必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Telkom Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspam
Attempt to attack host OS, exploiting network vulnerabilities, on 22-10-2019 12:45:22.
2019-10-23 01:59:17
相同子网IP讨论:
IP 类型 评论内容 时间
110.138.148.134 attackbotsspam
Unauthorized connection attempt from IP address 110.138.148.134 on Port 445(SMB)
2020-05-28 21:26:50
110.138.148.101 attackspambots
2020-05-13 08:33:54
110.138.148.227 attackbots
20/4/26@23:52:23: FAIL: Alarm-Network address from=110.138.148.227
20/4/26@23:52:23: FAIL: Alarm-Network address from=110.138.148.227
...
2020-04-27 17:41:32
110.138.148.241 attackspambots
Brute force SMTP login attempted.
...
2020-04-01 09:29:16
110.138.148.83 attackspam
Brute force SMTP login attempted.
...
2020-04-01 09:29:01
110.138.148.10 attackbotsspam
firewall-block, port(s): 22/tcp, 8728/tcp
2020-03-11 15:39:12
110.138.148.96 attack
suspicious action Thu, 27 Feb 2020 11:27:38 -0300
2020-02-27 22:48:45
110.138.148.4 attack
Honeypot attack, port: 445, PTR: 4.subnet110-138-148.speedy.telkom.net.id.
2020-02-26 02:22:52
110.138.148.112 attack
Unauthorized connection attempt detected from IP address 110.138.148.112 to port 80 [J]
2020-02-23 21:00:20
110.138.148.143 attack
Unauthorized connection attempt from IP address 110.138.148.143 on Port 445(SMB)
2020-02-15 19:42:45
110.138.148.5 attackbotsspam
Feb 14 04:51:10 l02a sshd[5329]: Invalid user 888888 from 110.138.148.5
Feb 14 04:51:11 l02a sshd[5345]: Invalid user 888888 from 110.138.148.5
2020-02-14 20:18:40
110.138.148.14 attackbotsspam
1578401666 - 01/07/2020 13:54:26 Host: 110.138.148.14/110.138.148.14 Port: 445 TCP Blocked
2020-01-08 04:27:13
110.138.148.101 attack
Unauthorized connection attempt from IP address 110.138.148.101 on Port 445(SMB)
2019-12-25 03:17:21
110.138.148.229 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 26-11-2019 06:25:28.
2019-11-26 18:31:06
110.138.148.178 attackbots
Unauthorized connection attempt from IP address 110.138.148.178 on Port 445(SMB)
2019-10-20 23:52:51
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.138.148.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9261
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;110.138.148.71.			IN	A

;; AUTHORITY SECTION:
.			336	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102200 1800 900 604800 86400

;; Query time: 111 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 23 01:59:14 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
71.148.138.110.in-addr.arpa domain name pointer 71.subnet110-138-148.speedy.telkom.net.id.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
71.148.138.110.in-addr.arpa	name = 71.subnet110-138-148.speedy.telkom.net.id.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
222.184.179.157 attackbotsspam
2019-06-21T10:23:28.162299 X postfix/smtpd[55858]: warning: unknown[222.184.179.157]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-06-21T11:07:10.380155 X postfix/smtpd[62309]: warning: unknown[222.184.179.157]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-06-21T11:07:43.103315 X postfix/smtpd[62646]: warning: unknown[222.184.179.157]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-06-22 01:22:09
139.59.41.154 attackbotsspam
Jun 21 11:48:24 dev sshd\[17155\]: Invalid user test from 139.59.41.154 port 32866
Jun 21 11:48:24 dev sshd\[17155\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.41.154
...
2019-06-22 01:26:34
196.54.65.130 attackspam
Spammer
2019-06-22 00:53:16
125.64.94.220 attack
21.06.2019 16:11:50 Connection to port 1022 blocked by firewall
2019-06-22 01:06:15
119.110.198.116 attackspambots
Unauthorized connection attempt from IP address 119.110.198.116 on Port 445(SMB)
2019-06-22 01:27:06
185.222.209.56 attack
Jun 21 17:57:36 mail postfix/smtpd\[14777\]: warning: unknown\[185.222.209.56\]: SASL PLAIN authentication failed: \
Jun 21 18:54:36 mail postfix/smtpd\[15788\]: warning: unknown\[185.222.209.56\]: SASL PLAIN authentication failed: \
Jun 21 18:54:44 mail postfix/smtpd\[15788\]: warning: unknown\[185.222.209.56\]: SASL PLAIN authentication failed: \
Jun 21 18:57:27 mail postfix/smtpd\[15876\]: warning: unknown\[185.222.209.56\]: SASL PLAIN authentication failed: \
2019-06-22 01:03:47
185.220.100.252 attack
DE bad_bot
2019-06-22 01:39:51
114.232.219.173 attackspambots
2019-06-21T11:07:29.238248 X postfix/smtpd[62309]: warning: unknown[114.232.219.173]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-06-21T11:07:29.238305 X postfix/smtpd[61822]: warning: unknown[114.232.219.173]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-06-21T11:07:37.102602 X postfix/smtpd[61822]: warning: unknown[114.232.219.173]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-06-22 01:28:16
218.92.0.145 attack
Jun 21 17:43:30 meumeu sshd[30802]: Failed password for root from 218.92.0.145 port 7012 ssh2
Jun 21 17:43:49 meumeu sshd[30802]: error: maximum authentication attempts exceeded for root from 218.92.0.145 port 7012 ssh2 [preauth]
Jun 21 17:43:57 meumeu sshd[30851]: Failed password for root from 218.92.0.145 port 12166 ssh2
...
2019-06-22 00:54:42
70.83.51.126 attackbotsspam
Jun 21 06:18:48 gcems sshd\[27748\]: Invalid user ftp from 70.83.51.126 port 53820
Jun 21 06:18:48 gcems sshd\[27748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.83.51.126
Jun 21 06:18:49 gcems sshd\[27748\]: Failed password for invalid user ftp from 70.83.51.126 port 53820 ssh2
Jun 21 06:27:10 gcems sshd\[27984\]: Invalid user root@Admin from 70.83.51.126 port 33680
Jun 21 06:27:13 gcems sshd\[27984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.83.51.126
...
2019-06-22 01:01:40
114.237.221.248 attackspambots
2019-06-21 11:48:06 dovecot_login authenticator failed for (ylmf-pc) [114.237.221.248]:4357: 535 Incorrect authentication data (set_id=sales)
2019-06-21 11:48:13 dovecot_login authenticator failed for (ylmf-pc) [114.237.221.248]:4593: 535 Incorrect authentication data (set_id=sales)
2019-06-21 11:48:26 dovecot_login authenticator failed for (ylmf-pc) [114.237.221.248]:4996: 535 Incorrect authentication data (set_id=sales)
2019-06-21 11:48:44 dovecot_login authenticator failed for (ylmf-pc) [114.237.221.248]:1659: 535 Incorrect authentication data
2019-06-21 11:48:55 dovecot_login authenticator failed for (ylmf-pc) [114.237.221.248]:2150: 535 Incorrect authentication data
2019-06-21 11:49:07 dovecot_login authenticator failed for (ylmf-pc) [114.237.221.248]:2779: 535 Incorrect authentication data
2019-06-21 11:49:18 dovecot_login authenticator failed for (ylmf-pc) [114.237.221.248]:3314: 535 Incorrect authentication data
2019-06-21 11:49:29 dovecot_login authenticator fai........
------------------------------
2019-06-22 01:22:37
184.105.247.231 attackspam
1561108136 - 06/21/2019 11:08:56 Host: scan-14i.shadowserver.org/184.105.247.231 Port: 5353 UDP Blocked
2019-06-22 00:49:36
115.53.19.244 attackbots
TCP port 22 (SSH) attempt blocked by firewall. [2019-06-21 17:26:09]
2019-06-22 00:52:36
183.150.0.176 attackbots
Jun 21 10:49:44 mxgate1 postfix/postscreen[27302]: CONNECT from [183.150.0.176]:55794 to [176.31.12.44]:25
Jun 21 10:49:44 mxgate1 postfix/dnsblog[27412]: addr 183.150.0.176 listed by domain cbl.abuseat.org as 127.0.0.2
Jun 21 10:49:44 mxgate1 postfix/dnsblog[27411]: addr 183.150.0.176 listed by domain zen.spamhaus.org as 127.0.0.11
Jun 21 10:49:44 mxgate1 postfix/dnsblog[27411]: addr 183.150.0.176 listed by domain zen.spamhaus.org as 127.0.0.4
Jun 21 10:49:50 mxgate1 postfix/postscreen[27302]: DNSBL rank 3 for [183.150.0.176]:55794
Jun x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=183.150.0.176
2019-06-22 01:03:07
185.176.26.104 attackspambots
firewall-block, port(s): 18969/tcp, 20000/tcp
2019-06-22 01:07:23

最近上报的IP列表

183.12.35.77 180.200.4.222 204.124.155.138 97.133.71.132
152.180.76.45 193.61.221.212 76.16.158.217 39.193.194.137
3.3.225.218 176.140.151.115 31.33.148.55 78.218.35.78
66.136.34.102 90.207.186.153 119.249.56.167 182.40.37.214
129.191.180.105 122.26.244.25 111.85.145.239 27.209.231.249