必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Tehran

省份(region): Ostan-e Tehran

国家(country): Iran

运营商(isp): Ravand Tazeh Co .Pjs.

主机名(hostname): unknown

机构(organization): Ravand Tazeh Co,.PJS.

使用类型(Usage Type): Commercial

用户上报:
类型 评论内容 时间
attack
Jul  8 20:46:17 pi sshd[9685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149 
Jul  8 20:46:18 pi sshd[9685]: Failed password for invalid user web from 164.138.23.149 port 55405 ssh2
2020-07-24 05:58:19
attackspam
Jul  6 15:37:25 lnxded63 sshd[6634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149
2020-07-06 21:47:57
attackbots
Jun 24 09:02:35 onepixel sshd[2004036]: Failed password for invalid user nuevo from 164.138.23.149 port 59358 ssh2
Jun 24 09:05:58 onepixel sshd[2006191]: Invalid user oracle from 164.138.23.149 port 56071
Jun 24 09:05:58 onepixel sshd[2006191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149 
Jun 24 09:05:58 onepixel sshd[2006191]: Invalid user oracle from 164.138.23.149 port 56071
Jun 24 09:06:00 onepixel sshd[2006191]: Failed password for invalid user oracle from 164.138.23.149 port 56071 ssh2
2020-06-24 18:38:22
attackbots
Jun 16 00:12:30 cosmoit sshd[7176]: Failed password for root from 164.138.23.149 port 50506 ssh2
2020-06-16 08:43:56
attack
Jun 12 19:15:51 itv-usvr-01 sshd[30003]: Invalid user admin from 164.138.23.149
2020-06-12 20:24:35
attackbotsspam
2020-06-08T08:12:04.526569linuxbox-skyline sshd[223452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149  user=root
2020-06-08T08:12:06.154202linuxbox-skyline sshd[223452]: Failed password for root from 164.138.23.149 port 41854 ssh2
...
2020-06-09 00:15:24
attackbots
Brute force attempt
2020-06-05 04:27:59
attackbotsspam
(sshd) Failed SSH login from 164.138.23.149 (IR/Iran/-): 5 in the last 3600 secs
2020-06-03 16:49:16
attackbotsspam
Jun  2 03:51:21 *** sshd[29290]: User root from 164.138.23.149 not allowed because not listed in AllowUsers
2020-06-02 15:22:02
attackbotsspam
May 31 23:42:41 abendstille sshd\[12409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149  user=root
May 31 23:42:43 abendstille sshd\[12409\]: Failed password for root from 164.138.23.149 port 51538 ssh2
May 31 23:45:30 abendstille sshd\[15281\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149  user=root
May 31 23:45:32 abendstille sshd\[15281\]: Failed password for root from 164.138.23.149 port 44071 ssh2
May 31 23:48:14 abendstille sshd\[18098\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149  user=root
...
2020-06-01 05:56:27
attackbotsspam
May 28 07:17:10 vmd17057 sshd[28648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149 
May 28 07:17:13 vmd17057 sshd[28648]: Failed password for invalid user svn from 164.138.23.149 port 43569 ssh2
...
2020-05-28 17:29:20
attackspam
Failed password for root from 164.138.23.149 port 41959 ssh2
Invalid user samba from 164.138.23.149 port 51025
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149
Invalid user samba from 164.138.23.149 port 51025
Failed password for invalid user samba from 164.138.23.149 port 51025 ssh2
2020-05-28 07:42:29
attack
2020-05-24 20:33:39 server sshd[13040]: Failed password for invalid user admin from 164.138.23.149 port 56737 ssh2
2020-05-26 02:38:35
attackbots
SSH login attempts.
2020-05-24 19:06:33
attackbotsspam
Invalid user kgp from 164.138.23.149 port 56826
2020-05-23 14:57:53
attackspam
May  8 06:14:09 inter-technics sshd[6870]: Invalid user nils from 164.138.23.149 port 37391
May  8 06:14:09 inter-technics sshd[6870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149
May  8 06:14:09 inter-technics sshd[6870]: Invalid user nils from 164.138.23.149 port 37391
May  8 06:14:11 inter-technics sshd[6870]: Failed password for invalid user nils from 164.138.23.149 port 37391 ssh2
May  8 06:17:40 inter-technics sshd[7199]: Invalid user wcj from 164.138.23.149 port 37269
...
2020-05-08 19:58:10
相同子网IP讨论:
IP 类型 评论内容 时间
164.138.236.227 attack
Sending SPAM email
2020-04-05 10:33:04
164.138.236.227 attack
spam
2020-01-22 16:22:40
164.138.236.227 attackspambots
2020-01-17 07:02:51 H=(164.138.236.227.asas.net) [164.138.236.227]:55366 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/164.138.236.227)
2020-01-17 07:02:51 H=(164.138.236.227.asas.net) [164.138.236.227]:55366 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
2020-01-17 07:02:52 H=(164.138.236.227.asas.net) [164.138.236.227]:55366 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
...
2020-01-17 22:58:05
164.138.236.227 attackbotsspam
postfix (unknown user, SPF fail or relay access denied)
2019-10-19 13:07:39
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.138.23.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49904
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;164.138.23.149.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042500 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Thu Apr 25 21:51:24 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:
Host 149.23.138.164.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 149.23.138.164.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
222.186.15.28 attackbotsspam
Jul 20 07:59:30 aat-srv002 sshd[9311]: Failed password for root from 222.186.15.28 port 47501 ssh2
Jul 20 07:59:39 aat-srv002 sshd[9314]: Failed password for root from 222.186.15.28 port 17211 ssh2
Jul 20 07:59:51 aat-srv002 sshd[9316]: Failed password for root from 222.186.15.28 port 42646 ssh2
...
2019-07-20 21:07:44
123.207.78.83 attack
Jul 20 15:04:38 lnxweb61 sshd[28158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.78.83
2019-07-20 21:43:56
178.46.162.115 attackbots
SSH Bruteforce Attack
2019-07-20 21:00:26
91.217.78.155 attackbotsspam
[portscan] Port scan
2019-07-20 20:58:43
183.131.82.99 attackbots
2019-07-20T13:32:18.986420abusebot-7.cloudsearch.cf sshd\[29279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.131.82.99  user=root
2019-07-20 21:38:05
125.212.182.44 attackbotsspam
445/tcp 445/tcp
[2019-07-20]2pkt
2019-07-20 21:23:08
190.254.195.234 attackspambots
9527/tcp
[2019-07-20]1pkt
2019-07-20 21:43:12
131.221.107.24 attack
23/tcp
[2019-07-20]1pkt
2019-07-20 20:55:27
82.208.137.206 attackbots
445/tcp
[2019-07-20]1pkt
2019-07-20 21:20:54
193.112.223.243 attack
Auto reported by IDS
2019-07-20 21:33:43
178.73.203.4 attack
2019-07-20T08:58:56.467159MailD postfix/smtpd[20429]: warning: unknown[178.73.203.4]: SASL LOGIN authentication failed: authentication failure
2019-07-20T11:18:10.833863MailD postfix/smtpd[566]: warning: unknown[178.73.203.4]: SASL LOGIN authentication failed: authentication failure
2019-07-20T13:41:00.565050MailD postfix/smtpd[10224]: warning: unknown[178.73.203.4]: SASL LOGIN authentication failed: authentication failure
2019-07-20 21:40:25
37.75.97.211 attackspambots
9527/tcp
[2019-07-20]1pkt
2019-07-20 20:49:55
192.99.216.184 attack
Mar  2 06:38:23 vtv3 sshd\[17308\]: Invalid user ev from 192.99.216.184 port 34510
Mar  2 06:38:23 vtv3 sshd\[17308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.216.184
Mar  2 06:38:25 vtv3 sshd\[17308\]: Failed password for invalid user ev from 192.99.216.184 port 34510 ssh2
Mar  2 06:44:41 vtv3 sshd\[19313\]: Invalid user dr from 192.99.216.184 port 51897
Mar  2 06:44:41 vtv3 sshd\[19313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.216.184
Mar 10 06:27:55 vtv3 sshd\[5654\]: Invalid user ubuntu from 192.99.216.184 port 34284
Mar 10 06:27:55 vtv3 sshd\[5654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.216.184
Mar 10 06:27:57 vtv3 sshd\[5654\]: Failed password for invalid user ubuntu from 192.99.216.184 port 34284 ssh2
Mar 10 06:33:41 vtv3 sshd\[7923\]: Invalid user test1 from 192.99.216.184 port 49959
Mar 10 06:33:41 vtv3 sshd\[7923\]: pam_unix
2019-07-20 20:48:46
14.244.117.213 attackspambots
445/tcp
[2019-07-20]1pkt
2019-07-20 21:24:45
197.45.163.63 attack
Automatic report - Banned IP Access
2019-07-20 21:15:24

最近上报的IP列表

84.2.228.152 32.47.242.140 89.162.143.170 212.26.247.7
13.225.168.90 1.46.237.12 183.35.60.162 217.189.190.172
162.244.83.249 46.42.145.184 177.204.87.87 23.88.224.179
160.212.232.250 31.150.172.238 14.248.111.99 118.220.158.234
95.173.163.140 66.10.198.193 145.58.9.97 57.144.241.250