必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Candelaria

省份(region): Departamento del Valle del Cauca

国家(country): Colombia

运营商(isp): Telmex Colombia S.A.

主机名(hostname): unknown

机构(organization): Telmex Colombia S.A.

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Apr 18 13:13:32 ubuntu sshd[32018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.138.19
Apr 18 13:13:35 ubuntu sshd[32018]: Failed password for invalid user apps from 190.145.138.19 port 47708 ssh2
Apr 18 13:16:08 ubuntu sshd[32141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.138.19
Apr 18 13:16:09 ubuntu sshd[32141]: Failed password for invalid user Elvi from 190.145.138.19 port 45304 ssh2
2019-08-01 04:32:48
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 190.145.138.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16497
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;190.145.138.19.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040402 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri Apr 05 10:21:04 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:
Host 19.138.145.190.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 19.138.145.190.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
94.102.49.159 attackbotsspam
Aug  7 19:43:28 debian-2gb-nbg1-2 kernel: \[19080658.639238\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.49.159 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=45158 PROTO=TCP SPT=57709 DPT=16209 WINDOW=1024 RES=0x00 SYN URGP=0
2020-08-08 01:50:17
94.75.103.54 attack
Unauthorized connection attempt from IP address 94.75.103.54 on Port 445(SMB)
2020-08-08 02:08:50
14.207.146.233 attackspambots
Unauthorized connection attempt from IP address 14.207.146.233 on Port 445(SMB)
2020-08-08 01:58:03
147.135.211.127 attack
147.135.211.127 - - \[07/Aug/2020:16:14:27 +0200\] "POST /wp-login.php HTTP/1.0" 200 6906 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
147.135.211.127 - - \[07/Aug/2020:16:14:28 +0200\] "POST /wp-login.php HTTP/1.0" 200 6728 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
147.135.211.127 - - \[07/Aug/2020:16:14:29 +0200\] "POST /wp-login.php HTTP/1.0" 200 6722 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-08-08 01:55:42
129.204.147.84 attackbots
2020-08-07T13:53:47.409972amanda2.illicoweb.com sshd\[41808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.147.84  user=root
2020-08-07T13:53:48.915388amanda2.illicoweb.com sshd\[41808\]: Failed password for root from 129.204.147.84 port 45634 ssh2
2020-08-07T13:59:38.133544amanda2.illicoweb.com sshd\[42803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.147.84  user=root
2020-08-07T13:59:39.824767amanda2.illicoweb.com sshd\[42803\]: Failed password for root from 129.204.147.84 port 42146 ssh2
2020-08-07T14:02:31.147412amanda2.illicoweb.com sshd\[43353\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.147.84  user=root
...
2020-08-08 02:03:26
162.243.129.252 attack
ET SCAN Suspicious inbound to mySQL port 3306 - port: 3306 proto: tcp cat: Potentially Bad Trafficbytes: 60
2020-08-08 01:34:26
36.90.154.11 attackbotsspam
Unauthorized connection attempt from IP address 36.90.154.11 on Port 445(SMB)
2020-08-08 01:54:50
113.235.122.185 attackspam
Aug  7 17:17:07 cp sshd[22355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.235.122.185
Aug  7 17:17:07 cp sshd[22355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.235.122.185
2020-08-08 02:05:52
77.238.101.162 attack
Unauthorized connection attempt from IP address 77.238.101.162 on Port 445(SMB)
2020-08-08 01:56:34
124.43.9.184 attack
Aug  7 13:48:02 ovpn sshd\[13522\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.43.9.184  user=root
Aug  7 13:48:04 ovpn sshd\[13522\]: Failed password for root from 124.43.9.184 port 49540 ssh2
Aug  7 14:00:42 ovpn sshd\[18711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.43.9.184  user=root
Aug  7 14:00:44 ovpn sshd\[18711\]: Failed password for root from 124.43.9.184 port 48898 ssh2
Aug  7 14:02:39 ovpn sshd\[19555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.43.9.184  user=root
2020-08-08 01:56:10
187.16.96.35 attackbotsspam
2020-08-07T17:38:12.938900dmca.cloudsearch.cf sshd[22497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mvx-187-16-96-35.mundivox.com  user=root
2020-08-07T17:38:14.725057dmca.cloudsearch.cf sshd[22497]: Failed password for root from 187.16.96.35 port 56186 ssh2
2020-08-07T17:41:03.032275dmca.cloudsearch.cf sshd[22523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mvx-187-16-96-35.mundivox.com  user=root
2020-08-07T17:41:04.958798dmca.cloudsearch.cf sshd[22523]: Failed password for root from 187.16.96.35 port 39114 ssh2
2020-08-07T17:43:57.826688dmca.cloudsearch.cf sshd[22547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mvx-187-16-96-35.mundivox.com  user=root
2020-08-07T17:43:59.974142dmca.cloudsearch.cf sshd[22547]: Failed password for root from 187.16.96.35 port 50296 ssh2
2020-08-07T17:46:43.163429dmca.cloudsearch.cf sshd[22578]: pam_unix(sshd:auth): au
...
2020-08-08 02:08:03
94.100.6.21 attackspambots
Automatic report - XMLRPC Attack
2020-08-08 01:39:06
218.92.0.191 attack
Aug  7 19:36:09 dcd-gentoo sshd[15098]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups
Aug  7 19:36:13 dcd-gentoo sshd[15098]: error: PAM: Authentication failure for illegal user root from 218.92.0.191
Aug  7 19:36:13 dcd-gentoo sshd[15098]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 24417 ssh2
...
2020-08-08 01:36:34
110.167.20.47 attackbotsspam
1596801745 - 08/07/2020 14:02:25 Host: 110.167.20.47/110.167.20.47 Port: 445 TCP Blocked
2020-08-08 02:10:29
193.27.228.216 attack
Attempted to establish connection to non opened port 11611
2020-08-08 01:33:39

最近上报的IP列表

96.23.163.161 183.63.87.235 76.25.19.250 185.98.222.219
77.50.0.84 74.82.47.49 119.146.150.134 143.255.245.81
78.172.249.234 94.90.208.105 113.160.187.62 14.167.139.247
124.81.224.52 64.76.6.126 113.22.166.229 101.108.56.46
91.18.157.250 96.57.82.166 46.101.149.230 51.158.69.48