61.148.196.114

基本信息:

城市(city): Beijing

省份(region): Beijing

国家(country): China

运营商(isp): China Unicom IP Network

主机名(hostname): unknown

机构(organization): China Unicom Beijing Province Network

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized IMAP connection attempt	2020-05-22 06:55:00
attackbots	B: zzZZzz blocked content access	2020-03-12 06:47:11
attackbotsspam	'IP reached maximum auth failures for a one day block'	2020-01-20 17:33:19
attackbots	[munged]::80 61.148.196.114 - - [04/Jan/2020:05:47:44 +0100] "POST /[munged]: HTTP/1.1" 200 3861 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 61.148.196.114 - - [04/Jan/2020:05:47:47 +0100] "POST /[munged]: HTTP/1.1" 200 3860 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 61.148.196.114 - - [04/Jan/2020:05:47:49 +0100] "POST /[munged]: HTTP/1.1" 200 3860 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 61.148.196.114 - - [04/Jan/2020:05:47:51 +0100] "POST /[munged]: HTTP/1.1" 200 3860 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 61.148.196.114 - - [04/Jan/2020:05:47:52 +0100] "POST /[munged]: HTTP/1.1" 200 3860 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 61.148.196.114 - - [04/Jan/2020:05:47:54	2020-01-04 18:18:59
attack	Brute force attempt	2019-09-23 20:16:34
attackspam	[munged]::443 61.148.196.114 - - [21/Aug/2019:13:36:57 +0200] "POST /[munged]: HTTP/1.1" 200 9039 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 61.148.196.114 - - [21/Aug/2019:13:36:59 +0200] "POST /[munged]: HTTP/1.1" 200 4378 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 61.148.196.114 - - [21/Aug/2019:13:37:02 +0200] "POST /[munged]: HTTP/1.1" 200 4378 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 61.148.196.114 - - [21/Aug/2019:13:37:05 +0200] "POST /[munged]: HTTP/1.1" 200 4378 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 61.148.196.114 - - [21/Aug/2019:13:37:08 +0200] "POST /[munged]: HTTP/1.1" 200 4378 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 61.148.196.114 - - [21/Aug/2019:13:	2019-08-22 03:48:48
attackspambots	libpam_shield report: forced login attempt	2019-07-30 10:09:05
attack	Brute force attack stopped by firewall	2019-07-01 08:56:39

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 61.148.196.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11241
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;61.148.196.114.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040501 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat Apr 06 06:03:49 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 114.196.148.61.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 114.196.148.61.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
66.70.155.138	attackspambots	2020-08-26 07:34:10.000120-0500 localhost smtpd[9493]: NOQUEUE: reject: RCPT from unknown[66.70.155.138]: 450 4.7.25 Client host rejected: cannot find your hostname, [66.70.155.138]; from= to= proto=ESMTP helo=	2020-08-26 21:49:13
152.136.126.100	attackspambots	Aug 26 21:36:01 webhost01 sshd[27682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.126.100 Aug 26 21:36:03 webhost01 sshd[27682]: Failed password for invalid user starbound from 152.136.126.100 port 53768 ssh2 ...	2020-08-26 22:49:22
51.89.168.220	attackspam	MAIL: User Login Brute Force Attempt	2020-08-26 22:43:25
66.70.157.13	attackbotsspam	2020-08-26 07:34:03.153082-0500 localhost smtpd[9538]: NOQUEUE: reject: RCPT from unknown[66.70.157.13]: 450 4.7.25 Client host rejected: cannot find your hostname, [66.70.157.13]; from= to= proto=ESMTP helo=	2020-08-26 21:47:33
124.95.171.244	attack	Aug 26 16:35:30 santamaria sshd\[4772\]: Invalid user ubuntu from 124.95.171.244 Aug 26 16:35:30 santamaria sshd\[4772\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.95.171.244 Aug 26 16:35:32 santamaria sshd\[4772\]: Failed password for invalid user ubuntu from 124.95.171.244 port 57224 ssh2 ...	2020-08-26 22:37:43
51.161.18.105	attackspam	2020-08-26 07:34:27.155826-0500 localhost smtpd[9493]: NOQUEUE: reject: RCPT from ip105.ip-51-161-18.net[51.161.18.105]: 550 5.1.1 : Recipient address rejected: User unknown in local recipient table; from= to= proto=ESMTP helo=	2020-08-26 21:49:39
51.68.88.26	attack	Aug 26 12:45:45 124388 sshd[5046]: Failed password for invalid user guest from 51.68.88.26 port 40078 ssh2 Aug 26 12:49:05 124388 sshd[5174]: Invalid user blumberg from 51.68.88.26 port 45964 Aug 26 12:49:05 124388 sshd[5174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.88.26 Aug 26 12:49:05 124388 sshd[5174]: Invalid user blumberg from 51.68.88.26 port 45964 Aug 26 12:49:07 124388 sshd[5174]: Failed password for invalid user blumberg from 51.68.88.26 port 45964 ssh2	2020-08-26 21:52:43
191.234.161.50	attackspambots	2020-08-26T13:37:52.550956shield sshd\[30739\]: Invalid user matt from 191.234.161.50 port 33305 2020-08-26T13:37:52.568868shield sshd\[30739\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.234.161.50 2020-08-26T13:37:54.493844shield sshd\[30739\]: Failed password for invalid user matt from 191.234.161.50 port 33305 ssh2 2020-08-26T13:41:50.112136shield sshd\[31562\]: Invalid user lyx from 191.234.161.50 port 58911 2020-08-26T13:41:50.139167shield sshd\[31562\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.234.161.50	2020-08-26 21:47:12
167.71.14.75	attack	SSH brute forcing.	2020-08-26 21:57:36
213.230.107.202	attack	Aug 26 13:07:47 game-panel sshd[3521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.230.107.202 Aug 26 13:07:48 game-panel sshd[3521]: Failed password for invalid user didi from 213.230.107.202 port 55319 ssh2 Aug 26 13:12:18 game-panel sshd[3816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.230.107.202	2020-08-26 22:38:12
89.38.96.13	attackbots	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-08-26T12:02:07Z and 2020-08-26T12:36:18Z	2020-08-26 22:38:30
91.134.240.130	attackspambots	Aug 26 13:20:49 rush sshd[32754]: Failed password for root from 91.134.240.130 port 32778 ssh2 Aug 26 13:26:18 rush sshd[497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.240.130 Aug 26 13:26:20 rush sshd[497]: Failed password for invalid user root1 from 91.134.240.130 port 36336 ssh2 ...	2020-08-26 21:38:01
218.92.0.172	attackspambots	2020-08-26T16:33:51.387062vps773228.ovh.net sshd[4347]: Failed password for root from 218.92.0.172 port 25536 ssh2 2020-08-26T16:33:56.056363vps773228.ovh.net sshd[4347]: Failed password for root from 218.92.0.172 port 25536 ssh2 2020-08-26T16:33:59.194770vps773228.ovh.net sshd[4347]: Failed password for root from 218.92.0.172 port 25536 ssh2 2020-08-26T16:34:02.411203vps773228.ovh.net sshd[4347]: Failed password for root from 218.92.0.172 port 25536 ssh2 2020-08-26T16:34:06.339384vps773228.ovh.net sshd[4347]: Failed password for root from 218.92.0.172 port 25536 ssh2 ...	2020-08-26 22:37:19
212.70.149.4	attackbotsspam	Aug 26 15:22:57 relay postfix/smtpd\[10759\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 26 15:26:15 relay postfix/smtpd\[10759\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 26 15:29:34 relay postfix/smtpd\[11702\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 26 15:32:49 relay postfix/smtpd\[14468\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 26 15:36:09 relay postfix/smtpd\[13971\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-08-26 21:37:15
200.29.105.12	attackspam	SSH login attempts.	2020-08-26 22:35:27

最近上报的IP列表

60.54.106.141	152.136.76.230	68.183.198.251	176.153.16.177
31.135.106.131	159.203.70.105	188.165.24.200	190.191.106.212
202.169.246.30	103.109.2.136	185.222.211.18	179.106.1.200
87.197.163.118	83.243.88.236	220.133.250.85	193.106.231.145
107.170.202.110	103.215.16.238	75.138.186.120	45.112.56.10