必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Huawei International Pte Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspambots
badbot
2020-01-07 22:29:13
相同子网IP讨论:
IP 类型 评论内容 时间
159.138.149.210 attackspam
do not respect robot.txt
2020-02-29 03:33:45
159.138.149.47 attackbotsspam
Looking for resource vulnerabilities
2020-01-15 09:23:48
159.138.149.42 attack
Unauthorized access detected from banned ip
2020-01-01 13:13:04
159.138.149.214 attackbots
Unauthorized access detected from banned ip
2019-12-28 16:06:13
159.138.149.107 attack
[Fri Dec 20 21:47:05.500811 2019] [ssl:info] [pid 23331:tid 140202395809536] [client 159.138.149.107:41419] AH02033: No hostname was provided via SNI for a name based virtual host
...
2019-12-21 06:23:57
159.138.149.62 attack
badbot
2019-11-27 06:21:04
159.138.149.52 attack
badbot
2019-11-27 03:31:07
159.138.149.34 attackspam
badbot
2019-11-25 14:44:27
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.138.149.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8766
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;159.138.149.148.		IN	A

;; AUTHORITY SECTION:
.			482	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010700 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 07 22:29:08 CST 2020
;; MSG SIZE  rcvd: 119
HOST信息:
148.149.138.159.in-addr.arpa domain name pointer ecs-159-138-149-148.compute.hwclouds-dns.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
148.149.138.159.in-addr.arpa	name = ecs-159-138-149-148.compute.hwclouds-dns.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
103.122.32.99 attackspambots
Aug  5 08:43:27 mout sshd[14313]: Disconnected from authenticating user root 103.122.32.99 port 38772 [preauth]
Aug  5 08:48:02 mout sshd[14764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.122.32.99  user=root
Aug  5 08:48:04 mout sshd[14764]: Failed password for root from 103.122.32.99 port 53494 ssh2
2020-08-05 14:57:38
43.224.156.26 attack
Aug  5 07:28:16 django-0 sshd[8247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.156.26  user=root
Aug  5 07:28:18 django-0 sshd[8247]: Failed password for root from 43.224.156.26 port 16933 ssh2
...
2020-08-05 15:35:10
165.22.31.24 attackbots
165.22.31.24 - - [05/Aug/2020:04:53:08 +0100] "POST /wp-login.php HTTP/1.1" 200 2082 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
165.22.31.24 - - [05/Aug/2020:04:53:09 +0100] "POST /wp-login.php HTTP/1.1" 200 2059 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
165.22.31.24 - - [05/Aug/2020:04:53:10 +0100] "POST /wp-login.php HTTP/1.1" 200 2062 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-05 15:25:27
27.7.186.222 attack
Wordpress attack
2020-08-05 15:17:53
51.83.73.109 attackspam
$f2bV_matches
2020-08-05 15:07:55
152.136.101.207 attackbots
SSH Brute Force
2020-08-05 15:28:08
192.35.169.26 attackspambots
Port scanning [2 denied]
2020-08-05 15:11:18
66.249.69.154 attack
Automatic report - Banned IP Access
2020-08-05 15:37:19
27.5.11.235 attack
Aug  5 06:53:02 taivassalofi sshd[77264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.5.11.235
Aug  5 06:53:04 taivassalofi sshd[77264]: Failed password for invalid user 888888 from 27.5.11.235 port 2746 ssh2
...
2020-08-05 15:30:11
49.233.77.12 attackspambots
Aug  5 06:28:04 fhem-rasp sshd[20101]: Failed password for root from 49.233.77.12 port 58344 ssh2
Aug  5 06:28:05 fhem-rasp sshd[20101]: Disconnected from authenticating user root 49.233.77.12 port 58344 [preauth]
...
2020-08-05 14:58:26
106.13.226.170 attack
Aug  5 07:42:39 ns381471 sshd[6060]: Failed password for root from 106.13.226.170 port 59692 ssh2
2020-08-05 15:32:45
45.84.224.165 attackbots
45.84.224.165 - - [05/Aug/2020:06:07:28 +0200] "GET /wp-login.php HTTP/1.1" 200 5990 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.84.224.165 - - [05/Aug/2020:06:07:29 +0200] "POST /wp-login.php HTTP/1.1" 200 6220 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.84.224.165 - - [05/Aug/2020:06:07:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-08-05 15:37:47
189.33.154.61 attackbotsspam
Aug  4 20:23:59 hpm sshd\[30892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.33.154.61  user=root
Aug  4 20:24:02 hpm sshd\[30892\]: Failed password for root from 189.33.154.61 port 46262 ssh2
Aug  4 20:27:11 hpm sshd\[31135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.33.154.61  user=root
Aug  4 20:27:13 hpm sshd\[31135\]: Failed password for root from 189.33.154.61 port 56140 ssh2
Aug  4 20:30:32 hpm sshd\[31347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.33.154.61  user=root
2020-08-05 15:30:32
51.89.149.241 attackspambots
Aug  5 04:00:16 django-0 sshd[4526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=241.ip-51-89-149.eu  user=root
Aug  5 04:00:18 django-0 sshd[4526]: Failed password for root from 51.89.149.241 port 42988 ssh2
...
2020-08-05 15:29:53
200.146.75.58 attackbots
2020-08-05T04:14:12.239127ionos.janbro.de sshd[103137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.146.75.58  user=root
2020-08-05T04:14:14.080434ionos.janbro.de sshd[103137]: Failed password for root from 200.146.75.58 port 59724 ssh2
2020-08-05T04:17:19.055875ionos.janbro.de sshd[103150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.146.75.58  user=root
2020-08-05T04:17:21.233766ionos.janbro.de sshd[103150]: Failed password for root from 200.146.75.58 port 46750 ssh2
2020-08-05T04:20:24.761162ionos.janbro.de sshd[103158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.146.75.58  user=root
2020-08-05T04:20:26.336656ionos.janbro.de sshd[103158]: Failed password for root from 200.146.75.58 port 33776 ssh2
2020-08-05T04:23:32.918878ionos.janbro.de sshd[103170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2
...
2020-08-05 14:56:20

最近上报的IP列表

19.145.37.48 203.94.229.131 24.199.94.97 163.176.60.95
176.165.60.67 26.101.241.138 95.12.9.95 37.57.103.197
43.224.8.12 220.137.161.89 165.227.163.166 117.194.111.162
106.75.47.137 94.218.61.39 93.41.232.91 79.113.249.192
209.58.171.194 95.29.68.163 171.228.78.142 103.70.68.106