必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
132.148.159.44 attackbotsspam
Automatic report - Banned IP Access
2020-01-24 19:17:00
132.148.159.213 attack
132.148.159.213 - - [13/Jul/2019:03:11:25 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.159.213 - - [13/Jul/2019:03:11:26 +0200] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.159.213 - - [13/Jul/2019:03:11:26 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.159.213 - - [13/Jul/2019:03:11:27 +0200] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.159.213 - - [13/Jul/2019:03:11:27 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.159.213 - - [13/Jul/2019:03:11:27 +0200] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
.
2019-07-13 11:26:59
132.148.159.213 attackspam
WordPress brute force
2019-07-10 22:10:34
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 132.148.159.119
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38407
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;132.148.159.119.		IN	A

;; AUTHORITY SECTION:
.			434	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400

;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 07:06:13 CST 2022
;; MSG SIZE  rcvd: 108
HOST信息:
119.159.148.132.in-addr.arpa domain name pointer ip-132-148-159-119.ip.secureserver.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
119.159.148.132.in-addr.arpa	name = ip-132-148-159-119.ip.secureserver.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
179.215.140.164 attackspam
SSH bruteforce
2019-07-01 15:40:13
120.138.117.102 attackspambots
Jul  1 07:58:27 our-server-hostname postfix/smtpd[18635]: connect from unknown[120.138.117.102]
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul  1 07:58:30 our-server-hostname postfix/smtpd[18635]: lost connection after RCPT from unknown[120.138.117.102]
Jul  1 07:58:30 our-server-hostname postfix/smtpd[18635]: disconnect from unknown[120.138.117.102]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=120.138.117.102
2019-07-01 16:15:29
27.72.88.40 attackspam
Jul  1 08:14:16 mail sshd\[2578\]: Invalid user pang from 27.72.88.40 port 60104
Jul  1 08:14:16 mail sshd\[2578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.72.88.40
Jul  1 08:14:19 mail sshd\[2578\]: Failed password for invalid user pang from 27.72.88.40 port 60104 ssh2
Jul  1 08:17:52 mail sshd\[20381\]: Invalid user spamers from 27.72.88.40 port 38490
Jul  1 08:17:52 mail sshd\[20381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.72.88.40
...
2019-07-01 15:33:14
193.112.72.126 attack
Jul  1 06:51:36 hosting sshd[22891]: Invalid user sys from 193.112.72.126 port 38002
...
2019-07-01 16:16:23
198.108.67.44 attack
Scanning (more than 2 packets) random ports - tries to find possible vulnerable services
2019-07-01 15:38:04
1.101.145.8 attackspambots
01.07.2019 06:40:58 SSH access blocked by firewall
2019-07-01 15:25:29
218.75.148.181 attackspambots
Brute force attempt
2019-07-01 16:02:25
177.128.122.115 attackbots
libpam_shield report: forced login attempt
2019-07-01 16:16:55
14.139.153.212 attack
Invalid user admin from 14.139.153.212 port 33574
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.153.212
Failed password for invalid user admin from 14.139.153.212 port 33574 ssh2
Invalid user testing from 14.139.153.212 port 39004
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.153.212
2019-07-01 15:48:35
148.63.108.65 attack
Jul  1 05:17:58 localhost sshd\[25185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.63.108.65  user=root
Jul  1 05:18:00 localhost sshd\[25185\]: Failed password for root from 148.63.108.65 port 40910 ssh2
...
2019-07-01 15:28:27
203.99.118.2 attack
Jul  1 03:01:25 mxgate1 postfix/postscreen[12157]: CONNECT from [203.99.118.2]:39458 to [176.31.12.44]:25
Jul  1 03:01:25 mxgate1 postfix/dnsblog[12160]: addr 203.99.118.2 listed by domain cbl.abuseat.org as 127.0.0.2
Jul  1 03:01:25 mxgate1 postfix/dnsblog[12161]: addr 203.99.118.2 listed by domain zen.spamhaus.org as 127.0.0.3
Jul  1 03:01:25 mxgate1 postfix/dnsblog[12161]: addr 203.99.118.2 listed by domain zen.spamhaus.org as 127.0.0.4
Jul  1 03:01:25 mxgate1 postfix/dnsblog[12159]: addr 203.99.118.2 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jul  1 03:01:25 mxgate1 postfix/dnsblog[12719]: addr 203.99.118.2 listed by domain b.barracudacentral.org as 127.0.0.2
Jul  1 03:01:31 mxgate1 postfix/postscreen[12157]: DNSBL rank 5 for [203.99.118.2]:39458
Jul x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=203.99.118.2
2019-07-01 16:08:40
51.91.38.190 attackspam
[WP scan/spam/exploit]
[multiweb: req 4 domains(hosts/ip)]
[bad UserAgent]
Blocklist.DE:"listed [bruteforcelogin]"
2019-07-01 16:14:29
37.111.237.228 attack
Unauthorised access (Jul  1) SRC=37.111.237.228 LEN=52 TTL=115 ID=19941 DF TCP DPT=445 WINDOW=8192 SYN
2019-07-01 15:32:30
187.19.62.7 attackspambots
Mail sent to address harvested from public web site
2019-07-01 15:27:07
36.79.220.187 attack
DATE:2019-07-01 05:49:31, IP:36.79.220.187, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc-bis)
2019-07-01 16:17:18

最近上报的IP列表

131.72.71.100 131.72.220.191 132.255.156.59 133.106.61.7
132.255.20.66 133.218.182.10 132.255.146.207 133.18.224.242
134.0.115.127 134.122.103.26 134.122.108.146 134.0.116.231
134.119.223.166 134.0.206.186 134.122.121.18 134.122.122.201
134.122.32.199 134.122.134.181 134.122.24.22 134.122.60.193