必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): GoDaddy.com

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Jul 11 15:47:16 h2421860 postfix/postscreen[31034]: CONNECT from [148.66.132.16]:32890 to [85.214.119.52]:25
Jul 11 15:47:16 h2421860 postfix/dnsblog[31036]: addr 148.66.132.16 listed by domain Unknown.trblspam.com as 185.53.179.7
Jul 11 15:47:17 h2421860 postfix/dnsblog[31039]: addr 148.66.132.16 listed by domain dnsbl.sorbs.net as 127.0.0.10
Jul 11 15:47:17 h2421860 postfix/postscreen[31034]: PREGREET 14 after 0.17 from [148.66.132.16]:32890: HELO sab.com

Jul 11 15:47:17 h2421860 postfix/smtpd[31043]: connect from unknown[148.66.132.16]
Jul x@x
Jul 11 15:47:17 h2421860 postfix/smtpd[31043]: warning: non-SMTP command from unknown[148.66.132.16]: Received: 1
Jul 11 15:47:17 h2421860 postfix/smtpd[31043]: disconnect from unknown[148.66.132.16]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=148.66.132.16
2019-07-12 05:27:18
相同子网IP讨论:
IP 类型 评论内容 时间
148.66.132.190 attack
Ssh brute force
2020-10-04 09:05:57
148.66.132.190 attackbotsspam
2020-10-03T03:22:43.911310n23.at sshd[2066088]: Failed password for invalid user git from 148.66.132.190 port 36800 ssh2
2020-10-03T03:37:20.303913n23.at sshd[2077902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190  user=root
2020-10-03T03:37:22.404701n23.at sshd[2077902]: Failed password for root from 148.66.132.190 port 35436 ssh2
...
2020-10-04 01:42:25
148.66.132.190 attack
2020-10-03T03:22:43.911310n23.at sshd[2066088]: Failed password for invalid user git from 148.66.132.190 port 36800 ssh2
2020-10-03T03:37:20.303913n23.at sshd[2077902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190  user=root
2020-10-03T03:37:22.404701n23.at sshd[2077902]: Failed password for root from 148.66.132.190 port 35436 ssh2
...
2020-10-03 17:27:56
148.66.132.190 attackspambots
SSH brute
2020-09-29 03:25:49
148.66.132.190 attackbotsspam
Sep 28 07:57:34 nextcloud sshd\[8903\]: Invalid user guest from 148.66.132.190
Sep 28 07:57:34 nextcloud sshd\[8903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190
Sep 28 07:57:36 nextcloud sshd\[8903\]: Failed password for invalid user guest from 148.66.132.190 port 55886 ssh2
2020-09-28 19:37:03
148.66.132.190 attackspambots
Aug 24 14:55:44 ip-172-31-16-56 sshd\[1591\]: Invalid user web from 148.66.132.190\
Aug 24 14:55:46 ip-172-31-16-56 sshd\[1591\]: Failed password for invalid user web from 148.66.132.190 port 58242 ssh2\
Aug 24 15:00:41 ip-172-31-16-56 sshd\[1617\]: Invalid user db2inst1 from 148.66.132.190\
Aug 24 15:00:43 ip-172-31-16-56 sshd\[1617\]: Failed password for invalid user db2inst1 from 148.66.132.190 port 38126 ssh2\
Aug 24 15:05:31 ip-172-31-16-56 sshd\[1667\]: Invalid user postgres from 148.66.132.190\
2020-08-25 00:43:51
148.66.132.190 attackbotsspam
Aug 17 04:15:49 itv-usvr-01 sshd[24156]: Invalid user brisa from 148.66.132.190
Aug 17 04:15:49 itv-usvr-01 sshd[24156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190
Aug 17 04:15:49 itv-usvr-01 sshd[24156]: Invalid user brisa from 148.66.132.190
Aug 17 04:15:51 itv-usvr-01 sshd[24156]: Failed password for invalid user brisa from 148.66.132.190 port 39092 ssh2
2020-08-17 05:32:23
148.66.132.190 attack
Aug 12 23:53:24 cosmoit sshd[26793]: Failed password for root from 148.66.132.190 port 59358 ssh2
2020-08-13 06:02:42
148.66.132.190 attack
Aug  3 00:06:49 itv-usvr-01 sshd[6849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190  user=root
Aug  3 00:06:51 itv-usvr-01 sshd[6849]: Failed password for root from 148.66.132.190 port 34194 ssh2
Aug  3 00:11:32 itv-usvr-01 sshd[7198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190  user=root
Aug  3 00:11:34 itv-usvr-01 sshd[7198]: Failed password for root from 148.66.132.190 port 47582 ssh2
Aug  3 00:16:02 itv-usvr-01 sshd[7400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190  user=root
Aug  3 00:16:04 itv-usvr-01 sshd[7400]: Failed password for root from 148.66.132.190 port 60950 ssh2
2020-08-03 02:05:23
148.66.132.190 attack
Invalid user jogoon from 148.66.132.190 port 38050
2020-08-01 14:04:33
148.66.132.190 attackspambots
Jul 30 08:05:54 piServer sshd[21143]: Failed password for backup from 148.66.132.190 port 35484 ssh2
Jul 30 08:09:27 piServer sshd[21521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190 
Jul 30 08:09:29 piServer sshd[21521]: Failed password for invalid user xiehs from 148.66.132.190 port 56024 ssh2
...
2020-07-30 16:40:13
148.66.132.190 attack
Jul 18 00:02:02 [host] sshd[25700]: Invalid user e
Jul 18 00:02:02 [host] sshd[25700]: pam_unix(sshd:
Jul 18 00:02:05 [host] sshd[25700]: Failed passwor
2020-07-18 08:22:35
148.66.132.190 attackspam
Jun 26 04:57:54 dignus sshd[8727]: Failed password for invalid user ejabberd from 148.66.132.190 port 37842 ssh2
Jun 26 05:01:36 dignus sshd[9084]: Invalid user deploy from 148.66.132.190 port 38318
Jun 26 05:01:36 dignus sshd[9084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190
Jun 26 05:01:37 dignus sshd[9084]: Failed password for invalid user deploy from 148.66.132.190 port 38318 ssh2
Jun 26 05:05:27 dignus sshd[9474]: Invalid user roberto from 148.66.132.190 port 38806
...
2020-06-26 22:54:01
148.66.132.190 attackbots
Jun 12 08:05:27 Tower sshd[14390]: Connection from 148.66.132.190 port 37990 on 192.168.10.220 port 22 rdomain ""
Jun 12 08:05:29 Tower sshd[14390]: Invalid user monitor from 148.66.132.190 port 37990
Jun 12 08:05:29 Tower sshd[14390]: error: Could not get shadow information for NOUSER
Jun 12 08:05:29 Tower sshd[14390]: Failed password for invalid user monitor from 148.66.132.190 port 37990 ssh2
Jun 12 08:05:29 Tower sshd[14390]: Received disconnect from 148.66.132.190 port 37990:11: Bye Bye [preauth]
Jun 12 08:05:29 Tower sshd[14390]: Disconnected from invalid user monitor 148.66.132.190 port 37990 [preauth]
2020-06-12 23:58:08
148.66.132.190 attackspam
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-06-08 04:18:39
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.66.132.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17059
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.66.132.16.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071101 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jul 12 05:27:12 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 16.132.66.148.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 16.132.66.148.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
58.212.42.76 attackspam
Brute Force
2020-04-19 00:49:58
125.166.209.106 attackbotsspam
Invalid user uc from 125.166.209.106 port 42048
2020-04-19 01:18:44
49.234.88.160 attack
Apr 18 18:20:21  sshd\[31492\]: Invalid user mg from 49.234.88.160Apr 18 18:20:23  sshd\[31492\]: Failed password for invalid user mg from 49.234.88.160 port 49932 ssh2
...
2020-04-19 01:09:08
129.226.179.238 attackspambots
Brute force attempt
2020-04-19 00:42:57
149.56.172.224 attackspam
Apr 18 17:15:15 host sshd[4704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip224.ip-149-56-172.net  user=root
Apr 18 17:15:17 host sshd[4704]: Failed password for root from 149.56.172.224 port 59122 ssh2
...
2020-04-19 00:52:25
185.173.35.5 attackbotsspam
Port scan: Attack repeated for 24 hours
2020-04-19 00:52:06
148.66.132.190 attack
Apr 18 15:50:51 *** sshd[11042]: User root from 148.66.132.190 not allowed because not listed in AllowUsers
2020-04-19 00:58:24
85.97.131.108 attackbots
1587217953 - 04/18/2020 15:52:33 Host: 85.97.131.108/85.97.131.108 Port: 445 TCP Blocked
2020-04-19 01:10:20
54.37.65.3 attackspam
Apr 18 18:41:08 tuxlinux sshd[38551]: Invalid user test1 from 54.37.65.3 port 46612
Apr 18 18:41:08 tuxlinux sshd[38551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.65.3 
Apr 18 18:41:08 tuxlinux sshd[38551]: Invalid user test1 from 54.37.65.3 port 46612
Apr 18 18:41:08 tuxlinux sshd[38551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.65.3 
Apr 18 18:41:08 tuxlinux sshd[38551]: Invalid user test1 from 54.37.65.3 port 46612
Apr 18 18:41:08 tuxlinux sshd[38551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.65.3 
Apr 18 18:41:09 tuxlinux sshd[38551]: Failed password for invalid user test1 from 54.37.65.3 port 46612 ssh2
...
2020-04-19 01:01:35
218.93.114.155 attack
Apr 18 16:57:20 dev0-dcde-rnet sshd[22574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.93.114.155
Apr 18 16:57:23 dev0-dcde-rnet sshd[22574]: Failed password for invalid user ubuntu from 218.93.114.155 port 62903 ssh2
Apr 18 17:17:04 dev0-dcde-rnet sshd[22737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.93.114.155
2020-04-19 00:47:07
213.136.74.238 attackspam
Apr 18 16:06:52 scw-6657dc sshd[5706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.136.74.238  user=git
Apr 18 16:06:52 scw-6657dc sshd[5706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.136.74.238  user=git
Apr 18 16:06:54 scw-6657dc sshd[5706]: Failed password for git from 213.136.74.238 port 51988 ssh2
...
2020-04-19 00:51:48
92.63.194.25 attackspam
Apr 18 18:36:26 host sshd[43909]: Invalid user Administrator from 92.63.194.25 port 44851
...
2020-04-19 00:53:07
211.237.167.109 attack
Port probing on unauthorized port 23
2020-04-19 01:09:30
103.139.45.115 attackbotsspam
Port Scan: Events[2] countPorts[1]: 25 ..
2020-04-19 01:07:55
165.227.7.5 attackbotsspam
Apr 18 17:14:30 ns382633 sshd\[10867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.7.5  user=root
Apr 18 17:14:32 ns382633 sshd\[10867\]: Failed password for root from 165.227.7.5 port 53426 ssh2
Apr 18 17:19:45 ns382633 sshd\[11928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.7.5  user=root
Apr 18 17:19:46 ns382633 sshd\[11928\]: Failed password for root from 165.227.7.5 port 43522 ssh2
Apr 18 17:24:46 ns382633 sshd\[12987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.7.5  user=root
2020-04-19 01:17:00

最近上报的IP列表

3.91.87.49 31.170.57.81 180.123.169.10 167.71.173.103
123.55.147.8 191.53.249.213 151.235.231.129 116.55.34.21
77.43.37.38 180.96.12.153 14.232.134.196 181.118.179.102
109.203.185.243 148.163.87.136 138.68.41.178 89.39.95.149
140.114.28.155 176.106.206.131 81.18.53.195 37.236.153.149