2.134.3.229 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
2.134.32.134	attackspambots	2019-10-23 19:56:55 1iNKsQ-000421-Qp SMTP connection from \(2.134.32.134.megaline.telecom.kz\) \[2.134.32.134\]:19700 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-10-23 19:57:02 1iNKsX-00042A-CO SMTP connection from \(2.134.32.134.megaline.telecom.kz\) \[2.134.32.134\]:19756 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-10-23 19:57:07 1iNKsc-00042j-JG SMTP connection from \(2.134.32.134.megaline.telecom.kz\) \[2.134.32.134\]:19784 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-01-30 02:09:42
2.134.37.244	attack	CloudCIX Reconnaissance Scan Detected, PTR: 2.134.37.244.megaline.telecom.kz.	2019-12-30 23:14:10

类型

评论内容

时间

2.134.32.134

attackspambots

2019-10-23 19:56:55 1iNKsQ-000421-Qp SMTP connection from \(2.134.32.134.megaline.telecom.kz\) \[2.134.32.134\]:19700 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-10-23 19:57:02 1iNKsX-00042A-CO SMTP connection from \(2.134.32.134.megaline.telecom.kz\) \[2.134.32.134\]:19756 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-10-23 19:57:07 1iNKsc-00042j-JG SMTP connection from \(2.134.32.134.megaline.telecom.kz\) \[2.134.32.134\]:19784 I=\[193.107.88.166\]:25 closed by DROP in ACL
...

2020-01-30 02:09:42

2.134.37.244

attack

CloudCIX Reconnaissance Scan Detected, PTR: 2.134.37.244.megaline.telecom.kz.

2019-12-30 23:14:10

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.134.3.229
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25802
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;2.134.3.229.			IN	A

;; AUTHORITY SECTION:
.			393	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 05:23:10 CST 2022
;; MSG SIZE  rcvd: 104

HOST信息:

229.3.134.2.in-addr.arpa domain name pointer 2.134.3.229.megaline.telecom.kz.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
229.3.134.2.in-addr.arpa	name = 2.134.3.229.megaline.telecom.kz.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
114.67.93.108	attackbotsspam	Mar 13 06:10:39 meumeu sshd[8746]: Failed password for root from 114.67.93.108 port 50720 ssh2 Mar 13 06:14:35 meumeu sshd[9219]: Failed password for root from 114.67.93.108 port 41634 ssh2 ...	2020-03-13 16:31:09
104.248.35.239	attackbotsspam	Invalid user ts3server from 104.248.35.239 port 49282	2020-03-13 16:54:36
112.164.3.186	attack	Port probing on unauthorized port 82	2020-03-13 16:41:53
139.199.74.92	attack	Mar 13 10:49:56 webhost01 sshd[25128]: Failed password for root from 139.199.74.92 port 41212 ssh2 ...	2020-03-13 16:51:34
162.243.128.119	attackspambots	Unauthorized connection attempt detected from IP address 162.243.128.119 to port 995 [T]	2020-03-13 16:59:25
106.13.149.221	attackspambots	k+ssh-bruteforce	2020-03-13 16:46:09
185.147.215.8	attackbotsspam	[2020-03-13 03:57:33] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.147.215.8:62930' - Wrong password [2020-03-13 03:57:33] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-13T03:57:33.306-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6430",SessionID="0x7fd82c3f03d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/62930",Challenge="600725e7",ReceivedChallenge="600725e7",ReceivedHash="22415d28867bafb90b0aec67646144a7" [2020-03-13 03:57:55] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.147.215.8:55214' - Wrong password [2020-03-13 03:57:55] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-13T03:57:55.756-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8760",SessionID="0x7fd82ca712e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8 ...	2020-03-13 16:13:11
182.160.33.60	attackbotsspam	Mar 13 04:51:29 debian-2gb-nbg1-2 kernel: \[6330624.415079\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=182.160.33.60 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=62633 DF PROTO=TCP SPT=23594 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0	2020-03-13 16:54:15
51.132.9.95	attack	0,22-03/02 [bc28/m79] PostRequest-Spammer scoring: brussels	2020-03-13 16:57:40
217.112.142.108	attackbotsspam	Mar 13 04:36:12 mail.srvfarm.net postfix/smtpd[2272686]: NOQUEUE: reject: RCPT from unknown[217.112.142.108]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 13 04:36:15 mail.srvfarm.net postfix/smtpd[2258439]: NOQUEUE: reject: RCPT from unknown[217.112.142.108]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 13 04:36:15 mail.srvfarm.net postfix/smtpd[2272688]: NOQUEUE: reject: RCPT from unknown[217.112.142.108]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 13 04:36:15 mail.srvfarm.net postfix/smtpd[2270462]: NOQUEUE: reject: RCPT from unknown[217.112.142.108]: 450 4	2020-03-13 16:33:27
106.75.174.87	attackbotsspam	Invalid user big from 106.75.174.87 port 57126	2020-03-13 16:18:52
193.91.74.109	attackspambots	Automatic report - Port Scan Attack	2020-03-13 17:01:20
93.174.93.171	attackspam	Mar 13 05:58:07 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=93.174.93.171, lip=192.168.100.101, session=\\ Mar 13 05:59:39 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 3 secs\): user=\, method=PLAIN, rip=93.174.93.171, lip=192.168.100.101, session=\\ Mar 13 06:31:12 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=93.174.93.171, lip=192.168.100.101, session=\<4qXwxrWgxABdrl2r\>\ Mar 13 06:39:48 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=93.174.93.171, lip=192.168.100.101, session=\<0r205bWg3gBdrl2r\>\ Mar 13 06:51:32 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=93.174.93.171, lip=192.168.100.101, session=\	2020-03-13 16:24:44
62.234.68.215	attackbotsspam	Mar 12 12:40:50 server sshd\[8043\]: Failed password for root from 62.234.68.215 port 57813 ssh2 Mar 13 10:41:20 server sshd\[12616\]: Invalid user staff from 62.234.68.215 Mar 13 10:41:20 server sshd\[12616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.68.215 Mar 13 10:41:22 server sshd\[12616\]: Failed password for invalid user staff from 62.234.68.215 port 38906 ssh2 Mar 13 10:47:32 server sshd\[13714\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.68.215 user=root ...	2020-03-13 16:22:55
104.139.74.25	attackspam	IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.	2020-03-13 16:40:25

最近上报的IP列表

119.130.155.203	36.106.167.27	177.67.4.131	43.224.117.182
203.210.157.80	182.132.65.254	14.143.111.106	120.57.214.115
2.32.19.247	111.173.231.127	104.208.68.180	39.153.201.26
190.156.50.123	78.38.50.251	121.41.3.186	219.155.187.87
123.113.81.124	186.148.194.142	31.57.12.80	194.219.51.4