159.138.149.52

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Huawei International Pte Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	badbot	2019-11-27 03:31:07

相同子网IP讨论:

IP	类型	评论内容	时间
159.138.149.210	attackspam	do not respect robot.txt	2020-02-29 03:33:45
159.138.149.47	attackbotsspam	Looking for resource vulnerabilities	2020-01-15 09:23:48
159.138.149.148	attackspambots	badbot	2020-01-07 22:29:13
159.138.149.42	attack	Unauthorized access detected from banned ip	2020-01-01 13:13:04
159.138.149.214	attackbots	Unauthorized access detected from banned ip	2019-12-28 16:06:13
159.138.149.107	attack	[Fri Dec 20 21:47:05.500811 2019] [ssl:info] [pid 23331:tid 140202395809536] [client 159.138.149.107:41419] AH02033: No hostname was provided via SNI for a name based virtual host ...	2019-12-21 06:23:57
159.138.149.62	attack	badbot	2019-11-27 06:21:04
159.138.149.34	attackspam	badbot	2019-11-25 14:44:27

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.138.149.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41036
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;159.138.149.52.			IN	A

;; AUTHORITY SECTION:
.			515	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112602 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 27 03:31:04 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

52.149.138.159.in-addr.arpa domain name pointer ecs-159-138-149-52.compute.hwclouds-dns.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
52.149.138.159.in-addr.arpa	name = ecs-159-138-149-52.compute.hwclouds-dns.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
78.186.57.58	attackbotsspam	Telnet Server BruteForce Attack	2019-08-26 00:39:09
158.69.194.115	attackspam	Aug 25 13:37:22 SilenceServices sshd[4455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.194.115 Aug 25 13:37:24 SilenceServices sshd[4455]: Failed password for invalid user thaiset from 158.69.194.115 port 46469 ssh2 Aug 25 13:41:55 SilenceServices sshd[6381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.194.115	2019-08-26 01:03:32
121.134.159.21	attack	Aug 25 16:31:50 mail sshd\[26722\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.134.159.21 user=sshd Aug 25 16:31:52 mail sshd\[26722\]: Failed password for sshd from 121.134.159.21 port 47268 ssh2 ...	2019-08-26 01:20:20
122.195.200.148	attack	2019-08-25T15:59:54.690858abusebot-7.cloudsearch.cf sshd\[32388\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.195.200.148 user=root	2019-08-26 00:26:40
61.161.236.202	attackspam	Aug 25 19:55:04 srv-4 sshd\[22545\]: Invalid user test from 61.161.236.202 Aug 25 19:55:04 srv-4 sshd\[22545\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.161.236.202 Aug 25 19:55:06 srv-4 sshd\[22545\]: Failed password for invalid user test from 61.161.236.202 port 40327 ssh2 ...	2019-08-26 00:56:27
177.17.171.109	attackspam	Automatic report - Port Scan Attack	2019-08-26 01:15:12
49.88.112.68	attack	Aug 25 11:32:00 mail sshd\[20607\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.68 user=root Aug 25 11:32:02 mail sshd\[20607\]: Failed password for root from 49.88.112.68 port 36357 ssh2 ...	2019-08-26 01:15:50
78.188.101.144	attack	Aug 25 09:58:30 web2 sshd[24417]: Failed password for root from 78.188.101.144 port 48193 ssh2 Aug 25 09:58:41 web2 sshd[24417]: error: maximum authentication attempts exceeded for root from 78.188.101.144 port 48193 ssh2 [preauth]	2019-08-26 00:32:20
109.167.98.27	attackspam	ssh failed login	2019-08-26 01:01:29
95.167.39.12	attack	$f2bV_matches	2019-08-26 01:19:05
80.85.153.60	attackbotsspam	\[2019-08-25 12:09:26\] NOTICE\[1829\] chan_sip.c: Registration from '"1300" \' failed for '80.85.153.60:5064' - Wrong password \[2019-08-25 12:09:26\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-25T12:09:26.637-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1300",SessionID="0x7f7b30033378",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/80.85.153.60/5064",Challenge="529d5af3",ReceivedChallenge="529d5af3",ReceivedHash="38d57e30757c1615ba7b49c1c9a395ed" \[2019-08-25 12:10:10\] NOTICE\[1829\] chan_sip.c: Registration from '"1301" \' failed for '80.85.153.60:5070' - Wrong password \[2019-08-25 12:10:10\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-25T12:10:10.505-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1301",SessionID="0x7f7b305a3378",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/8	2019-08-26 00:34:21
58.150.135.178	attackspam	2019-08-25T16:53:15.501391abusebot-5.cloudsearch.cf sshd\[8987\]: Invalid user nick from 58.150.135.178 port 18430	2019-08-26 01:08:14
145.239.133.27	attack	Aug 25 15:24:09 XXX sshd[17367]: Invalid user tw from 145.239.133.27 port 59298	2019-08-26 01:17:14
45.55.184.78	attack	Aug 25 18:56:16 eventyay sshd[7529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.184.78 Aug 25 18:56:18 eventyay sshd[7529]: Failed password for invalid user user from 45.55.184.78 port 55196 ssh2 Aug 25 19:01:34 eventyay sshd[7658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.184.78 ...	2019-08-26 01:16:26
190.119.190.122	attackbots	SSH brute-force: detected 83 distinct usernames within a 24-hour window.	2019-08-26 01:01:50

最近上报的IP列表

210.183.181.70	101.123.128.103	89.182.136.97	119.64.47.44
189.122.168.133	5.196.68.74	80.44.44.10	162.166.62.102
159.138.159.0	129.32.167.42	55.101.109.27	153.26.191.96
233.25.226.18	237.39.106.15	177.152.130.35	202.5.16.138
52.210.238.11	71.12.226.170	113.140.218.75	62.215.187.142