必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
132.148.182.88 attackbots
Automatic report - XMLRPC Attack
2020-03-01 17:18:56
132.148.18.178 attackbotsspam
132.148.18.178 - - [14/Dec/2019:11:49:26 +0100] "POST /wp-login.php HTTP/1.1" 200 3125 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.18.178 - - [14/Dec/2019:11:52:46 +0100] "POST /wp-login.php HTTP/1.1" 200 3125 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-12-14 20:22:39
132.148.18.178 attackspam
WordPress login Brute force / Web App Attack on client site.
2019-10-08 23:43:17
132.148.18.178 attackspambots
132.148.18.178 - - [26/Sep/2019:23:21:31 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.18.178 - - [26/Sep/2019:23:21:32 +0200] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.18.178 - - [26/Sep/2019:23:21:32 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.18.178 - - [26/Sep/2019:23:21:33 +0200] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.18.178 - - [26/Sep/2019:23:21:33 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.18.178 - - [26/Sep/2019:23:21:34 +0200] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-09-27 06:58:09
132.148.18.178 attackbots
WordPress login Brute force / Web App Attack on client site.
2019-09-26 18:11:43
132.148.18.178 attackbotsspam
WordPress wp-login brute force :: 132.148.18.178 0.052 BYPASS [21/Sep/2019:01:26:28  1000] [censored_4] "POST /wp-login.php HTTP/1.1" 200 3989 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-09-20 23:30:13
132.148.18.214 attack
Automatic report - Banned IP Access
2019-09-17 01:38:30
132.148.18.214 attackbots
WordPress login Brute force / Web App Attack on client site.
2019-08-12 06:43:41
132.148.18.178 attackspambots
WordPress brute force
2019-08-03 08:32:36
132.148.18.214 attack
Attempt to access prohibited URL /wp-login.php
2019-08-01 09:46:58
132.148.18.178 attackbots
Auto reported by IDS
2019-07-17 09:49:51
132.148.18.214 attackbotsspam
fail2ban honeypot
2019-07-05 04:32:36
132.148.18.214 attack
WordPress login Brute force / Web App Attack on client site.
2019-06-26 19:18:11
132.148.18.214 attack
132.148.18.214 - - \[25/Jun/2019:00:02:56 +0200\] "POST /wp-login.php HTTP/1.1" 200 2111 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
132.148.18.214 - - \[25/Jun/2019:00:03:07 +0200\] "POST /wp-login.php HTTP/1.1" 200 2113 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2019-06-25 10:04:15
132.148.18.214 attackspam
132.148.18.214 - - \[23/Jun/2019:14:50:48 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
132.148.18.214 - - \[23/Jun/2019:14:50:49 +0200\] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
132.148.18.214 - - \[23/Jun/2019:14:50:52 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
132.148.18.214 - - \[23/Jun/2019:14:51:01 +0200\] "POST /wp-login.php HTTP/1.1" 200 1631 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
132.148.18.214 - - \[23/Jun/2019:14:51:02 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
132.148.18.214 - - \[23/Jun/2019:14:51:09 +0200\] "POST /wp-login.php HTTP/1.1" 200 1630 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:6
2019-06-24 01:18:48
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 132.148.18.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11292
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;132.148.18.104.			IN	A

;; AUTHORITY SECTION:
.			593	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 05:39:12 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
104.18.148.132.in-addr.arpa domain name pointer ip-132-148-18-104.ip.secureserver.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
104.18.148.132.in-addr.arpa	name = ip-132-148-18-104.ip.secureserver.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
212.73.90.86 attack
Aug 31 16:17:47 hcbbdb sshd\[5574\]: Invalid user nginx from 212.73.90.86
Aug 31 16:17:47 hcbbdb sshd\[5574\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.73.90.86
Aug 31 16:17:49 hcbbdb sshd\[5574\]: Failed password for invalid user nginx from 212.73.90.86 port 11383 ssh2
Aug 31 16:22:48 hcbbdb sshd\[6098\]: Invalid user stack from 212.73.90.86
Aug 31 16:22:48 hcbbdb sshd\[6098\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.73.90.86
2019-09-01 00:34:49
139.59.56.121 attackspambots
Aug 31 17:40:38 Server10 sshd[11065]: User admin from 139.59.56.121 not allowed because not listed in AllowUsers
Aug 31 17:40:40 Server10 sshd[11065]: Failed password for invalid user admin from 139.59.56.121 port 47282 ssh2
Aug 31 17:46:55 Server10 sshd[23986]: User root from 139.59.56.121 not allowed because not listed in AllowUsers
2019-09-01 00:14:06
179.184.161.53 attackspam
Aug 31 01:32:53 php1 sshd\[6834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.184.161.53  user=root
Aug 31 01:32:55 php1 sshd\[6834\]: Failed password for root from 179.184.161.53 port 14759 ssh2
Aug 31 01:37:44 php1 sshd\[7242\]: Invalid user ubuntu from 179.184.161.53
Aug 31 01:37:44 php1 sshd\[7242\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.184.161.53
Aug 31 01:37:46 php1 sshd\[7242\]: Failed password for invalid user ubuntu from 179.184.161.53 port 33325 ssh2
2019-09-01 00:42:15
190.219.234.221 attack
Honeypot attack, port: 5555, PTR: cpe-54424958a541.cpe.cableonda.net.
2019-08-31 23:52:55
145.239.76.62 attackspam
Aug 31 18:26:11 SilenceServices sshd[21291]: Failed password for bind from 145.239.76.62 port 33357 ssh2
Aug 31 18:26:50 SilenceServices sshd[21533]: Failed password for bind from 145.239.76.62 port 56723 ssh2
2019-09-01 00:43:34
210.187.87.185 attackbots
Aug 31 17:16:39 OPSO sshd\[768\]: Invalid user bob from 210.187.87.185 port 48936
Aug 31 17:16:39 OPSO sshd\[768\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.187.87.185
Aug 31 17:16:42 OPSO sshd\[768\]: Failed password for invalid user bob from 210.187.87.185 port 48936 ssh2
Aug 31 17:21:26 OPSO sshd\[1357\]: Invalid user natasha from 210.187.87.185 port 60020
Aug 31 17:21:26 OPSO sshd\[1357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.187.87.185
2019-09-01 00:25:17
68.109.216.194 attackspambots
3389BruteforceStormFW21
2019-09-01 00:40:57
77.70.96.195 attackbots
Aug 30 14:03:43 itv-usvr-01 sshd[5242]: Invalid user temp1 from 77.70.96.195
Aug 30 14:03:43 itv-usvr-01 sshd[5242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.70.96.195
Aug 30 14:03:43 itv-usvr-01 sshd[5242]: Invalid user temp1 from 77.70.96.195
Aug 30 14:03:45 itv-usvr-01 sshd[5242]: Failed password for invalid user temp1 from 77.70.96.195 port 45382 ssh2
Aug 30 14:13:04 itv-usvr-01 sshd[8564]: Invalid user ic1 from 77.70.96.195
2019-09-01 00:39:23
129.204.40.157 attackspam
Aug 31 05:43:58 aiointranet sshd\[31652\]: Invalid user test123 from 129.204.40.157
Aug 31 05:43:58 aiointranet sshd\[31652\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.40.157
Aug 31 05:44:00 aiointranet sshd\[31652\]: Failed password for invalid user test123 from 129.204.40.157 port 34718 ssh2
Aug 31 05:49:56 aiointranet sshd\[32230\]: Invalid user honey from 129.204.40.157
Aug 31 05:49:56 aiointranet sshd\[32230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.40.157
2019-09-01 00:27:06
178.128.124.49 attackspambots
Aug 31 05:43:38 web1 sshd\[18314\]: Invalid user test from 178.128.124.49
Aug 31 05:43:38 web1 sshd\[18314\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.124.49
Aug 31 05:43:40 web1 sshd\[18314\]: Failed password for invalid user test from 178.128.124.49 port 35339 ssh2
Aug 31 05:48:36 web1 sshd\[18758\]: Invalid user john from 178.128.124.49
Aug 31 05:48:36 web1 sshd\[18758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.124.49
2019-08-31 23:55:22
139.59.14.210 attackspambots
Aug 31 11:34:55 aat-srv002 sshd[19450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.14.210
Aug 31 11:34:56 aat-srv002 sshd[19450]: Failed password for invalid user admin from 139.59.14.210 port 52642 ssh2
Aug 31 11:42:14 aat-srv002 sshd[19656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.14.210
Aug 31 11:42:16 aat-srv002 sshd[19656]: Failed password for invalid user test from 139.59.14.210 port 39716 ssh2
...
2019-09-01 00:46:15
148.70.1.210 attack
Aug 31 14:32:17 mail sshd\[25273\]: Failed password for invalid user mysql from 148.70.1.210 port 47026 ssh2
Aug 31 14:49:49 mail sshd\[25575\]: Invalid user bremen from 148.70.1.210 port 60206
...
2019-08-31 23:46:03
138.68.93.14 attackspambots
Aug 31 06:01:35 aiointranet sshd\[875\]: Invalid user cynthia123 from 138.68.93.14
Aug 31 06:01:35 aiointranet sshd\[875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.93.14
Aug 31 06:01:37 aiointranet sshd\[875\]: Failed password for invalid user cynthia123 from 138.68.93.14 port 47098 ssh2
Aug 31 06:05:41 aiointranet sshd\[1243\]: Invalid user ts2 from 138.68.93.14
Aug 31 06:05:41 aiointranet sshd\[1243\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.93.14
2019-09-01 00:08:15
79.7.206.177 attackspambots
Aug 31 15:54:26 gitlab-ci sshd\[7995\]: Invalid user foobar from 79.7.206.177Aug 31 16:00:28 gitlab-ci sshd\[8002\]: Invalid user admin from 79.7.206.177
...
2019-09-01 00:07:27
68.183.234.12 attackbots
Aug 31 17:23:53 debian sshd\[723\]: Invalid user fabian from 68.183.234.12 port 46328
Aug 31 17:23:53 debian sshd\[723\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.234.12
...
2019-09-01 00:37:15

最近上报的IP列表

132.148.179.68 132.148.180.148 132.148.180.176 132.148.180.227
132.148.181.135 132.148.181.192 132.148.182.148 132.148.183.183
132.148.183.217 132.148.19.140 132.148.183.16 118.172.58.98
132.148.19.158 132.148.19.72 132.148.192.2 132.148.19.90
132.148.192.219 132.148.192.8 132.148.193.135 132.148.193.167