必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): GoDaddy.com LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbotsspam
Port Scan: TCP/445
2019-09-03 03:02:13
相同子网IP讨论:
IP 类型 评论内容 时间
148.72.42.181 attack
148.72.42.181 - - [28/Sep/2020:16:56:53 +0100] "POST /wp-login.php HTTP/1.1" 200 1861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.42.181 - - [28/Sep/2020:16:56:55 +0100] "POST /wp-login.php HTTP/1.1" 200 1839 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.42.181 - - [28/Sep/2020:16:57:03 +0100] "POST /wp-login.php HTTP/1.1" 200 1845 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-29 04:00:55
148.72.42.181 attackbotsspam
148.72.42.181 - - [28/Sep/2020:12:55:35 +0100] "POST /wp-login.php HTTP/1.1" 200 2223 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.42.181 - - [28/Sep/2020:12:55:38 +0100] "POST /wp-login.php HTTP/1.1" 200 2180 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.42.181 - - [28/Sep/2020:12:55:40 +0100] "POST /wp-login.php HTTP/1.1" 200 2225 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-28 20:14:35
148.72.42.181 attackbots
CMS (WordPress or Joomla) login attempt.
2020-09-28 12:18:50
148.72.42.181 attackspam
148.72.42.181 - - [23/Sep/2020:09:14:19 +0200] "POST /wp-login.php HTTP/1.0" 200 4794 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-23 20:24:17
148.72.42.181 attack
148.72.42.181 - - \[23/Sep/2020:04:37:59 +0200\] "POST /wp-login.php HTTP/1.0" 200 5983 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
148.72.42.181 - - \[23/Sep/2020:04:38:01 +0200\] "POST /wp-login.php HTTP/1.0" 200 5981 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
148.72.42.181 - - \[23/Sep/2020:04:38:12 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-09-23 12:47:39
148.72.42.181 attack
Automatic report generated by Wazuh
2020-09-23 04:32:10
148.72.42.181 attack
xmlrpc attack
2020-09-08 21:51:37
148.72.42.181 attackbotsspam
148.72.42.181 - - [08/Sep/2020:07:10:02 +0200] "POST /xmlrpc.php HTTP/1.1" 403 21244 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.42.181 - - [08/Sep/2020:07:29:03 +0200] "POST /xmlrpc.php HTTP/1.1" 403 11291 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-08 13:39:25
148.72.42.181 attack
148.72.42.181 - - \[07/Sep/2020:19:39:20 +0200\] "POST /wp-login.php HTTP/1.0" 200 3152 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
148.72.42.181 - - \[07/Sep/2020:19:39:22 +0200\] "POST /wp-login.php HTTP/1.0" 200 3118 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
148.72.42.181 - - \[07/Sep/2020:19:39:25 +0200\] "POST /wp-login.php HTTP/1.0" 200 3113 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-09-08 06:14:29
148.72.42.181 attack
WordPress login Brute force / Web App Attack on client site.
2020-08-13 05:25:19
148.72.42.181 attackbots
148.72.42.181 - - [18/Jul/2020:04:55:20 +0100] "POST /wp-login.php HTTP/1.1" 200 2082 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.42.181 - - [18/Jul/2020:04:55:21 +0100] "POST /wp-login.php HTTP/1.1" 200 2060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.42.181 - - [18/Jul/2020:04:55:24 +0100] "POST /wp-login.php HTTP/1.1" 200 2063 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-07-18 13:24:04
148.72.42.181 attack
148.72.42.181 - - [24/Jun/2020:07:34:56 +0100] "POST /wp-login.php HTTP/1.1" 200 1969 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.42.181 - - [24/Jun/2020:07:34:58 +0100] "POST /wp-login.php HTTP/1.1" 200 1954 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.42.181 - - [24/Jun/2020:07:34:58 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-06-24 15:32:00
148.72.42.181 attack
CMS (WordPress or Joomla) login attempt.
2020-05-13 14:49:57
148.72.42.181 attackbotsspam
Automatic report - Banned IP Access
2020-02-28 14:23:14
148.72.42.181 attackbotsspam
GET /wp-login.php HTTP/1.1
2020-02-23 01:46:37
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.72.42.46
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41825
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.72.42.46.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090201 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Sep 03 03:02:08 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
46.42.72.148.in-addr.arpa domain name pointer ip-148-72-42-46.ip.secureserver.net.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
46.42.72.148.in-addr.arpa	name = ip-148-72-42-46.ip.secureserver.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
217.112.142.51 attackbots
Email Spam
2020-05-09 12:12:01
115.84.99.100 attackspam
Dovecot Invalid User Login Attempt.
2020-05-09 12:09:21
222.186.42.136 attackspambots
05/08/2020-22:58:00.209700 222.186.42.136 Protocol: 6 ET SCAN Potential SSH Scan
2020-05-09 12:01:50
213.217.0.132 attackbotsspam
May  9 02:16:13 debian-2gb-nbg1-2 kernel: \[11242251.839418\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=213.217.0.132 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54982 PROTO=TCP SPT=56649 DPT=55842 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-09 09:01:42
222.186.180.147 attackbotsspam
May  8 22:59:35 NPSTNNYC01T sshd[12610]: Failed password for root from 222.186.180.147 port 39196 ssh2
May  8 22:59:39 NPSTNNYC01T sshd[12610]: Failed password for root from 222.186.180.147 port 39196 ssh2
May  8 22:59:42 NPSTNNYC01T sshd[12610]: Failed password for root from 222.186.180.147 port 39196 ssh2
May  8 22:59:46 NPSTNNYC01T sshd[12610]: Failed password for root from 222.186.180.147 port 39196 ssh2
...
2020-05-09 12:10:41
91.122.9.140 attackspam
20/5/8@18:36:18: FAIL: Alarm-Network address from=91.122.9.140
20/5/8@18:36:18: FAIL: Alarm-Network address from=91.122.9.140
...
2020-05-09 08:49:29
185.36.63.212 attackspam
proto=tcp  .  spt=37684  .  dpt=25  .     Found on   Blocklist de       (166)
2020-05-09 12:16:29
45.143.220.134 attackspam
firewall-block, port(s): 8089/tcp
2020-05-09 08:55:16
49.233.182.23 attackbotsspam
$f2bV_matches
2020-05-09 12:21:23
193.112.23.7 attackspam
May  9 01:09:41 mout sshd[13826]: Invalid user hung from 193.112.23.7 port 50560
2020-05-09 08:55:46
189.197.70.131 attackbots
Dovecot Invalid User Login Attempt.
2020-05-09 08:46:46
222.186.169.194 attackbotsspam
May  8 20:48:43 NPSTNNYC01T sshd[30989]: Failed password for root from 222.186.169.194 port 44964 ssh2
May  8 20:49:04 NPSTNNYC01T sshd[30999]: Failed password for root from 222.186.169.194 port 49622 ssh2
May  8 20:49:07 NPSTNNYC01T sshd[30999]: Failed password for root from 222.186.169.194 port 49622 ssh2
...
2020-05-09 08:50:48
185.143.75.157 attackspam
May  9 04:58:22 v22019058497090703 postfix/smtpd[403]: warning: unknown[185.143.75.157]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  9 04:59:02 v22019058497090703 postfix/smtpd[403]: warning: unknown[185.143.75.157]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  9 04:59:45 v22019058497090703 postfix/smtpd[403]: warning: unknown[185.143.75.157]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-05-09 12:14:05
52.23.215.77 attackspam
Attempted connection to port 997.
2020-05-09 09:03:58
103.145.12.87 attackspambots
[2020-05-08 22:51:58] NOTICE[1157][C-00001c66] chan_sip.c: Call from '' (103.145.12.87:49563) to extension '9011441482455983' rejected because extension not found in context 'public'.
[2020-05-08 22:51:58] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-08T22:51:58.058-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441482455983",SessionID="0x7f5f10905838",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.87/49563",ACLName="no_extension_match"
[2020-05-08 22:51:58] NOTICE[1157][C-00001c67] chan_sip.c: Call from '' (103.145.12.87:51844) to extension '9011442037698349' rejected because extension not found in context 'public'.
[2020-05-08 22:51:58] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-08T22:51:58.438-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011442037698349",SessionID="0x7f5f106f5588",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/
...
2020-05-09 12:09:53

最近上报的IP列表

66.116.120.196 58.245.82.2 35.187.176.240 18.209.48.50
220.132.248.197 136.94.155.244 164.140.22.9 218.93.154.66
210.21.102.4 206.222.16.74 187.188.147.152 71.190.153.5
182.148.122.7 91.146.150.122 173.175.233.36 193.100.74.78
77.56.6.111 203.80.94.243 206.42.106.196 174.129.53.42