110.138.149.64

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Telkom Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Jul 26 05:04:52 localhost kernel: [15376085.763519] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=110.138.149.64 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=30448 DF PROTO=TCP SPT=36484 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 26 05:04:52 localhost kernel: [15376085.763548] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=110.138.149.64 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=30448 DF PROTO=TCP SPT=36484 DPT=8291 SEQ=3730170656 ACK=0 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (020405840103030201010402) Jul 26 05:05:04 localhost kernel: [15376097.645252] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=110.138.149.64 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=25118 DF PROTO=TCP SPT=29298 DPT=8728 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 26 05:05:04 localhost kernel: [15376097.645283] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=110	2019-07-26 19:25:42

类型

评论内容

时间

attackspam

Jul 26 05:04:52 localhost kernel: [15376085.763519] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=110.138.149.64 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=30448 DF PROTO=TCP SPT=36484 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0 
Jul 26 05:04:52 localhost kernel: [15376085.763548] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=110.138.149.64 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=30448 DF PROTO=TCP SPT=36484 DPT=8291 SEQ=3730170656 ACK=0 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (020405840103030201010402) 
Jul 26 05:05:04 localhost kernel: [15376097.645252] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=110.138.149.64 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=25118 DF PROTO=TCP SPT=29298 DPT=8728 WINDOW=8192 RES=0x00 SYN URGP=0 
Jul 26 05:05:04 localhost kernel: [15376097.645283] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=110

2019-07-26 19:25:42

相同子网IP讨论:

IP	类型	评论内容	时间
110.138.149.29	attack	SMB Server BruteForce Attack	2020-05-08 18:16:48
110.138.149.130	attackspam	[Aegis] @ 2019-07-03 05:17:10 0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack	2020-04-29 18:45:11
110.138.149.232	attackspambots	Brute force SMTP login attempted. ...	2020-04-01 09:28:35
110.138.149.241	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 28-03-2020 03:55:08.	2020-03-28 12:31:48
110.138.149.68	attackspam	Honeypot attack, port: 445, PTR: 68.subnet110-138-149.speedy.telkom.net.id.	2020-03-23 06:02:09
110.138.149.222	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 24-02-2020 04:55:14.	2020-02-24 15:09:44
110.138.149.182	attackspambots	firewall-block, port(s): 8291/tcp	2020-02-11 16:15:55
110.138.149.1	attack	1580446649 - 01/31/2020 05:57:29 Host: 110.138.149.1/110.138.149.1 Port: 445 TCP Blocked	2020-01-31 14:43:14
110.138.149.79	attackspambots	Dec 16 09:28:01 amit sshd\[1262\]: Invalid user user from 110.138.149.79 Dec 16 09:28:02 amit sshd\[1262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.138.149.79 Dec 16 09:28:03 amit sshd\[1262\]: Failed password for invalid user user from 110.138.149.79 port 6833 ssh2 ...	2019-12-16 20:55:33
110.138.149.204	attackspambots	Unauthorized connection attempt from IP address 110.138.149.204 on Port 445(SMB)	2019-11-17 05:47:41
110.138.149.176	attackbotsspam	Unauthorized connection attempt from IP address 110.138.149.176 on Port 445(SMB)	2019-11-16 22:54:33
110.138.149.76	attackbotsspam	Unauthorized connection attempt from IP address 110.138.149.76 on Port 445(SMB)	2019-11-09 06:17:58
110.138.149.34	attack	Honeypot attack, port: 445, PTR: 34.subnet110-138-149.speedy.telkom.net.id.	2019-11-08 17:30:31
110.138.149.182	attackbotsspam	Honeypot attack, port: 445, PTR: 182.subnet110-138-149.speedy.telkom.net.id.	2019-10-17 17:05:10
110.138.149.108	attack	Port Scan: TCP/34567	2019-09-20 23:05:12

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.138.149.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7737
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;110.138.149.64.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072600 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jul 26 19:25:32 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

64.149.138.110.in-addr.arpa domain name pointer 64.subnet110-138-149.speedy.telkom.net.id.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
64.149.138.110.in-addr.arpa	name = 64.subnet110-138-149.speedy.telkom.net.id.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
112.126.102.194	attackbots	Aug 15 23:51:51 piServer sshd[21899]: Failed password for root from 112.126.102.194 port 56642 ssh2 Aug 15 23:53:38 piServer sshd[22052]: Failed password for root from 112.126.102.194 port 40425 ssh2 ...	2020-08-16 06:19:00
114.35.19.168	attack	Attempted connection to port 23.	2020-08-16 06:25:27
122.60.87.193	attackspambots	Lines containing failures of 122.60.87.193 Aug 13 06:48:39 shared12 sshd[9036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.60.87.193 user=r.r Aug 13 06:48:42 shared12 sshd[9036]: Failed password for r.r from 122.60.87.193 port 42214 ssh2 Aug 13 06:48:42 shared12 sshd[9036]: Received disconnect from 122.60.87.193 port 42214:11: Bye Bye [preauth] Aug 13 06:48:42 shared12 sshd[9036]: Disconnected from authenticating user r.r 122.60.87.193 port 42214 [preauth] Aug 13 07:03:02 shared12 sshd[14649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.60.87.193 user=r.r Aug 13 07:03:04 shared12 sshd[14649]: Failed password for r.r from 122.60.87.193 port 37616 ssh2 Aug 13 07:03:04 shared12 sshd[14649]: Received disconnect from 122.60.87.193 port 37616:11: Bye Bye [preauth] Aug 13 07:03:04 shared12 sshd[14649]: Disconnected from authenticating user r.r 122.60.87.193 port 37616 [preauth] Au........ ------------------------------	2020-08-16 06:39:43
188.0.169.231	attackbots	Attempted connection to port 445.	2020-08-16 06:18:06
112.172.147.34	attackbots	Aug 15 22:15:34 game-panel sshd[30428]: Failed password for root from 112.172.147.34 port 38369 ssh2 Aug 15 22:19:40 game-panel sshd[30619]: Failed password for root from 112.172.147.34 port 48120 ssh2	2020-08-16 06:40:19
194.87.138.1	attackbotsspam	TCP (SYN) 194.87.138.1:42438 -> port 23, len 44	2020-08-16 06:51:46
87.255.217.154	attackspambots	Port Scan ...	2020-08-16 06:50:54
103.123.246.203	attack	Unauthorized connection attempt from IP address 103.123.246.203 on Port 445(SMB)	2020-08-16 06:23:03
222.173.23.122	attack	Unauthorized connection attempt from IP address 222.173.23.122 on Port 445(SMB)	2020-08-16 06:39:59
176.236.42.218	attackspambots	Unauthorized connection attempt from IP address 176.236.42.218 on Port 445(SMB)	2020-08-16 06:30:08
106.52.179.227	attackbotsspam	Fail2Ban	2020-08-16 06:38:43
185.193.26.150	attack	Unauthorized connection attempt from IP address 185.193.26.150 on Port 445(SMB)	2020-08-16 06:42:36
106.215.155.221	attackspambots	Unauthorized connection attempt from IP address 106.215.155.221 on Port 445(SMB)	2020-08-16 06:50:41
176.241.196.181	attackbotsspam	Unauthorized connection attempt from IP address 176.241.196.181 on Port 445(SMB)	2020-08-16 06:45:47
222.186.175.216	attack	Aug 16 00:38:51 abendstille sshd\[7147\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216 user=root Aug 16 00:38:52 abendstille sshd\[7145\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216 user=root Aug 16 00:38:53 abendstille sshd\[7147\]: Failed password for root from 222.186.175.216 port 3310 ssh2 Aug 16 00:38:54 abendstille sshd\[7145\]: Failed password for root from 222.186.175.216 port 24108 ssh2 Aug 16 00:38:56 abendstille sshd\[7147\]: Failed password for root from 222.186.175.216 port 3310 ssh2 ...	2020-08-16 06:40:48

最近上报的IP列表

2a01:598:8087:a02e:850c:414a:4236:d0c6	233.34.201.158	190.61.45.178	110.40.237.162
155.158.214.158	200.164.74.162	120.170.218.168	103.82.130.171
48.42.113.23	148.112.94.174	180.247.43.43	222.119.19.200
7.213.141.15	143.208.138.156	238.220.42.133	129.163.217.83
110.115.114.172	36.200.193.5	117.11.82.68	217.15.118.38