必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Los Angeles

省份(region): California

国家(country): United States

运营商(isp): HostBarrel

主机名(hostname): unknown

机构(organization): Global Frag Networks

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspambots
firewall-block, port(s): 445/tcp
2019-07-24 02:21:48
相同子网IP讨论:
IP 类型 评论内容 时间
104.148.41.23 attackbotsspam
Automatic report - CMS Brute-Force Attack
2020-04-27 21:14:37
104.148.41.11 attack
Automatic report - CMS Brute-Force Attack
2020-04-27 21:13:56
104.148.41.102 attackbots
jannisjulius.de 104.148.41.102 [25/Apr/2020:08:39:54 +0200] "POST /wp-login.php HTTP/1.1" 200 11917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0"
jannisjulius.de 104.148.41.102 [25/Apr/2020:08:39:55 +0200] "POST /wp-login.php HTTP/1.1" 200 12304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0"
2020-04-25 19:56:34
104.148.41.63 attackbotsspam
Return-Path: 
Delivered-To: hide@mx1.tees.ne.jp
Received: (qmail 31403 invoked
 by uid 0);
 15 Apr 2020 12:57:53 +0900
Received: from unknown (HELO rcvgw11.tees.ne.jp) (202.216.138.25)
 by mdl.tees.ne.jp
 with SMTP;
 15 Apr 2020 12:57:53 +0900
Received: from smtp.work (unknown [104.148.41.63])
 by rcvgw11.tees.ne.jp (Postfix)
 with ESMTP id 7DBD520C36 for ;
 Wed, 15 Apr 2020 12:57:53 +0900 (JST)
Subject: [Norton AntiSpam]コロナウイルス撲滅セール
From: info@q04.402smtp.work
To: hide@mx1.tees.ne.jp
Message-ID: 20200415125643
Content-Type: text/plain; charset="SHIFT_JIS"
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
X-Brightmail-Tracker: AAAABjVkWnA1ZDecGo+sLDRHjzs0R6FLNEkVcA==
2020-04-16 03:18:46
104.148.40.78 attackspam
port
2020-03-31 01:25:02
104.148.41.11 attackbots
[Wed Jan 08 21:12:46.700267 2020] [access_compat:error] [pid 12566] [client 104.148.41.11:44720] AH01797: client denied by server configuration: /var/www/html/josh/wp-login.php
...
2020-03-04 01:01:00
104.148.41.168 attack
[Thu Jan 09 01:57:44.771502 2020] [access_compat:error] [pid 24095] [client 104.148.41.168:40576] AH01797: client denied by server configuration: /var/www/html/luke/wp-login.php
...
2020-03-04 00:50:53
104.148.49.136 attackspambots
Brute force attempt
2020-02-15 15:35:22
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.148.4.226
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59165
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.148.4.226.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072301 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 24 02:21:41 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 226.4.148.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 226.4.148.104.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
159.89.194.103 attackspam
Sep 19 19:40:17 ns37 sshd[14910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.194.103
2019-09-20 02:52:44
78.186.88.29 attackbotsspam
Unauthorized connection attempt from IP address 78.186.88.29 on Port 445(SMB)
2019-09-20 02:48:54
85.93.133.178 attackspam
Sep 19 17:30:32 eventyay sshd[24655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.93.133.178
Sep 19 17:30:34 eventyay sshd[24655]: Failed password for invalid user test from 85.93.133.178 port 21084 ssh2
Sep 19 17:35:54 eventyay sshd[24721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.93.133.178
...
2019-09-20 02:35:30
68.183.102.199 attackbotsspam
2019-09-19T14:53:12.420113  sshd[21616]: Invalid user tajiki from 68.183.102.199 port 53404
2019-09-19T14:53:12.434342  sshd[21616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.102.199
2019-09-19T14:53:12.420113  sshd[21616]: Invalid user tajiki from 68.183.102.199 port 53404
2019-09-19T14:53:14.178351  sshd[21616]: Failed password for invalid user tajiki from 68.183.102.199 port 53404 ssh2
2019-09-19T14:57:19.028720  sshd[21636]: Invalid user arma3server from 68.183.102.199 port 40076
...
2019-09-20 02:46:02
116.227.66.14 attackspam
Unauthorized connection attempt from IP address 116.227.66.14 on Port 445(SMB)
2019-09-20 02:45:11
201.93.142.111 attackbotsspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-19 10:12:58,669 INFO [amun_request_handler] PortScan Detected on Port: 445 (201.93.142.111)
2019-09-20 03:10:06
118.69.109.37 attackbots
Attempt to attack host OS, exploiting network vulnerabilities, on 19-09-2019 11:47:04.
2019-09-20 02:50:02
183.185.21.168 attackbotsspam
Bad bot requested remote resources
2019-09-20 03:05:30
93.29.187.145 attackbotsspam
Brute force attempt
2019-09-20 02:35:03
142.93.251.1 attack
" "
2019-09-20 02:43:20
188.165.255.8 attackspambots
SSH Brute Force, server-1 sshd[9488]: Failed password for invalid user administrator from 188.165.255.8 port 39134 ssh2
2019-09-20 02:40:36
116.233.210.179 attackspam
Attempt to attack host OS, exploiting network vulnerabilities, on 19-09-2019 11:46:26.
2019-09-20 03:08:47
213.183.101.89 attackbotsspam
SSH Brute-Force reported by Fail2Ban
2019-09-20 02:32:05
117.211.160.52 attackbotsspam
Attempt to attack host OS, exploiting network vulnerabilities, on 19-09-2019 11:46:44.
2019-09-20 03:00:55
124.156.163.3 attackspam
Automatic report - Port Scan Attack
2019-09-20 02:33:21

最近上报的IP列表

53.215.218.148 40.114.111.53 193.225.13.229 210.11.121.134
129.117.23.16 41.42.35.195 42.61.70.196 38.44.145.141
79.106.28.170 121.113.104.66 222.214.243.23 104.23.2.83
178.253.195.47 115.144.211.102 176.222.159.206 61.193.172.218
38.220.233.107 118.167.134.251 60.185.112.6 64.11.82.200