2.132.12.168 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Kazakhstan

运营商(isp): JSC Kazakhtelecom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorised access (Oct 31) SRC=2.132.12.168 LEN=44 TTL=53 ID=4019 TCP DPT=23 WINDOW=48843 SYN	2019-11-01 05:05:10

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.132.12.168
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54400
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.132.12.168.			IN	A

;; AUTHORITY SECTION:
.			592	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019103101 1800 900 604800 86400

;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 01 05:05:06 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

168.12.132.2.in-addr.arpa domain name pointer 2.132.12.168.megaline.telecom.kz.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
*** Can't find 168.12.132.2.in-addr.arpa.: No answer

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
43.242.116.11	attackbotsspam	Aug 19 14:18:16 hidden kernel: [113811.017332] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=43.242.116.11 DST=173.212.244.83 LEN=52 TOS=0x08 PREC=0x20 TTL=111 ID=32074 DF PROTO=TCP SPT=8229 DPT=7554 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 19 14:20:01 hidden kernel: [113916.015675] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=43.242.116.11 DST=173.212.244.83 LEN=48 TOS=0x08 PREC=0x20 TTL=110 ID=32079 PROTO=UDP SPT=7554 DPT=7554 LEN=28 Aug 19 14:20:16 hidden kernel: [113931.027326] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=43.242.116.11 DST=173.212.244.83 LEN=52 TOS=0x08 PREC=0x20 TTL=111 ID=32086 DF PROTO=TCP SPT=7617 DPT=7554 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 19 14:26:58 hidden kernel: [114333.019327] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=43.242.116.11 DST=173.212.244.83 LEN=52 TOS=0x08 PREC=0x20 TTL=111 ID=48324 DF PROTO=TCP SPT=7678 DPT=7554 WINDOW ...	2020-08-20 02:50:32
113.161.245.34	attack	Port Scan detected! ...	2020-08-20 02:28:03
157.230.153.203	attack	php WP PHPmyadamin ABUSE blocked for 12h	2020-08-20 02:44:55
49.51.160.139	attack	Aug 19 20:04:21 nextcloud sshd\[13546\]: Invalid user cnz from 49.51.160.139 Aug 19 20:04:21 nextcloud sshd\[13546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.160.139 Aug 19 20:04:24 nextcloud sshd\[13546\]: Failed password for invalid user cnz from 49.51.160.139 port 46272 ssh2	2020-08-20 02:35:29
113.124.93.105	attackbots	spam (f2b h2)	2020-08-20 02:24:05
200.40.45.82	attackbotsspam	Failed password for invalid user apple from 200.40.45.82 port 52356 ssh2	2020-08-20 02:44:33
82.83.202.163	attackspam	Port probing on unauthorized port 23	2020-08-20 02:33:52
103.195.6.57	attackspambots	SSH Brute Force	2020-08-20 02:58:41
127.0.0.1	attack	Test Connectivity	2020-08-20 02:32:05
50.197.54.18	attack	Aug 17 19:06:06 mail.srvfarm.net postfix/smtpd[2925888]: NOQUEUE: reject: RCPT from autodiscover.jhats.com[50.197.54.18]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Aug 17 19:09:37 mail.srvfarm.net postfix/smtpd[2927741]: NOQUEUE: reject: RCPT from autodiscover.jhats.com[50.197.54.18]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Aug 17 19:10:43 mail.srvfarm.net postfix/smtpd[2941487]: NOQUEUE: reject: RCPT from autodiscover.jhats.com[50.197.54.18]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Aug 17 19:11:48 mail.srvfarm.net postfix/smtpd[2940185]: NOQUEUE: reject: RCPT from autodiscover.jhats.com[50.197.54.18]: 450 4.7.1	2020-08-20 02:51:14
132.232.11.218	attackspambots	Aug 20 01:22:12 NG-HHDC-SVS-001 sshd[14076]: Invalid user ftp1 from 132.232.11.218 ...	2020-08-20 02:57:17
51.83.185.192	attackspam	SSH Brute-Force. Ports scanning.	2020-08-20 02:26:09
59.92.213.143	attackbots	Port Scan detected! ...	2020-08-20 02:47:26
68.183.203.30	attackbotsspam	TCP (SYN) 68.183.203.30:51933 -> port 29700, len 44	2020-08-20 02:54:13
2.51.236.99	attackbots	Port probing on unauthorized port 23	2020-08-20 02:59:22

最近上报的IP列表

68.17.50.73	167.32.74.219	213.87.227.135	11.22.24.209
77.170.28.91	159.127.111.98	5.41.191.91	52.39.19.208
15.4.64.252	32.240.146.138	187.163.191.131	75.122.112.189
107.74.62.24	142.32.108.72	90.73.125.80	113.140.194.163
233.168.91.158	107.215.150.75	24.232.124.74	19.121.6.139