89.237.195.134

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Kyrgyzstan

运营商(isp): OJSC Kyrgyztelecom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Jul 6 05:47:11 smtp postfix/smtpd[81745]: NOQUEUE: reject: RCPT from unknown[89.237.195.134]: 554 5.7.1 Service unavailable; Client host [89.237.195.134] blocked using cbl.abuseat.org; Blocked - see http://www.abuseat.org/lookup.cgi?ip=89.237.195.134; from= to= proto=ESMTP helo=<[89.237.195.134]> ...	2020-07-06 20:13:03

类型

评论内容

时间

attackspambots

Jul  6 05:47:11 smtp postfix/smtpd[81745]: NOQUEUE: reject: RCPT from unknown[89.237.195.134]: 554 5.7.1 Service unavailable; Client host [89.237.195.134] blocked using cbl.abuseat.org; Blocked - see http://www.abuseat.org/lookup.cgi?ip=89.237.195.134; from= to= proto=ESMTP helo=<[89.237.195.134]>
...

2020-07-06 20:13:03

相同子网IP讨论:

IP	类型	评论内容	时间
89.237.195.65	attackspam	1586798165 - 04/13/2020 19:16:05 Host: 89.237.195.65/89.237.195.65 Port: 445 TCP Blocked	2020-04-14 05:14:05
89.237.195.32	attack	Sun, 21 Jul 2019 07:36:02 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-21 23:05:25

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.237.195.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13288
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;89.237.195.134.			IN	A

;; AUTHORITY SECTION:
.			237	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070600 1800 900 604800 86400

;; Query time: 48 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jul 06 20:12:51 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

134.195.237.89.in-addr.arpa domain name pointer 89-237-195-134.pppoe.ktnet.kg.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
134.195.237.89.in-addr.arpa	name = 89-237-195-134.pppoe.ktnet.kg.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
95.37.70.112	attack	Apr 28 04:49:16 UTC__SANYALnet-Labs__lste sshd[9172]: Connection from 95.37.70.112 port 56946 on 192.168.1.10 port 22 Apr 28 04:49:16 UTC__SANYALnet-Labs__lste sshd[9173]: Connection from 95.37.70.112 port 56948 on 192.168.1.10 port 22 Apr 28 04:49:17 UTC__SANYALnet-Labs__lste sshd[9172]: User pi from 95.37.70.112 not allowed because not listed in AllowUsers Apr 28 04:49:17 UTC__SANYALnet-Labs__lste sshd[9173]: User pi from 95.37.70.112 not allowed because not listed in AllowUsers Apr 28 04:49:17 UTC__SANYALnet-Labs__lste sshd[9173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.37.70.112 user=pi Apr 28 04:49:17 UTC__SANYALnet-Labs__lste sshd[9172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.37.70.112 user=pi Apr 28 04:49:20 UTC__SANYALnet-Labs__lste sshd[9173]: Failed password for invalid user pi from 95.37.70.112 port 56948 ssh2 Apr 28 04:49:20 UTC__SANYALnet-Labs__lste sshd........ -------------------------------	2020-04-29 06:46:31
180.183.51.219	attackspam	Unauthorized connection attempt from IP address 180.183.51.219 on Port 445(SMB)	2020-04-29 06:48:02
23.254.226.60	attackbotsspam	Attempted connection to port 8088.	2020-04-29 07:04:52
114.215.184.51	attackbots	Automatic report - Web App Attack	2020-04-29 07:19:26
203.99.62.158	attackbots	Apr 29 00:52:18 h1745522 sshd[12130]: Invalid user ubuntu from 203.99.62.158 port 24431 Apr 29 00:52:18 h1745522 sshd[12130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.99.62.158 Apr 29 00:52:18 h1745522 sshd[12130]: Invalid user ubuntu from 203.99.62.158 port 24431 Apr 29 00:52:20 h1745522 sshd[12130]: Failed password for invalid user ubuntu from 203.99.62.158 port 24431 ssh2 Apr 29 00:55:03 h1745522 sshd[12250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.99.62.158 user=root Apr 29 00:55:05 h1745522 sshd[12250]: Failed password for root from 203.99.62.158 port 44530 ssh2 Apr 29 00:57:50 h1745522 sshd[12537]: Invalid user robert from 203.99.62.158 port 64631 Apr 29 00:57:50 h1745522 sshd[12537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.99.62.158 Apr 29 00:57:50 h1745522 sshd[12537]: Invalid user robert from 203.99.62.158 port 64631 Apr 29 ...	2020-04-29 07:12:19
179.6.214.241	attackbots	Unauthorized connection attempt from IP address 179.6.214.241 on Port 445(SMB)	2020-04-29 06:50:53
94.30.26.140	attackbots	DATE:2020-04-28 23:11:34, IP:94.30.26.140, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq)	2020-04-29 06:54:57
179.52.156.13	attackspambots	Unauthorized connection attempt from IP address 179.52.156.13 on Port 445(SMB)	2020-04-29 06:43:35
95.67.249.215	attackspambots	WordPress brute force	2020-04-29 06:59:04
109.255.224.108	attackspam	MYH,DEF GET /wp-login.php	2020-04-29 07:13:31
88.85.150.70	attackspambots	WordPress brute force	2020-04-29 07:04:20
106.12.47.216	attackspam	Apr 28 23:48:41 * sshd[10858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.47.216 Apr 28 23:48:43 * sshd[10858]: Failed password for invalid user down from 106.12.47.216 port 53860 ssh2	2020-04-29 06:54:36
79.6.184.113	attack	Unauthorized connection attempt from IP address 79.6.184.113 on Port 445(SMB)	2020-04-29 06:53:36
37.98.49.236	attackspam	Unauthorized connection attempt from IP address 37.98.49.236 on Port 445(SMB)	2020-04-29 06:58:07
198.245.53.163	attackspambots	Invalid user mas from 198.245.53.163 port 56466	2020-04-29 07:10:39

最近上报的IP列表

41.44.124.228	46.197.93.194	210.183.237.222	203.110.95.119
201.209.138.16	117.247.78.215	51.104.162.50	217.73.141.211
181.170.145.149	220.134.75.23	171.233.146.165	129.213.152.224
196.201.225.20	46.98.203.27	125.224.60.67	195.93.148.226
138.59.148.237	14.162.88.201	171.224.181.224	122.51.80.112