28.106.142.149

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 28.106.142.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37237
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;28.106.142.149.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012100 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 00:56:41 CST 2025
;; MSG SIZE  rcvd: 107

HOST信息:

Host 149.142.106.28.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 149.142.106.28.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
212.183.178.156	attackspambots	Automatic report - Port Scan Attack	2020-04-06 00:19:06
188.106.146.142	attackbotsspam	Apr 5 11:41:00 UTC__SANYALnet-Labs__lste sshd[3427]: Connection from 188.106.146.142 port 35397 on 192.168.1.10 port 22 Apr 5 11:41:02 UTC__SANYALnet-Labs__lste sshd[3427]: User r.r from 188.106.146.142 not allowed because not listed in AllowUsers Apr 5 11:41:02 UTC__SANYALnet-Labs__lste sshd[3427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.106.146.142 user=r.r Apr 5 11:41:04 UTC__SANYALnet-Labs__lste sshd[3427]: Failed password for invalid user r.r from 188.106.146.142 port 35397 ssh2 Apr 5 11:41:04 UTC__SANYALnet-Labs__lste sshd[3427]: Received disconnect from 188.106.146.142 port 35397:11: Bye Bye [preauth] Apr 5 11:41:04 UTC__SANYALnet-Labs__lste sshd[3427]: Disconnected from 188.106.146.142 port 35397 [preauth] Apr 5 11:52:05 UTC__SANYALnet-Labs__lste sshd[3955]: Connection from 188.106.146.142 port 7608 on 192.168.1.10 port 22 Apr 5 11:52:39 UTC__SANYALnet-Labs__lste sshd[3955]: User r.r from 188.106.146.1........ -------------------------------	2020-04-06 00:39:52
211.159.186.92	attackspambots	Unauthorized SSH login attempts	2020-04-06 00:53:21
106.13.183.216	attackspam	Apr 5 17:16:22 h2646465 sshd[29431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.183.216 user=root Apr 5 17:16:24 h2646465 sshd[29431]: Failed password for root from 106.13.183.216 port 33404 ssh2 Apr 5 17:26:36 h2646465 sshd[30750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.183.216 user=root Apr 5 17:26:38 h2646465 sshd[30750]: Failed password for root from 106.13.183.216 port 49402 ssh2 Apr 5 17:32:24 h2646465 sshd[31438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.183.216 user=root Apr 5 17:32:26 h2646465 sshd[31438]: Failed password for root from 106.13.183.216 port 52616 ssh2 Apr 5 17:37:55 h2646465 sshd[32105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.183.216 user=root Apr 5 17:37:57 h2646465 sshd[32105]: Failed password for root from 106.13.183.216 port 55826 ssh2 Apr 5 17:43:41 h264	2020-04-06 00:16:52
212.129.26.136	attack	212.129.26.136 - - [05/Apr/2020:15:53:43 +0200] "GET /wp-login.php HTTP/1.1" 200 5879 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 212.129.26.136 - - [05/Apr/2020:15:53:43 +0200] "POST /wp-login.php HTTP/1.1" 200 6778 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 212.129.26.136 - - [05/Apr/2020:15:53:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-06 00:38:12
92.84.11.149	attackbotsspam	Email rejected due to spam filtering	2020-04-06 00:07:24
119.57.162.18	attackspambots	Apr 5 15:37:32 localhost sshd\[3779\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.57.162.18 user=root Apr 5 15:37:34 localhost sshd\[3779\]: Failed password for root from 119.57.162.18 port 8637 ssh2 Apr 5 15:41:53 localhost sshd\[4068\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.57.162.18 user=root Apr 5 15:41:55 localhost sshd\[4068\]: Failed password for root from 119.57.162.18 port 42032 ssh2 Apr 5 15:46:39 localhost sshd\[4264\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.57.162.18 user=root ...	2020-04-06 00:52:18
181.40.122.2	attackbots	$f2bV_matches \| Triggered by Fail2Ban at Vostok web server	2020-04-06 00:21:50
111.229.150.48	attackbotsspam	Apr 3 23:37:40 v26 sshd[21166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.150.48 user=r.r Apr 3 23:37:42 v26 sshd[21166]: Failed password for r.r from 111.229.150.48 port 53838 ssh2 Apr 3 23:37:42 v26 sshd[21166]: Received disconnect from 111.229.150.48 port 53838:11: Bye Bye [preauth] Apr 3 23:37:42 v26 sshd[21166]: Disconnected from 111.229.150.48 port 53838 [preauth] Apr 3 23:41:36 v26 sshd[21830]: Invalid user dk from 111.229.150.48 port 39050 Apr 3 23:41:39 v26 sshd[21830]: Failed password for invalid user dk from 111.229.150.48 port 39050 ssh2 Apr 3 23:41:39 v26 sshd[21830]: Received disconnect from 111.229.150.48 port 39050:11: Bye Bye [preauth] Apr 3 23:41:39 v26 sshd[21830]: Disconnected from 111.229.150.48 port 39050 [preauth] Apr 3 23:43:06 v26 sshd[22061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.150.48 user=r.r Apr 3 23:43:07 v26 sshd[220........ -------------------------------	2020-04-06 00:55:46
158.69.192.35	attackbotsspam	Apr 5 12:32:48 vlre-nyc-1 sshd\[21019\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.192.35 user=root Apr 5 12:32:51 vlre-nyc-1 sshd\[21019\]: Failed password for root from 158.69.192.35 port 48884 ssh2 Apr 5 12:37:36 vlre-nyc-1 sshd\[21176\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.192.35 user=root Apr 5 12:37:38 vlre-nyc-1 sshd\[21176\]: Failed password for root from 158.69.192.35 port 60304 ssh2 Apr 5 12:42:19 vlre-nyc-1 sshd\[21300\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.192.35 user=root ...	2020-04-06 00:37:00
84.141.246.166	attackbots	Apr 5 17:02:47 minden010 postfix/smtpd[29873]: NOQUEUE: reject: RCPT from p548DF6A6.dip0.t-ipconnect.de[84.141.246.166]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 5 17:02:47 minden010 postfix/smtpd[29873]: NOQUEUE: reject: RCPT from p548DF6A6.dip0.t-ipconnect.de[84.141.246.166]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 5 17:02:47 minden010 postfix/smtpd[29889]: NOQUEUE: reject: RCPT from p548DF6A6.dip0.t-ipconnect.de[84.141.246.166]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 5 17:02:47 minden010 postfix/smtpd[29873]: NOQUEUE: reject: RCPT from p548DF6A6.dip0.t-ipconnect.de[84.141.246.166]: 450 4.7.1 : He ...	2020-04-06 00:12:22
1.245.61.144	attack	Apr 5 17:17:29 [host] sshd[30189]: pam_unix(sshd: Apr 5 17:17:31 [host] sshd[30189]: Failed passwor Apr 5 17:22:01 [host] sshd[30471]: pam_unix(sshd:	2020-04-06 00:34:51
152.136.84.240	attack	Apr 5 18:03:53 [host] sshd[32728]: pam_unix(sshd: Apr 5 18:03:54 [host] sshd[32728]: Failed passwor Apr 5 18:10:21 [host] sshd[775]: pam_unix(sshd:au	2020-04-06 00:15:26
222.186.175.220	attackbots	DATE:2020-04-05 18:07:34, IP:222.186.175.220, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq)	2020-04-06 00:18:28
101.132.106.42	attack	Apr 5 12:18:12 pl3server sshd[11192]: Did not receive identification string from 101.132.106.42 Apr 5 14:22:05 pl3server sshd[29146]: Invalid user django from 101.132.106.42 Apr 5 14:22:05 pl3server sshd[29146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.132.106.42 Apr 5 14:22:07 pl3server sshd[29146]: Failed password for invalid user django from 101.132.106.42 port 56806 ssh2 Apr 5 14:22:07 pl3server sshd[29146]: Received disconnect from 101.132.106.42: 11: Normal Shutdown, Thank you for playing [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=101.132.106.42	2020-04-06 00:54:36

最近上报的IP列表

42.228.73.228	7.141.116.23	139.197.6.234	227.11.229.121
174.124.16.154	253.128.54.187	12.12.116.163	192.168.126.73
39.253.199.88	18.166.63.77	214.52.10.193	219.214.250.39
176.173.147.239	6.215.55.32	146.189.30.233	13.234.170.101
152.10.171.101	145.67.36.157	61.173.26.104	38.84.34.82