必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Telkom Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Automatic report - Port Scan Attack
2020-05-11 20:19:34
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.139.150.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23635
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;110.139.150.13.			IN	A

;; AUTHORITY SECTION:
.			337	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051100 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 11 20:19:28 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
13.150.139.110.in-addr.arpa domain name pointer 13.subnet110-139-150.speedy.telkom.net.id.
NSLOOKUP信息:
Server:		100.100.2.138
Address:	100.100.2.138#53

Non-authoritative answer:
13.150.139.110.in-addr.arpa	name = 13.subnet110-139-150.speedy.telkom.net.id.

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
89.248.167.131 attackbotsspam
port scan and connect, tcp 443 (https)
2019-09-12 02:28:30
185.176.27.50 attackbotsspam
09/11/2019-12:13:18.535205 185.176.27.50 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-09-12 02:23:16
67.36.84.226 attackbots
[SMB remote code execution attempt: port tcp/445]
*(RWIN=1024)(09111103)
2019-09-12 02:09:40
185.176.27.102 attack
09/11/2019-12:58:39.024112 185.176.27.102 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-09-12 02:22:00
81.22.45.219 attack
Port scan: Attack repeated for 24 hours
2019-09-12 02:30:15
185.176.27.54 attackspam
Sep 10 17:00:52 lenivpn01 kernel: \[360456.912614\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.54 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=16409 PROTO=TCP SPT=58151 DPT=34000 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 10 22:47:53 lenivpn01 kernel: \[381277.188024\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.54 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=49229 PROTO=TCP SPT=58151 DPT=33999 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 11 04:34:50 lenivpn01 kernel: \[402094.261883\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.54 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=26176 PROTO=TCP SPT=55171 DPT=34099 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 11 07:41:30 lenivpn01 kernel: \[413293.003257\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.54 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 
...
2019-09-12 02:22:47
112.195.165.23 attackspambots
Sep 10 22:02:10 lcdev sshd\[13557\]: Invalid user guest from 112.195.165.23
Sep 10 22:02:10 lcdev sshd\[13557\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.195.165.23
Sep 10 22:02:12 lcdev sshd\[13557\]: Failed password for invalid user guest from 112.195.165.23 port 37138 ssh2
Sep 10 22:06:58 lcdev sshd\[13977\]: Invalid user sammy from 112.195.165.23
Sep 10 22:06:58 lcdev sshd\[13977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.195.165.23
2019-09-12 02:39:20
54.37.68.66 attack
Sep 11 15:57:12 game-panel sshd[12368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.68.66
Sep 11 15:57:14 game-panel sshd[12368]: Failed password for invalid user admin12345 from 54.37.68.66 port 48322 ssh2
Sep 11 16:03:06 game-panel sshd[12601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.68.66
2019-09-12 02:43:05
185.176.27.30 attackbots
09/11/2019-11:16:20.745646 185.176.27.30 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-09-12 02:24:40
71.6.199.23 attackspambots
11.09.2019 17:55:40 Connection to port 1400 blocked by firewall
2019-09-12 02:34:02
183.129.160.229 attackspam
Sep 10 17:37:13 lenivpn01 kernel: \[362637.926426\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=183.129.160.229 DST=195.201.121.15 LEN=44 TOS=0x00 PREC=0x00 TTL=109 ID=34115 PROTO=TCP SPT=36548 DPT=48202 WINDOW=29200 RES=0x00 SYN URGP=0 
Sep 10 19:02:38 lenivpn01 kernel: \[367763.090103\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=183.129.160.229 DST=195.201.121.15 LEN=44 TOS=0x00 PREC=0x00 TTL=109 ID=60586 PROTO=TCP SPT=34262 DPT=3966 WINDOW=29200 RES=0x00 SYN URGP=0 
Sep 10 19:31:45 lenivpn01 kernel: \[369509.605184\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=183.129.160.229 DST=195.201.121.15 LEN=44 TOS=0x00 PREC=0x00 TTL=108 ID=53418 PROTO=TCP SPT=6138 DPT=17018 WINDOW=29200 RES=0x00 SYN URGP=0 
Sep 10 19:32:40 lenivpn01 kernel: \[369564.922185\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=183.129.160.229 DST=195.201.121.15 LEN=44 TOS=0x00 PREC=0x00
...
2019-09-12 01:53:58
71.6.232.5 attack
Unauthorised access (Sep 11) SRC=71.6.232.5 LEN=40 TOS=0x10 PREC=0x40 TTL=234 ID=54321 TCP DPT=139 WINDOW=65535 SYN 
Unauthorised access (Sep 11) SRC=71.6.232.5 LEN=40 TOS=0x10 PREC=0x40 TTL=234 ID=54321 TCP DPT=137 WINDOW=65535 SYN 
Unauthorised access (Sep 10) SRC=71.6.232.5 LEN=40 TOS=0x10 PREC=0x40 TTL=234 ID=54321 TCP DPT=135 WINDOW=65535 SYN
2019-09-12 02:33:08
34.80.215.54 attack
Sep 11 05:05:44 home sshd[4339]: Invalid user ts3bot from 34.80.215.54 port 55844
Sep 11 05:05:44 home sshd[4339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.215.54
Sep 11 05:05:44 home sshd[4339]: Invalid user ts3bot from 34.80.215.54 port 55844
Sep 11 05:05:46 home sshd[4339]: Failed password for invalid user ts3bot from 34.80.215.54 port 55844 ssh2
Sep 11 05:13:50 home sshd[4366]: Invalid user server from 34.80.215.54 port 45546
Sep 11 05:13:50 home sshd[4366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.215.54
Sep 11 05:13:50 home sshd[4366]: Invalid user server from 34.80.215.54 port 45546
Sep 11 05:13:52 home sshd[4366]: Failed password for invalid user server from 34.80.215.54 port 45546 ssh2
Sep 11 05:19:57 home sshd[4398]: Invalid user mc3 from 34.80.215.54 port 48404
Sep 11 05:19:57 home sshd[4398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.215.54
S
2019-09-12 02:45:04
125.64.94.211 attackspambots
11.09.2019 17:01:05 Connection to port 6379 blocked by firewall
2019-09-12 01:56:45
218.245.1.169 attackbots
Sep 11 11:13:52 localhost sshd\[110576\]: Invalid user hadoop from 218.245.1.169 port 55826
Sep 11 11:13:52 localhost sshd\[110576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.245.1.169
Sep 11 11:13:55 localhost sshd\[110576\]: Failed password for invalid user hadoop from 218.245.1.169 port 55826 ssh2
Sep 11 11:22:41 localhost sshd\[110865\]: Invalid user sinusbot from 218.245.1.169 port 53127
Sep 11 11:22:41 localhost sshd\[110865\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.245.1.169
...
2019-09-12 02:37:42

最近上报的IP列表

223.227.107.146 188.128.28.61 122.112.190.154 188.128.28.54
167.71.199.202 120.29.60.118 115.79.200.241 218.236.90.61
217.112.142.4 150.129.67.29 145.239.72.142 188.128.28.53
114.40.131.72 157.34.32.157 132.248.60.12 38.178.50.10
93.99.104.212 87.9.114.58 226.199.59.122 81.28.100.143