必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Ukraine

运营商(isp): Joint Ukrainan-German Enterprise Infocom LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Honeypot attack, port: 445, PTR: null-address.ukrpack.net.
2020-05-10 00:54:15
attackbots
Honeypot attack, port: 445, PTR: null-address.ukrpack.net.
2020-04-13 18:47:03
attackspam
Unauthorized connection attempt from IP address 212.1.67.138 on Port 445(SMB)
2020-01-23 13:08:51
attack
Trying to (more than 3 packets) bruteforce (not open) Samba/Microsoft-DS port 445
2019-11-09 04:45:35
attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-06 02:30:37,864 INFO [amun_request_handler] PortScan Detected on Port: 445 (212.1.67.138)
2019-09-06 18:22:14
attack
445/tcp 445/tcp 445/tcp...
[2019-07-11/29]4pkt,1pt.(tcp)
2019-07-30 19:14:36
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.1.67.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33467
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;212.1.67.138.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041200 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri Apr 12 16:39:31 +08 2019
;; MSG SIZE  rcvd: 116

HOST信息:
138.67.1.212.in-addr.arpa domain name pointer null-address.ukrpack.net.
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
138.67.1.212.in-addr.arpa	name = null-address.ukrpack.net.

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
36.89.121.234 attack
Unauthorized connection attempt from IP address 36.89.121.234 on Port 445(SMB)
2020-09-20 07:36:21
218.152.207.173 attack
Sep 18 20:01:08 roki-contabo sshd\[28922\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.152.207.173  user=root
Sep 18 20:01:10 roki-contabo sshd\[28922\]: Failed password for root from 218.152.207.173 port 41518 ssh2
Sep 19 02:09:48 roki-contabo sshd\[2871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.152.207.173  user=root
Sep 19 02:09:50 roki-contabo sshd\[2871\]: Failed password for root from 218.152.207.173 port 52456 ssh2
Sep 19 19:00:57 roki-contabo sshd\[28281\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.152.207.173  user=root
...
2020-09-20 07:25:43
112.85.42.173 attack
Sep 20 00:52:48 server sshd[55050]: Failed none for root from 112.85.42.173 port 47748 ssh2
Sep 20 00:52:51 server sshd[55050]: Failed password for root from 112.85.42.173 port 47748 ssh2
Sep 20 00:52:54 server sshd[55050]: Failed password for root from 112.85.42.173 port 47748 ssh2
2020-09-20 07:07:20
5.166.211.12 attack
Sep 19 11:01:08 sip sshd[18967]: Failed password for root from 5.166.211.12 port 53476 ssh2
Sep 19 11:01:09 sip sshd[18969]: Failed password for root from 5.166.211.12 port 54502 ssh2
2020-09-20 07:01:55
139.99.239.230 attack
Sep 20 00:48:31 eventyay sshd[26500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.239.230
Sep 20 00:48:32 eventyay sshd[26500]: Failed password for invalid user zabbix from 139.99.239.230 port 57474 ssh2
Sep 20 00:55:22 eventyay sshd[27408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.239.230
...
2020-09-20 07:04:51
134.209.35.77 attack
Found on   CINS badguys     / proto=6  .  srcport=54821  .  dstport=1102  .     (2299)
2020-09-20 07:20:46
92.50.230.252 attack
Unauthorized connection attempt from IP address 92.50.230.252 on Port 445(SMB)
2020-09-20 07:21:41
159.192.235.130 attackbotsspam
SSH Brute-Force Attack
2020-09-20 07:10:38
189.203.72.138 attackbotsspam
Sep 19 19:13:26 rocket sshd[26218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.203.72.138
Sep 19 19:13:28 rocket sshd[26218]: Failed password for invalid user ubuntu from 189.203.72.138 port 38410 ssh2
...
2020-09-20 07:31:40
77.43.251.200 attack
20/9/19@13:01:15: FAIL: Alarm-Telnet address from=77.43.251.200
...
2020-09-20 07:03:13
212.109.201.13 attackbotsspam
Unauthorized connection attempt from IP address 212.109.201.13 on Port 445(SMB)
2020-09-20 07:18:43
168.70.81.139 attack
Brute-force attempt banned
2020-09-20 07:14:09
129.211.10.111 attackspam
Sep 19 23:29:52 prod4 sshd\[9437\]: Invalid user www-data from 129.211.10.111
Sep 19 23:29:54 prod4 sshd\[9437\]: Failed password for invalid user www-data from 129.211.10.111 port 50866 ssh2
Sep 19 23:35:18 prod4 sshd\[11063\]: Failed password for root from 129.211.10.111 port 36850 ssh2
...
2020-09-20 07:23:30
153.19.218.233 attack
Unauthorized connection attempt from IP address 153.19.218.233 on Port 445(SMB)
2020-09-20 07:31:54
193.218.118.131 attackspambots
Sep 20 00:18:20 sigma sshd\[783\]: Invalid user admin from 193.218.118.131Sep 20 00:18:22 sigma sshd\[783\]: Failed password for invalid user admin from 193.218.118.131 port 42524 ssh2
...
2020-09-20 07:20:26

最近上报的IP列表

45.125.164.152 13.234.121.150 114.108.177.34 49.212.246.60
167.99.203.82 170.130.143.108 142.93.200.146 54.88.146.76
118.237.18.139 174.138.63.237 122.201.93.240 201.144.84.92
177.73.248.13 85.59.58.55 45.125.164.25 112.244.99.215
204.14.105.2 185.156.177.156 200.146.236.217 212.64.91.146