必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspambots
Invalid user cacti from 148.70.191.149 port 43564
2020-07-18 21:55:40
attackspam
Jul 11 08:52:41 NPSTNNYC01T sshd[31309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.191.149
Jul 11 08:52:43 NPSTNNYC01T sshd[31309]: Failed password for invalid user xautomation from 148.70.191.149 port 45980 ssh2
Jul 11 08:57:30 NPSTNNYC01T sshd[31797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.191.149
...
2020-07-11 22:06:45
attackspambots
Invalid user Test from 148.70.191.149 port 43952
2020-06-19 13:08:46
attackspambots
Jun 10 01:14:27: Invalid user rustserver from 148.70.191.149 port 42916
2020-06-11 06:43:10
attackbots
Jun  5 20:02:18 haigwepa sshd[2288]: Failed password for root from 148.70.191.149 port 36534 ssh2
...
2020-06-06 02:12:01
attack
2020-06-01T20:56:01.136167vps751288.ovh.net sshd\[8351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.191.149  user=root
2020-06-01T20:56:03.473749vps751288.ovh.net sshd\[8351\]: Failed password for root from 148.70.191.149 port 59862 ssh2
2020-06-01T21:01:03.260835vps751288.ovh.net sshd\[8401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.191.149  user=root
2020-06-01T21:01:04.724996vps751288.ovh.net sshd\[8401\]: Failed password for root from 148.70.191.149 port 58460 ssh2
2020-06-01T21:06:00.662295vps751288.ovh.net sshd\[8440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.191.149  user=root
2020-06-02 03:30:47
attackbots
Invalid user admin1 from 148.70.191.149 port 49362
2020-06-01 14:57:11
attackbotsspam
May 31 03:14:06 gw1 sshd[30715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.191.149
May 31 03:14:07 gw1 sshd[30715]: Failed password for invalid user redmine from 148.70.191.149 port 60810 ssh2
...
2020-05-31 06:28:29
attackspam
May 25 16:35:22 163-172-32-151 sshd[24064]: Invalid user ervisor from 148.70.191.149 port 45294
...
2020-05-26 03:58:03
attackspambots
May 24 11:09:37 vps sshd[724339]: Failed password for invalid user yyy from 148.70.191.149 port 53694 ssh2
May 24 11:13:08 vps sshd[742761]: Invalid user iqi from 148.70.191.149 port 36644
May 24 11:13:08 vps sshd[742761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.191.149
May 24 11:13:10 vps sshd[742761]: Failed password for invalid user iqi from 148.70.191.149 port 36644 ssh2
May 24 11:16:31 vps sshd[759390]: Invalid user eku from 148.70.191.149 port 47818
...
2020-05-24 17:48:57
attack
May 15 21:20:48 ns382633 sshd\[3542\]: Invalid user user from 148.70.191.149 port 44280
May 15 21:20:48 ns382633 sshd\[3542\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.191.149
May 15 21:20:50 ns382633 sshd\[3542\]: Failed password for invalid user user from 148.70.191.149 port 44280 ssh2
May 15 21:35:24 ns382633 sshd\[6146\]: Invalid user claudia from 148.70.191.149 port 41084
May 15 21:35:24 ns382633 sshd\[6146\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.191.149
2020-05-16 03:55:37
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.70.191.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 859
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.70.191.149.			IN	A

;; AUTHORITY SECTION:
.			321	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051501 1800 900 604800 86400

;; Query time: 161 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 16 03:55:34 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 149.191.70.148.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 149.191.70.148.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
111.67.203.24 attackspam
Aug  1 17:42:10 mout sshd[21600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.203.24  user=root
Aug  1 17:42:12 mout sshd[21600]: Failed password for root from 111.67.203.24 port 33672 ssh2
2020-08-02 00:35:46
138.68.247.104 attack
Unauthorized connection attempt, Score = 100 , Ban for 1 month
2020-08-02 00:37:35
182.151.15.175 attackbots
Tried sshing with brute force.
2020-08-02 00:42:12
150.95.138.39 attackspambots
Aug  1 18:14:57 abendstille sshd\[3672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.138.39  user=root
Aug  1 18:14:59 abendstille sshd\[3672\]: Failed password for root from 150.95.138.39 port 45152 ssh2
Aug  1 18:19:32 abendstille sshd\[8205\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.138.39  user=root
Aug  1 18:19:34 abendstille sshd\[8205\]: Failed password for root from 150.95.138.39 port 56692 ssh2
Aug  1 18:23:57 abendstille sshd\[12571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.138.39  user=root
...
2020-08-02 00:37:06
105.160.103.98 attackbotsspam
Email rejected due to spam filtering
2020-08-02 01:01:31
190.134.61.211 attackspam
Email rejected due to spam filtering
2020-08-02 00:46:11
178.165.99.208 attackspambots
SSH Brute Force
2020-08-02 01:14:49
117.1.136.230 attackspambots
Email rejected due to spam filtering
2020-08-02 00:35:14
223.212.252.18 attack
Telnet/23 MH Probe, Scan, BF, Hack -
2020-08-02 00:48:17
181.22.6.114 attackspam
Brute force attempt
2020-08-02 00:57:08
51.79.54.234 attackspambots
Aug  1 18:51:06 mout sshd[29335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.54.234  user=root
Aug  1 18:51:07 mout sshd[29335]: Failed password for root from 51.79.54.234 port 60432 ssh2
2020-08-02 00:54:06
122.51.167.108 attackbots
2020-07-28T03:10:40.448663correo.[domain] sshd[13148]: Invalid user suganya from 122.51.167.108 port 56818 2020-07-28T03:10:42.155775correo.[domain] sshd[13148]: Failed password for invalid user suganya from 122.51.167.108 port 56818 ssh2 2020-07-28T03:23:09.652481correo.[domain] sshd[15205]: Invalid user xuwei from 122.51.167.108 port 50004 ...
2020-08-02 00:55:37
106.12.121.179 attackbotsspam
Aug  1 15:54:24 ns381471 sshd[10582]: Failed password for root from 106.12.121.179 port 40014 ssh2
2020-08-02 00:57:49
112.196.9.88 attackbotsspam
SSH Brute Force
2020-08-02 00:49:59
60.251.80.86 attack
 TCP (SYN) 60.251.80.86:45090 -> port 445, len 44
2020-08-02 00:50:18

最近上报的IP列表

143.143.94.227 23.48.139.186 70.37.114.110 218.26.30.58
196.187.250.139 14.190.152.16 95.111.231.198 34.78.87.135
106.53.9.137 185.107.45.180 187.133.229.89 122.51.221.3
119.160.149.220 218.7.116.105 106.79.202.47 69.174.91.32
103.225.50.81 83.229.149.191 164.132.159.49 95.218.109.111