必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
110.138.149.29 attack
SMB Server BruteForce Attack
2020-05-08 18:16:48
110.138.149.130 attackspam
[Aegis] @ 2019-07-03 05:17:10  0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack
2020-04-29 18:45:11
110.138.149.232 attackspambots
Brute force SMTP login attempted.
...
2020-04-01 09:28:35
110.138.149.241 attackbotsspam
Attempt to attack host OS, exploiting network vulnerabilities, on 28-03-2020 03:55:08.
2020-03-28 12:31:48
110.138.149.68 attackspam
Honeypot attack, port: 445, PTR: 68.subnet110-138-149.speedy.telkom.net.id.
2020-03-23 06:02:09
110.138.149.222 attackspam
Attempt to attack host OS, exploiting network vulnerabilities, on 24-02-2020 04:55:14.
2020-02-24 15:09:44
110.138.149.182 attackspambots
firewall-block, port(s): 8291/tcp
2020-02-11 16:15:55
110.138.149.1 attack
1580446649 - 01/31/2020 05:57:29 Host: 110.138.149.1/110.138.149.1 Port: 445 TCP Blocked
2020-01-31 14:43:14
110.138.149.79 attackspambots
Dec 16 09:28:01 amit sshd\[1262\]: Invalid user user from 110.138.149.79
Dec 16 09:28:02 amit sshd\[1262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.138.149.79
Dec 16 09:28:03 amit sshd\[1262\]: Failed password for invalid user user from 110.138.149.79 port 6833 ssh2
...
2019-12-16 20:55:33
110.138.149.204 attackspambots
Unauthorized connection attempt from IP address 110.138.149.204 on Port 445(SMB)
2019-11-17 05:47:41
110.138.149.176 attackbotsspam
Unauthorized connection attempt from IP address 110.138.149.176 on Port 445(SMB)
2019-11-16 22:54:33
110.138.149.76 attackbotsspam
Unauthorized connection attempt from IP address 110.138.149.76 on Port 445(SMB)
2019-11-09 06:17:58
110.138.149.34 attack
Honeypot attack, port: 445, PTR: 34.subnet110-138-149.speedy.telkom.net.id.
2019-11-08 17:30:31
110.138.149.182 attackbotsspam
Honeypot attack, port: 445, PTR: 182.subnet110-138-149.speedy.telkom.net.id.
2019-10-17 17:05:10
110.138.149.108 attack
Port Scan: TCP/34567
2019-09-20 23:05:12
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.138.149.160
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9257
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;110.138.149.160.		IN	A

;; AUTHORITY SECTION:
.			503	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030301 1800 900 604800 86400

;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 04:50:18 CST 2022
;; MSG SIZE  rcvd: 108
HOST信息:
Host 160.149.138.110.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 160.149.138.110.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
129.211.1.12 attackbotsspam
Jul 28 12:15:32 ws12vmsma01 sshd[5727]: Invalid user gxw from 129.211.1.12
Jul 28 12:15:35 ws12vmsma01 sshd[5727]: Failed password for invalid user gxw from 129.211.1.12 port 33184 ssh2
Jul 28 12:19:27 ws12vmsma01 sshd[6317]: Invalid user dpjk from 129.211.1.12
...
2020-07-29 00:13:54
167.172.163.162 attack
Jul 28 14:04:36 mail sshd[10690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.163.162
Jul 28 14:04:39 mail sshd[10690]: Failed password for invalid user nivinform from 167.172.163.162 port 51398 ssh2
...
2020-07-29 00:25:35
211.80.102.185 attackbots
Jul 28 19:31:20 journals sshd\[42998\]: Invalid user osm2 from 211.80.102.185
Jul 28 19:31:20 journals sshd\[42998\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.80.102.185
Jul 28 19:31:22 journals sshd\[42998\]: Failed password for invalid user osm2 from 211.80.102.185 port 23494 ssh2
Jul 28 19:34:54 journals sshd\[43578\]: Invalid user yangmincong from 211.80.102.185
Jul 28 19:34:54 journals sshd\[43578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.80.102.185
...
2020-07-29 00:38:17
36.89.187.193 attackbotsspam
xmlrpc attack
2020-07-29 00:33:45
179.61.91.247 attackspam
(smtpauth) Failed SMTP AUTH login from 179.61.91.247 (AR/Argentina/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-28 16:34:55 plain authenticator failed for ([179.61.91.247]) [179.61.91.247]: 535 Incorrect authentication data (set_id=nasr@partsafhe.com)
2020-07-29 00:02:55
41.237.237.251 attackbotsspam
Port probing on unauthorized port 23
2020-07-29 00:41:56
218.94.136.90 attack
Failed password for invalid user yuweiguo from 218.94.136.90 port 36382 ssh2
Invalid user wwz from 218.94.136.90 port 41800
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.94.136.90
Invalid user wwz from 218.94.136.90 port 41800
Failed password for invalid user wwz from 218.94.136.90 port 41800 ssh2
2020-07-29 00:31:42
45.119.212.93 attack
45.119.212.93 - - [28/Jul/2020:15:30:22 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1865 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.119.212.93 - - [28/Jul/2020:15:30:24 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1857 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.119.212.93 - - [28/Jul/2020:15:30:25 +0100] "POST /wp/xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-07-29 00:02:27
188.166.175.35 attack
Jul 28 15:37:32 game-panel sshd[4460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.175.35
Jul 28 15:37:34 game-panel sshd[4460]: Failed password for invalid user chendaocheng from 188.166.175.35 port 45406 ssh2
Jul 28 15:41:32 game-panel sshd[4863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.175.35
2020-07-29 00:25:11
49.36.224.252 attack
" "
2020-07-29 00:14:51
129.226.185.201 attackbotsspam
Fail2Ban Ban Triggered
2020-07-29 00:19:03
218.92.0.148 attackspam
Jul 28 17:58:00 minden010 sshd[947]: Failed password for root from 218.92.0.148 port 47465 ssh2
Jul 28 17:58:15 minden010 sshd[1006]: Failed password for root from 218.92.0.148 port 29495 ssh2
Jul 28 17:58:18 minden010 sshd[1006]: Failed password for root from 218.92.0.148 port 29495 ssh2
...
2020-07-29 00:04:49
218.92.0.224 attack
Jul 28 18:04:21 nextcloud sshd\[15964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.224  user=root
Jul 28 18:04:23 nextcloud sshd\[15964\]: Failed password for root from 218.92.0.224 port 26756 ssh2
Jul 28 18:04:43 nextcloud sshd\[16686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.224  user=root
2020-07-29 00:17:07
180.123.82.20 attackbots
Jul 28 13:58:14 h2040555 sshd[13525]: Invalid user fujino from 180.123.82.20
Jul 28 13:58:14 h2040555 sshd[13525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.123.82.20 
Jul 28 13:58:16 h2040555 sshd[13525]: Failed password for invalid user fujino from 180.123.82.20 port 41809 ssh2
Jul 28 13:58:18 h2040555 sshd[13525]: Received disconnect from 180.123.82.20: 11: Bye Bye [preauth]
Jul 28 14:00:03 h2040555 sshd[13537]: Invalid user xiaopeng from 180.123.82.20
Jul 28 14:00:03 h2040555 sshd[13537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.123.82.20 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=180.123.82.20
2020-07-29 00:26:19
111.67.192.149 attack
SSH bruteforce
2020-07-29 00:39:46

最近上报的IP列表

110.138.149.159 110.138.149.211 110.138.149.217 110.138.149.240
110.138.149.247 110.138.149.253 110.138.149.40 110.138.149.69
110.138.15.174 110.138.15.2 110.138.150.63 110.138.165.141
110.138.17.28 110.138.17.63 110.138.170.142 110.138.170.149
110.138.170.160 110.138.170.165 110.138.170.170 110.138.170.220