149.28.200.140

基本信息:

城市(city): San Jose

省份(region): California

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
149.28.200.94	attackspam	TCP Port Scanning	2020-02-25 21:18:34
149.28.200.143	attack	Oct 27 04:51:58 vps58358 sshd\[12790\]: Invalid user miyabi from 149.28.200.143Oct 27 04:52:01 vps58358 sshd\[12790\]: Failed password for invalid user miyabi from 149.28.200.143 port 56156 ssh2Oct 27 04:55:36 vps58358 sshd\[12856\]: Invalid user kolosal from 149.28.200.143Oct 27 04:55:38 vps58358 sshd\[12856\]: Failed password for invalid user kolosal from 149.28.200.143 port 35656 ssh2Oct 27 04:59:16 vps58358 sshd\[12924\]: Invalid user nl from 149.28.200.143Oct 27 04:59:18 vps58358 sshd\[12924\]: Failed password for invalid user nl from 149.28.200.143 port 43384 ssh2 ...	2019-10-27 12:00:23

类型

评论内容

时间

149.28.200.94

attackspam

TCP Port Scanning

2020-02-25 21:18:34

149.28.200.143

attack

Oct 27 04:51:58 vps58358 sshd\[12790\]: Invalid user miyabi from 149.28.200.143Oct 27 04:52:01 vps58358 sshd\[12790\]: Failed password for invalid user miyabi from 149.28.200.143 port 56156 ssh2Oct 27 04:55:36 vps58358 sshd\[12856\]: Invalid user kolosal from 149.28.200.143Oct 27 04:55:38 vps58358 sshd\[12856\]: Failed password for invalid user kolosal from 149.28.200.143 port 35656 ssh2Oct 27 04:59:16 vps58358 sshd\[12924\]: Invalid user nl from 149.28.200.143Oct 27 04:59:18 vps58358 sshd\[12924\]: Failed password for invalid user nl from 149.28.200.143 port 43384 ssh2
...

2019-10-27 12:00:23

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.28.200.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25992
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;149.28.200.140.			IN	A

;; AUTHORITY SECTION:
.			511	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021121602 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 17 11:39:45 CST 2021
;; MSG SIZE  rcvd: 107

HOST信息:

140.200.28.149.in-addr.arpa domain name pointer 149.28.200.140.vultr.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
140.200.28.149.in-addr.arpa	name = 149.28.200.140.vultr.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
5.22.64.179	attackspam	(pop3d) Failed POP3 login from 5.22.64.179 (IR/Iran/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 6 21:15:26 ir1 dovecot[3110802]: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=5.22.64.179, lip=5.63.12.44, session=	2020-09-07 20:03:45
222.186.180.130	attack	2020-09-07T12:07:00.111385abusebot-3.cloudsearch.cf sshd[31016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.130 user=root 2020-09-07T12:07:02.152109abusebot-3.cloudsearch.cf sshd[31016]: Failed password for root from 222.186.180.130 port 61066 ssh2 2020-09-07T12:07:04.637013abusebot-3.cloudsearch.cf sshd[31016]: Failed password for root from 222.186.180.130 port 61066 ssh2 2020-09-07T12:07:00.111385abusebot-3.cloudsearch.cf sshd[31016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.130 user=root 2020-09-07T12:07:02.152109abusebot-3.cloudsearch.cf sshd[31016]: Failed password for root from 222.186.180.130 port 61066 ssh2 2020-09-07T12:07:04.637013abusebot-3.cloudsearch.cf sshd[31016]: Failed password for root from 222.186.180.130 port 61066 ssh2 2020-09-07T12:07:00.111385abusebot-3.cloudsearch.cf sshd[31016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...	2020-09-07 20:17:17
41.77.6.27	attackspam	[ER hit] Tried to deliver spam. Already well known.	2020-09-07 20:37:57
50.66.177.24	attack	$f2bV_matches	2020-09-07 20:12:54
112.197.70.132	attack	Attempted connection to port 445.	2020-09-07 19:54:37
68.183.12.127	attackspambots	Time: Mon Sep 7 11:48:37 2020 +0000 IP: 68.183.12.127 (NL/Netherlands/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 7 11:39:18 ca-29-ams1 sshd[11789]: Invalid user info1 from 68.183.12.127 port 33320 Sep 7 11:39:20 ca-29-ams1 sshd[11789]: Failed password for invalid user info1 from 68.183.12.127 port 33320 ssh2 Sep 7 11:44:39 ca-29-ams1 sshd[12551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.12.127 user=root Sep 7 11:44:40 ca-29-ams1 sshd[12551]: Failed password for root from 68.183.12.127 port 47780 ssh2 Sep 7 11:48:36 ca-29-ams1 sshd[13164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.12.127 user=root	2020-09-07 20:21:40
103.98.17.94	attackbots	SSH Scan	2020-09-07 20:35:45
23.129.64.180	attack	SSH bruteforce	2020-09-07 20:13:20
124.205.118.165	attackspambots	SIP/5060 Probe, BF, Hack -	2020-09-07 20:34:43
160.16.101.57	attack	2020-09-07T07:03:54.022395morrigan.ad5gb.com sshd[2012407]: Failed password for root from 160.16.101.57 port 49550 ssh2 2020-09-07T07:03:54.304674morrigan.ad5gb.com sshd[2012407]: Disconnected from authenticating user root 160.16.101.57 port 49550 [preauth]	2020-09-07 20:12:05
118.70.117.156	attackspam	Sep 7 10:33:50 root sshd[10559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.117.156 ...	2020-09-07 20:32:41
200.17.114.215	attackbotsspam	2020-09-07T09:08:28.623913upcloud.m0sh1x2.com sshd[24908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.17.114.215 user=root 2020-09-07T09:08:30.429524upcloud.m0sh1x2.com sshd[24908]: Failed password for root from 200.17.114.215 port 33992 ssh2	2020-09-07 19:55:47
112.28.172.63	attackspam	Honeypot attack, port: 5555, PTR: PTR record not found	2020-09-07 20:27:15
103.242.224.100	attackbots	Icarus honeypot on github	2020-09-07 20:07:32
37.187.54.45	attackbotsspam	Sep 7 12:36:18 nextcloud sshd\[9425\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.54.45 user=root Sep 7 12:36:20 nextcloud sshd\[9425\]: Failed password for root from 37.187.54.45 port 44988 ssh2 Sep 7 12:39:47 nextcloud sshd\[12371\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.54.45 user=root	2020-09-07 20:38:26

最近上报的IP列表

73.179.55.104	172.217.194.94	59.26.184.204	203.194.110.194
45.148.124.240	2603:6080:fb40:8c4:2020:4e7c:2db6:8cbb	165.227.106.212	116.25.251.72
204.188.244.10	182.92.60.88	103.70.171.250	103.136.220.130
125.120.33.209	87.251.85.227	117.211.74.68	162.142.125.60
117.62.46.88	49.78.149.34	185.215.15.59	111.202.101.223