必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Global Frag Networks

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspam
Nov 25 07:13:40 mxgate1 postfix/postscreen[31676]: CONNECT from [104.148.64.136]:60602 to [176.31.12.44]:25
Nov 25 07:13:40 mxgate1 postfix/dnsblog[31678]: addr 104.148.64.136 listed by domain zen.spamhaus.org as 127.0.0.3
Nov 25 07:13:40 mxgate1 postfix/dnsblog[31680]: addr 104.148.64.136 listed by domain b.barracudacentral.org as 127.0.0.2
Nov 25 07:13:46 mxgate1 postfix/postscreen[31676]: DNSBL rank 3 for [104.148.64.136]:60602
Nov x@x
Nov 25 07:13:47 mxgate1 postfix/postscreen[31676]: DISCONNECT [104.148.64.136]:60602


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.148.64.136
2019-11-25 19:58:48
相同子网IP讨论:
IP 类型 评论内容 时间
104.148.64.185 attackbotsspam
Jan  7 20:47:46 mxgate1 postfix/postscreen[8982]: CONNECT from [104.148.64.185]:51528 to [176.31.12.44]:25
Jan  7 20:47:46 mxgate1 postfix/dnsblog[9025]: addr 104.148.64.185 listed by domain zen.spamhaus.org as 127.0.0.3
Jan  7 20:47:47 mxgate1 postfix/dnsblog[9026]: addr 104.148.64.185 listed by domain b.barracudacentral.org as 127.0.0.2
Jan  7 20:47:52 mxgate1 postfix/postscreen[8982]: DNSBL rank 3 for [104.148.64.185]:51528
Jan x@x
Jan  7 20:47:53 mxgate1 postfix/postscreen[8982]: DISCONNECT [104.148.64.185]:51528


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.148.64.185
2020-01-08 17:53:27
104.148.64.174 attackspam
10.10.2019 13:58:30 - Login Fail on hMailserver 
Detected by ELinOX-hMail-A2F
2019-10-10 21:30:17
104.148.64.135 attackspam
Jul 30 04:21:07 mxgate1 postfix/postscreen[8687]: CONNECT from [104.148.64.135]:60088 to [176.31.12.44]:25
Jul 30 04:21:07 mxgate1 postfix/dnsblog[8958]: addr 104.148.64.135 listed by domain zen.spamhaus.org as 127.0.0.3
Jul 30 04:21:13 mxgate1 postfix/postscreen[8687]: DNSBL rank 2 for [104.148.64.135]:60088
Jul x@x
Jul 30 04:21:14 mxgate1 postfix/postscreen[8687]: DISCONNECT [104.148.64.135]:60088


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.148.64.135
2019-07-30 13:41:40
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.148.64.136
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4864
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.148.64.136.			IN	A

;; AUTHORITY SECTION:
.			385	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112500 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 25 19:58:42 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
136.64.148.104.in-addr.arpa domain name pointer mail.meshusdn.world.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
136.64.148.104.in-addr.arpa	name = mail.meshusdn.world.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
61.178.223.218 attackspam
Auto Detect Rule!
proto TCP (SYN), 61.178.223.218:5924->gjan.info:1433, len 44
2020-09-20 04:36:26
184.105.139.125 attack
Found on   CINS badguys     / proto=6  .  srcport=56841  .  dstport=30005  .     (2319)
2020-09-20 04:27:43
218.103.131.205 attack
Sep 19 19:02:58 vps639187 sshd\[27235\]: Invalid user admin from 218.103.131.205 port 38729
Sep 19 19:02:58 vps639187 sshd\[27235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.103.131.205
Sep 19 19:03:01 vps639187 sshd\[27235\]: Failed password for invalid user admin from 218.103.131.205 port 38729 ssh2
...
2020-09-20 04:37:36
81.68.121.160 attack
Invalid user admin from 81.68.121.160 port 51992
2020-09-20 04:50:08
223.17.161.175 attackspam
Brute-force attempt banned
2020-09-20 04:52:09
144.217.183.134 attackspam
144.217.183.134 - - [19/Sep/2020:21:19:57 +0100] "POST /wp-login.php HTTP/1.1" 200 1861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
144.217.183.134 - - [19/Sep/2020:21:19:59 +0100] "POST /wp-login.php HTTP/1.1" 200 1839 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
144.217.183.134 - - [19/Sep/2020:21:19:59 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-20 04:46:41
91.134.135.95 attackspam
(sshd) Failed SSH login from 91.134.135.95 (FR/France/95.ip-91-134-135.eu): 5 in the last 3600 secs
2020-09-20 04:48:30
201.21.113.148 attackspam
2020-09-19 11:56:22.108844-0500  localhost smtpd[24990]: NOQUEUE: reject: RCPT from unknown[201.21.113.148]: 554 5.7.1 Service unavailable; Client host [201.21.113.148] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/201.21.113.148 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
2020-09-20 04:33:42
203.189.239.116 attack
Too many connection attempt to nonexisting ports
2020-09-20 04:45:35
165.22.53.207 attackspam
2020-09-19T11:58:50.350495server.mjenks.net sshd[2039255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.53.207
2020-09-19T11:58:50.343239server.mjenks.net sshd[2039255]: Invalid user ts3server1 from 165.22.53.207 port 10292
2020-09-19T11:58:52.126173server.mjenks.net sshd[2039255]: Failed password for invalid user ts3server1 from 165.22.53.207 port 10292 ssh2
2020-09-19T12:03:09.594758server.mjenks.net sshd[2039744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.53.207  user=root
2020-09-19T12:03:11.258877server.mjenks.net sshd[2039744]: Failed password for root from 165.22.53.207 port 21710 ssh2
...
2020-09-20 04:22:03
139.155.71.61 attack
Sep 19 21:28:25 host sshd[28174]: Invalid user upload from 139.155.71.61 port 59036
...
2020-09-20 04:47:53
5.202.177.123 attackspambots
Sep 19 21:22:54 h2829583 sshd[28264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.202.177.123
2020-09-20 04:50:23
81.68.112.145 attackbots
2020-09-19T20:02:34.644247shield sshd\[21472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.112.145  user=root
2020-09-19T20:02:36.489230shield sshd\[21472\]: Failed password for root from 81.68.112.145 port 56824 ssh2
2020-09-19T20:06:27.333882shield sshd\[21948\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.112.145  user=root
2020-09-19T20:06:29.499936shield sshd\[21948\]: Failed password for root from 81.68.112.145 port 44834 ssh2
2020-09-19T20:10:12.813740shield sshd\[22386\]: Invalid user Admin from 81.68.112.145 port 60796
2020-09-20 04:26:44
183.17.61.114 attackbots
E-Mail Spam (RBL) [REJECTED]
2020-09-20 04:41:25
144.217.75.30 attack
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-19T18:23:04Z and 2020-09-19T19:43:31Z
2020-09-20 04:28:30

最近上报的IP列表

24.86.80.229 187.67.44.105 189.171.50.188 159.89.129.215
89.70.32.104 28.190.22.250 173.200.46.77 106.125.234.34
185.208.148.54 82.82.0.78 85.113.169.204 234.120.95.253
174.233.33.224 235.21.75.213 228.113.48.12 128.20.83.131
92.62.74.3 26.127.85.27 70.17.233.179 221.178.156.154