114.237.134.133

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Jiangsu Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Feb 24 05:53:02 grey postfix/smtpd\[5539\]: NOQUEUE: reject: RCPT from unknown\[114.237.134.133\]: 554 5.7.1 Service unavailable\; Client host \[114.237.134.133\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=114.237.134.133\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-24 16:10:39

类型

评论内容

时间

attackbots

Feb 24 05:53:02 grey postfix/smtpd\[5539\]: NOQUEUE: reject: RCPT from unknown\[114.237.134.133\]: 554 5.7.1 Service unavailable\; Client host \[114.237.134.133\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=114.237.134.133\; from=\ to=\ proto=ESMTP helo=\
...

2020-02-24 16:10:39

相同子网IP讨论:

IP	类型	评论内容	时间
114.237.134.204	attack	SpamScore above: 10.0	2020-06-24 06:47:32
114.237.134.228	attack	SpamScore above: 10.0	2020-06-16 23:23:53
114.237.134.193	attack	SpamScore above: 10.0	2020-06-03 17:04:00
114.237.134.66	attack	IP: 114.237.134.66 Ports affected Simple Mail Transfer (25) Found in DNSBL('s) ASN Details AS4134 Chinanet China (CN) CIDR 114.232.0.0/13 Log Date: 9/05/2020 7:57:01 PM UTC	2020-05-10 05:47:37
114.237.134.84	attack	SpamScore above: 10.0	2020-04-06 16:42:09
114.237.134.194	attackbotsspam	Jan 23 17:06:17 grey postfix/smtpd\[7664\]: NOQUEUE: reject: RCPT from unknown\[114.237.134.194\]: 554 5.7.1 Service unavailable\; Client host \[114.237.134.194\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[114.237.134.194\]\; from=\ to=\ proto=SMTP helo=\ ...	2020-01-24 03:26:02
114.237.134.79	attackspambots	Dec 28 07:23:19 grey postfix/smtpd\[4905\]: NOQUEUE: reject: RCPT from unknown\[114.237.134.79\]: 554 5.7.1 Service unavailable\; Client host \[114.237.134.79\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[114.237.134.79\]\; from=\ to=\ proto=SMTP helo=\ ...	2019-12-28 19:24:09
114.237.134.247	attackspam	Dec 27 07:16:13 mxgate1 postfix/postscreen[21363]: CONNECT from [114.237.134.247]:10130 to [176.31.12.44]:25 Dec 27 07:16:13 mxgate1 postfix/dnsblog[21364]: addr 114.237.134.247 listed by domain zen.spamhaus.org as 127.0.0.4 Dec 27 07:16:13 mxgate1 postfix/dnsblog[21364]: addr 114.237.134.247 listed by domain zen.spamhaus.org as 127.0.0.11 Dec 27 07:16:13 mxgate1 postfix/dnsblog[21377]: addr 114.237.134.247 listed by domain cbl.abuseat.org as 127.0.0.2 Dec 27 07:16:13 mxgate1 postfix/dnsblog[21366]: addr 114.237.134.247 listed by domain b.barracudacentral.org as 127.0.0.2 Dec 27 07:16:19 mxgate1 postfix/postscreen[21363]: DNSBL rank 4 for [114.237.134.247]:10130 Dec x@x Dec 27 07:16:20 mxgate1 postfix/postscreen[21363]: DISCONNECT [114.237.134.247]:10130 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=114.237.134.247	2019-12-27 16:06:42
114.237.134.103	attack	SpamReport	2019-12-12 14:56:45
114.237.134.221	attack	Oct 16 22:23:14 elektron postfix/smtpd\[28644\]: NOQUEUE: reject: RCPT from unknown\[114.237.134.221\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[114.237.134.221\]\; from=\ to=\ proto=ESMTP helo=\ Oct 16 22:23:57 elektron postfix/smtpd\[28644\]: NOQUEUE: reject: RCPT from unknown\[114.237.134.221\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[114.237.134.221\]\; from=\ to=\ proto=ESMTP helo=\ Oct 16 22:24:31 elektron postfix/smtpd\[28644\]: NOQUEUE: reject: RCPT from unknown\[114.237.134.221\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[114.237.134.221\]\; from=\ to=\ proto=ESMTP helo=\	2019-10-17 07:16:24
114.237.134.176	attackspambots	Brute force SMTP login attempts.	2019-09-10 02:00:07

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.237.134.133
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9564
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.237.134.133.		IN	A

;; AUTHORITY SECTION:
.			478	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022400 1800 900 604800 86400

;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 24 16:10:35 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

133.134.237.114.in-addr.arpa domain name pointer 133.134.237.114.broad.lyg.js.dynamic.163data.com.cn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
133.134.237.114.in-addr.arpa	name = 133.134.237.114.broad.lyg.js.dynamic.163data.com.cn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
89.151.43.11	attack	89.151.43.11 - - [11/Aug/2020:13:24:06 +0100] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 89.151.43.11 - - [11/Aug/2020:13:26:10 +0100] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 89.151.43.11 - - [11/Aug/2020:13:36:36 +0100] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" ...	2020-08-11 21:22:15
156.67.83.22	attack	(smtpauth) Failed SMTP AUTH login from 156.67.83.22 (PL/Poland/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-08-11 16:43:09 plain authenticator failed for ([156.67.83.22]) [156.67.83.22]: 535 Incorrect authentication data (set_id=info)	2020-08-11 21:34:25
35.222.85.218	attackbots	[2020-08-11 09:14:13] NOTICE[1185] chan_sip.c: Registration from '' failed for '35.222.85.218:56613' - Wrong password [2020-08-11 09:14:13] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-11T09:14:13.866-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="303",SessionID="0x7f10c40edb38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/35.222.85.218/56613",Challenge="6c7cddeb",ReceivedChallenge="6c7cddeb",ReceivedHash="cb9f4f323f2f9ce3d804ee1e8954156f" [2020-08-11 09:19:46] NOTICE[1185] chan_sip.c: Registration from '' failed for '35.222.85.218:51037' - Wrong password [2020-08-11 09:19:46] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-11T09:19:46.724-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="303",SessionID="0x7f10c405a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/35.222.85.218/510 ...	2020-08-11 22:00:30
187.178.24.195	attackspam	20/8/11@08:12:47: FAIL: Alarm-Telnet address from=187.178.24.195 ...	2020-08-11 21:54:24
41.224.59.78	attackspambots	Brute-force attempt banned	2020-08-11 21:41:35
74.141.132.233	attackbotsspam	$f2bV_matches	2020-08-11 21:36:10
98.191.216.202	attackspam	Triggered: repeated knocking on closed ports.	2020-08-11 21:28:11
111.72.196.65	attack	Aug 11 14:01:57 srv01 postfix/smtpd\[29907\]: warning: unknown\[111.72.196.65\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 11 14:05:25 srv01 postfix/smtpd\[6051\]: warning: unknown\[111.72.196.65\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 11 14:08:52 srv01 postfix/smtpd\[6960\]: warning: unknown\[111.72.196.65\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 11 14:12:34 srv01 postfix/smtpd\[29907\]: warning: unknown\[111.72.196.65\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 11 14:12:53 srv01 postfix/smtpd\[29907\]: warning: unknown\[111.72.196.65\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-08-11 21:43:22
110.17.174.253	attack	Bruteforce detected by fail2ban	2020-08-11 22:04:20
95.143.135.226	attack	Registration form abuse	2020-08-11 21:53:22
218.92.0.221	attackbots	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-08-11 21:31:51
66.68.187.145	attackbots	Aug 11 13:58:00 marvibiene sshd[20468]: Failed password for root from 66.68.187.145 port 53606 ssh2 Aug 11 14:09:53 marvibiene sshd[21072]: Failed password for root from 66.68.187.145 port 34314 ssh2	2020-08-11 21:37:00
103.99.3.212	attack	[MK-VM3] Blocked by UFW	2020-08-11 21:27:41
122.51.31.60	attack	2020-08-11T15:11:11.182306snf-827550 sshd[13156]: Failed password for root from 122.51.31.60 port 51178 ssh2 2020-08-11T15:13:04.186619snf-827550 sshd[13170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.31.60 user=root 2020-08-11T15:13:05.721352snf-827550 sshd[13170]: Failed password for root from 122.51.31.60 port 39822 ssh2 ...	2020-08-11 21:40:13
106.54.123.84	attackspambots	Aug 11 14:48:22 vps639187 sshd\[7744\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.123.84 user=root Aug 11 14:48:23 vps639187 sshd\[7744\]: Failed password for root from 106.54.123.84 port 48796 ssh2 Aug 11 14:54:15 vps639187 sshd\[7847\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.123.84 user=root ...	2020-08-11 22:05:23

最近上报的IP列表

120.136.167.101	182.73.90.194	177.240.27.99	119.59.34.81
182.73.90.220	223.254.67.244	135.162.112.5	144.111.222.46
193.31.47.194	186.134.228.121	157.31.207.95	182.73.90.40
172.199.8.153	41.119.11.152	252.23.51.129	182.73.90.83
209.141.58.58	54.87.207.203	182.52.134.101	182.74.48.46