必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
14.207.148.61 attack
1582119188 - 02/19/2020 14:33:08 Host: 14.207.148.61/14.207.148.61 Port: 445 TCP Blocked
2020-02-20 03:23:02
14.207.148.44 attackspambots
Unauthorized connection attempt detected from IP address 14.207.148.44 to port 445 [T]
2020-01-16 03:15:27
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.207.148.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28110
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;14.207.148.149.			IN	A

;; AUTHORITY SECTION:
.			348	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 05:34:18 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
149.148.207.14.in-addr.arpa domain name pointer mx-ll-14.207.148-149.dynamic.3bb.in.th.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
149.148.207.14.in-addr.arpa	name = mx-ll-14.207.148-149.dynamic.3bb.in.th.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
106.12.208.211 attackspam
Aug 12 13:27:37 vtv3 sshd\[12315\]: Invalid user ubuntu from 106.12.208.211 port 45244
Aug 12 13:27:37 vtv3 sshd\[12315\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.208.211
Aug 12 13:27:38 vtv3 sshd\[12315\]: Failed password for invalid user ubuntu from 106.12.208.211 port 45244 ssh2
Aug 12 13:32:58 vtv3 sshd\[15139\]: Invalid user dujoey from 106.12.208.211 port 35780
Aug 12 13:32:58 vtv3 sshd\[15139\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.208.211
Aug 12 13:43:21 vtv3 sshd\[20484\]: Invalid user user from 106.12.208.211 port 45072
Aug 12 13:43:21 vtv3 sshd\[20484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.208.211
Aug 12 13:43:23 vtv3 sshd\[20484\]: Failed password for invalid user user from 106.12.208.211 port 45072 ssh2
Aug 12 13:48:41 vtv3 sshd\[22909\]: Invalid user admin from 106.12.208.211 port 35590
Aug 12 13:48:41 vtv3 sshd\[2290
2019-08-12 22:59:58
38.124.142.1 attackbots
proto=tcp  .  spt=39587  .  dpt=25  .     (listed on     Github Combined on 3 lists )     (514)
2019-08-12 23:01:32
40.76.15.196 attackspambots
Aug 12 06:56:52 xb3 sshd[26023]: Failed password for invalid user sven from 40.76.15.196 port 55376 ssh2
Aug 12 06:56:52 xb3 sshd[26023]: Received disconnect from 40.76.15.196: 11: Bye Bye [preauth]
Aug 12 07:02:29 xb3 sshd[27732]: Failed password for invalid user odoo from 40.76.15.196 port 39592 ssh2
Aug 12 07:02:29 xb3 sshd[27732]: Received disconnect from 40.76.15.196: 11: Bye Bye [preauth]
Aug 12 07:06:53 xb3 sshd[24397]: Failed password for invalid user yassine from 40.76.15.196 port 34698 ssh2
Aug 12 07:06:53 xb3 sshd[24397]: Received disconnect from 40.76.15.196: 11: Bye Bye [preauth]
Aug 12 07:11:27 xb3 sshd[22063]: Failed password for invalid user [vicserver] from 40.76.15.196 port 58054 ssh2
Aug 12 07:11:27 xb3 sshd[22063]: Received disconnect from 40.76.15.196: 11: Bye Bye [preauth]
Aug 12 07:15:58 xb3 sshd[19050]: Failed password for invalid user scottm from 40.76.15.196 port 53184 ssh2
Aug 12 07:15:58 xb3 sshd[19050]: Received disconnect from 40.76.15.196:........
-------------------------------
2019-08-13 00:05:03
94.38.238.174 attack
Automatic report - Port Scan Attack
2019-08-12 23:33:55
89.248.168.107 attackbotsspam
Aug 12 16:42:30 h2177944 kernel: \[3944713.840610\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=89.248.168.107 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=61234 PROTO=TCP SPT=53590 DPT=5380 WINDOW=1024 RES=0x00 SYN URGP=0 
Aug 12 16:47:29 h2177944 kernel: \[3945013.024619\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=89.248.168.107 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=43769 PROTO=TCP SPT=53636 DPT=5762 WINDOW=1024 RES=0x00 SYN URGP=0 
Aug 12 16:52:23 h2177944 kernel: \[3945306.971301\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=89.248.168.107 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=24593 PROTO=TCP SPT=53622 DPT=5671 WINDOW=1024 RES=0x00 SYN URGP=0 
Aug 12 16:53:40 h2177944 kernel: \[3945383.372488\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=89.248.168.107 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=20 PROTO=TCP SPT=53590 DPT=5343 WINDOW=1024 RES=0x00 SYN URGP=0 
Aug 12 16:54:34 h2177944 kernel: \[3945438.293112\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=89.248.168.107 DST=85.214.117
2019-08-12 23:01:05
185.36.81.173 attack
Rude login attack (15 tries in 1d)
2019-08-13 00:02:32
118.34.12.35 attack
Aug 12 14:41:59 localhost sshd\[117029\]: Invalid user weldon123 from 118.34.12.35 port 36622
Aug 12 14:41:59 localhost sshd\[117029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.34.12.35
Aug 12 14:42:01 localhost sshd\[117029\]: Failed password for invalid user weldon123 from 118.34.12.35 port 36622 ssh2
Aug 12 14:46:56 localhost sshd\[117133\]: Invalid user password from 118.34.12.35 port 55904
Aug 12 14:46:56 localhost sshd\[117133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.34.12.35
...
2019-08-12 23:03:19
134.209.111.108 attack
xmlrpc attack
2019-08-12 23:29:09
218.161.9.63 attack
"GET /mysql/admin/index.php?lang=en HTTP/1.1" 404
"GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404
"GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404
"GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404
"GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404
"GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404
"GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404
"GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 404
"GET /phpmyadmin2/index.php?lang=en HTTP/1.1" 404
"GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 404
2019-08-12 23:39:58
89.248.172.85 attackbotsspam
08/12/2019-09:50:59.305705 89.248.172.85 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-08-12 23:55:11
78.170.195.49 attackspambots
Automatic report - Port Scan Attack
2019-08-12 23:43:37
85.105.146.33 attack
Automatic report - Port Scan Attack
2019-08-12 23:59:36
103.57.80.84 attack
SPF Fail sender not permitted to send mail for @01com.com / Sent mail to target address hacked/leaked from abandonia in 2016
2019-08-12 23:11:51
117.223.124.209 attackbots
Automatic report - Port Scan Attack
2019-08-12 23:46:01
78.188.222.90 attackspambots
proto=tcp  .  spt=44450  .  dpt=25  .     (listed on     Github Combined on 3 lists )     (512)
2019-08-12 23:05:39

最近上报的IP列表

14.207.148.165 14.207.148.167 14.207.148.160 14.207.148.174
14.207.148.169 14.207.148.15 14.207.148.176 14.207.148.186
14.207.148.193 14.207.148.201 14.207.148.194 14.207.148.199
14.207.148.207 14.207.148.204 14.207.148.210 14.207.148.218
14.207.148.213 14.207.148.197 14.207.148.225 14.207.148.226