159.138.155.64

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Huawei International Pte Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	badbot	2019-11-27 03:26:36

相同子网IP讨论:

IP	类型	评论内容	时间
159.138.155.239	attackbotsspam	Automatic report - Banned IP Access	2020-01-26 22:37:52
159.138.155.128	attackspam	badbot	2020-01-15 09:21:43
159.138.155.186	attackspam	badbot	2020-01-15 06:21:06
159.138.155.75	attack	Automatic report - Banned IP Access	2020-01-02 15:52:36
159.138.155.72	attackspam	Unauthorized access detected from banned ip	2019-12-28 19:45:35
159.138.155.155	attackbotsspam	badbot	2019-12-18 13:24:27
159.138.155.247	attackspam	badbot	2019-11-27 06:10:04
159.138.155.20	attackbots	badbot	2019-11-27 06:04:51
159.138.155.72	attackspambots	badbot	2019-11-27 05:46:23
159.138.155.68	attackspambots	badbot	2019-11-27 05:26:13
159.138.155.185	attackspam	badbot	2019-11-27 03:23:14
159.138.155.235	attackspam	badbot	2019-11-25 09:24:01
159.138.155.99	bots	像是个恶意爬虫 deny 159.138.152.0/24; deny 159.138.153.0/24; deny 159.138.154.0/24; deny 159.138.155.0/24; deny 159.138.156.0/24; deny 159.138.157.0/24;	2019-08-16 10:38:27

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.138.155.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39790
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;159.138.155.64.			IN	A

;; AUTHORITY SECTION:
.			588	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112602 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 27 03:26:31 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

64.155.138.159.in-addr.arpa domain name pointer ecs-159-138-155-64.compute.hwclouds-dns.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
64.155.138.159.in-addr.arpa	name = ecs-159-138-155-64.compute.hwclouds-dns.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
5.62.41.135	attackspam	Time: Mon Jun 8 06:05:39 2020 -0300 IP: 5.62.41.135 (DE/Germany/r-135-41-62-5.consumer-pool.prcdn.net) Failures: 20 (WordPressBruteForcePOST) Interval: 3600 seconds Blocked: Permanent Block	2020-06-08 18:51:09
45.236.73.10	attackspambots	Jun 8 05:32:05 mail.srvfarm.net postfix/smtpd[673236]: warning: unknown[45.236.73.10]: SASL PLAIN authentication failed: Jun 8 05:32:06 mail.srvfarm.net postfix/smtpd[673236]: lost connection after AUTH from unknown[45.236.73.10] Jun 8 05:37:33 mail.srvfarm.net postfix/smtpd[669639]: warning: unknown[45.236.73.10]: SASL PLAIN authentication failed: Jun 8 05:37:34 mail.srvfarm.net postfix/smtpd[669639]: lost connection after AUTH from unknown[45.236.73.10] Jun 8 05:39:31 mail.srvfarm.net postfix/smtps/smtpd[672469]: warning: unknown[45.236.73.10]: SASL PLAIN authentication failed:	2020-06-08 18:31:45
177.44.17.173	attack	Jun 8 05:34:22 mail.srvfarm.net postfix/smtpd[673236]: warning: unknown[177.44.17.173]: SASL PLAIN authentication failed: Jun 8 05:34:23 mail.srvfarm.net postfix/smtpd[673236]: lost connection after AUTH from unknown[177.44.17.173] Jun 8 05:39:37 mail.srvfarm.net postfix/smtps/smtpd[674232]: warning: unknown[177.44.17.173]: SASL PLAIN authentication failed: Jun 8 05:39:37 mail.srvfarm.net postfix/smtps/smtpd[674232]: lost connection after AUTH from unknown[177.44.17.173] Jun 8 05:43:44 mail.srvfarm.net postfix/smtpd[671308]: warning: unknown[177.44.17.173]: SASL PLAIN authentication failed:	2020-06-08 18:26:33
2a01:7a7:2:27d4:225:90ff:fe51:e396	attackspambots	2020/06/08 05:23:34 [error] 2029#2029: 44247 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 2a01:7a7:2:27d4:225:90ff:fe51:e396, server: _, request: "GET /wp-login.php HTTP/1.1", host: "richtsfeld-gruppe.de" 2020/06/08 05:23:34 [error] 2029#2029: 44248 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 2a01:7a7:2:27d4:225:90ff:fe51:e396, server: _, request: "GET /wp-login.php HTTP/1.1", host: "richtsfeld.biz"	2020-06-08 18:32:02
188.92.209.143	attackbots	Jun 8 05:21:04 mail.srvfarm.net postfix/smtps/smtpd[671710]: warning: unknown[188.92.209.143]: SASL PLAIN authentication failed: Jun 8 05:21:04 mail.srvfarm.net postfix/smtps/smtpd[671710]: lost connection after AUTH from unknown[188.92.209.143] Jun 8 05:21:31 mail.srvfarm.net postfix/smtps/smtpd[673656]: warning: unknown[188.92.209.143]: SASL PLAIN authentication failed: Jun 8 05:21:31 mail.srvfarm.net postfix/smtps/smtpd[673656]: lost connection after AUTH from unknown[188.92.209.143] Jun 8 05:25:20 mail.srvfarm.net postfix/smtps/smtpd[674165]: warning: unknown[188.92.209.143]: SASL PLAIN authentication failed:	2020-06-08 18:37:09
45.178.3.37	attackspam	(sshd) Failed SSH login from 45.178.3.37 (AR/Argentina/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 8 12:01:07 ubnt-55d23 sshd[23367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.178.3.37 user=root Jun 8 12:01:10 ubnt-55d23 sshd[23367]: Failed password for root from 45.178.3.37 port 36015 ssh2	2020-06-08 18:53:28
106.13.184.7	attackspam	Jun 8 10:39:32 scw-6657dc sshd[26014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.184.7 user=root Jun 8 10:39:32 scw-6657dc sshd[26014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.184.7 user=root Jun 8 10:39:34 scw-6657dc sshd[26014]: Failed password for root from 106.13.184.7 port 46250 ssh2 ...	2020-06-08 18:56:09
200.3.16.245	attackbotsspam	$f2bV_matches	2020-06-08 18:34:08
185.208.226.177	attackspam	Lines containing failures of 185.208.226.177 Jun 8 02:01:07 viking sshd[27851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.208.226.177 user=r.r Jun 8 02:01:09 viking sshd[27851]: Failed password for r.r from 185.208.226.177 port 54276 ssh2 Jun 8 02:01:09 viking sshd[27851]: Received disconnect from 185.208.226.177 port 54276:11: Bye Bye [preauth] Jun 8 02:01:09 viking sshd[27851]: Disconnected from authenticating user r.r 185.208.226.177 port 54276 [preauth] Jun 8 02:06:09 viking sshd[32607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.208.226.177 user=r.r Jun 8 02:06:11 viking sshd[32607]: Failed password for r.r from 185.208.226.177 port 48998 ssh2 Jun 8 02:06:12 viking sshd[32607]: Received disconnect from 185.208.226.177 port 48998:11: Bye Bye [preauth] Jun 8 02:06:12 viking sshd[32607]: Disconnected from authenticating user r.r 185.208.226.177 port 48998 [preau........ ------------------------------	2020-06-08 18:16:43
200.54.172.147	attackspam	Jun 8 05:12:37 web01.agentur-b-2.de postfix/smtpd[1315320]: NOQUEUE: reject: RCPT from 200-54-172-147.static.tie.cl[200.54.172.147]: 554 5.7.1 Service unavailable; Client host [200.54.172.147] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/200.54.172.147; from= to= proto=ESMTP helo=<124u.com> Jun 8 05:12:39 web01.agentur-b-2.de postfix/smtpd[1315320]: NOQUEUE: reject: RCPT from 200-54-172-147.static.tie.cl[200.54.172.147]: 554 5.7.1 Service unavailable; Client host [200.54.172.147] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/200.54.172.147; from= to= proto=ESMTP helo=<124u.com> Jun 8 05:12:41 web01.agentur-b-2.de postfix/smtpd[1315320]: NOQUEUE: reject: RCPT from 200-54-172-147.static.tie.cl[200.54.172.147]: 554 5.7.1 Service unavailable; Client host [200.54.172.147] blocked using zen.spamhaus.org; htt	2020-06-08 18:33:56
191.53.193.219	attackspambots	Jun 8 05:38:15 mail.srvfarm.net postfix/smtpd[671306]: warning: unknown[191.53.193.219]: SASL PLAIN authentication failed: Jun 8 05:38:16 mail.srvfarm.net postfix/smtpd[671306]: lost connection after AUTH from unknown[191.53.193.219] Jun 8 05:43:21 mail.srvfarm.net postfix/smtps/smtpd[674232]: warning: unknown[191.53.193.219]: SASL PLAIN authentication failed: Jun 8 05:43:22 mail.srvfarm.net postfix/smtps/smtpd[674232]: lost connection after AUTH from unknown[191.53.193.219] Jun 8 05:46:21 mail.srvfarm.net postfix/smtps/smtpd[672369]: warning: unknown[191.53.193.219]: SASL PLAIN authentication failed:	2020-06-08 18:23:39
80.82.65.187	attackbotsspam	Jun 8 09:48:31 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.187, lip=185.118.198.210, session= Jun 8 09:49:05 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.187, lip=185.118.198.210, session= Jun 8 09:51:18 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.187, lip=185.118.198.210, session=<1Yoi4I2nODhQUkG7> Jun 8 09:51:57 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.187, lip=185.118.198.210, session= Jun 8 09:52:11 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip	2020-06-08 18:30:44
177.44.17.45	attackbots	Jun 8 05:39:20 mail.srvfarm.net postfix/smtps/smtpd[672461]: warning: unknown[177.44.17.45]: SASL PLAIN authentication failed: Jun 8 05:39:20 mail.srvfarm.net postfix/smtps/smtpd[672461]: lost connection after AUTH from unknown[177.44.17.45] Jun 8 05:40:55 mail.srvfarm.net postfix/smtps/smtpd[671677]: warning: unknown[177.44.17.45]: SASL PLAIN authentication failed: Jun 8 05:40:58 mail.srvfarm.net postfix/smtps/smtpd[671677]: lost connection after AUTH from unknown[177.44.17.45] Jun 8 05:46:41 mail.srvfarm.net postfix/smtpd[671308]: warning: unknown[177.44.17.45]: SASL PLAIN authentication failed:	2020-06-08 18:26:58
94.177.229.123	attack	Jun 8 12:34:14 relay postfix/smtpd\[28882\]: warning: unknown\[94.177.229.123\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 8 12:34:32 relay postfix/smtpd\[28882\]: warning: unknown\[94.177.229.123\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 8 12:34:50 relay postfix/smtpd\[2217\]: warning: unknown\[94.177.229.123\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 8 12:35:08 relay postfix/smtpd\[2217\]: warning: unknown\[94.177.229.123\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 8 12:35:26 relay postfix/smtpd\[2214\]: warning: unknown\[94.177.229.123\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-06-08 18:46:11
45.230.230.27	attackspambots	Jun 8 05:19:15 mail.srvfarm.net postfix/smtpd[671306]: warning: unknown[45.230.230.27]: SASL PLAIN authentication failed: Jun 8 05:19:15 mail.srvfarm.net postfix/smtpd[671306]: lost connection after AUTH from unknown[45.230.230.27] Jun 8 05:27:36 mail.srvfarm.net postfix/smtps/smtpd[671665]: warning: unknown[45.230.230.27]: SASL PLAIN authentication failed: Jun 8 05:27:36 mail.srvfarm.net postfix/smtps/smtpd[671665]: lost connection after AUTH from unknown[45.230.230.27] Jun 8 05:28:23 mail.srvfarm.net postfix/smtps/smtpd[674165]: warning: unknown[45.230.230.27]: SASL PLAIN authentication failed:	2020-06-08 18:49:03

最近上报的IP列表

196.89.208.151	32.245.21.75	159.138.158.190	192.117.108.203
124.230.130.238	45.116.229.25	87.201.236.126	189.182.101.69
154.121.77.108	34.219.133.118	99.197.118.224	220.177.207.21
159.138.149.52	88.177.214.220	161.45.115.213	82.138.56.148
68.159.127.97	88.187.20.203	196.234.6.88	3.244.116.129