110.138.255.66

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Telkom Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt from IP address 110.138.255.66 on Port 445(SMB)	2019-07-22 20:57:34

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.138.255.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45045
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;110.138.255.66.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072200 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 22 20:57:23 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

66.255.138.110.in-addr.arpa domain name pointer 66.subnet110-138-255.speedy.telkom.net.id.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
66.255.138.110.in-addr.arpa	name = 66.subnet110-138-255.speedy.telkom.net.id.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
167.71.140.30	attackspam	167.71.140.30 - - [03/Sep/2020:10:11:44 +0200] "GET /wp-login.php HTTP/1.1" 200 9040 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.140.30 - - [03/Sep/2020:10:11:46 +0200] "POST /wp-login.php HTTP/1.1" 200 9291 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.140.30 - - [03/Sep/2020:10:11:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-04 03:54:31
178.19.152.65	attack	TCP (SYN) 178.19.152.65:11385 -> port 23, len 44	2020-09-04 04:05:42
182.50.29.236	attackspambots	Port Scan ...	2020-09-04 04:20:40
178.89.32.119	attack	TCP (SYN) 178.89.32.119:28173 -> port 445, len 52	2020-09-04 04:10:04
207.166.186.217	attackbots	207.166.186.217 - - [03/Sep/2020:11:15:48 +0100] "POST /wp-login.php HTTP/1.1" 200 1836 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 207.166.186.217 - - [03/Sep/2020:11:15:49 +0100] "POST /wp-login.php HTTP/1.1" 200 1835 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 207.166.186.217 - - [03/Sep/2020:11:15:50 +0100] "POST /wp-login.php HTTP/1.1" 200 1809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-04 03:48:36
5.227.65.17	attackspambots	TCP (SYN) 5.227.65.17:35189 -> port 445, len 52	2020-09-04 04:18:17
178.19.250.44	attack	TCP (SYN) 178.19.250.44:64665 -> port 23, len 44	2020-09-04 04:10:30
118.76.188.43	attackspam	(Sep 3) LEN=40 TTL=46 ID=35780 TCP DPT=8080 WINDOW=59479 SYN (Sep 3) LEN=40 TTL=46 ID=55373 TCP DPT=8080 WINDOW=54094 SYN (Sep 2) LEN=40 TTL=46 ID=57650 TCP DPT=8080 WINDOW=54094 SYN (Sep 2) LEN=40 TTL=46 ID=15088 TCP DPT=8080 WINDOW=59479 SYN (Sep 2) LEN=40 TTL=46 ID=25431 TCP DPT=8080 WINDOW=59479 SYN (Sep 2) LEN=40 TTL=46 ID=2325 TCP DPT=8080 WINDOW=59479 SYN (Sep 1) LEN=40 TTL=46 ID=61807 TCP DPT=8080 WINDOW=54094 SYN (Aug 31) LEN=40 TTL=46 ID=30372 TCP DPT=8080 WINDOW=54094 SYN (Aug 30) LEN=40 TTL=46 ID=60720 TCP DPT=8080 WINDOW=59479 SYN (Aug 30) LEN=40 TTL=46 ID=54456 TCP DPT=8080 WINDOW=54094 SYN	2020-09-04 04:02:39
190.121.231.130	attack	TCP (SYN) 190.121.231.130:64311 -> port 445, len 52	2020-09-04 04:04:35
5.14.243.84	attackbotsspam	firewall-block, port(s): 80/tcp	2020-09-04 04:08:09
170.130.187.30	attackspam	Automatic report - Banned IP Access	2020-09-04 03:57:04
60.249.4.218	attackspambots	Port Scan ...	2020-09-04 04:17:46
184.105.247.199	attackbotsspam	TCP (SYN) 184.105.247.199:60372 -> port 2323, len 40	2020-09-04 04:20:27
209.126.3.185	attackspambots	TCP (SYN) 209.126.3.185:57751 -> port 8080, len 40	2020-09-04 04:09:06
118.27.19.93	attack	Sep 4 02:31:53 webhost01 sshd[14832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.27.19.93 Sep 4 02:31:55 webhost01 sshd[14832]: Failed password for invalid user droplet from 118.27.19.93 port 34186 ssh2 ...	2020-09-04 03:52:10

最近上报的IP列表

5.135.211.179	57.107.91.183	180.167.141.51	243.172.198.215
22.234.214.231	42.119.95.174	216.180.105.97	51.145.55.218
36.79.79.82	212.58.114.226	103.127.147.151	191.53.193.198
226.68.21.128	35.3.94.53	145.255.21.199	73.197.100.23
5.128.39.41	27.67.218.189	103.6.199.107	188.254.0.116