必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Mexico

运营商(isp): Mega Cable S.A. de C.V.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackspambots
Unauthorized connection attempt from IP address 189.195.134.142 on Port 445(SMB)
2020-08-19 05:46:07
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 189.195.134.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 369
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;189.195.134.142.		IN	A

;; AUTHORITY SECTION:
.			2897	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042401 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Thu Apr 25 03:14:03 +08 2019
;; MSG SIZE  rcvd: 119

HOST信息:
142.134.195.189.in-addr.arpa domain name pointer customer-GDL-134-142.megared.net.mx.
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
142.134.195.189.in-addr.arpa	name = customer-GDL-134-142.megared.net.mx.

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
202.83.45.72 attackspam
[MK-Root1] Blocked by UFW
2020-09-29 02:02:09
78.142.57.108 attackspam
2020-09-27T23:47:21.628808server.mjenks.net sshd[3498691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.142.57.108  user=root
2020-09-27T23:47:23.811397server.mjenks.net sshd[3498691]: Failed password for root from 78.142.57.108 port 45446 ssh2
2020-09-27T23:48:30.961802server.mjenks.net sshd[3498808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.142.57.108  user=root
2020-09-27T23:48:32.617378server.mjenks.net sshd[3498808]: Failed password for root from 78.142.57.108 port 35772 ssh2
2020-09-27T23:49:39.544292server.mjenks.net sshd[3498928]: Invalid user lw from 78.142.57.108 port 54334
...
2020-09-29 01:57:03
106.53.20.226 attackspam
 TCP (SYN) 106.53.20.226:43341 -> port 28140, len 44
2020-09-29 01:30:34
190.210.60.4 attack
SSH login attempts.
2020-09-29 01:48:02
187.72.167.232 attackspambots
2020-09-28T20:29:38.993597lavrinenko.info sshd[10529]: Failed password for root from 187.72.167.232 port 32828 ssh2
2020-09-28T20:33:55.840269lavrinenko.info sshd[10670]: Invalid user joe from 187.72.167.232 port 50046
2020-09-28T20:33:55.849652lavrinenko.info sshd[10670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.167.232
2020-09-28T20:33:55.840269lavrinenko.info sshd[10670]: Invalid user joe from 187.72.167.232 port 50046
2020-09-28T20:33:57.875978lavrinenko.info sshd[10670]: Failed password for invalid user joe from 187.72.167.232 port 50046 ssh2
...
2020-09-29 01:49:58
36.74.64.36 attackspambots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-09-29 02:00:57
115.58.192.67 attack
SSH Bruteforce Attempt on Honeypot
2020-09-29 01:44:17
123.17.195.170 attackspambots
445/tcp 445/tcp
[2020-09-27]2pkt
2020-09-29 01:37:44
191.37.219.142 attack
445/tcp
[2020-09-27]1pkt
2020-09-29 01:54:36
118.40.248.20 attackbots
Sep 27 15:41:03 serwer sshd\[27117\]: Invalid user lucia from 118.40.248.20 port 42677
Sep 27 15:41:03 serwer sshd\[27117\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.40.248.20
Sep 27 15:41:06 serwer sshd\[27117\]: Failed password for invalid user lucia from 118.40.248.20 port 42677 ssh2
...
2020-09-29 01:34:50
106.12.208.211 attackbotsspam
(sshd) Failed SSH login from 106.12.208.211 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 28 13:27:52 server2 sshd[10834]: Invalid user git from 106.12.208.211
Sep 28 13:27:52 server2 sshd[10834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.208.211 
Sep 28 13:27:53 server2 sshd[10834]: Failed password for invalid user git from 106.12.208.211 port 47796 ssh2
Sep 28 13:35:17 server2 sshd[25064]: Invalid user info from 106.12.208.211
Sep 28 13:35:17 server2 sshd[25064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.208.211
2020-09-29 02:05:06
77.222.132.189 attackspambots
Invalid user node from 77.222.132.189 port 44384
2020-09-29 02:05:38
194.118.192.27 attack
Invalid user usertest from 194.118.192.27 port 39324
2020-09-29 01:55:06
36.22.223.26 attack
Sep 27 23:31:23 srv01 postfix/smtpd\[7140\]: warning: unknown\[36.22.223.26\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 27 23:34:51 srv01 postfix/smtpd\[7140\]: warning: unknown\[36.22.223.26\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 27 23:38:19 srv01 postfix/smtpd\[20915\]: warning: unknown\[36.22.223.26\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 27 23:41:47 srv01 postfix/smtpd\[20915\]: warning: unknown\[36.22.223.26\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 27 23:45:14 srv01 postfix/smtpd\[7140\]: warning: unknown\[36.22.223.26\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-09-29 01:57:51
51.77.66.35 attackbotsspam
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-28T15:28:56Z and 2020-09-28T17:21:59Z
2020-09-29 01:36:51

最近上报的IP列表

185.173.35.21 49.32.152.123 185.168.173.122 179.182.228.114
146.99.191.68 185.165.173.158 179.49.2.42 46.61.112.76
118.144.119.74 185.162.218.129 62.122.178.105 16.74.91.226
23.234.51.16 91.23.244.210 113.15.209.31 108.10.158.56
136.129.71.71 201.234.121.93 185.158.255.38 185.158.113.63