必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Tehran

省份(region): Ostan-e Tehran

国家(country): Iran

运营商(isp): Ravand Tazeh Co .Pjs.

主机名(hostname): unknown

机构(organization): Ravand Tazeh Co,.PJS.

使用类型(Usage Type): Commercial

用户上报:
类型 评论内容 时间
attack
Jul  8 20:46:17 pi sshd[9685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149 
Jul  8 20:46:18 pi sshd[9685]: Failed password for invalid user web from 164.138.23.149 port 55405 ssh2
2020-07-24 05:58:19
attackspam
Jul  6 15:37:25 lnxded63 sshd[6634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149
2020-07-06 21:47:57
attackbots
Jun 24 09:02:35 onepixel sshd[2004036]: Failed password for invalid user nuevo from 164.138.23.149 port 59358 ssh2
Jun 24 09:05:58 onepixel sshd[2006191]: Invalid user oracle from 164.138.23.149 port 56071
Jun 24 09:05:58 onepixel sshd[2006191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149 
Jun 24 09:05:58 onepixel sshd[2006191]: Invalid user oracle from 164.138.23.149 port 56071
Jun 24 09:06:00 onepixel sshd[2006191]: Failed password for invalid user oracle from 164.138.23.149 port 56071 ssh2
2020-06-24 18:38:22
attackbots
Jun 16 00:12:30 cosmoit sshd[7176]: Failed password for root from 164.138.23.149 port 50506 ssh2
2020-06-16 08:43:56
attack
Jun 12 19:15:51 itv-usvr-01 sshd[30003]: Invalid user admin from 164.138.23.149
2020-06-12 20:24:35
attackbotsspam
2020-06-08T08:12:04.526569linuxbox-skyline sshd[223452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149  user=root
2020-06-08T08:12:06.154202linuxbox-skyline sshd[223452]: Failed password for root from 164.138.23.149 port 41854 ssh2
...
2020-06-09 00:15:24
attackbots
Brute force attempt
2020-06-05 04:27:59
attackbotsspam
(sshd) Failed SSH login from 164.138.23.149 (IR/Iran/-): 5 in the last 3600 secs
2020-06-03 16:49:16
attackbotsspam
Jun  2 03:51:21 *** sshd[29290]: User root from 164.138.23.149 not allowed because not listed in AllowUsers
2020-06-02 15:22:02
attackbotsspam
May 31 23:42:41 abendstille sshd\[12409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149  user=root
May 31 23:42:43 abendstille sshd\[12409\]: Failed password for root from 164.138.23.149 port 51538 ssh2
May 31 23:45:30 abendstille sshd\[15281\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149  user=root
May 31 23:45:32 abendstille sshd\[15281\]: Failed password for root from 164.138.23.149 port 44071 ssh2
May 31 23:48:14 abendstille sshd\[18098\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149  user=root
...
2020-06-01 05:56:27
attackbotsspam
May 28 07:17:10 vmd17057 sshd[28648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149 
May 28 07:17:13 vmd17057 sshd[28648]: Failed password for invalid user svn from 164.138.23.149 port 43569 ssh2
...
2020-05-28 17:29:20
attackspam
Failed password for root from 164.138.23.149 port 41959 ssh2
Invalid user samba from 164.138.23.149 port 51025
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149
Invalid user samba from 164.138.23.149 port 51025
Failed password for invalid user samba from 164.138.23.149 port 51025 ssh2
2020-05-28 07:42:29
attack
2020-05-24 20:33:39 server sshd[13040]: Failed password for invalid user admin from 164.138.23.149 port 56737 ssh2
2020-05-26 02:38:35
attackbots
SSH login attempts.
2020-05-24 19:06:33
attackbotsspam
Invalid user kgp from 164.138.23.149 port 56826
2020-05-23 14:57:53
attackspam
May  8 06:14:09 inter-technics sshd[6870]: Invalid user nils from 164.138.23.149 port 37391
May  8 06:14:09 inter-technics sshd[6870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.138.23.149
May  8 06:14:09 inter-technics sshd[6870]: Invalid user nils from 164.138.23.149 port 37391
May  8 06:14:11 inter-technics sshd[6870]: Failed password for invalid user nils from 164.138.23.149 port 37391 ssh2
May  8 06:17:40 inter-technics sshd[7199]: Invalid user wcj from 164.138.23.149 port 37269
...
2020-05-08 19:58:10
相同子网IP讨论:
IP 类型 评论内容 时间
164.138.236.227 attack
Sending SPAM email
2020-04-05 10:33:04
164.138.236.227 attack
spam
2020-01-22 16:22:40
164.138.236.227 attackspambots
2020-01-17 07:02:51 H=(164.138.236.227.asas.net) [164.138.236.227]:55366 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/164.138.236.227)
2020-01-17 07:02:51 H=(164.138.236.227.asas.net) [164.138.236.227]:55366 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
2020-01-17 07:02:52 H=(164.138.236.227.asas.net) [164.138.236.227]:55366 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
...
2020-01-17 22:58:05
164.138.236.227 attackbotsspam
postfix (unknown user, SPF fail or relay access denied)
2019-10-19 13:07:39
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.138.23.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49904
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;164.138.23.149.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042500 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Thu Apr 25 21:51:24 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:
Host 149.23.138.164.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 149.23.138.164.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
62.28.203.66 attackbots
[MK-VM3] Blocked by UFW
2020-05-17 02:52:06
51.178.27.237 attackbots
May 16 15:16:14 server sshd[36153]: Failed password for invalid user backups from 51.178.27.237 port 60526 ssh2
May 16 15:22:46 server sshd[41910]: Failed password for invalid user lzj from 51.178.27.237 port 38462 ssh2
May 16 15:29:37 server sshd[46936]: Failed password for invalid user debian from 51.178.27.237 port 44636 ssh2
2020-05-17 02:36:50
218.92.0.175 attack
sshd jail - ssh hack attempt
2020-05-17 02:45:57
37.187.12.126 attack
May 16 16:43:16 ip-172-31-62-245 sshd\[8877\]: Invalid user hadoop from 37.187.12.126\
May 16 16:43:18 ip-172-31-62-245 sshd\[8877\]: Failed password for invalid user hadoop from 37.187.12.126 port 48086 ssh2\
May 16 16:45:45 ip-172-31-62-245 sshd\[8944\]: Invalid user user5 from 37.187.12.126\
May 16 16:45:47 ip-172-31-62-245 sshd\[8944\]: Failed password for invalid user user5 from 37.187.12.126 port 35124 ssh2\
May 16 16:48:18 ip-172-31-62-245 sshd\[8983\]: Invalid user beny from 37.187.12.126\
2020-05-17 03:00:18
49.232.48.129 attack
May 16 19:38:28 vps639187 sshd\[24946\]: Invalid user sharon from 49.232.48.129 port 33088
May 16 19:38:28 vps639187 sshd\[24946\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.48.129
May 16 19:38:30 vps639187 sshd\[24946\]: Failed password for invalid user sharon from 49.232.48.129 port 33088 ssh2
...
2020-05-17 02:55:28
99.90.6.164 attackspambots
Invalid user admin from 99.90.6.164 port 34612
2020-05-17 02:24:59
124.235.118.14 attackspam
 TCP (SYN) 124.235.118.14:54996 -> port 6379, len 44
2020-05-17 02:32:34
220.124.169.201 attackspam
Unauthorized connection attempt detected from IP address 220.124.169.201 to port 23
2020-05-17 02:30:14
139.217.227.32 attackbotsspam
$f2bV_matches
2020-05-17 02:56:21
96.84.240.89 attack
*Port Scan* detected from 96.84.240.89 (US/United States/Colorado/Boulder/96-84-240-89-static.hfc.comcastbusiness.net). 4 hits in the last 30 seconds
2020-05-17 02:40:26
165.169.241.28 attack
May 16 16:04:53 piServer sshd[22294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.169.241.28 
May 16 16:04:55 piServer sshd[22294]: Failed password for invalid user elmer from 165.169.241.28 port 36378 ssh2
May 16 16:09:26 piServer sshd[22676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.169.241.28 
...
2020-05-17 03:03:48
14.29.215.5 attackspam
May 16 17:27:43 ip-172-31-62-245 sshd\[9528\]: Invalid user zte from 14.29.215.5\
May 16 17:27:45 ip-172-31-62-245 sshd\[9528\]: Failed password for invalid user zte from 14.29.215.5 port 37236 ssh2\
May 16 17:29:53 ip-172-31-62-245 sshd\[9545\]: Invalid user campo from 14.29.215.5\
May 16 17:29:55 ip-172-31-62-245 sshd\[9545\]: Failed password for invalid user campo from 14.29.215.5 port 47309 ssh2\
May 16 17:31:59 ip-172-31-62-245 sshd\[9555\]: Invalid user guest from 14.29.215.5\
2020-05-17 02:38:32
61.154.174.54 attackspambots
$f2bV_matches
2020-05-17 02:21:56
68.183.43.150 attackbotsspam
68.183.43.150 - - [16/May/2020:18:21:30 +0200] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
68.183.43.150 - - [16/May/2020:18:21:32 +0200] "POST /wp-login.php HTTP/1.1" 200 5953 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
68.183.43.150 - - [16/May/2020:18:21:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-05-17 02:49:59
106.13.81.181 attackbots
May 16 17:13:20 ns382633 sshd\[21163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.81.181  user=root
May 16 17:13:23 ns382633 sshd\[21163\]: Failed password for root from 106.13.81.181 port 47350 ssh2
May 16 17:22:04 ns382633 sshd\[22797\]: Invalid user csgo from 106.13.81.181 port 42044
May 16 17:22:04 ns382633 sshd\[22797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.81.181
May 16 17:22:06 ns382633 sshd\[22797\]: Failed password for invalid user csgo from 106.13.81.181 port 42044 ssh2
2020-05-17 02:16:55

最近上报的IP列表

84.2.228.152 32.47.242.140 89.162.143.170 212.26.247.7
13.225.168.90 1.46.237.12 183.35.60.162 217.189.190.172
162.244.83.249 46.42.145.184 177.204.87.87 23.88.224.179
160.212.232.250 31.150.172.238 14.248.111.99 118.220.158.234
95.173.163.140 66.10.198.193 145.58.9.97 57.144.241.250