164.138.19.1 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Iran, Islamic Republic of

运营商(isp): Ravand Tazeh Co .Pjs.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	2019-07-01 05:23:28 H=linux20.sgnetway.net [164.138.19.1]:55688 I=[10.100.18.25]:25 sender verify fail for : Unrouteable address 2019-07-01 x@x 2019-07-01 05:23:28 unexpected disconnection while reading SMTP command from linux20.sgnetway.net [164.138.19.1]:55688 I=[10.100.18.25]:25 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=164.138.19.1	2019-07-01 19:49:59

类型

评论内容

时间

attack

2019-07-01 05:23:28 H=linux20.sgnetway.net [164.138.19.1]:55688 I=[10.100.18.25]:25 sender verify fail for : Unrouteable address
2019-07-01 x@x
2019-07-01 05:23:28 unexpected disconnection while reading SMTP command from linux20.sgnetway.net [164.138.19.1]:55688 I=[10.100.18.25]:25


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=164.138.19.1

2019-07-01 19:49:59

相同子网IP讨论:

IP	类型	评论内容	时间
164.138.192.59	attackspam	Apr 19 08:09:32 server sshd[59312]: Failed password for root from 164.138.192.59 port 59914 ssh2 Apr 19 08:20:36 server sshd[62279]: Failed password for invalid user dk from 164.138.192.59 port 35838 ssh2 Apr 19 08:25:19 server sshd[63720]: Failed password for root from 164.138.192.59 port 55298 ssh2	2020-04-19 19:42:25

类型

评论内容

时间

164.138.192.59

attackspam

Apr 19 08:09:32 server sshd[59312]: Failed password for root from 164.138.192.59 port 59914 ssh2
Apr 19 08:20:36 server sshd[62279]: Failed password for invalid user dk from 164.138.192.59 port 35838 ssh2
Apr 19 08:25:19 server sshd[63720]: Failed password for root from 164.138.192.59 port 55298 ssh2

2020-04-19 19:42:25

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.138.19.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 899
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;164.138.19.1.			IN	A

;; AUTHORITY SECTION:
.			3251	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019063001 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 01 19:49:53 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

1.19.138.164.in-addr.arpa domain name pointer linux20.sgnetway.net.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
1.19.138.164.in-addr.arpa	name = linux20.sgnetway.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
213.244.243.18	attackbots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-04-19 07:03:03
94.59.187.211	attackbots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-04-19 06:41:51
222.80.39.43	attack	Attempts against SMTP/SSMTP	2020-04-19 06:36:25
5.188.66.49	attackspambots	$f2bV_matches	2020-04-19 07:07:53
114.35.202.20	attackbots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-04-19 06:57:52
46.101.31.59	attackbotsspam	46.101.31.59 - - [19/Apr/2020:00:11:35 +0200] "GET /wp-login.php HTTP/1.1" 200 5821 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 46.101.31.59 - - [19/Apr/2020:00:11:38 +0200] "POST /wp-login.php HTTP/1.1" 200 6601 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 46.101.31.59 - - [19/Apr/2020:00:11:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-19 06:55:21
103.207.38.155	attackbotsspam	(pop3d) Failed POP3 login from 103.207.38.155 (VN/Vietnam/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 19 00:49:28 ir1 dovecot[566034]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=103.207.38.155, lip=5.63.12.44, session=	2020-04-19 06:41:18
139.59.136.182	attackspambots	Apr 18 22:19:08 debian-2gb-nbg1-2 kernel: \[9500118.974819\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=139.59.136.182 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=34759 PROTO=TCP SPT=50641 DPT=9776 WINDOW=1024 RES=0x00 SYN URGP=0	2020-04-19 07:09:55
162.243.133.187	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-04-19 06:57:24
211.152.156.58	attackbots	ICMP MH Probe, Scan /Distributed -	2020-04-19 07:05:39
186.10.125.209	attackspam	Invalid user edu from 186.10.125.209 port 15204	2020-04-19 06:34:05
182.50.135.63	attackspam	SQL Injection Attempts	2020-04-19 06:34:39
144.34.216.179	attackspam	Apr 19 02:26:16 gw1 sshd[14327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.216.179 Apr 19 02:26:18 gw1 sshd[14327]: Failed password for invalid user admin from 144.34.216.179 port 59020 ssh2 ...	2020-04-19 06:40:10
159.65.155.149	attackbots	159.65.155.149 - - [18/Apr/2020:23:36:23 +0200] "GET /wp-login.php HTTP/1.1" 200 6463 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.65.155.149 - - [18/Apr/2020:23:36:25 +0200] "POST /wp-login.php HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.65.155.149 - - [18/Apr/2020:23:36:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-19 06:51:21
112.85.42.229	attackbotsspam	k+ssh-bruteforce	2020-04-19 06:51:48

最近上报的IP列表

79.23.133.172	188.165.219.26	190.96.172.101	216.170.114.14
103.194.184.74	115.216.58.183	168.228.151.4	8.208.9.38
92.255.195.228	84.201.170.135	116.68.160.114	191.234.162.22
112.238.141.40	5.160.91.146	121.21.93.146	103.219.112.43
77.233.21.244	122.102.27.33	103.232.154.169	178.128.19.237