必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Bekasi

省份(region): West Java

国家(country): Indonesia

运营商(isp): Esia

主机名(hostname): unknown

机构(organization): PT Telekomunikasi Indonesia

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
110.138.148.134 attackbotsspam
Unauthorized connection attempt from IP address 110.138.148.134 on Port 445(SMB)
2020-05-28 21:26:50
110.138.148.101 attackspambots
2020-05-13 08:33:54
110.138.148.227 attackbots
20/4/26@23:52:23: FAIL: Alarm-Network address from=110.138.148.227
20/4/26@23:52:23: FAIL: Alarm-Network address from=110.138.148.227
...
2020-04-27 17:41:32
110.138.148.241 attackspambots
Brute force SMTP login attempted.
...
2020-04-01 09:29:16
110.138.148.83 attackspam
Brute force SMTP login attempted.
...
2020-04-01 09:29:01
110.138.148.10 attackbotsspam
firewall-block, port(s): 22/tcp, 8728/tcp
2020-03-11 15:39:12
110.138.148.96 attack
suspicious action Thu, 27 Feb 2020 11:27:38 -0300
2020-02-27 22:48:45
110.138.148.4 attack
Honeypot attack, port: 445, PTR: 4.subnet110-138-148.speedy.telkom.net.id.
2020-02-26 02:22:52
110.138.148.112 attack
Unauthorized connection attempt detected from IP address 110.138.148.112 to port 80 [J]
2020-02-23 21:00:20
110.138.148.143 attack
Unauthorized connection attempt from IP address 110.138.148.143 on Port 445(SMB)
2020-02-15 19:42:45
110.138.148.5 attackbotsspam
Feb 14 04:51:10 l02a sshd[5329]: Invalid user 888888 from 110.138.148.5
Feb 14 04:51:11 l02a sshd[5345]: Invalid user 888888 from 110.138.148.5
2020-02-14 20:18:40
110.138.148.14 attackbotsspam
1578401666 - 01/07/2020 13:54:26 Host: 110.138.148.14/110.138.148.14 Port: 445 TCP Blocked
2020-01-08 04:27:13
110.138.148.101 attack
Unauthorized connection attempt from IP address 110.138.148.101 on Port 445(SMB)
2019-12-25 03:17:21
110.138.148.229 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 26-11-2019 06:25:28.
2019-11-26 18:31:06
110.138.148.71 attackspam
Attempt to attack host OS, exploiting network vulnerabilities, on 22-10-2019 12:45:22.
2019-10-23 01:59:17
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.138.148.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49986
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;110.138.148.128.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041401 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Mon Apr 15 12:04:12 +08 2019
;; MSG SIZE  rcvd: 119

HOST信息:
128.148.138.110.in-addr.arpa domain name pointer 128.subnet110-138-148.speedy.telkom.net.id.
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
128.148.138.110.in-addr.arpa	name = 128.subnet110-138-148.speedy.telkom.net.id.

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
220.127.148.8 attack
Jun 26 01:49:54 web9 sshd\[9289\]: Invalid user pdv from 220.127.148.8
Jun 26 01:49:54 web9 sshd\[9289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.127.148.8
Jun 26 01:49:57 web9 sshd\[9289\]: Failed password for invalid user pdv from 220.127.148.8 port 60342 ssh2
Jun 26 01:53:54 web9 sshd\[9743\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.127.148.8  user=root
Jun 26 01:53:56 web9 sshd\[9743\]: Failed password for root from 220.127.148.8 port 60721 ssh2
2020-06-27 03:08:04
220.128.100.25 attackbotsspam
1593170538 - 06/26/2020 13:22:18 Host: 220.128.100.25/220.128.100.25 Port: 445 TCP Blocked
2020-06-27 03:22:28
178.62.247.64 attack
178.62.247.64 - - [26/Jun/2020:17:07:19 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.62.247.64 - - [26/Jun/2020:17:07:25 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.62.247.64 - - [26/Jun/2020:17:07:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-27 03:20:35
87.188.125.30 attackbots
SSH Login Bruteforce
2020-06-27 02:58:28
111.229.79.17 attackbotsspam
2020-06-26T19:17:25+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)
2020-06-27 03:10:37
52.237.220.70 attack
Jun 26 19:58:56 vpn01 sshd[20893]: Failed password for root from 52.237.220.70 port 40294 ssh2
...
2020-06-27 03:00:55
118.96.112.247 attackbots
20/6/26@08:14:53: FAIL: Alarm-Network address from=118.96.112.247
20/6/26@08:14:53: FAIL: Alarm-Network address from=118.96.112.247
...
2020-06-27 03:06:21
129.226.185.201 attackspam
Lines containing failures of 129.226.185.201 (max 1000)
Jun 26 01:22:18 efa3 sshd[29615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.185.201  user=r.r
Jun 26 01:22:20 efa3 sshd[29615]: Failed password for r.r from 129.226.185.201 port 50612 ssh2
Jun 26 01:22:20 efa3 sshd[29615]: Received disconnect from 129.226.185.201 port 50612:11: Bye Bye [preauth]
Jun 26 01:22:20 efa3 sshd[29615]: Disconnected from 129.226.185.201 port 50612 [preauth]
Jun 26 01:33:58 efa3 sshd[31415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.185.201  user=r.r
Jun 26 01:34:01 efa3 sshd[31415]: Failed password for r.r from 129.226.185.201 port 49288 ssh2
Jun 26 01:34:01 efa3 sshd[31415]: Received disconnect from 129.226.185.201 port 49288:11: Bye Bye [preauth]
Jun 26 01:34:01 efa3 sshd[31415]: Disconnected from 129.226.185.201 port 49288 [preauth]
Jun 26 01:37:40 efa3 sshd[32067]: Invalid user li........
------------------------------
2020-06-27 02:56:30
219.239.47.66 attackspambots
Jun 26 20:33:04 abendstille sshd\[11356\]: Invalid user user from 219.239.47.66
Jun 26 20:33:04 abendstille sshd\[11356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.239.47.66
Jun 26 20:33:06 abendstille sshd\[11356\]: Failed password for invalid user user from 219.239.47.66 port 38512 ssh2
Jun 26 20:34:43 abendstille sshd\[12953\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.239.47.66  user=root
Jun 26 20:34:45 abendstille sshd\[12953\]: Failed password for root from 219.239.47.66 port 1681 ssh2
...
2020-06-27 02:53:47
52.149.131.224 attack
Jun 26 15:02:28 vps46666688 sshd[5017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.131.224
Jun 26 15:02:30 vps46666688 sshd[5017]: Failed password for invalid user xd from 52.149.131.224 port 37094 ssh2
...
2020-06-27 02:53:04
18.222.48.159 attackbotsspam
DATE:2020-06-26 18:23:49, IP:18.222.48.159, PORT:ssh SSH brute force auth (docker-dc)
2020-06-27 02:59:17
222.186.173.142 attackspambots
Jun 26 21:12:55 vpn01 sshd[22227]: Failed password for root from 222.186.173.142 port 63338 ssh2
Jun 26 21:12:58 vpn01 sshd[22227]: Failed password for root from 222.186.173.142 port 63338 ssh2
...
2020-06-27 03:17:21
183.83.93.16 attack
20/6/26@07:22:23: FAIL: Alarm-Network address from=183.83.93.16
...
2020-06-27 03:18:54
106.12.55.39 attack
Jun 26 15:23:24 raspberrypi sshd[579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.55.39 
Jun 26 15:23:26 raspberrypi sshd[579]: Failed password for invalid user sftp from 106.12.55.39 port 34586 ssh2
...
2020-06-27 02:52:39
112.85.42.104 attackspambots
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-06-27 02:50:44

最近上报的IP列表

82.147.105.182 178.141.197.152 128.199.85.184 118.25.71.104
92.151.92.181 36.69.51.185 212.200.26.10 194.24.160.167
200.85.37.66 23.250.37.42 84.22.32.166 1.32.53.3
218.92.0.192 190.57.185.138 77.128.74.143 129.204.3.240
111.62.18.16 13.124.12.214 218.92.0.198 86.16.74.182