必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Kyrgyzstan

运营商(isp): OJSC Kyrgyztelecom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackbots
Unauthorized connection attempt detected from IP address 213.145.136.20 to port 5900
2020-06-23 02:31:38
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.145.136.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27180
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;213.145.136.20.			IN	A

;; AUTHORITY SECTION:
.			121	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062201 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 23 02:31:24 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
20.136.145.213.in-addr.arpa domain name pointer 213-145-136-20.static.ktnet.kg.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
20.136.145.213.in-addr.arpa	name = 213-145-136-20.static.ktnet.kg.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
149.202.48.58 attackbotsspam
[Mon May 11 11:49:37.094816 2020] [php7:error] [pid 85773] [client 149.202.48.58:63504] script /Library/Server/Web/Data/Sites/customvisuals.com/wp-login.php not found or unable to stat, referer: http://mail.ronpapkeqcc.com/wp-login.php
2020-05-12 02:23:49
27.22.62.213 attackspambots
May 11 07:55:27 esmtp postfix/smtpd[3732]: lost connection after AUTH from unknown[27.22.62.213]
May 11 07:55:35 esmtp postfix/smtpd[3732]: lost connection after AUTH from unknown[27.22.62.213]
May 11 07:55:41 esmtp postfix/smtpd[3732]: lost connection after AUTH from unknown[27.22.62.213]
May 11 07:55:49 esmtp postfix/smtpd[3732]: lost connection after AUTH from unknown[27.22.62.213]
May 11 07:55:50 esmtp postfix/smtpd[3787]: lost connection after AUTH from unknown[27.22.62.213]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=27.22.62.213
2020-05-12 02:12:28
1.71.129.108 attackspambots
May 11 16:09:39 legacy sshd[26219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.71.129.108
May 11 16:09:41 legacy sshd[26219]: Failed password for invalid user ubuntu from 1.71.129.108 port 48950 ssh2
May 11 16:14:53 legacy sshd[26454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.71.129.108
...
2020-05-12 02:14:49
121.201.74.107 attackbots
May 11 19:22:51 ns392434 sshd[15072]: Invalid user user from 121.201.74.107 port 41996
May 11 19:22:51 ns392434 sshd[15072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.201.74.107
May 11 19:22:51 ns392434 sshd[15072]: Invalid user user from 121.201.74.107 port 41996
May 11 19:22:52 ns392434 sshd[15072]: Failed password for invalid user user from 121.201.74.107 port 41996 ssh2
May 11 19:39:24 ns392434 sshd[15560]: Invalid user test from 121.201.74.107 port 43464
May 11 19:39:24 ns392434 sshd[15560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.201.74.107
May 11 19:39:24 ns392434 sshd[15560]: Invalid user test from 121.201.74.107 port 43464
May 11 19:39:26 ns392434 sshd[15560]: Failed password for invalid user test from 121.201.74.107 port 43464 ssh2
May 11 19:42:22 ns392434 sshd[15616]: Invalid user postgres from 121.201.74.107 port 47294
2020-05-12 02:09:45
123.31.32.150 attack
SSH brute-force attempt
2020-05-12 01:45:52
211.144.69.249 attackspam
srv02 SSH BruteForce Attacks 22 ..
2020-05-12 02:09:04
124.156.111.197 attackbotsspam
May 11 19:44:22 MainVPS sshd[5633]: Invalid user vp from 124.156.111.197 port 18431
May 11 19:44:22 MainVPS sshd[5633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.111.197
May 11 19:44:22 MainVPS sshd[5633]: Invalid user vp from 124.156.111.197 port 18431
May 11 19:44:23 MainVPS sshd[5633]: Failed password for invalid user vp from 124.156.111.197 port 18431 ssh2
May 11 19:52:05 MainVPS sshd[11940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.111.197  user=root
May 11 19:52:07 MainVPS sshd[11940]: Failed password for root from 124.156.111.197 port 54956 ssh2
...
2020-05-12 02:13:24
152.32.134.90 attackbots
May 11 19:54:15 meumeu sshd[23698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.134.90 
May 11 19:54:16 meumeu sshd[23698]: Failed password for invalid user sl from 152.32.134.90 port 51110 ssh2
May 11 20:02:03 meumeu sshd[25004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.134.90 
...
2020-05-12 02:11:02
69.61.59.203 attackbotsspam
Spam sent to honeypot address
2020-05-12 01:55:35
175.140.138.193 attack
May 11 17:16:56 sshgateway sshd\[4327\]: Invalid user mckenzie from 175.140.138.193
May 11 17:16:56 sshgateway sshd\[4327\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.140.138.193
May 11 17:16:58 sshgateway sshd\[4327\]: Failed password for invalid user mckenzie from 175.140.138.193 port 10475 ssh2
2020-05-12 02:07:29
180.76.103.63 attackspambots
May 11 16:12:13 minden010 sshd[11150]: Failed password for root from 180.76.103.63 port 47386 ssh2
May 11 16:17:24 minden010 sshd[13820]: Failed password for root from 180.76.103.63 port 43518 ssh2
May 11 16:21:57 minden010 sshd[15317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.103.63
...
2020-05-12 01:50:16
93.146.237.163 attackbotsspam
"fail2ban match"
2020-05-12 01:55:06
132.232.3.234 attack
May 11 11:16:03 mockhub sshd[29627]: Failed password for root from 132.232.3.234 port 33374 ssh2
...
2020-05-12 02:24:02
124.232.133.205 attack
May 11 18:00:21 *** sshd[31846]: Invalid user math from 124.232.133.205
2020-05-12 02:11:30
40.112.62.127 attack
Time:     Mon May 11 12:26:53 2020 -0300
IP:       40.112.62.127 (US/United States/-)
Failures: 20 (WordPressBruteForcePOST)
Interval: 3600 seconds
Blocked:  Permanent Block
2020-05-12 02:19:14

最近上报的IP列表

88.164.135.193 254.92.35.55 144.228.43.99 61.246.37.240
45.95.168.178 217.182.204.34 202.166.220.40 179.198.127.36
112.3.30.15 52.255.162.141 37.32.43.214 192.141.78.104
119.45.10.225 5.178.194.239 179.83.160.144 43.250.156.128
144.113.183.180 14.61.74.34 23.33.225.230 185.213.103.238