必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Huawei International Pte Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbots
Unauthorized access detected from banned ip
2019-12-28 16:06:13
相同子网IP讨论:
IP 类型 评论内容 时间
159.138.149.210 attackspam
do not respect robot.txt
2020-02-29 03:33:45
159.138.149.47 attackbotsspam
Looking for resource vulnerabilities
2020-01-15 09:23:48
159.138.149.148 attackspambots
badbot
2020-01-07 22:29:13
159.138.149.42 attack
Unauthorized access detected from banned ip
2020-01-01 13:13:04
159.138.149.107 attack
[Fri Dec 20 21:47:05.500811 2019] [ssl:info] [pid 23331:tid 140202395809536] [client 159.138.149.107:41419] AH02033: No hostname was provided via SNI for a name based virtual host
...
2019-12-21 06:23:57
159.138.149.62 attack
badbot
2019-11-27 06:21:04
159.138.149.52 attack
badbot
2019-11-27 03:31:07
159.138.149.34 attackspam
badbot
2019-11-25 14:44:27
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.138.149.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62044
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;159.138.149.214.		IN	A

;; AUTHORITY SECTION:
.			151	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122800 1800 900 604800 86400

;; Query time: 619 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 28 16:06:10 CST 2019
;; MSG SIZE  rcvd: 119
HOST信息:
214.149.138.159.in-addr.arpa domain name pointer ecs-159-138-149-214.compute.hwclouds-dns.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
214.149.138.159.in-addr.arpa	name = ecs-159-138-149-214.compute.hwclouds-dns.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
180.76.182.56 attackbots
Jul  9 15:07:22 minden010 sshd[11085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.182.56
Jul  9 15:07:23 minden010 sshd[11085]: Failed password for invalid user lujunyu from 180.76.182.56 port 1966 ssh2
Jul  9 15:10:16 minden010 sshd[11804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.182.56
...
2020-07-09 21:34:46
14.176.19.3 attackbots
trying to access non-authorized port
2020-07-09 21:38:14
111.40.214.85 attackspambots
Port probing on unauthorized port 1433
2020-07-09 21:22:39
5.39.95.38 attack
Jul  9 14:16:45 h2427292 sshd\[9895\]: Invalid user cinnamon from 5.39.95.38
Jul  9 14:16:47 h2427292 sshd\[9895\]: Failed password for invalid user cinnamon from 5.39.95.38 port 43554 ssh2
Jul  9 14:36:49 h2427292 sshd\[28390\]: Invalid user zds from 5.39.95.38
...
2020-07-09 21:18:37
36.111.181.248 attackspam
Jul  9 14:44:06 OPSO sshd\[13709\]: Invalid user stuff from 36.111.181.248 port 46386
Jul  9 14:44:06 OPSO sshd\[13709\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.111.181.248
Jul  9 14:44:08 OPSO sshd\[13709\]: Failed password for invalid user stuff from 36.111.181.248 port 46386 ssh2
Jul  9 14:48:21 OPSO sshd\[14644\]: Invalid user attie from 36.111.181.248 port 49136
Jul  9 14:48:21 OPSO sshd\[14644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.111.181.248
2020-07-09 21:08:28
68.183.104.88 attack
Jul  9 08:52:00 ny01 sshd[29456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.104.88
Jul  9 08:52:01 ny01 sshd[29456]: Failed password for invalid user kuiliang from 68.183.104.88 port 50892 ssh2
Jul  9 08:55:07 ny01 sshd[30192]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.104.88
2020-07-09 21:05:42
217.216.221.68 attackspambots
postfix
2020-07-09 20:55:54
145.255.31.188 attack
fail2ban
2020-07-09 21:23:37
91.228.229.149 attackspambots
20/7/9@08:08:55: FAIL: Alarm-Network address from=91.228.229.149
20/7/9@08:08:55: FAIL: Alarm-Network address from=91.228.229.149
...
2020-07-09 21:26:54
167.89.22.138 attackbots
SpamScore above: 10.0
2020-07-09 21:15:33
222.186.30.76 attackspambots
Jul  9 14:57:32 home sshd[7823]: Failed password for root from 222.186.30.76 port 17106 ssh2
Jul  9 14:57:43 home sshd[7842]: Failed password for root from 222.186.30.76 port 63167 ssh2
...
2020-07-09 21:04:35
62.103.87.101 attackbots
Jul  9 15:00:08 piServer sshd[10920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.103.87.101 
Jul  9 15:00:09 piServer sshd[10920]: Failed password for invalid user frauke from 62.103.87.101 port 45798 ssh2
Jul  9 15:03:38 piServer sshd[11200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.103.87.101 
...
2020-07-09 21:11:16
112.85.42.200 attack
2020-07-09T13:28:32.948846mail.csmailer.org sshd[30405]: Failed password for root from 112.85.42.200 port 58707 ssh2
2020-07-09T13:28:36.272605mail.csmailer.org sshd[30405]: Failed password for root from 112.85.42.200 port 58707 ssh2
2020-07-09T13:28:40.001794mail.csmailer.org sshd[30405]: Failed password for root from 112.85.42.200 port 58707 ssh2
2020-07-09T13:28:40.002225mail.csmailer.org sshd[30405]: error: maximum authentication attempts exceeded for root from 112.85.42.200 port 58707 ssh2 [preauth]
2020-07-09T13:28:40.002243mail.csmailer.org sshd[30405]: Disconnecting: Too many authentication failures [preauth]
...
2020-07-09 21:35:49
45.141.84.10 attackspam
Jul  9 14:08:50 inter-technics sshd[22666]: Invalid user admin from 45.141.84.10 port 37165
Jul  9 14:08:50 inter-technics sshd[22666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.141.84.10
Jul  9 14:08:50 inter-technics sshd[22666]: Invalid user admin from 45.141.84.10 port 37165
Jul  9 14:08:52 inter-technics sshd[22666]: Failed password for invalid user admin from 45.141.84.10 port 37165 ssh2
Jul  9 14:08:53 inter-technics sshd[22668]: Invalid user support from 45.141.84.10 port 57580
...
2020-07-09 21:31:59
61.177.172.41 attackspam
2020-07-09T13:22:31.007595mail.csmailer.org sshd[30014]: Failed password for root from 61.177.172.41 port 3701 ssh2
2020-07-09T13:22:36.063973mail.csmailer.org sshd[30014]: Failed password for root from 61.177.172.41 port 3701 ssh2
2020-07-09T13:22:39.645082mail.csmailer.org sshd[30014]: Failed password for root from 61.177.172.41 port 3701 ssh2
2020-07-09T13:22:39.645415mail.csmailer.org sshd[30014]: error: maximum authentication attempts exceeded for root from 61.177.172.41 port 3701 ssh2 [preauth]
2020-07-09T13:22:39.645430mail.csmailer.org sshd[30014]: Disconnecting: Too many authentication failures [preauth]
...
2020-07-09 21:20:27

最近上报的IP列表

209.198.75.92 91.223.68.205 186.23.85.142 117.216.139.61
201.161.58.147 180.244.71.6 51.91.254.98 142.11.239.69
78.25.65.158 103.69.36.21 110.172.132.131 65.194.145.119
172.94.22.72 190.201.131.248 115.218.176.5 144.48.226.234
202.21.119.230 218.212.39.31 103.139.45.133 81.28.100.95