必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Czech Republic

运营商(isp): Master Internet s.r.o.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbotsspam
[portscan] Port scan
2019-11-07 03:36:16
attackbotsspam
[portscan] Port scan
2019-08-15 21:21:05
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.62.148.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35549
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;149.62.148.68.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081500 1800 900 604800 86400

;; Query time: 85 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 15 21:20:55 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
68.148.62.149.in-addr.arpa domain name pointer 149-62-148-68.static.masterinter.net.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
68.148.62.149.in-addr.arpa	name = 149-62-148-68.static.masterinter.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
118.71.152.60 attackspam
1597205894 - 08/12/2020 06:18:14 Host: 118.71.152.60/118.71.152.60 Port: 445 TCP Blocked
2020-08-12 19:19:04
46.229.168.132 attackspam
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
2020-08-12 19:01:53
51.178.81.106 attackspam
Automatic report generated by Wazuh
2020-08-12 19:02:39
107.6.171.133 attack
" "
2020-08-12 19:19:23
122.51.186.17 attack
Aug  9 21:14:46 mail sshd[30004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.186.17  user=r.r
Aug  9 21:14:47 mail sshd[30004]: Failed password for r.r from 122.51.186.17 port 51754 ssh2
Aug  9 21:14:48 mail sshd[30004]: Received disconnect from 122.51.186.17: 11: Bye Bye [preauth]
Aug  9 21:33:20 mail sshd[673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.186.17  user=r.r
Aug  9 21:33:23 mail sshd[673]: Failed password for r.r from 122.51.186.17 port 57664 ssh2
Aug  9 21:33:23 mail sshd[673]: Received disconnect from 122.51.186.17: 11: Bye Bye [preauth]
Aug  9 21:39:10 mail sshd[1811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.186.17  user=r.r
Aug  9 21:39:12 mail sshd[1811]: Failed password for r.r from 122.51.186.17 port 60968 ssh2
Aug  9 21:39:13 mail sshd[1811]: Received disconnect from 122.51.186.17: 11: Bye By........
-------------------------------
2020-08-12 19:04:01
161.35.157.180 attackbots
SSH break in attempt
...
2020-08-12 18:47:05
114.119.161.8 attack
[Wed Aug 12 10:46:48.271112 2020] [:error] [pid 15638:tid 140440061867776] [client 114.119.161.8:26504] [client 114.119.161.8] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "118"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-iklim/agroklimatologi/kalender-tanam/2206-kalender-tanam-katam-terpadu-pulau-sulawesi/kalender-tanam-katam-terpadu-provinsi-gorontalo/kalender-tanam-katam-terpadu-kabupaten-bone-bolango-provinsi-gorontalo/kalender-tanam-katam-terpadu-kecamatan-b
...
2020-08-12 19:07:08
184.105.139.89 attack
Port scan denied
2020-08-12 19:08:08
222.231.49.76 attack
Unauthorised access (Aug 12) SRC=222.231.49.76 LEN=48 TTL=115 ID=7753 DF TCP DPT=445 WINDOW=8192 SYN
2020-08-12 18:44:28
49.88.112.112 attackspam
Fail2Ban Ban Triggered (2)
2020-08-12 19:03:12
222.112.255.124 attack
2020-08-12T03:38:01.489854shield sshd\[23511\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.112.255.124  user=root
2020-08-12T03:38:03.463378shield sshd\[23511\]: Failed password for root from 222.112.255.124 port 19456 ssh2
2020-08-12T03:42:42.016321shield sshd\[23880\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.112.255.124  user=root
2020-08-12T03:42:44.431052shield sshd\[23880\]: Failed password for root from 222.112.255.124 port 47198 ssh2
2020-08-12T03:47:15.126453shield sshd\[24839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.112.255.124  user=root
2020-08-12 18:48:14
95.182.122.131 attack
Aug 12 10:25:59 localhost sshd[54234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.182.122.131  user=root
Aug 12 10:26:01 localhost sshd[54234]: Failed password for root from 95.182.122.131 port 33912 ssh2
Aug 12 10:29:49 localhost sshd[54653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.182.122.131  user=root
Aug 12 10:29:51 localhost sshd[54653]: Failed password for root from 95.182.122.131 port 36395 ssh2
Aug 12 10:33:38 localhost sshd[55018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.182.122.131  user=root
Aug 12 10:33:40 localhost sshd[55018]: Failed password for root from 95.182.122.131 port 38875 ssh2
...
2020-08-12 18:42:40
190.200.179.198 attackbots
1597204033 - 08/12/2020 05:47:13 Host: 190.200.179.198/190.200.179.198 Port: 445 TCP Blocked
2020-08-12 18:49:28
179.186.145.142 attackspambots
Unauthorized connection attempt from IP address 179.186.145.142 on Port 445(SMB)
2020-08-12 19:13:55
106.124.140.36 attack
Aug 12 12:03:21 webhost01 sshd[13753]: Failed password for root from 106.124.140.36 port 43081 ssh2
...
2020-08-12 18:39:22

最近上报的IP列表

49.36.6.191 94.182.191.27 182.210.211.34 116.224.12.158
77.247.110.31 52.178.36.223 61.78.138.1 139.99.209.146
189.163.242.26 124.120.198.19 186.139.225.186 108.186.244.98
5.22.153.101 112.84.60.47 173.208.36.106 92.250.123.145
82.79.251.51 88.115.95.255 190.246.3.11 172.99.69.49