185.180.141.48

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Portugal

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '185.180.141.0 - 185.180.141.255'

% Abuse contact for '185.180.141.0 - 185.180.141.255' is 'optout@internet-census.org'

inetnum:        185.180.141.0 - 185.180.141.255
netname:        ICG-1-ZEN-DFW
descr:          ICG-1-ZEN-DFW
country:        US
admin-c:        AR59913-RIPE
abuse-c:        AR59913-RIPE
tech-c:         AR59913-RIPE
status:         ASSIGNED PA
mnt-by:         MNT-BST
created:        2024-08-27T14:01:10Z
last-modified:  2025-09-23T12:37:43Z
source:         RIPE
remarks:        https://internet-census.org
remarks:        Internet Census Group seeks to measure the global Internet with non-intrusive data collection techniques in order to analyze trends and benchmark security performance across a broad range of industries
remarks:        We are committed to upholding the security and privacy of the entire online community. As part of that mission, we maintain a list of entities that have contacted us and wish to prevent us from attempting to access their addresses or ports
remarks:        To have your IP address added to this list, provide us with the IP addresses you wish to remove via email to: optout@internet-census.org
remarks:        Please continue to update us if your IP addresses or networks change so we can continue to keep you opted out. You will receive a confirmation email when completed

role:           Abuse-C Role
address:        Operations for Internet Census Group
address:        https://internet-census.org
nic-hdl:        AR59913-RIPE
abuse-mailbox:  optout@internet-census.org
mnt-by:         MNT-BST
created:        2020-02-21T08:44:10Z
last-modified:  2021-03-12T21:58:21Z
source:         RIPE # Filtered

% Information related to '185.180.141.0/24AS21859'

route:          185.180.141.0/24
origin:         AS21859
mnt-by:         MNT-BST
created:        2024-10-15T22:55:50Z
last-modified:  2024-10-15T22:55:50Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.124.1 (DEXTER)

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 185.180.141.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27484
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;185.180.141.48.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026091901 1800 900 604800 86400

;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 20 07:30:43 CST 2026
;; MSG SIZE  rcvd: 107

HOST信息:

48.141.180.185.in-addr.arpa domain name pointer zl-dala-us-gp1-wk134b.internet-census.org.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
48.141.180.185.in-addr.arpa	name = zl-dala-us-gp1-wk134b.internet-census.org.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
119.237.63.195	attackbotsspam	Jul 29 14:46:45 master sshd[1241]: Failed password for root from 119.237.63.195 port 57094 ssh2	2020-07-30 03:06:26
222.186.173.183	attack	Jul 29 20:59:07 vps647732 sshd[1334]: Failed password for root from 222.186.173.183 port 41822 ssh2 Jul 29 20:59:10 vps647732 sshd[1334]: Failed password for root from 222.186.173.183 port 41822 ssh2 ...	2020-07-30 03:02:25
159.65.107.126	attackspambots	159.65.107.126 - - [29/Jul/2020:13:49:53 +0200] "POST /xmlrpc.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.65.107.126 - - [29/Jul/2020:14:07:26 +0200] "POST /xmlrpc.php HTTP/1.1" 403 17840 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-30 02:47:53
219.155.5.85	attackspambots	Lines containing failures of 219.155.5.85 Jul 29 01:06:11 kmh-mb-001 sshd[4280]: Invalid user esuser from 219.155.5.85 port 4065 Jul 29 01:06:11 kmh-mb-001 sshd[4280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.155.5.85 Jul 29 01:06:13 kmh-mb-001 sshd[4280]: Failed password for invalid user esuser from 219.155.5.85 port 4065 ssh2 Jul 29 01:06:14 kmh-mb-001 sshd[4280]: Received disconnect from 219.155.5.85 port 4065:11: Bye Bye [preauth] Jul 29 01:06:14 kmh-mb-001 sshd[4280]: Disconnected from invalid user esuser 219.155.5.85 port 4065 [preauth] Jul 29 01:18:58 kmh-mb-001 sshd[4738]: Invalid user chenrui from 219.155.5.85 port 10369 Jul 29 01:18:58 kmh-mb-001 sshd[4738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.155.5.85 Jul 29 01:19:00 kmh-mb-001 sshd[4738]: Failed password for invalid user chenrui from 219.155.5.85 port 10369 ssh2 Jul 29 01:19:02 kmh-mb-001 sshd[4738]: R........ ------------------------------	2020-07-30 03:17:14
37.193.61.38	attack	Jul 29 20:18:05 inter-technics sshd[20482]: Invalid user zll from 37.193.61.38 port 58048 Jul 29 20:18:05 inter-technics sshd[20482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.193.61.38 Jul 29 20:18:05 inter-technics sshd[20482]: Invalid user zll from 37.193.61.38 port 58048 Jul 29 20:18:07 inter-technics sshd[20482]: Failed password for invalid user zll from 37.193.61.38 port 58048 ssh2 Jul 29 20:27:55 inter-technics sshd[21107]: Invalid user kaihuo from 37.193.61.38 port 53444 ...	2020-07-30 02:46:14
213.32.91.71	attackbots	213.32.91.71 - - [29/Jul/2020:19:50:19 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1865 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 213.32.91.71 - - [29/Jul/2020:19:50:19 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1857 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 213.32.91.71 - - [29/Jul/2020:19:50:20 +0100] "POST /wp/xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-30 03:02:45
134.209.146.64	attackbotsspam	Jul 28 20:29:56 xxxxxxx1 sshd[4659]: Invalid user liuziyu from 134.209.146.64 port 43002 Jul 28 20:29:56 xxxxxxx1 sshd[4659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.146.64 Jul 28 20:29:58 xxxxxxx1 sshd[4659]: Failed password for invalid user liuziyu from 134.209.146.64 port 43002 ssh2 Jul 28 20:31:25 xxxxxxx1 sshd[4930]: Invalid user junshang from 134.209.146.64 port 60636 Jul 28 20:31:25 xxxxxxx1 sshd[4930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.146.64 Jul 28 20:31:27 xxxxxxx1 sshd[4930]: Failed password for invalid user junshang from 134.209.146.64 port 60636 ssh2 Jul 28 20:32:09 xxxxxxx1 sshd[4959]: Invalid user icn from 134.209.146.64 port 40820 Jul 28 20:32:09 xxxxxxx1 sshd[4959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.146.64 Jul 28 20:32:10 xxxxxxx1 sshd[4959]: Failed password for invalid user ic........ ------------------------------	2020-07-30 03:06:05
104.26.13.141	attackbotsspam	From: "Amazon.com" Amazon account phishing/fraud - MALICIOUS REDIRECT UBE aimanbauk ([40.87.105.33]) Microsoft Spam link parg.co = 178.238.224.248 Contabo GmbH – BLACKLISTED MALICIOUS REDIRECT: - sum.vn = 104.26.12.141, 104.26.13.141, 172.67.73.189 Cloudflare – blacklisted see https://www.phishtank.com/phish_detail.php?phish_id=6360304 - amazon.verification.kozow.com = 94.249.167.244 GHOSTnet GmbH – blacklisted see https://transparencyreport.google.com/safe-browsing/search?url=http%3A%2F%2Famazon.verification.kozow.com%2F%3F16shop SPF fxamplwo395845.com = aspmx.l.google.com 108.177.15.26, 108.177.15.27 Google	2020-07-30 02:47:10
51.83.40.227	attackspambots	invalid login attempt (globalflash)	2020-07-30 03:06:56
150.129.238.12	attack	php WP PHPmyadamin ABUSE blocked for 12h	2020-07-30 03:12:01
203.115.97.219	attackspam	Lines containing failures of 203.115.97.219 Jul 28 22:34:31 ntop sshd[31936]: Invalid user qinwenwang from 203.115.97.219 port 49612 Jul 28 22:34:31 ntop sshd[31936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.115.97.219 Jul 28 22:34:33 ntop sshd[31936]: Failed password for invalid user qinwenwang from 203.115.97.219 port 49612 ssh2 Jul 28 22:34:35 ntop sshd[31936]: Received disconnect from 203.115.97.219 port 49612:11: Bye Bye [preauth] Jul 28 22:34:35 ntop sshd[31936]: Disconnected from invalid user qinwenwang 203.115.97.219 port 49612 [preauth] Jul 28 23:37:48 ntop sshd[19368]: Invalid user lilijuan from 203.115.97.219 port 58270 Jul 28 23:37:48 ntop sshd[19368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.115.97.219 Jul 28 23:37:51 ntop sshd[19368]: Failed password for invalid user lilijuan from 203.115.97.219 port 58270 ssh2 Jul 28 23:37:52 ntop sshd[19368]: Received d........ ------------------------------	2020-07-30 03:05:44
117.199.170.167	attackspambots	1596024441 - 07/29/2020 14:07:21 Host: 117.199.170.167/117.199.170.167 Port: 445 TCP Blocked	2020-07-30 02:51:57
58.248.0.197	attackbots	Jul 29 18:42:07 pve1 sshd[5870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.248.0.197 Jul 29 18:42:09 pve1 sshd[5870]: Failed password for invalid user peter from 58.248.0.197 port 53846 ssh2 ...	2020-07-30 03:08:36
34.107.26.251	attackbots	xmlrpc attack	2020-07-30 02:54:14
219.78.40.11	attackspam	Jul 29 15:06:42 master sshd[1833]: Failed password for invalid user admin from 219.78.40.11 port 50514 ssh2 Jul 29 15:06:42 master sshd[1838]: Failed password for root from 219.78.40.11 port 50569 ssh2 Jul 29 15:06:42 master sshd[1840]: Failed password for root from 219.78.40.11 port 50730 ssh2	2020-07-30 03:01:06

最近上报的IP列表

192.36.52.57	192.176.28.40	192.176.174.125	185.139.155.112
176.74.199.22	123.191.181.241	252.9.46.100	106.115.222.149
103.119.17.240	253.22.139.27	25.45.34.106	220.189.249.222
47.97.27.33	38.244.45.1	95.108.213.126	80.87.206.148
35.205.208.244	2606:4700:10::6816:1160	52.87.218.9	91.60.209.164