必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Sudan

运营商(isp): Sudatel

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Mobile ISP

用户上报:
类型 评论内容 时间
attack
Unauthorized connection attempt from IP address 196.202.139.6 on Port 445(SMB)
2020-08-18 23:39:42
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.202.139.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30411
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;196.202.139.6.			IN	A

;; AUTHORITY SECTION:
.			390	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081800 1800 900 604800 86400

;; Query time: 85 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 18 23:39:31 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 6.139.202.196.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 6.139.202.196.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
217.227.121.122 attackspambots
CloudCIX Reconnaissance Scan Detected, PTR: pD9E3797A.dip0.t-ipconnect.de.
2019-08-01 11:10:12
136.233.14.10 attackbots
Jul 31 20:37:18 andromeda postfix/smtpd\[38607\]: warning: unknown\[136.233.14.10\]: SASL CRAM-MD5 authentication failed: authentication failure
Jul 31 20:37:18 andromeda postfix/smtpd\[38607\]: warning: unknown\[136.233.14.10\]: SASL PLAIN authentication failed: authentication failure
Jul 31 20:37:19 andromeda postfix/smtpd\[38607\]: warning: unknown\[136.233.14.10\]: SASL LOGIN authentication failed: authentication failure
Jul 31 20:37:31 andromeda postfix/smtpd\[38607\]: warning: unknown\[136.233.14.10\]: SASL CRAM-MD5 authentication failed: authentication failure
Jul 31 20:37:31 andromeda postfix/smtpd\[38607\]: warning: unknown\[136.233.14.10\]: SASL PLAIN authentication failed: authentication failure
2019-08-01 10:49:05
139.211.60.255 attack
Honeypot attack, port: 23, PTR: 255.60.211.139.adsl-pool.jlccptt.net.cn.
2019-08-01 10:43:20
171.25.193.78 attackbots
Reported by AbuseIPDB proxy server.
2019-08-01 10:23:30
67.205.136.215 attackbots
Jul  9 16:29:13 server sshd\[202014\]: Invalid user nec from 67.205.136.215
Jul  9 16:29:13 server sshd\[202014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.136.215
Jul  9 16:29:15 server sshd\[202014\]: Failed password for invalid user nec from 67.205.136.215 port 44818 ssh2
...
2019-08-01 10:20:22
157.230.253.128 attackbots
Aug  1 04:22:24 django sshd[110994]: Invalid user carina from 157.230.253.128
Aug  1 04:22:24 django sshd[110994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.253.128 
Aug  1 04:22:27 django sshd[110994]: Failed password for invalid user carina from 157.230.253.128 port 43550 ssh2
Aug  1 04:22:27 django sshd[110995]: Received disconnect from 157.230.253.128: 11: Bye Bye
Aug  1 04:29:29 django sshd[111923]: Invalid user truman from 157.230.253.128
Aug  1 04:29:29 django sshd[111923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.253.128 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=157.230.253.128
2019-08-01 10:43:37
77.247.109.30 attack
firewall-block, port(s): 6465/tcp
2019-08-01 10:52:23
222.254.80.242 attack
Unauthorized connection attempt from IP address 222.254.80.242 on Port 445(SMB)
2019-08-01 11:12:21
188.93.235.226 attackspambots
Jul  6 04:38:43 dallas01 sshd[32334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.93.235.226
Jul  6 04:38:45 dallas01 sshd[32334]: Failed password for invalid user system from 188.93.235.226 port 56984 ssh2
Jul  6 04:42:43 dallas01 sshd[669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.93.235.226
Jul  6 04:42:45 dallas01 sshd[669]: Failed password for invalid user ingres from 188.93.235.226 port 50201 ssh2
2019-08-01 10:26:46
119.54.220.147 attack
Honeypot attack, port: 23, PTR: 147.220.54.119.adsl-pool.jlccptt.net.cn.
2019-08-01 10:27:36
41.213.216.242 attackspam
2019-08-01T02:18:54.638053abusebot-7.cloudsearch.cf sshd\[3358\]: Invalid user teste from 41.213.216.242 port 44756
2019-08-01 10:24:43
188.15.100.200 attack
Jul 31 20:38:01 icinga sshd[11343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.15.100.200
Jul 31 20:38:03 icinga sshd[11343]: Failed password for invalid user ibm from 188.15.100.200 port 58614 ssh2
...
2019-08-01 10:25:44
79.114.137.231 attackbots
CloudCIX Reconnaissance Scan Detected, PTR: 79-114-137-231.dynamic.brasov.rdsnet.ro.
2019-08-01 11:08:48
31.163.191.141 attackbots
Telnet Server BruteForce Attack
2019-08-01 10:21:20
46.61.35.104 attack
TCP port 445 (SMB) attempt blocked by firewall. [2019-07-31 20:30:54]
2019-08-01 11:13:32

最近上报的IP列表

185.82.219.109 94.102.50.171 35.171.192.80 217.39.202.227
235.219.85.166 47.223.251.249 113.176.188.210 173.219.72.14
122.146.89.210 142.165.85.127 161.35.58.35 202.47.40.33
175.214.186.146 54.7.50.12 103.145.13.213 84.22.157.119
95.178.243.116 190.98.51.109 121.145.20.12 125.128.137.85