必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Huawei International Pte Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbots
Unauthorized access detected from banned ip
2019-12-28 16:06:13
相同子网IP讨论:
IP 类型 评论内容 时间
159.138.149.210 attackspam
do not respect robot.txt
2020-02-29 03:33:45
159.138.149.47 attackbotsspam
Looking for resource vulnerabilities
2020-01-15 09:23:48
159.138.149.148 attackspambots
badbot
2020-01-07 22:29:13
159.138.149.42 attack
Unauthorized access detected from banned ip
2020-01-01 13:13:04
159.138.149.107 attack
[Fri Dec 20 21:47:05.500811 2019] [ssl:info] [pid 23331:tid 140202395809536] [client 159.138.149.107:41419] AH02033: No hostname was provided via SNI for a name based virtual host
...
2019-12-21 06:23:57
159.138.149.62 attack
badbot
2019-11-27 06:21:04
159.138.149.52 attack
badbot
2019-11-27 03:31:07
159.138.149.34 attackspam
badbot
2019-11-25 14:44:27
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.138.149.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62044
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;159.138.149.214.		IN	A

;; AUTHORITY SECTION:
.			151	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122800 1800 900 604800 86400

;; Query time: 619 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 28 16:06:10 CST 2019
;; MSG SIZE  rcvd: 119
HOST信息:
214.149.138.159.in-addr.arpa domain name pointer ecs-159-138-149-214.compute.hwclouds-dns.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
214.149.138.159.in-addr.arpa	name = ecs-159-138-149-214.compute.hwclouds-dns.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
79.0.181.149 attackspambots
Invalid user oracle from 79.0.181.149 port 54874
2020-08-18 20:02:05
125.212.152.91 attackspambots
1597722486 - 08/18/2020 05:48:06 Host: 125.212.152.91/125.212.152.91 Port: 22 TCP Blocked
...
2020-08-18 19:35:48
106.53.241.180 attackbots
fail2ban
2020-08-18 20:06:55
123.163.238.198 attackspam
/phpmyadmin/
2020-08-18 19:37:10
113.167.42.94 attackspam
1597722425 - 08/18/2020 05:47:05 Host: 113.167.42.94/113.167.42.94 Port: 445 TCP Blocked
...
2020-08-18 20:10:04
45.124.144.116 attack
Banned for a week because repeated abuses, for example SSH, but not only
2020-08-18 19:48:22
129.204.177.177 attackbots
Aug 18 02:55:55 r.ca sshd[21482]: Failed password for root from 129.204.177.177 port 57420 ssh2
2020-08-18 19:43:26
222.186.30.112 attackbotsspam
Aug 18 08:32:34 vps46666688 sshd[10023]: Failed password for root from 222.186.30.112 port 21866 ssh2
...
2020-08-18 19:36:35
139.59.92.19 attackspam
Failed password for postgres from 139.59.92.19 port 52552 ssh2
Invalid user ganyi from 139.59.92.19 port 34042
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.92.19
Invalid user ganyi from 139.59.92.19 port 34042
Failed password for invalid user ganyi from 139.59.92.19 port 34042 ssh2
2020-08-18 20:05:12
181.48.120.220 attack
Aug 18 11:54:42 vps-51d81928 sshd[707513]: Failed password for root from 181.48.120.220 port 26370 ssh2
Aug 18 11:59:17 vps-51d81928 sshd[707568]: Invalid user teamspeak from 181.48.120.220 port 38874
Aug 18 11:59:17 vps-51d81928 sshd[707568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.120.220 
Aug 18 11:59:17 vps-51d81928 sshd[707568]: Invalid user teamspeak from 181.48.120.220 port 38874
Aug 18 11:59:18 vps-51d81928 sshd[707568]: Failed password for invalid user teamspeak from 181.48.120.220 port 38874 ssh2
...
2020-08-18 20:17:41
123.207.149.93 attack
Aug 18 07:43:49 journals sshd\[103197\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.149.93  user=root
Aug 18 07:43:51 journals sshd\[103197\]: Failed password for root from 123.207.149.93 port 59548 ssh2
Aug 18 07:48:39 journals sshd\[103737\]: Invalid user mori from 123.207.149.93
Aug 18 07:48:39 journals sshd\[103737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.149.93
Aug 18 07:48:41 journals sshd\[103737\]: Failed password for invalid user mori from 123.207.149.93 port 34810 ssh2
...
2020-08-18 19:50:20
54.38.70.93 attack
Aug 18 13:40:16 srv-ubuntu-dev3 sshd[94597]: Invalid user adrian from 54.38.70.93
Aug 18 13:40:16 srv-ubuntu-dev3 sshd[94597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.70.93
Aug 18 13:40:16 srv-ubuntu-dev3 sshd[94597]: Invalid user adrian from 54.38.70.93
Aug 18 13:40:18 srv-ubuntu-dev3 sshd[94597]: Failed password for invalid user adrian from 54.38.70.93 port 37128 ssh2
Aug 18 13:43:58 srv-ubuntu-dev3 sshd[95079]: Invalid user tmp from 54.38.70.93
Aug 18 13:43:58 srv-ubuntu-dev3 sshd[95079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.70.93
Aug 18 13:43:58 srv-ubuntu-dev3 sshd[95079]: Invalid user tmp from 54.38.70.93
Aug 18 13:43:59 srv-ubuntu-dev3 sshd[95079]: Failed password for invalid user tmp from 54.38.70.93 port 45260 ssh2
Aug 18 13:47:35 srv-ubuntu-dev3 sshd[95620]: Invalid user cxh from 54.38.70.93
...
2020-08-18 20:03:51
203.172.76.4 attackspam
ssh brute force
2020-08-18 20:16:48
201.184.241.243 attack
Brute force attempt
2020-08-18 19:47:12
119.57.103.38 attackbotsspam
Aug 18 07:36:44 onepixel sshd[3836124]: Invalid user elk from 119.57.103.38 port 56808
Aug 18 07:36:44 onepixel sshd[3836124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.57.103.38 
Aug 18 07:36:44 onepixel sshd[3836124]: Invalid user elk from 119.57.103.38 port 56808
Aug 18 07:36:46 onepixel sshd[3836124]: Failed password for invalid user elk from 119.57.103.38 port 56808 ssh2
Aug 18 07:40:29 onepixel sshd[3838408]: Invalid user ops from 119.57.103.38 port 40420
2020-08-18 20:01:40

最近上报的IP列表

209.198.75.92 91.223.68.205 186.23.85.142 117.216.139.61
201.161.58.147 180.244.71.6 51.91.254.98 142.11.239.69
78.25.65.158 103.69.36.21 110.172.132.131 65.194.145.119
172.94.22.72 190.201.131.248 115.218.176.5 144.48.226.234
202.21.119.230 218.212.39.31 103.139.45.133 81.28.100.95