23 ns3033917 sshd[18587]: Failed password for root from 222.186.173.215 port 61066 ssh2 ...	2020-08-13 20:57:42
202.137.155.148	attack	(imapd) Failed IMAP login from 202.137.155.148 (LA/Laos/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 13 16:50:37 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=202.137.155.148, lip=5.63.12.44, TLS, session=	2020-08-13 20:37:25
195.19.217.144	attackbotsspam	firewall-block, port(s): 445/tcp	2020-08-13 21:01:18
141.98.9.161	attackbotsspam	Automatic report - Banned IP Access	2020-08-13 20:55:21

最近上报的IP列表

65.49.20.111	95.246.184.124	131.94.149.154	114.16.109.162
71.233.43.135	252.7.183.43	185.253.56.80	200.149.214.90
105.184.230.20	168.121.117.198	178.153.23.50	31.8.60.34
49.233.63.234	175.136.244.238	116.103.107.20	65.49.20.84
164.68.161.18	142.250.67.239	81.138.12.194	183.81.67.63