必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Iran, Islamic Republic of

运营商(isp): Ravand Tazeh Co .Pjs.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:
类型 评论内容 时间
attack
2019-07-01 05:23:28 H=linux20.sgnetway.net [164.138.19.1]:55688 I=[10.100.18.25]:25 sender verify fail for : Unrouteable address
2019-07-01 x@x
2019-07-01 05:23:28 unexpected disconnection while reading SMTP command from linux20.sgnetway.net [164.138.19.1]:55688 I=[10.100.18.25]:25


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=164.138.19.1
2019-07-01 19:49:59
相同子网IP讨论:
IP 类型 评论内容 时间
164.138.192.59 attackspam
Apr 19 08:09:32 server sshd[59312]: Failed password for root from 164.138.192.59 port 59914 ssh2
Apr 19 08:20:36 server sshd[62279]: Failed password for invalid user dk from 164.138.192.59 port 35838 ssh2
Apr 19 08:25:19 server sshd[63720]: Failed password for root from 164.138.192.59 port 55298 ssh2
2020-04-19 19:42:25
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.138.19.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 899
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;164.138.19.1.			IN	A

;; AUTHORITY SECTION:
.			3251	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019063001 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 01 19:49:53 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
1.19.138.164.in-addr.arpa domain name pointer linux20.sgnetway.net.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
1.19.138.164.in-addr.arpa	name = linux20.sgnetway.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
213.244.243.18 attackbots
Telnet/23 MH Probe, Scan, BF, Hack -
2020-04-19 07:03:03
94.59.187.211 attackbots
Telnet/23 MH Probe, Scan, BF, Hack -
2020-04-19 06:41:51
222.80.39.43 attack
Attempts against SMTP/SSMTP
2020-04-19 06:36:25
5.188.66.49 attackspambots
$f2bV_matches
2020-04-19 07:07:53
114.35.202.20 attackbots
Telnet/23 MH Probe, Scan, BF, Hack -
2020-04-19 06:57:52
46.101.31.59 attackbotsspam
46.101.31.59 - - [19/Apr/2020:00:11:35 +0200] "GET /wp-login.php HTTP/1.1" 200 5821 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
46.101.31.59 - - [19/Apr/2020:00:11:38 +0200] "POST /wp-login.php HTTP/1.1" 200 6601 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
46.101.31.59 - - [19/Apr/2020:00:11:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-04-19 06:55:21
103.207.38.155 attackbotsspam
(pop3d) Failed POP3 login from 103.207.38.155 (VN/Vietnam/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 19 00:49:28 ir1 dovecot[566034]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=103.207.38.155, lip=5.63.12.44, session=
2020-04-19 06:41:18
139.59.136.182 attackspambots
Apr 18 22:19:08 debian-2gb-nbg1-2 kernel: \[9500118.974819\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=139.59.136.182 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=34759 PROTO=TCP SPT=50641 DPT=9776 WINDOW=1024 RES=0x00 SYN URGP=0
2020-04-19 07:09:55
162.243.133.187 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-04-19 06:57:24
211.152.156.58 attackbots
ICMP MH Probe, Scan /Distributed -
2020-04-19 07:05:39
186.10.125.209 attackspam
Invalid user edu from 186.10.125.209 port 15204
2020-04-19 06:34:05
182.50.135.63 attackspam
SQL Injection Attempts
2020-04-19 06:34:39
144.34.216.179 attackspam
Apr 19 02:26:16 gw1 sshd[14327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.216.179
Apr 19 02:26:18 gw1 sshd[14327]: Failed password for invalid user admin from 144.34.216.179 port 59020 ssh2
...
2020-04-19 06:40:10
159.65.155.149 attackbots
159.65.155.149 - - [18/Apr/2020:23:36:23 +0200] "GET /wp-login.php HTTP/1.1" 200 6463 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
159.65.155.149 - - [18/Apr/2020:23:36:25 +0200] "POST /wp-login.php HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
159.65.155.149 - - [18/Apr/2020:23:36:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-04-19 06:51:21
112.85.42.229 attackbotsspam
k+ssh-bruteforce
2020-04-19 06:51:48

最近上报的IP列表

79.23.133.172 188.165.219.26 190.96.172.101 216.170.114.14
103.194.184.74 115.216.58.183 168.228.151.4 8.208.9.38
92.255.195.228 84.201.170.135 116.68.160.114 191.234.162.22
112.238.141.40 5.160.91.146 121.21.93.146 103.219.112.43
77.233.21.244 122.102.27.33 103.232.154.169 178.128.19.237