189.196.164.58

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Mexico

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 189.196.164.58
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21259
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;189.196.164.58.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022201 1800 900 604800 86400

;; Query time: 120 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 23 03:13:08 CST 2025
;; MSG SIZE  rcvd: 107

HOST信息:

58.164.196.189.in-addr.arpa domain name pointer customer-PVR-PUBLIC-CGN-164-58.megared.net.mx.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
58.164.196.189.in-addr.arpa	name = customer-PVR-PUBLIC-CGN-164-58.megared.net.mx.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
128.199.79.37	attackspambots	$f2bV_matches	2019-10-08 03:41:32
107.179.95.9	attackbots	2019-10-07T10:35:18.9361151495-001 sshd\[39599\]: Failed password for invalid user Parola@1234 from 107.179.95.9 port 44010 ssh2 2019-10-07T10:52:23.8040861495-001 sshd\[40827\]: Invalid user Immobilien123 from 107.179.95.9 port 57693 2019-10-07T10:52:23.8121221495-001 sshd\[40827\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.179.95.9 2019-10-07T10:52:26.1372811495-001 sshd\[40827\]: Failed password for invalid user Immobilien123 from 107.179.95.9 port 57693 ssh2 2019-10-07T11:00:50.9075081495-001 sshd\[41453\]: Invalid user P@SSWORD_123 from 107.179.95.9 port 50419 2019-10-07T11:00:50.9183651495-001 sshd\[41453\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.179.95.9 ...	2019-10-08 03:40:55
46.246.214.15	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/46.246.214.15/ GR - 1H : (106) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : GR NAME ASN : ASN1241 IP : 46.246.214.15 CIDR : 46.246.192.0/18 PREFIX COUNT : 137 UNIQUE IP COUNT : 604672 WYKRYTE ATAKI Z ASN1241 : 1H - 1 3H - 4 6H - 12 12H - 16 24H - 34 DateTime : 2019-10-07 13:35:14 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-08 03:53:54
159.203.201.154	attackspam	Port scan attempt detected by AWS-CCS, CTS, India	2019-10-08 03:39:35
39.45.0.224	attack	[Aegis] @ 2019-10-07 12:35:28 0100 -> A web attack returned code 200 (success).	2019-10-08 03:45:01
222.186.52.107	attackspambots	SSH Brute-Force reported by Fail2Ban	2019-10-08 03:40:00
117.139.166.203	attack	Oct 7 14:40:31 root sshd[25180]: Failed password for root from 117.139.166.203 port 61247 ssh2 Oct 7 14:45:22 root sshd[25263]: Failed password for root from 117.139.166.203 port 63504 ssh2 ...	2019-10-08 03:28:38
118.24.121.72	attackbotsspam	Oct 7 06:16:50 DNS-2 sshd[12209]: User r.r from 118.24.121.72 not allowed because not listed in AllowUsers Oct 7 06:16:50 DNS-2 sshd[12209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.121.72 user=r.r Oct 7 06:16:52 DNS-2 sshd[12209]: Failed password for invalid user r.r from 118.24.121.72 port 35548 ssh2 Oct 7 06:16:52 DNS-2 sshd[12209]: Received disconnect from 118.24.121.72 port 35548:11: Bye Bye [preauth] Oct 7 06:16:52 DNS-2 sshd[12209]: Disconnected from 118.24.121.72 port 35548 [preauth] Oct 7 06:37:58 DNS-2 sshd[13717]: User r.r from 118.24.121.72 not allowed because not listed in AllowUsers Oct 7 06:37:58 DNS-2 sshd[13717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.121.72 user=r.r Oct 7 06:38:00 DNS-2 sshd[13717]: Failed password for invalid user r.r from 118.24.121.72 port 46276 ssh2 Oct 7 06:38:01 DNS-2 sshd[13717]: Received disconnect from 118.2........ -------------------------------	2019-10-08 03:44:00
81.171.107.175	attackbotsspam	\[2019-10-07 15:29:02\] NOTICE\[1887\] chan_sip.c: Registration from '\' failed for '81.171.107.175:51231' - Wrong password \[2019-10-07 15:29:02\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-07T15:29:02.257-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5824",SessionID="0x7fc3ac76b1b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.107.175/51231",Challenge="03e842d7",ReceivedChallenge="03e842d7",ReceivedHash="f9a0658a2730d57a3f9704b8cfe483ec" \[2019-10-07 15:34:03\] NOTICE\[1887\] chan_sip.c: Registration from '\' failed for '81.171.107.175:55637' - Wrong password \[2019-10-07 15:34:03\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-07T15:34:03.295-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6712",SessionID="0x7fc3ac5226d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171	2019-10-08 03:37:21
94.125.61.225	attackbots	Oct 7 14:36:27 h2177944 kernel: \[3327891.061362\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.225 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=58 ID=5840 DF PROTO=TCP SPT=49671 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 7 14:51:27 h2177944 kernel: \[3328791.497495\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.225 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=61 ID=39032 DF PROTO=TCP SPT=64820 DPT=465 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 7 15:10:32 h2177944 kernel: \[3329935.760445\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.225 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=54 ID=50437 DF PROTO=TCP SPT=55299 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 7 15:11:26 h2177944 kernel: \[3329990.147351\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.225 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=73 ID=59956 DF PROTO=TCP SPT=57170 DPT=465 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 7 15:14:52 h2177944 kernel: \[3330196.068463\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.225 DST=85.214	2019-10-08 03:36:03
188.2.115.147	attack	2019-10-07T07:16:03.8924301495-001 sshd\[25038\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cable-188-2-115-147.dynamic.sbb.rs 2019-10-07T07:16:06.6211311495-001 sshd\[25038\]: Failed password for invalid user ts2 from 188.2.115.147 port 42084 ssh2 2019-10-07T07:26:21.2029691495-001 sshd\[25821\]: Invalid user tucker from 188.2.115.147 port 34708 2019-10-07T07:26:21.2061391495-001 sshd\[25821\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cable-188-2-115-147.dynamic.sbb.rs 2019-10-07T07:26:22.7754681495-001 sshd\[25821\]: Failed password for invalid user tucker from 188.2.115.147 port 34708 ssh2 2019-10-07T07:26:38.8168621495-001 sshd\[25839\]: Invalid user admin from 188.2.115.147 port 36856 ...	2019-10-08 03:36:29
222.186.175.150	attackbots	Oct 7 21:40:45 nextcloud sshd\[5843\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root Oct 7 21:40:46 nextcloud sshd\[5843\]: Failed password for root from 222.186.175.150 port 6098 ssh2 Oct 7 21:40:51 nextcloud sshd\[5843\]: Failed password for root from 222.186.175.150 port 6098 ssh2 ...	2019-10-08 03:42:38
106.12.27.11	attack	Automatic report - SSH Brute-Force Attack	2019-10-08 03:10:26
129.213.117.53	attackspam	$f2bV_matches	2019-10-08 03:47:10
134.209.11.199	attackspam	Oct 7 19:59:03 MK-Soft-VM3 sshd[14682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.11.199 Oct 7 19:59:05 MK-Soft-VM3 sshd[14682]: Failed password for invalid user Cream@2017 from 134.209.11.199 port 32832 ssh2 ...	2019-10-08 03:08:56

最近上报的IP列表

32.49.136.161	93.121.243.106	187.150.195.175	92.146.154.59
64.149.19.198	253.80.209.190	29.189.37.28	97.86.240.53
22.202.224.122	34.124.162.130	248.193.67.170	174.60.105.233
107.156.224.101	185.40.215.50	35.190.169.7	115.241.45.195
130.43.6.164	144.61.226.18	163.35.63.161	6.227.241.228