2.135.255.52 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Kazakhstan

运营商(isp): JSC Kazakhtelecom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Honeypot attack, port: 445, PTR: 2.135.255.52.megaline.telecom.kz.	2020-01-28 07:34:13

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.135.255.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15353
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.135.255.52.			IN	A

;; AUTHORITY SECTION:
.			565	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012702 1800 900 604800 86400

;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 28 07:34:08 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

52.255.135.2.in-addr.arpa domain name pointer 2.135.255.52.megaline.telecom.kz.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
52.255.135.2.in-addr.arpa	name = 2.135.255.52.megaline.telecom.kz.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
140.246.229.195	attack	Dec 5 07:46:24 wh01 sshd[32161]: Invalid user santilenas from 140.246.229.195 port 57570 Dec 5 07:46:24 wh01 sshd[32161]: Failed password for invalid user santilenas from 140.246.229.195 port 57570 ssh2 Dec 5 07:46:25 wh01 sshd[32161]: Received disconnect from 140.246.229.195 port 57570:11: Bye Bye [preauth] Dec 5 07:46:25 wh01 sshd[32161]: Disconnected from 140.246.229.195 port 57570 [preauth] Dec 5 08:00:40 wh01 sshd[836]: Failed password for root from 140.246.229.195 port 49146 ssh2 Dec 5 08:21:58 wh01 sshd[2659]: Invalid user girvin from 140.246.229.195 port 48114 Dec 5 08:21:58 wh01 sshd[2659]: Failed password for invalid user girvin from 140.246.229.195 port 48114 ssh2 Dec 5 08:21:58 wh01 sshd[2659]: Received disconnect from 140.246.229.195 port 48114:11: Bye Bye [preauth] Dec 5 08:21:58 wh01 sshd[2659]: Disconnected from 140.246.229.195 port 48114 [preauth] Dec 5 08:28:51 wh01 sshd[3194]: Invalid user test from 140.246.229.195 port 47764 Dec 5 08:28:51 wh01 sshd[3194]	2019-12-05 18:49:35
112.85.42.174	attackbotsspam	Dec 5 16:12:13 vibhu-HP-Z238-Microtower-Workstation sshd\[2357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174 user=root Dec 5 16:12:15 vibhu-HP-Z238-Microtower-Workstation sshd\[2357\]: Failed password for root from 112.85.42.174 port 8313 ssh2 Dec 5 16:12:31 vibhu-HP-Z238-Microtower-Workstation sshd\[2365\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174 user=root Dec 5 16:12:32 vibhu-HP-Z238-Microtower-Workstation sshd\[2365\]: Failed password for root from 112.85.42.174 port 40142 ssh2 Dec 5 16:12:51 vibhu-HP-Z238-Microtower-Workstation sshd\[2404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174 user=root ...	2019-12-05 18:48:06
166.62.92.37	attack	Portscan or hack attempt detected by psad/fwsnort	2019-12-05 19:04:48
159.65.171.113	attack	Dec 5 08:02:23 vtv3 sshd[3953]: Failed password for invalid user villalovos from 159.65.171.113 port 59222 ssh2 Dec 5 08:07:42 vtv3 sshd[6290]: Failed password for root from 159.65.171.113 port 42864 ssh2 Dec 5 08:18:05 vtv3 sshd[11087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.171.113 Dec 5 08:18:07 vtv3 sshd[11087]: Failed password for invalid user chance from 159.65.171.113 port 35250 ssh2 Dec 5 08:23:26 vtv3 sshd[13533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.171.113 Dec 5 08:33:59 vtv3 sshd[19140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.171.113 Dec 5 08:34:01 vtv3 sshd[19140]: Failed password for invalid user brevik from 159.65.171.113 port 37942 ssh2 Dec 5 08:39:15 vtv3 sshd[21448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.171.113 Dec 5 08:49:54 vtv3 sshd[26400]: pam_unix(ss	2019-12-05 18:54:10
218.92.0.193	attack	Dec 5 07:23:31 server sshd\[15090\]: Failed password for root from 218.92.0.193 port 62128 ssh2 Dec 5 14:10:31 server sshd\[32351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.193 user=root Dec 5 14:10:33 server sshd\[32351\]: Failed password for root from 218.92.0.193 port 45107 ssh2 Dec 5 14:10:37 server sshd\[32351\]: Failed password for root from 218.92.0.193 port 45107 ssh2 Dec 5 14:10:40 server sshd\[32351\]: Failed password for root from 218.92.0.193 port 45107 ssh2 ...	2019-12-05 19:16:01
195.58.123.109	attackbots	Dec 5 16:08:12 gw1 sshd[9938]: Failed password for root from 195.58.123.109 port 40788 ssh2 ...	2019-12-05 19:20:41
5.135.94.191	attackspam	Dec 5 00:58:06 kapalua sshd\[17207\]: Invalid user guest from 5.135.94.191 Dec 5 00:58:06 kapalua sshd\[17207\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip191.ip-5-135-94.eu Dec 5 00:58:08 kapalua sshd\[17207\]: Failed password for invalid user guest from 5.135.94.191 port 35994 ssh2 Dec 5 01:03:47 kapalua sshd\[17845\]: Invalid user test from 5.135.94.191 Dec 5 01:03:47 kapalua sshd\[17845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip191.ip-5-135-94.eu	2019-12-05 19:14:25
63.143.204.212	attackbotsspam	TCP Port Scanning	2019-12-05 19:19:14
94.191.41.77	attack	Dec 5 07:12:25 sshd: Connection from 94.191.41.77 port 55874 Dec 5 07:12:27 sshd: Invalid user ssh from 94.191.41.77 Dec 5 07:12:27 sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.41.77 Dec 5 07:12:28 sshd: Failed password for invalid user ssh from 94.191.41.77 port 55874 ssh2 Dec 5 07:12:29 sshd: Received disconnect from 94.191.41.77: 11: Bye Bye [preauth]	2019-12-05 19:18:42
202.189.224.58	attack	Unauthorised access (Dec 5) SRC=202.189.224.58 LEN=52 TTL=109 ID=26004 DF TCP DPT=445 WINDOW=8192 SYN	2019-12-05 18:51:17
180.111.132.101	attack	Dec 5 11:56:28 vps647732 sshd[5109]: Failed password for root from 180.111.132.101 port 20241 ssh2 Dec 5 12:04:15 vps647732 sshd[5324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.111.132.101 ...	2019-12-05 19:21:02
114.5.128.174	attackspambots	Unauthorised access (Dec 5) SRC=114.5.128.174 LEN=52 TTL=116 ID=23669 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Dec 5) SRC=114.5.128.174 LEN=52 TTL=116 ID=1403 DF TCP DPT=445 WINDOW=8192 SYN	2019-12-05 18:57:26
37.59.98.64	attackbotsspam	2019-12-05T10:37:15.019394abusebot-8.cloudsearch.cf sshd\[3875\]: Invalid user http from 37.59.98.64 port 34080	2019-12-05 19:09:18
63.81.87.156	attackspambots	Dec 5 07:27:11 smtp postfix/smtpd[63394]: NOQUEUE: reject: RCPT from wren.jcnovel.com[63.81.87.156]: 554 5.7.1 Service unavailable; Client host [63.81.87.156] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= ...	2019-12-05 19:18:00
5.249.145.245	attackspambots	Dec 5 11:21:37 ns381471 sshd[29284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.249.145.245 Dec 5 11:21:39 ns381471 sshd[29284]: Failed password for invalid user pi from 5.249.145.245 port 53653 ssh2	2019-12-05 18:55:23

最近上报的IP列表

125.214.49.226	112.118.211.8	185.84.35.110	91.148.74.103
104.93.85.101	91.140.91.158	5.235.204.196	91.140.89.202
1.65.134.187	203.194.50.170	181.112.59.78	91.140.88.100
91.138.216.55	83.139.209.64	34.95.5.172	218.166.137.42
187.162.89.13	179.186.177.173	141.98.80.141	91.138.208.216