必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Armenia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
109.75.40.148 attack
 TCP (SYN) 109.75.40.148:18877 -> port 80, len 44
2020-07-22 22:45:38
109.75.40.127 attackbotsspam
Honeypot attack, port: 445, PTR: host-127.40.75.109.ucom.am.
2020-05-05 03:06:35
109.75.40.148 attack
Unauthorised access (Feb  9) SRC=109.75.40.148 LEN=40 PREC=0x20 TTL=55 ID=2138 TCP DPT=23 WINDOW=64863 SYN 
Unauthorised access (Feb  4) SRC=109.75.40.148 LEN=40 PREC=0x20 TTL=55 ID=11152 TCP DPT=8080 WINDOW=50004 SYN 
Unauthorised access (Feb  3) SRC=109.75.40.148 LEN=40 PREC=0x20 TTL=55 ID=34770 TCP DPT=8080 WINDOW=59290 SYN 
Unauthorised access (Feb  3) SRC=109.75.40.148 LEN=40 PREC=0x20 TTL=55 ID=20556 TCP DPT=8080 WINDOW=59290 SYN
2020-02-10 04:30:52
109.75.40.148 attack
Unauthorized connection attempt detected from IP address 109.75.40.148 to port 23 [J]
2020-01-26 03:06:28
109.75.40.148 attack
Fail2Ban Ban Triggered
2019-10-15 19:36:16
109.75.40.123 attackspambots
Unauthorized connection attempt from IP address 109.75.40.123 on Port 445(SMB)
2019-09-05 19:43:56
109.75.40.148 attackspambots
Jul 28 03:04:48 h2177944 kernel: \[2599897.236739\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=109.75.40.148 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=52500 PROTO=TCP SPT=22507 DPT=23 WINDOW=29643 RES=0x00 SYN URGP=0 
Jul 28 03:04:50 h2177944 kernel: \[2599899.431355\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=109.75.40.148 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=52500 PROTO=TCP SPT=22507 DPT=23 WINDOW=29643 RES=0x00 SYN URGP=0 
Jul 28 03:04:54 h2177944 kernel: \[2599903.186695\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=109.75.40.148 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=52500 PROTO=TCP SPT=22507 DPT=23 WINDOW=29643 RES=0x00 SYN URGP=0 
Jul 28 03:04:56 h2177944 kernel: \[2599905.019345\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=109.75.40.148 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=52500 PROTO=TCP SPT=22507 DPT=23 WINDOW=29643 RES=0x00 SYN URGP=0 
Jul 28 03:04:57 h2177944 kernel: \[2599906.030148\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=109.75.40.148 DST=85.214.117.9 LEN=40
2019-07-28 17:27:57
109.75.40.148 attack
Honeypot attack, port: 23, PTR: host-148.40.75.109.ucom.am.
2019-07-02 09:12:02
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.75.40.88
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58012
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;109.75.40.88.			IN	A

;; AUTHORITY SECTION:
.			403	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022800 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 18:53:26 CST 2022
;; MSG SIZE  rcvd: 105
HOST信息:
88.40.75.109.in-addr.arpa domain name pointer host-88.40.75.109.ucom.am.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
88.40.75.109.in-addr.arpa	name = host-88.40.75.109.ucom.am.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
181.174.123.195 attackbotsspam
Port probing on unauthorized port 445
2020-10-07 07:11:18
206.189.144.71 attack
ang 206.189.144.71 [06/Oct/2020:16:34:01 "-" "POST /xmlrpc.php 403 401
206.189.144.71 [06/Oct/2020:16:34:00 "-" "POST /index.php/id/home-4//xmlrpc.php 404 24923
206.189.144.71 [06/Oct/2020:16:34:01 "-" "POST /xmlrpc.php 403 401
2020-10-07 07:15:10
176.122.169.95 attackbots
Oct  6 21:43:44 amit sshd\[11263\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.122.169.95  user=root
Oct  6 21:43:46 amit sshd\[11263\]: Failed password for root from 176.122.169.95 port 33002 ssh2
Oct  6 21:52:18 amit sshd\[10817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.122.169.95  user=root
...
2020-10-07 07:03:25
82.82.254.8 attackspam
Invalid user pi from 82.82.254.8 port 37890
2020-10-07 07:16:12
212.64.95.187 attackspam
$f2bV_matches
2020-10-07 07:02:59
179.109.200.195 attackbotsspam
Unauthorized connection attempt from IP address 179.109.200.195 on Port 445(SMB)
2020-10-07 07:13:15
134.175.99.237 attackbots
Oct  7 00:05:33 vpn01 sshd[4803]: Failed password for root from 134.175.99.237 port 53690 ssh2
...
2020-10-07 07:15:31
121.169.34.103 attack
Lines containing failures of 121.169.34.103
Oct  5 22:28:14 kopano sshd[17644]: Bad protocol version identification 'GET / HTTP/1.1' from 121.169.34.103 port 55203
Oct  5 22:28:22 kopano sshd[17645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.169.34.103  user=r.r
Oct  5 22:28:24 kopano sshd[17645]: Failed password for r.r from 121.169.34.103 port 55220 ssh2
Oct  5 22:28:26 kopano sshd[17645]: Connection closed by authenticating user r.r 121.169.34.103 port 55220 [preauth]
Oct  5 22:28:32 kopano sshd[18412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.169.34.103  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=121.169.34.103
2020-10-07 06:54:40
161.35.61.129 attackspambots
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-07 06:57:57
166.175.61.228 attackbotsspam
Brute forcing email accounts
2020-10-07 06:59:33
190.24.56.61 attackbots
1601930504 - 10/05/2020 22:41:44 Host: 190.24.56.61/190.24.56.61 Port: 445 TCP Blocked
2020-10-07 06:57:17
209.222.101.251 attackbots
$f2bV_matches
2020-10-07 06:56:13
158.140.211.14 attackbots
Oct  5 22:56:43 datentool sshd[9965]: Invalid user admin from 158.140.211.14
Oct  5 22:56:43 datentool sshd[9965]: Failed none for invalid user admin from 158.140.211.14 port 39668 ssh2
Oct  5 22:56:43 datentool sshd[9965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.140.211.14 
Oct  5 22:56:45 datentool sshd[9965]: Failed password for invalid user admin from 158.140.211.14 port 39668 ssh2
Oct  5 22:56:48 datentool sshd[9967]: Invalid user admin from 158.140.211.14
Oct  5 22:56:48 datentool sshd[9967]: Failed none for invalid user admin from 158.140.211.14 port 39786 ssh2
Oct  5 22:56:48 datentool sshd[9967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.140.211.14 
Oct  5 22:56:50 datentool sshd[9967]: Failed password for invalid user admin from 158.140.211.14 port 39786 ssh2
Oct  5 22:56:53 datentool sshd[9969]: Invalid user admin from 158.140.211.14
Oct  5 22:56:53 datentool........
-------------------------------
2020-10-07 07:25:46
111.231.82.143 attackbotsspam
prod11
...
2020-10-07 06:53:25
115.226.149.112 attackspam
SSH brutforce
2020-10-07 06:48:31

最近上报的IP列表

109.75.40.63 109.75.41.116 109.75.41.205 109.75.42.108
109.75.41.182 109.75.42.131 109.75.42.145 109.75.41.109
109.75.42.26 109.75.42.176 109.75.42.227 109.75.43.173
109.75.43.120 109.75.43.109 109.75.42.201 109.75.42.231
109.75.43.102 109.75.44.244 109.75.44.36 109.75.44.18