必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): Huawei International Pte Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
badbot
2019-11-27 06:21:04
相同子网IP讨论:
IP 类型 评论内容 时间
159.138.149.210 attackspam
do not respect robot.txt
2020-02-29 03:33:45
159.138.149.47 attackbotsspam
Looking for resource vulnerabilities
2020-01-15 09:23:48
159.138.149.148 attackspambots
badbot
2020-01-07 22:29:13
159.138.149.42 attack
Unauthorized access detected from banned ip
2020-01-01 13:13:04
159.138.149.214 attackbots
Unauthorized access detected from banned ip
2019-12-28 16:06:13
159.138.149.107 attack
[Fri Dec 20 21:47:05.500811 2019] [ssl:info] [pid 23331:tid 140202395809536] [client 159.138.149.107:41419] AH02033: No hostname was provided via SNI for a name based virtual host
...
2019-12-21 06:23:57
159.138.149.52 attack
badbot
2019-11-27 03:31:07
159.138.149.34 attackspam
badbot
2019-11-25 14:44:27
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.138.149.62
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56651
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;159.138.149.62.			IN	A

;; AUTHORITY SECTION:
.			492	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112602 1800 900 604800 86400

;; Query time: 96 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 27 06:21:00 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
62.149.138.159.in-addr.arpa domain name pointer ecs-159-138-149-62.compute.hwclouds-dns.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
62.149.138.159.in-addr.arpa	name = ecs-159-138-149-62.compute.hwclouds-dns.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
106.51.80.198 attack
Oct  3 18:29:04 hanapaa sshd\[5266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.80.198  user=root
Oct  3 18:29:06 hanapaa sshd\[5266\]: Failed password for root from 106.51.80.198 port 40434 ssh2
Oct  3 18:33:36 hanapaa sshd\[5636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.80.198  user=root
Oct  3 18:33:38 hanapaa sshd\[5636\]: Failed password for root from 106.51.80.198 port 52470 ssh2
Oct  3 18:38:01 hanapaa sshd\[6065\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.80.198  user=root
2019-10-04 12:46:05
222.186.173.119 attackspambots
Oct  4 00:18:03 plusreed sshd[23308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.119  user=root
Oct  4 00:18:05 plusreed sshd[23308]: Failed password for root from 222.186.173.119 port 38601 ssh2
...
2019-10-04 12:29:44
217.182.71.54 attack
Oct  3 18:45:07 eddieflores sshd\[17758\]: Invalid user debian@1234 from 217.182.71.54
Oct  3 18:45:07 eddieflores sshd\[17758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.ip-217-182-71.eu
Oct  3 18:45:09 eddieflores sshd\[17758\]: Failed password for invalid user debian@1234 from 217.182.71.54 port 46590 ssh2
Oct  3 18:49:10 eddieflores sshd\[18094\]: Invalid user P@ssw0rd\#12345 from 217.182.71.54
Oct  3 18:49:10 eddieflores sshd\[18094\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.ip-217-182-71.eu
2019-10-04 13:12:15
222.186.15.160 attackspambots
Oct  4 07:25:52 server2 sshd\[28225\]: User root from 222.186.15.160 not allowed because not listed in AllowUsers
Oct  4 07:33:46 server2 sshd\[28861\]: User root from 222.186.15.160 not allowed because not listed in AllowUsers
Oct  4 07:35:17 server2 sshd\[29074\]: User root from 222.186.15.160 not allowed because not listed in AllowUsers
Oct  4 07:35:17 server2 sshd\[29076\]: User root from 222.186.15.160 not allowed because not listed in AllowUsers
Oct  4 07:35:18 server2 sshd\[29072\]: User root from 222.186.15.160 not allowed because not listed in AllowUsers
Oct  4 07:35:18 server2 sshd\[29078\]: User root from 222.186.15.160 not allowed because not listed in AllowUsers
2019-10-04 12:41:39
1.193.108.90 attackspambots
Oct  4 05:58:51 [host] sshd[5499]: Invalid user jose from 1.193.108.90
Oct  4 05:58:51 [host] sshd[5499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.193.108.90
Oct  4 05:58:52 [host] sshd[5499]: Failed password for invalid user jose from 1.193.108.90 port 38066 ssh2
2019-10-04 12:36:31
207.154.206.212 attackbotsspam
Oct  4 07:11:17 dedicated sshd[17346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.206.212  user=root
Oct  4 07:11:20 dedicated sshd[17346]: Failed password for root from 207.154.206.212 port 54252 ssh2
2019-10-04 13:12:46
211.159.184.39 attackspambots
ECShop Remote Code Execution Vulnerability, PTR: PTR record not found
2019-10-04 12:50:33
128.199.128.215 attack
Jan 16 19:57:32 vtv3 sshd\[22362\]: Invalid user ubuntu1 from 128.199.128.215 port 58382
Jan 16 19:57:32 vtv3 sshd\[22362\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.128.215
Jan 16 19:57:34 vtv3 sshd\[22362\]: Failed password for invalid user ubuntu1 from 128.199.128.215 port 58382 ssh2
Jan 16 20:02:32 vtv3 sshd\[23995\]: Invalid user helpdesk from 128.199.128.215 port 58638
Jan 16 20:02:32 vtv3 sshd\[23995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.128.215
Feb 23 10:07:57 vtv3 sshd\[1319\]: Invalid user chris from 128.199.128.215 port 54534
Feb 23 10:07:57 vtv3 sshd\[1319\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.128.215
Feb 23 10:07:59 vtv3 sshd\[1319\]: Failed password for invalid user chris from 128.199.128.215 port 54534 ssh2
Feb 23 10:13:04 vtv3 sshd\[3002\]: Invalid user teamspeak3 from 128.199.128.215 port 60992
Feb 23 10:13:04
2019-10-04 13:13:07
119.42.86.223 attackbotsspam
Lines containing failures of 119.42.86.223
Sep 30 21:37:28 shared10 sshd[31994]: Invalid user admin from 119.42.86.223 port 36347
Sep 30 21:37:28 shared10 sshd[31994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.42.86.223
Sep 30 21:37:30 shared10 sshd[31994]: Failed password for invalid user admin from 119.42.86.223 port 36347 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=119.42.86.223
2019-10-04 12:56:26
89.36.216.125 attack
Oct  4 06:33:06 mail sshd\[5706\]: Failed password for invalid user Mark@123 from 89.36.216.125 port 47860 ssh2
Oct  4 06:37:13 mail sshd\[6147\]: Invalid user P@ssword\#123456 from 89.36.216.125 port 33026
Oct  4 06:37:13 mail sshd\[6147\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.36.216.125
Oct  4 06:37:14 mail sshd\[6147\]: Failed password for invalid user P@ssword\#123456 from 89.36.216.125 port 33026 ssh2
Oct  4 06:41:21 mail sshd\[6676\]: Invalid user 1qaz3edc5tgbr from 89.36.216.125 port 46420
2019-10-04 12:56:00
159.203.81.93 attack
Automatic report - Banned IP Access
2019-10-04 12:31:28
1.34.242.32 attackspam
port scan and connect, tcp 23 (telnet)
2019-10-04 12:34:09
202.183.189.11 attackbotsspam
Oct  4 04:36:10 web8 sshd\[1565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.183.189.11  user=root
Oct  4 04:36:13 web8 sshd\[1565\]: Failed password for root from 202.183.189.11 port 51610 ssh2
Oct  4 04:40:55 web8 sshd\[3896\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.183.189.11  user=root
Oct  4 04:40:57 web8 sshd\[3896\]: Failed password for root from 202.183.189.11 port 37426 ssh2
Oct  4 04:45:37 web8 sshd\[6238\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.183.189.11  user=root
2019-10-04 12:54:56
183.134.199.68 attackbots
Oct  4 06:19:24 cp sshd[11292]: Failed password for root from 183.134.199.68 port 55119 ssh2
Oct  4 06:19:24 cp sshd[11292]: Failed password for root from 183.134.199.68 port 55119 ssh2
2019-10-04 12:43:58
152.250.245.182 attack
Oct  2 05:51:33 xxx sshd[26680]: Invalid user user1 from 152.250.245.182 port 61548
Oct  2 05:51:33 xxx sshd[26680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.250.245.182
Oct  2 05:51:34 xxx sshd[26680]: Failed password for invalid user user1 from 152.250.245.182 port 61548 ssh2
Oct  2 05:51:34 xxx sshd[26680]: Received disconnect from 152.250.245.182 port 61548:11: Bye Bye [preauth]
Oct  2 05:51:34 xxx sshd[26680]: Disconnected from 152.250.245.182 port 61548 [preauth]
Oct  2 05:57:18 xxx sshd[27164]: Invalid user user from 152.250.245.182 port 15546
Oct  2 05:57:18 xxx sshd[27164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.250.245.182


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=152.250.245.182
2019-10-04 12:54:00

最近上报的IP列表

180.221.49.144 89.133.103.33 221.237.216.235 167.114.43.87
101.108.76.171 69.94.136.249 82.78.210.165 89.77.44.52
73.124.159.231 197.245.103.209 201.42.152.124 188.213.212.60
185.104.126.26 218.102.62.197 199.247.2.74 188.127.164.96
91.107.123.127 185.199.96.78 123.26.156.16 187.163.188.253