必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Philippines

运营商(isp): DSL

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackspambots
Lines containing failures of 49.149.135.52
Nov 19 13:47:08 hvs sshd[22969]: Invalid user tech from 49.149.135.52 port 19607
Nov 19 13:47:09 hvs sshd[22969]: Connection closed by invalid user tech 49.149.135.52 port 19607 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=49.149.135.52
2019-11-19 22:45:35
相同子网IP讨论:
IP 类型 评论内容 时间
49.149.135.97 attackbots
Unauthorized connection attempt from IP address 49.149.135.97 on Port 445(SMB)
2020-08-22 00:57:58
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.149.135.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28619
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.149.135.52.			IN	A

;; AUTHORITY SECTION:
.			214	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111900 1800 900 604800 86400

;; Query time: 581 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Nov 19 22:45:32 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
52.135.149.49.in-addr.arpa domain name pointer dsl.49.149.135.52.pldt.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
52.135.149.49.in-addr.arpa	name = dsl.49.149.135.52.pldt.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
20.187.47.39 attackbotsspam
Aug  7 10:04:03 crypto sshd[5714]: error: maximum authentication attempts exceeded for invalid user root from 20.187.47.39 port 37344 ssh2 [preauth]
...
2020-08-07 16:18:43
52.172.156.159 attackspambots
Aug  7 05:47:43 piServer sshd[16620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.156.159 
Aug  7 05:47:45 piServer sshd[16620]: Failed password for invalid user 1qaz2wsx1234 from 52.172.156.159 port 45616 ssh2
Aug  7 05:52:59 piServer sshd[17085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.156.159 
...
2020-08-07 16:26:21
120.53.24.160 attack
Aug  6 19:45:43 wbs sshd\[13837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.53.24.160  user=root
Aug  6 19:45:44 wbs sshd\[13837\]: Failed password for root from 120.53.24.160 port 49444 ssh2
Aug  6 19:47:25 wbs sshd\[13964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.53.24.160  user=root
Aug  6 19:47:26 wbs sshd\[13964\]: Failed password for root from 120.53.24.160 port 38212 ssh2
Aug  6 19:49:08 wbs sshd\[14102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.53.24.160  user=root
2020-08-07 16:29:41
51.77.150.118 attackbots
$f2bV_matches
2020-08-07 15:58:42
93.140.108.226 attackbots
Automatic report - Port Scan Attack
2020-08-07 16:10:00
178.32.123.182 attack
timhelmke.de:80 178.32.123.182 - - [07/Aug/2020:05:53:57 +0200] "POST /xmlrpc.php HTTP/1.0" 301 491 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
timhelmke.de 178.32.123.182 [07/Aug/2020:05:53:57 +0200] "POST /xmlrpc.php HTTP/1.0" 200 3595 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
2020-08-07 15:50:27
41.111.135.199 attackspambots
Fail2Ban
2020-08-07 16:28:37
139.155.26.79 attackspam
2020-08-07T08:11:45.278595amanda2.illicoweb.com sshd\[29115\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.26.79  user=root
2020-08-07T08:11:47.137791amanda2.illicoweb.com sshd\[29115\]: Failed password for root from 139.155.26.79 port 41766 ssh2
2020-08-07T08:14:42.060161amanda2.illicoweb.com sshd\[29576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.26.79  user=root
2020-08-07T08:14:44.550940amanda2.illicoweb.com sshd\[29576\]: Failed password for root from 139.155.26.79 port 55626 ssh2
2020-08-07T08:17:30.100898amanda2.illicoweb.com sshd\[30114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.26.79  user=root
...
2020-08-07 16:07:26
103.207.39.19 attack
Aug  7 09:56:29 debian-2gb-nbg1-2 kernel: \[19045441.513753\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=103.207.39.19 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=48940 PROTO=TCP SPT=45228 DPT=3406 WINDOW=1024 RES=0x00 SYN URGP=0
2020-08-07 15:57:44
202.105.182.178 attackspam
Aug  6 00:54:51 lola sshd[8183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.105.182.178  user=r.r
Aug  6 00:54:53 lola sshd[8183]: Failed password for r.r from 202.105.182.178 port 41184 ssh2
Aug  6 00:54:53 lola sshd[8183]: Received disconnect from 202.105.182.178: 11: Bye Bye [preauth]
Aug  6 01:09:24 lola sshd[8647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.105.182.178  user=r.r
Aug  6 01:09:26 lola sshd[8647]: Failed password for r.r from 202.105.182.178 port 34248 ssh2
Aug  6 01:09:27 lola sshd[8647]: Received disconnect from 202.105.182.178: 11: Bye Bye [preauth]
Aug  6 01:13:02 lola sshd[8769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.105.182.178  user=r.r
Aug  6 01:13:04 lola sshd[8769]: Failed password for r.r from 202.105.182.178 port 60364 ssh2
Aug  6 01:13:04 lola sshd[8769]: Received disconnect from 202.105.1........
-------------------------------
2020-08-07 16:13:10
5.188.206.197 attackbots
Aug  7 09:39:03 web01.agentur-b-2.de postfix/smtpd[847153]: warning: unknown[5.188.206.197]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  7 09:39:04 web01.agentur-b-2.de postfix/smtpd[847153]: lost connection after AUTH from unknown[5.188.206.197]
Aug  7 09:39:14 web01.agentur-b-2.de postfix/smtpd[821303]: lost connection after AUTH from unknown[5.188.206.197]
Aug  7 09:39:20 web01.agentur-b-2.de postfix/smtpd[847153]: warning: unknown[5.188.206.197]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  7 09:39:21 web01.agentur-b-2.de postfix/smtpd[847153]: lost connection after AUTH from unknown[5.188.206.197]
2020-08-07 16:00:01
112.85.42.229 attack
Aug  7 09:37:14 abendstille sshd\[10712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.229  user=root
Aug  7 09:37:16 abendstille sshd\[10712\]: Failed password for root from 112.85.42.229 port 11548 ssh2
Aug  7 09:37:18 abendstille sshd\[10745\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.229  user=root
Aug  7 09:37:19 abendstille sshd\[10712\]: Failed password for root from 112.85.42.229 port 11548 ssh2
Aug  7 09:37:21 abendstille sshd\[10745\]: Failed password for root from 112.85.42.229 port 56347 ssh2
...
2020-08-07 15:49:53
191.34.162.186 attack
2020-08-07T05:47:15.893167amanda2.illicoweb.com sshd\[1880\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.34.162.186  user=root
2020-08-07T05:47:18.179854amanda2.illicoweb.com sshd\[1880\]: Failed password for root from 191.34.162.186 port 41707 ssh2
2020-08-07T05:51:26.183357amanda2.illicoweb.com sshd\[2611\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.34.162.186  user=root
2020-08-07T05:51:27.928068amanda2.illicoweb.com sshd\[2611\]: Failed password for root from 191.34.162.186 port 60377 ssh2
2020-08-07T05:53:29.564567amanda2.illicoweb.com sshd\[3191\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.34.162.186  user=root
...
2020-08-07 16:11:53
182.61.36.56 attackspambots
2020-08-07T05:46:26.725432amanda2.illicoweb.com sshd\[1672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.36.56  user=root
2020-08-07T05:46:28.952005amanda2.illicoweb.com sshd\[1672\]: Failed password for root from 182.61.36.56 port 33306 ssh2
2020-08-07T05:49:51.229369amanda2.illicoweb.com sshd\[2317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.36.56  user=root
2020-08-07T05:49:53.600966amanda2.illicoweb.com sshd\[2317\]: Failed password for root from 182.61.36.56 port 34212 ssh2
2020-08-07T05:53:27.079789amanda2.illicoweb.com sshd\[3175\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.36.56  user=root
...
2020-08-07 16:13:55
125.19.153.156 attackspam
SSH Brute Force
2020-08-07 16:02:45

最近上报的IP列表

41.114.91.44 159.89.129.55 186.224.11.24 201.132.83.7
58.71.213.75 5.156.184.242 58.248.191.43 125.231.8.217
46.153.81.72 168.121.97.209 49.169.92.62 170.238.54.15
94.222.223.176 45.249.80.131 156.0.141.218 151.53.216.115
105.158.15.147 195.158.24.52 181.49.132.18 105.226.131.30