189.94.138.64 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Brazil

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 189.94.138.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17332
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;189.94.138.64.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 01:00:01 CST 2025
;; MSG SIZE  rcvd: 106

HOST信息:

64.138.94.189.in-addr.arpa domain name pointer 189-94-138-64.3g.claro.net.br.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
64.138.94.189.in-addr.arpa	name = 189-94-138-64.3g.claro.net.br.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
139.59.59.90	attackbots	Mar 7 22:57:08 motanud sshd\[6281\]: Invalid user nagios from 139.59.59.90 port 10997 Mar 7 22:57:08 motanud sshd\[6281\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.59.90 Mar 7 22:57:10 motanud sshd\[6281\]: Failed password for invalid user nagios from 139.59.59.90 port 10997 ssh2	2019-08-11 01:20:02
196.22.215.6	attack	proto=tcp . spt=59494 . dpt=25 . (listed on Blocklist de Aug 09) (535)	2019-08-11 01:45:22
139.59.65.128	attackspambots	Dec 23 22:27:03 motanud sshd\[26662\]: Invalid user svn from 139.59.65.128 port 34136 Dec 23 22:27:03 motanud sshd\[26662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.65.128 Dec 23 22:27:06 motanud sshd\[26662\]: Failed password for invalid user svn from 139.59.65.128 port 34136 ssh2	2019-08-11 01:16:08
139.59.39.49	attackbotsspam	Jan 3 16:17:00 motanud sshd\[11110\]: Invalid user sandok from 139.59.39.49 port 41270 Jan 3 16:17:00 motanud sshd\[11110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.39.49 Jan 3 16:17:02 motanud sshd\[11110\]: Failed password for invalid user sandok from 139.59.39.49 port 41270 ssh2	2019-08-11 01:53:51
103.10.171.132	attackbotsspam	2019-08-10 07:16:44 H=(vmw132.transtech.co.id) [103.10.171.132]:34330 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/103.10.171.132) 2019-08-10 07:16:45 H=(vmw132.transtech.co.id) [103.10.171.132]:34330 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-08-10 07:16:45 H=(vmw132.transtech.co.id) [103.10.171.132]:34330 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-08-11 01:17:08
5.62.41.134	attack	\[2019-08-10 12:55:46\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '5.62.41.134:1076' - Wrong password \[2019-08-10 12:55:46\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-10T12:55:46.340-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="72412",SessionID="0x7ff4d07952f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.134/56313",Challenge="4edd5fb7",ReceivedChallenge="4edd5fb7",ReceivedHash="8fc5c148299409b25a7f71565a85f430" \[2019-08-10 12:56:27\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '5.62.41.134:1045' - Wrong password \[2019-08-10 12:56:27\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-10T12:56:27.702-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="29930",SessionID="0x7ff4d07e79a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.134/5	2019-08-11 00:59:52
156.222.132.250	attackbots	Aug 10 15:16:12 srv-4 sshd\[31932\]: Invalid user admin from 156.222.132.250 Aug 10 15:16:12 srv-4 sshd\[31932\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.222.132.250 Aug 10 15:16:15 srv-4 sshd\[31932\]: Failed password for invalid user admin from 156.222.132.250 port 58718 ssh2 ...	2019-08-11 01:44:22
185.53.88.41	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-08-11 01:31:37
80.14.177.6	attackspambots	Automatic report - Port Scan Attack	2019-08-11 01:01:59
185.53.88.35	attack	08/10/2019-11:24:54.103124 185.53.88.35 Protocol: 17 ET SCAN Sipvicious User-Agent Detected (friendly-scanner)	2019-08-11 01:34:21
131.100.76.217	attackbotsspam	Aug 10 14:13:31 xeon postfix/smtpd[40335]: warning: 217-76-100-131.internetcentral.com.br[131.100.76.217]: SASL PLAIN authentication failed: authentication failure	2019-08-11 01:40:34
111.59.92.70	attack	Aug 10 19:17:25 server2 sshd\[26113\]: User root from 111.59.92.70 not allowed because not listed in AllowUsers Aug 10 19:17:26 server2 sshd\[26114\]: User root from 111.59.92.70 not allowed because not listed in AllowUsers Aug 10 19:17:26 server2 sshd\[26112\]: User root from 111.59.92.70 not allowed because not listed in AllowUsers Aug 10 19:17:26 server2 sshd\[26115\]: User root from 111.59.92.70 not allowed because not listed in AllowUsers Aug 10 19:17:26 server2 sshd\[26120\]: User root from 111.59.92.70 not allowed because not listed in AllowUsers Aug 10 19:17:27 server2 sshd\[26122\]: Invalid user francisco.tosso from 111.59.92.70	2019-08-11 01:07:41
192.160.102.165	attackbotsspam	Aug 10 14:16:28 mail sshd\[15660\]: Invalid user leo from 192.160.102.165 Aug 10 14:16:28 mail sshd\[15660\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.160.102.165 Aug 10 14:16:30 mail sshd\[15660\]: Failed password for invalid user leo from 192.160.102.165 port 33885 ssh2	2019-08-11 01:31:09
189.44.178.170	attackbotsspam	2019-08-10 07:16:14 H=(189-44-178-170.customer.tdatabrasil.net.br) [189.44.178.170]:54383 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/189.44.178.170) 2019-08-10 07:16:14 H=(189-44-178-170.customer.tdatabrasil.net.br) [189.44.178.170]:54383 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/189.44.178.170) 2019-08-10 07:16:15 H=(189-44-178-170.customer.tdatabrasil.net.br) [189.44.178.170]:54383 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-08-11 01:47:23
51.15.209.128	attackbotsspam	Aug 10 08:15:38 vps200512 sshd\[14206\]: Invalid user ftp from 51.15.209.128 Aug 10 08:15:38 vps200512 sshd\[14206\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.209.128 Aug 10 08:15:40 vps200512 sshd\[14206\]: Failed password for invalid user ftp from 51.15.209.128 port 38546 ssh2 Aug 10 08:15:44 vps200512 sshd\[14208\]: Invalid user nexthink from 51.15.209.128 Aug 10 08:15:44 vps200512 sshd\[14208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.209.128	2019-08-11 01:46:56

最近上报的IP列表

157.106.123.22	231.202.82.60	143.181.167.49	152.70.217.3
27.102.18.231	227.249.158.169	137.130.216.124	70.138.78.96
212.209.77.101	163.89.207.96	185.71.195.223	72.150.209.47
190.3.64.168	247.207.114.223	150.165.72.106	51.231.81.153
77.23.193.34	171.42.135.230	218.188.113.102	65.82.180.151