40.131.137.130

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Windstream Communications LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Aug 4 04:01:43 MK-Soft-VM6 sshd\[1681\]: Invalid user pi from 40.131.137.130 port 60504 Aug 4 04:01:43 MK-Soft-VM6 sshd\[1681\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.131.137.130 Aug 4 04:01:44 MK-Soft-VM6 sshd\[1683\]: Invalid user pi from 40.131.137.130 port 60508 ...	2019-08-04 15:40:09

类型

评论内容

时间

attackbotsspam

Aug  4 04:01:43 MK-Soft-VM6 sshd\[1681\]: Invalid user pi from 40.131.137.130 port 60504
Aug  4 04:01:43 MK-Soft-VM6 sshd\[1681\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.131.137.130
Aug  4 04:01:44 MK-Soft-VM6 sshd\[1683\]: Invalid user pi from 40.131.137.130 port 60508
...

2019-08-04 15:40:09

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 40.131.137.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19655
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;40.131.137.130.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080400 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 04 15:39:54 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

130.137.131.40.in-addr.arpa domain name pointer h130.137.131.40.static.ip.windstream.net.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
130.137.131.40.in-addr.arpa	name = h130.137.131.40.static.ip.windstream.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
179.111.249.251	attack	Automatic report - Port Scan Attack	2020-02-10 22:31:31
118.25.47.217	attack	Feb 10 14:16:08 venus sshd[10538]: Invalid user jkz from 118.25.47.217 port 8326 Feb 10 14:16:08 venus sshd[10538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.47.217 Feb 10 14:16:10 venus sshd[10538]: Failed password for invalid user jkz from 118.25.47.217 port 8326 ssh2 Feb 10 14:26:05 venus sshd[12018]: Invalid user egd from 118.25.47.217 port 51544 Feb 10 14:26:05 venus sshd[12018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.47.217 Feb 10 14:26:07 venus sshd[12018]: Failed password for invalid user egd from 118.25.47.217 port 51544 ssh2 Feb 10 14:28:20 venus sshd[12329]: Invalid user fst from 118.25.47.217 port 62650 Feb 10 14:28:20 venus sshd[12329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.47.217 Feb 10 14:28:22 venus sshd[12329]: Failed password for invalid user fst from 118.25.47.217 port 62650 ssh2 Feb 10 14........ ------------------------------	2020-02-10 22:04:35
60.168.241.119	attackbots	Feb 10 08:34:32 neweola postfix/smtpd[4373]: connect from unknown[60.168.241.119] Feb 10 08:34:33 neweola postfix/smtpd[4373]: NOQUEUE: reject: RCPT from unknown[60.168.241.119]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo= Feb 10 08:34:33 neweola postfix/smtpd[4373]: disconnect from unknown[60.168.241.119] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 Feb 10 08:34:35 neweola postfix/smtpd[4373]: connect from unknown[60.168.241.119] Feb 10 08:34:36 neweola postfix/smtpd[4373]: lost connection after AUTH from unknown[60.168.241.119] Feb 10 08:34:36 neweola postfix/smtpd[4373]: disconnect from unknown[60.168.241.119] ehlo=1 auth=0/1 commands=1/2 Feb 10 08:34:37 neweola postfix/smtpd[4204]: connect from unknown[60.168.241.119] Feb 10 08:34:38 neweola postfix/smtpd[4204]: lost connection after AUTH from unknown[60.168.241.119] Feb 10 08:34:38 neweola postfix/smtpd[4204]: disconnect from unknown[60.168.241.119] ehlo=1 auth=0/........ -------------------------------	2020-02-10 22:39:55
109.251.146.100	attack	Unauthorized connection attempt detected from IP address 109.251.146.100 to port 22	2020-02-10 22:09:20
219.143.70.249	attackspambots	ICMP MH Probe, Scan /Distributed -	2020-02-10 22:19:45
79.99.106.110	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-10 22:35:28
206.189.122.133	attackspam	$f2bV_matches	2020-02-10 22:13:03
203.81.78.180	attack	$f2bV_matches	2020-02-10 22:40:24
204.111.241.83	attackspambots	$f2bV_matches	2020-02-10 22:32:39
217.128.165.168	attackspam	Currently 25 failed/unauthorized logins attempts via SMTP/IMAP whostnameh 1 different usernames and wrong password: 2020-02-10T14:40:19+01:00 Access from 217.128.165.168 whostnameh username "1" (Unknown account) 2020-02-10T14:09:26+01:00 Access from 217.128.165.168 whostnameh username "1" (Unknown account) 2020-02-10T14:09:21+01:00 Access from 217.128.165.168 whostnameh username "1" (Unknown account) 2020-02-10T14:09:12+01:00 Access from 217.128.165.168 whostnameh username "1" (Unknown account) 2020-02-10T14:09:06+01:00 Access from 217.128.165.168 whostnameh username "1" (Unknown account) 2020-02-10T14:08:57+01:00 Access from 217.128.165.168 whostnameh username "1" (Unknown account) 2020-02-10T14:08:52+01:00 Access from 217.128.165.168 whostnameh username "1" (Unknown account) 2020-02-10T14:08:44+01:00 Access from 217.128.165.168 whostnameh username "1" (Unknown account) 2020-02-10T14:08:38+01:00 Access from 217.128.165.168 whostnameh username "1" (Unknown account) 2020-........ ------------------------------	2020-02-10 22:10:18
176.115.196.74	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-10 22:20:41
83.251.36.161	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-10 22:26:41
206.189.139.17	attackspam	$f2bV_matches	2020-02-10 22:04:08
185.143.223.168	attackbots	Feb 10 14:41:42 grey postfix/smtpd\[15818\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.168\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.168\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.168\]\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.97\]\>Feb 10 14:41:42 grey postfix/smtpd\[15818\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.168\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.168\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.168\]\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.97\]\>Feb 10 14:41:42 grey postfix/smtpd\[15818\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.168\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.168\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.168\]\; from=\ to=\	2020-02-10 22:13:25
203.79.182.7	attack	$f2bV_matches	2020-02-10 22:42:36

最近上报的IP列表

94.49.215.255	190.240.95.158	62.234.68.215	138.242.6.49
45.78.156.55	112.121.178.47	52.88.32.242	69.130.134.186
34.94.151.252	101.128.236.8	45.199.189.122	113.107.234.222
66.249.64.216	61.228.171.205	196.75.153.248	177.35.97.228
80.24.155.224	184.82.153.167	86.34.182.50	175.141.245.33