213.136.74.140

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
213.136.74.238	attackspam	Apr 18 16:06:52 scw-6657dc sshd[5706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.136.74.238 user=git Apr 18 16:06:52 scw-6657dc sshd[5706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.136.74.238 user=git Apr 18 16:06:54 scw-6657dc sshd[5706]: Failed password for git from 213.136.74.238 port 51988 ssh2 ...	2020-04-19 00:51:48

类型

评论内容

时间

213.136.74.238

attackspam

Apr 18 16:06:52 scw-6657dc sshd[5706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.136.74.238  user=git
Apr 18 16:06:52 scw-6657dc sshd[5706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.136.74.238  user=git
Apr 18 16:06:54 scw-6657dc sshd[5706]: Failed password for git from 213.136.74.238 port 51988 ssh2
...

2020-04-19 00:51:48

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.136.74.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36044
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;213.136.74.140.			IN	A

;; AUTHORITY SECTION:
.			258	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 01:37:53 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

140.74.136.213.in-addr.arpa domain name pointer cpanel1.oaza.rs.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
140.74.136.213.in-addr.arpa	name = cpanel1.oaza.rs.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
23.129.64.182	attackspambots	bruteforce detected	2020-08-13 00:52:26
217.172.104.240	attackbotsspam	Aug1214:38:24server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=217.172.104.240DST=136.243.224.58LEN=40TOS=0x00PREC=0x00TTL=54ID=31390PROTO=TCPSPT=30118DPT=23WINDOW=4302RES=0x00SYNURGP=0Aug1214:38:28server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=217.172.104.240DST=136.243.224.58LEN=40TOS=0x00PREC=0x00TTL=54ID=31390PROTO=TCPSPT=30118DPT=23WINDOW=4302RES=0x00SYNURGP=0Aug1214:38:29server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=217.172.104.240DST=136.243.224.58LEN=40TOS=0x00PREC=0x00TTL=54ID=31390PROTO=TCPSPT=30118DPT=23WINDOW=4302RES=0x00SYNURGP=0Aug1214:38:31server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=217.172.104.240DST=136.243.224.58LEN=40TOS=0x00PREC=0x00TTL=54ID=31390PROTO=TCPSPT=30118DPT=23WINDOW=4302RES=0x00SYNURGP=0Aug1214:38:32server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:4	2020-08-13 00:42:30
114.32.145.159	attackspam	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-08-13 01:03:17
117.58.241.70	attackbots	Aug 12 18:42:27 server sshd[499]: Failed password for root from 117.58.241.70 port 60104 ssh2 Aug 12 18:48:47 server sshd[9129]: Failed password for root from 117.58.241.70 port 40940 ssh2 Aug 12 18:55:05 server sshd[17600]: Failed password for root from 117.58.241.70 port 50002 ssh2	2020-08-13 00:58:16
114.29.105.13	attack	TCP (SYN) 114.29.105.13:42961 -> port 81, len 44	2020-08-13 01:17:57
178.19.250.44	attackbotsspam	TCP (SYN) 178.19.250.44:50538 -> port 23, len 44	2020-08-13 01:13:53
36.92.1.31	attackspam	36.92.1.31 - - [12/Aug/2020:13:39:39 +0100] "POST /wp-login.php HTTP/1.1" 200 1861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 36.92.1.31 - - [12/Aug/2020:13:39:44 +0100] "POST /wp-login.php HTTP/1.1" 200 1839 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 36.92.1.31 - - [12/Aug/2020:13:39:45 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-13 00:48:58
66.78.4.219	attackbotsspam	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	2020-08-13 00:54:51
217.113.18.67	attack	TCP (SYN) 217.113.18.67:2621 -> port 1433, len 48	2020-08-13 01:07:14
107.175.46.17	attackbots	107.175.46.17 - - [12/Aug/2020:13:39:56 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 107.175.46.17 - - [12/Aug/2020:13:39:57 +0100] "POST /wp-login.php HTTP/1.1" 200 1860 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 107.175.46.17 - - [12/Aug/2020:13:39:58 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-13 00:39:41
189.235.49.124	attack	TCP (SYN) 189.235.49.124:59796 -> port 445, len 52	2020-08-13 01:10:38
185.230.127.239	attackbots	0,22-17/19 [bc10/m72] PostRequest-Spammer scoring: zurich	2020-08-13 00:44:53
222.186.175.154	attackbots	Aug 12 19:03:04 nextcloud sshd\[20514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.154 user=root Aug 12 19:03:06 nextcloud sshd\[20514\]: Failed password for root from 222.186.175.154 port 48670 ssh2 Aug 12 19:03:24 nextcloud sshd\[20713\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.154 user=root	2020-08-13 01:05:08
50.208.56.148	attack	Aug 12 09:08:38 Tower sshd[42169]: Connection from 50.208.56.148 port 51212 on 192.168.10.220 port 22 rdomain "" Aug 12 09:08:38 Tower sshd[42169]: Failed password for root from 50.208.56.148 port 51212 ssh2 Aug 12 09:08:38 Tower sshd[42169]: Received disconnect from 50.208.56.148 port 51212:11: Bye Bye [preauth] Aug 12 09:08:38 Tower sshd[42169]: Disconnected from authenticating user root 50.208.56.148 port 51212 [preauth]	2020-08-13 00:57:05
67.219.23.161	attackbotsspam	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	2020-08-13 00:56:35

最近上报的IP列表

213.136.74.129	213.136.74.70	213.136.74.218	213.136.76.164
213.136.68.28	213.136.75.39	213.136.76.68	213.136.79.90
213.136.81.209	213.136.82.10	213.136.82.29	213.136.80.191
213.136.79.233	213.136.84.228	213.136.86.6	213.136.86.45
213.136.88.4	213.136.90.112	213.136.90.28	213.136.89.216