148.72.150.56 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
148.72.150.74	attackspambots	Dec 18 15:36:56 grey postfix/smtpd\[23209\]: NOQUEUE: reject: RCPT from unknown\[148.72.150.74\]: 554 5.7.1 Service unavailable\; Client host \[148.72.150.74\] blocked using ix.dnsbl.manitu.net\; Your e-mail service was detected by test.port25.me \(NiX Spam\) as spamming at Wed, 18 Dec 2019 13:05:23 +0100. Your admin should visit http://www.dnsbl.manitu.net/lookup.php\?value=148.72.150.74\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-18 23:53:10
148.72.150.63	attackspam	Jul 29 17:36:05 localhost sshd\[22355\]: Invalid user victoria from 148.72.150.63 port 49444 Jul 29 17:36:05 localhost sshd\[22355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.72.150.63 Jul 29 17:36:07 localhost sshd\[22355\]: Failed password for invalid user victoria from 148.72.150.63 port 49444 ssh2 ...	2019-07-30 06:58:15

类型

评论内容

时间

148.72.150.74

attackspambots

Dec 18 15:36:56 grey postfix/smtpd\[23209\]: NOQUEUE: reject: RCPT from unknown\[148.72.150.74\]: 554 5.7.1 Service unavailable\; Client host \[148.72.150.74\] blocked using ix.dnsbl.manitu.net\; Your e-mail service was detected by test.port25.me \(NiX Spam\) as spamming at Wed, 18 Dec 2019 13:05:23 +0100. Your admin should visit http://www.dnsbl.manitu.net/lookup.php\?value=148.72.150.74\; from=\ to=\ proto=ESMTP helo=\
...

2019-12-18 23:53:10

148.72.150.63

attackspam

Jul 29 17:36:05 localhost sshd\[22355\]: Invalid user victoria from 148.72.150.63 port 49444
Jul 29 17:36:05 localhost sshd\[22355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.72.150.63
Jul 29 17:36:07 localhost sshd\[22355\]: Failed password for invalid user victoria from 148.72.150.63 port 49444 ssh2
...

2019-07-30 06:58:15

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.72.150.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3249
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;148.72.150.56.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021801 1800 900 604800 86400

;; Query time: 185 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 03:39:40 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 56.150.72.148.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 56.150.72.148.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
88.88.76.166	attackbots	2020-10-04T08:23:34.760400shield sshd\[20693\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ti0107a400-4737.bb.online.no user=root 2020-10-04T08:23:37.213041shield sshd\[20693\]: Failed password for root from 88.88.76.166 port 38330 ssh2 2020-10-04T08:28:50.632854shield sshd\[21232\]: Invalid user web from 88.88.76.166 port 50480 2020-10-04T08:28:50.642813shield sshd\[21232\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ti0107a400-4737.bb.online.no 2020-10-04T08:28:52.808203shield sshd\[21232\]: Failed password for invalid user web from 88.88.76.166 port 50480 ssh2	2020-10-05 03:41:05
82.202.197.45	attackbotsspam	Repeated RDP login failures. Last user: Administrator	2020-10-05 03:55:11
177.61.189.62	attackbotsspam	Unauthorised access (Oct 3) SRC=177.61.189.62 LEN=52 TOS=0x10 PREC=0x40 TTL=114 ID=19051 DF TCP DPT=445 WINDOW=8192 SYN	2020-10-05 03:29:07
47.89.18.138	attackspam	[munged]::443 47.89.18.138 - - [04/Oct/2020:11:30:31 +0200] "POST /[munged]: HTTP/1.1" 200 9183 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 47.89.18.138 - - [04/Oct/2020:11:30:34 +0200] "POST /[munged]: HTTP/1.1" 200 9183 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 47.89.18.138 - - [04/Oct/2020:11:30:36 +0200] "POST /[munged]: HTTP/1.1" 200 9183 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 47.89.18.138 - - [04/Oct/2020:11:30:38 +0200] "POST /[munged]: HTTP/1.1" 200 9183 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 47.89.18.138 - - [04/Oct/2020:11:30:41 +0200] "POST /[munged]: HTTP/1.1" 200 9183 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 47.89.18.138 - - [04/Oct/2020:11:30:43 +0200] "POST /[munged]: HTTP/1.1" 200 9183 "-" "Mozilla/5.0 (X11; Ubuntu; Li	2020-10-05 03:51:53
37.187.107.217	attackspam	2020-10-04 13:12:53.446039-0500 localhost sshd[89091]: Failed password for root from 37.187.107.217 port 41160 ssh2	2020-10-05 03:37:04
142.93.38.61	attack	2020-10-04T22:17:03.096869ollin.zadara.org sshd[228319]: User root from 142.93.38.61 not allowed because not listed in AllowUsers 2020-10-04T22:17:04.630811ollin.zadara.org sshd[228319]: Failed password for invalid user root from 142.93.38.61 port 35560 ssh2 ...	2020-10-05 03:31:22
177.206.223.60	attackbots	Listed on dnsbl-sorbs plus abuseat.org and zen-spamhaus / proto=6 . srcport=21024 . dstport=23 Telnet . (1392)	2020-10-05 03:40:27
170.210.221.48	attack	Oct 4 18:05:57 nopemail auth.info sshd[30037]: Disconnected from authenticating user root 170.210.221.48 port 43852 [preauth] ...	2020-10-05 03:36:45
185.202.1.103	attack	Repeated RDP login failures. Last user: Administrator	2020-10-05 03:58:13
157.230.24.226	attackspambots	prod8 ...	2020-10-05 03:32:46
45.141.87.6	attackspambots	attack brute force	2020-10-05 03:45:12
51.75.123.107	attack	Oct 4 19:49:34 gospond sshd[30774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.107 user=root Oct 4 19:49:36 gospond sshd[30774]: Failed password for root from 51.75.123.107 port 52876 ssh2 ...	2020-10-05 03:33:43
217.138.221.92	attack	Repeated RDP login failures. Last user: Test	2020-10-05 04:00:03
45.141.84.175	attackspambots	RDPBrutePap	2020-10-05 03:46:01
2.88.83.74	attackbotsspam	Wordpress File Manager Plugin Remote Code Execution Vulnerability, PTR: PTR record not found	2020-10-05 03:47:51

最近上报的IP列表

148.72.197.175	148.66.138.114	148.72.206.103	148.72.158.202
148.72.208.93	148.72.214.33	148.72.252.117	148.72.80.214
148.72.61.75	149.126.73.147	149.129.208.150	149.129.225.68
149.129.248.12	149.126.72.134	149.129.208.172	149.129.233.206
149.13.127.33	149.126.6.21	149.126.79.134	149.154.68.153