必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): GoDaddy.com LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Automatic report - Banned IP Access
2019-09-17 01:38:30
attackbots
WordPress login Brute force / Web App Attack on client site.
2019-08-12 06:43:41
attack
Attempt to access prohibited URL /wp-login.php
2019-08-01 09:46:58
attackbotsspam
fail2ban honeypot
2019-07-05 04:32:36
attack
WordPress login Brute force / Web App Attack on client site.
2019-06-26 19:18:11
attack
132.148.18.214 - - \[25/Jun/2019:00:02:56 +0200\] "POST /wp-login.php HTTP/1.1" 200 2111 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
132.148.18.214 - - \[25/Jun/2019:00:03:07 +0200\] "POST /wp-login.php HTTP/1.1" 200 2113 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2019-06-25 10:04:15
attackspam
132.148.18.214 - - \[23/Jun/2019:14:50:48 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
132.148.18.214 - - \[23/Jun/2019:14:50:49 +0200\] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
132.148.18.214 - - \[23/Jun/2019:14:50:52 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
132.148.18.214 - - \[23/Jun/2019:14:51:01 +0200\] "POST /wp-login.php HTTP/1.1" 200 1631 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
132.148.18.214 - - \[23/Jun/2019:14:51:02 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
132.148.18.214 - - \[23/Jun/2019:14:51:09 +0200\] "POST /wp-login.php HTTP/1.1" 200 1630 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:6
2019-06-24 01:18:48
attackspambots
[munged]::443 132.148.18.214 - - [23/Jun/2019:04:26:08 +0200] "POST /[munged]: HTTP/1.1" 401 8485 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 132.148.18.214 - - [23/Jun/2019:04:26:13 +0200] "POST /[munged]: HTTP/1.1" 401 8486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 132.148.18.214 - - [23/Jun/2019:04:26:13 +0200] "POST /[munged]: HTTP/1.1" 401 8486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 132.148.18.214 - - [23/Jun/2019:04:26:32 +0200] "POST /[munged]: HTTP/1.1" 401 8485 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 132.148.18.214 - - [23/Jun/2019:04:26:32 +0200] "POST /[munged]: HTTP/1.1" 401 8485 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 132.148.18.214 - - [23/Jun/2019:04:26:57 +0200] "POST /[munged]: HTTP/1.1" 401 8486 "-" "Mozilla/5.0 (X11
2019-06-23 11:18:22
相同子网IP讨论:
IP 类型 评论内容 时间
132.148.182.88 attackbots
Automatic report - XMLRPC Attack
2020-03-01 17:18:56
132.148.18.178 attackbotsspam
132.148.18.178 - - [14/Dec/2019:11:49:26 +0100] "POST /wp-login.php HTTP/1.1" 200 3125 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.18.178 - - [14/Dec/2019:11:52:46 +0100] "POST /wp-login.php HTTP/1.1" 200 3125 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-12-14 20:22:39
132.148.18.178 attackspam
WordPress login Brute force / Web App Attack on client site.
2019-10-08 23:43:17
132.148.18.178 attackspambots
132.148.18.178 - - [26/Sep/2019:23:21:31 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.18.178 - - [26/Sep/2019:23:21:32 +0200] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.18.178 - - [26/Sep/2019:23:21:32 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.18.178 - - [26/Sep/2019:23:21:33 +0200] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.18.178 - - [26/Sep/2019:23:21:33 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.18.178 - - [26/Sep/2019:23:21:34 +0200] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-09-27 06:58:09
132.148.18.178 attackbots
WordPress login Brute force / Web App Attack on client site.
2019-09-26 18:11:43
132.148.18.178 attackbotsspam
WordPress wp-login brute force :: 132.148.18.178 0.052 BYPASS [21/Sep/2019:01:26:28  1000] [censored_4] "POST /wp-login.php HTTP/1.1" 200 3989 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-09-20 23:30:13
132.148.18.178 attackspambots
WordPress brute force
2019-08-03 08:32:36
132.148.18.178 attackbots
Auto reported by IDS
2019-07-17 09:49:51
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 132.148.18.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62908
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;132.148.18.214.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019061002 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jun 11 09:39:25 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:
214.18.148.132.in-addr.arpa domain name pointer ip-132-148-18-214.ip.secureserver.net.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
214.18.148.132.in-addr.arpa	name = ip-132-148-18-214.ip.secureserver.net.

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
85.219.185.50 attack
(sshd) Failed SSH login from 85.219.185.50 (PL/Poland/Silesia/Siemianowice Śląskie/s185pc50.mmj.pl/[AS59958 P.H.U MMJ Marcin Janos]): 1 in the last 3600 secs
2019-09-12 05:01:48
118.24.99.163 attackspam
Sep 11 20:56:58 MK-Soft-Root1 sshd\[1700\]: Invalid user gopi from 118.24.99.163 port 29893
Sep 11 20:56:58 MK-Soft-Root1 sshd\[1700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.99.163
Sep 11 20:57:00 MK-Soft-Root1 sshd\[1700\]: Failed password for invalid user gopi from 118.24.99.163 port 29893 ssh2
...
2019-09-12 05:23:59
37.49.231.104 attackbots
09/11/2019-16:03:50.897429 37.49.231.104 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 32
2019-09-12 05:04:59
49.235.202.57 attackspam
Sep 11 10:51:53 eddieflores sshd\[7354\]: Invalid user git from 49.235.202.57
Sep 11 10:51:53 eddieflores sshd\[7354\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.202.57
Sep 11 10:51:55 eddieflores sshd\[7354\]: Failed password for invalid user git from 49.235.202.57 port 34630 ssh2
Sep 11 10:58:47 eddieflores sshd\[7887\]: Invalid user ftp_test from 49.235.202.57
Sep 11 10:58:47 eddieflores sshd\[7887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.202.57
2019-09-12 05:04:41
58.254.132.238 attackspambots
Sep 11 11:36:56 hiderm sshd\[12665\]: Invalid user q1w2e3r4 from 58.254.132.238
Sep 11 11:36:56 hiderm sshd\[12665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.238
Sep 11 11:36:58 hiderm sshd\[12665\]: Failed password for invalid user q1w2e3r4 from 58.254.132.238 port 33510 ssh2
Sep 11 11:42:32 hiderm sshd\[13310\]: Invalid user plesk102020 from 58.254.132.238
Sep 11 11:42:32 hiderm sshd\[13310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.238
2019-09-12 05:42:37
122.245.110.148 attack
Automatic report - Port Scan Attack
2019-09-12 05:10:09
185.18.88.242 attackspam
(mod_security) mod_security (id:230011) triggered by 185.18.88.242 (RU/Russia/-): 5 in the last 3600 secs
2019-09-12 05:11:59
80.211.239.102 attackspam
Sep 11 22:42:58 legacy sshd[28649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.102
Sep 11 22:43:00 legacy sshd[28649]: Failed password for invalid user server from 80.211.239.102 port 48584 ssh2
Sep 11 22:49:11 legacy sshd[28806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.102
...
2019-09-12 05:04:15
123.108.35.186 attackbotsspam
Sep 11 22:16:26 lnxded63 sshd[23296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.108.35.186
2019-09-12 05:39:39
218.24.167.204 attackspambots
Sep 11 23:05:03 rpi sshd[6325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.24.167.204 
Sep 11 23:05:05 rpi sshd[6325]: Failed password for invalid user test123 from 218.24.167.204 port 60866 ssh2
2019-09-12 05:36:34
104.155.91.177 attackbotsspam
Sep 11 09:09:03 eddieflores sshd\[31126\]: Invalid user ts3 from 104.155.91.177
Sep 11 09:09:03 eddieflores sshd\[31126\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.91.155.104.bc.googleusercontent.com
Sep 11 09:09:04 eddieflores sshd\[31126\]: Failed password for invalid user ts3 from 104.155.91.177 port 53848 ssh2
Sep 11 09:14:51 eddieflores sshd\[31667\]: Invalid user temp from 104.155.91.177
Sep 11 09:14:51 eddieflores sshd\[31667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.91.155.104.bc.googleusercontent.com
2019-09-12 05:00:00
104.203.108.109 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-11 18:53:23,493 INFO [amun_request_handler] PortScan Detected on Port: 445 (104.203.108.109)
2019-09-12 05:15:40
201.91.132.170 attackbotsspam
2019-09-11T21:19:33.540939abusebot-8.cloudsearch.cf sshd\[1325\]: Invalid user webuser from 201.91.132.170 port 39183
2019-09-11T21:19:33.546076abusebot-8.cloudsearch.cf sshd\[1325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.91.132.170
2019-09-12 05:20:43
141.98.9.195 attackbots
Sep 11 23:28:48 relay postfix/smtpd\[6462\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 11 23:29:29 relay postfix/smtpd\[31328\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 11 23:29:41 relay postfix/smtpd\[6462\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 11 23:30:22 relay postfix/smtpd\[32685\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 11 23:30:34 relay postfix/smtpd\[14754\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2019-09-12 05:32:11
5.136.243.174 attack
[portscan] Port scan
2019-09-12 05:11:07

最近上报的IP列表

36.66.227.253 60.100.92.183 26.84.137.135 218.202.228.152
163.172.12.140 240.161.192.247 158.195.41.202 109.200.159.230
115.132.194.228 112.78.4.22 188.165.27.72 122.161.199.110
50.79.48.86 159.203.126.182 195.28.55.250 73.220.52.112
178.196.75.202 36.58.70.169 178.128.173.61 251.237.141.224