必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Scottsdale

省份(region): Arizona

国家(country): United States

运营商(isp): GoDaddy.com LLC

主机名(hostname): unknown

机构(organization): GoDaddy.com, LLC

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbots
Port Scan: TCP/445
2019-08-17 00:10:45
相同子网IP讨论:
IP 类型 评论内容 时间
132.148.142.61 attackspam
[munged]::443 132.148.142.61 - - [05/Oct/2019:21:40:59 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 132.148.142.61 - - [05/Oct/2019:21:41:01 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 132.148.142.61 - - [05/Oct/2019:21:41:04 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 132.148.142.61 - - [05/Oct/2019:21:41:06 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 132.148.142.61 - - [05/Oct/2019:21:41:08 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 132.148.142.61 - - [05/Oct/2019:21:41:10 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11
2019-10-06 04:21:20
132.148.142.117 attackbots
132.148.142.117 - - [23/Jul/2019:23:14:34 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.142.117 - - [23/Jul/2019:23:14:35 +0200] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.142.117 - - [23/Jul/2019:23:14:35 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.142.117 - - [23/Jul/2019:23:14:35 +0200] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.142.117 - - [23/Jul/2019:23:14:36 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.142.117 - - [23/Jul/2019:23:14:36 +0200] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
.
2019-07-24 08:50:27
132.148.142.117 attackbots
www.ft-1848-basketball.de 132.148.142.117 \[12/Jul/2019:14:44:23 +0200\] "POST /wp-login.php HTTP/1.1" 200 2174 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
www.ft-1848-basketball.de 132.148.142.117 \[12/Jul/2019:14:44:24 +0200\] "POST /wp-login.php HTTP/1.1" 200 2144 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
www.ft-1848-basketball.de 132.148.142.117 \[12/Jul/2019:14:44:26 +0200\] "POST /wp-login.php HTTP/1.1" 200 2131 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-07-12 21:35:55
132.148.142.117 attack
WordPress login Brute force / Web App Attack on client site.
2019-07-09 20:44:25
132.148.142.117 attack
belitungshipwreck.org 132.148.142.117 \[22/Jun/2019:17:02:48 +0200\] "POST /wp-login.php HTTP/1.1" 200 5597 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
belitungshipwreck.org 132.148.142.117 \[22/Jun/2019:17:02:49 +0200\] "POST /wp-login.php HTTP/1.1" 200 5575 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-06-23 07:20:42
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 132.148.142.246
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40597
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;132.148.142.246.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081600 1800 900 604800 86400

;; Query time: 4 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 17 00:10:23 CST 2019
;; MSG SIZE  rcvd: 119
HOST信息:
246.142.148.132.in-addr.arpa domain name pointer ip-132-148-142-246.ip.secureserver.net.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
246.142.148.132.in-addr.arpa	name = ip-132-148-142-246.ip.secureserver.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
111.230.241.90 attack
08.07.2019 19:41:42 SSH access blocked by firewall
2019-07-09 05:20:11
114.43.32.55 attack
37215/tcp
[2019-07-08]1pkt
2019-07-09 05:10:16
111.250.154.33 attack
37215/tcp 37215/tcp 37215/tcp
[2019-07-08]3pkt
2019-07-09 05:26:19
168.0.8.240 attackspambots
leo_www
2019-07-09 05:12:06
196.202.12.114 attackspambots
445/tcp
[2019-07-08]1pkt
2019-07-09 05:04:37
217.238.166.113 attackbotsspam
Jul  8 21:58:05 debian sshd\[30485\]: Invalid user jmartin from 217.238.166.113 port 43236
Jul  8 21:58:05 debian sshd\[30485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.238.166.113
...
2019-07-09 05:05:09
34.77.167.185 attackbotsspam
465/tcp
[2019-07-08]1pkt
2019-07-09 05:31:21
192.145.99.250 attack
Automatic report generated by Wazuh
2019-07-09 05:20:51
121.188.88.70 attack
MYH,DEF GET /shell.php
2019-07-09 05:09:47
41.80.174.220 attackbotsspam
Autoban   41.80.174.220 AUTH/CONNECT
2019-07-09 05:24:20
188.148.161.164 attackspam
5555/tcp
[2019-07-08]1pkt
2019-07-09 05:16:28
51.254.164.230 attackbotsspam
Jul  8 21:30:08 animalibera sshd[28591]: Invalid user kevin from 51.254.164.230 port 49880
...
2019-07-09 05:31:52
218.92.0.185 attack
Jul  8 23:03:31 h2177944 sshd\[9693\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.185  user=root
Jul  8 23:03:33 h2177944 sshd\[9693\]: Failed password for root from 218.92.0.185 port 23493 ssh2
Jul  8 23:03:35 h2177944 sshd\[9693\]: Failed password for root from 218.92.0.185 port 23493 ssh2
Jul  8 23:03:38 h2177944 sshd\[9693\]: Failed password for root from 218.92.0.185 port 23493 ssh2
...
2019-07-09 05:24:02
41.80.11.59 attackspambots
Autoban   41.80.11.59 AUTH/CONNECT
2019-07-09 05:29:05
116.107.237.187 attackspam
Jul  8 21:46:50 rpi sshd[16149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.107.237.187 
Jul  8 21:46:52 rpi sshd[16149]: Failed password for invalid user apc from 116.107.237.187 port 38336 ssh2
2019-07-09 05:11:18

最近上报的IP列表

124.115.48.189 51.168.169.85 10.126.254.179 73.11.237.130
123.144.248.140 121.23.22.157 37.125.225.232 116.26.126.88
119.235.144.43 126.56.83.204 110.185.168.131 104.38.143.121
108.191.21.166 35.168.227.43 75.55.27.147 108.162.246.20
199.62.42.254 207.233.196.177 176.242.235.250 98.172.28.25