19.148.148.34 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 19.148.148.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7576
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;19.148.148.34.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 03:22:03 CST 2025
;; MSG SIZE  rcvd: 106

HOST信息:

Host 34.148.148.19.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 34.148.148.19.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
167.71.209.158	attack	Sep 26 08:08:55 plex-server sshd[2403917]: Failed password for invalid user dima from 167.71.209.158 port 55004 ssh2 Sep 26 08:10:27 plex-server sshd[2404567]: Invalid user ubuntu from 167.71.209.158 port 50106 Sep 26 08:10:27 plex-server sshd[2404567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.209.158 Sep 26 08:10:27 plex-server sshd[2404567]: Invalid user ubuntu from 167.71.209.158 port 50106 Sep 26 08:10:29 plex-server sshd[2404567]: Failed password for invalid user ubuntu from 167.71.209.158 port 50106 ssh2 ...	2020-09-26 16:25:18
185.147.215.8	attack	[2020-09-26 04:25:09] NOTICE[1159] chan_sip.c: Registration from '' failed for '185.147.215.8:60393' - Wrong password [2020-09-26 04:25:09] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-26T04:25:09.011-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2433",SessionID="0x7fcaa02091e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/60393",Challenge="1158ae22",ReceivedChallenge="1158ae22",ReceivedHash="594657ed92611f8cc8e8283aff2ef0ba" [2020-09-26 04:25:35] NOTICE[1159] chan_sip.c: Registration from '' failed for '185.147.215.8:54895' - Wrong password [2020-09-26 04:25:35] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-26T04:25:35.720-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1899",SessionID="0x7fcaa0092e98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8 ...	2020-09-26 16:33:14
125.24.41.62	attackbots	1601066211 - 09/25/2020 22:36:51 Host: 125.24.41.62/125.24.41.62 Port: 445 TCP Blocked	2020-09-26 16:22:42
175.138.108.78	attackspam	Sep 26 08:38:31 rush sshd[17629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.138.108.78 Sep 26 08:38:33 rush sshd[17629]: Failed password for invalid user sonia from 175.138.108.78 port 57047 ssh2 Sep 26 08:42:56 rush sshd[17688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.138.108.78 ...	2020-09-26 16:47:37
54.37.153.80	attackspam	SSH Brute-force	2020-09-26 16:16:04
45.79.110.218	attackspam	Port scan: Attack repeated for 24 hours	2020-09-26 16:18:12
27.128.168.225	attackbots	SSH auth scanning - multiple failed logins	2020-09-26 16:23:52
138.68.238.242	attackbots	k+ssh-bruteforce	2020-09-26 16:39:03
2607:f130:0:d7::152	attackbots	WordPress Get /wp-admin	2020-09-26 16:29:20
159.89.193.180	attackspambots	159.89.193.180 - - [26/Sep/2020:09:09:15 +0100] "POST /wp-login.php HTTP/1.1" 200 4427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.193.180 - - [26/Sep/2020:09:09:18 +0100] "POST /wp-login.php HTTP/1.1" 200 4427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.193.180 - - [26/Sep/2020:09:09:30 +0100] "POST /wp-login.php HTTP/1.1" 200 4427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-26 16:21:00
52.188.122.210	attack	Sep 26 08:21:50 IngegnereFirenze sshd[25488]: Failed password for invalid user admin from 52.188.122.210 port 23602 ssh2 ...	2020-09-26 16:34:19
150.158.185.176	attackbots	150.158.185.176 - - [26/Sep/2020:04:05:37 +0200] "GET /TP/public/index.php HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 150.158.185.176 - - [26/Sep/2020:04:05:38 +0200] "GET /TP/index.php HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"	2020-09-26 16:38:42
18.208.202.194	attackspam	[Sat Sep 26 03:37:03.134341 2020] [:error] [pid 16536:tid 140694825400064] [client 18.208.202.194:40472] [client 18.208.202.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "((?:[~!@#\\\\$%\\\\^&\\\\\\\$\\\$\\\\-\\\\+=\\\\{\\\\}\\\\[\\\\]\\\\\|:;\"'\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98`<>][^~!@#\\\\$%\\\\^&\\\\\\\$\\\$\\\\-\\\\+=\\\\{\\\\}\\\\[\\\\]\\\\\|:;\"'\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98`<>]*?){6})" at ARGS:id. [file "/etc/modsecurity/coreruleset-3.3.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "1457"] [id "942431"] [msg "Restricted SQL Character Anomaly Detection (args): # of special characters exceeded (6)"] [data "Matched Data: :prakiraan-cuaca-daerah-malang-dan- found within ARGS:id: 82:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan"] [severity "WARNING"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [ ...	2020-09-26 16:10:36
5.255.253.138	attackbotsspam	[Sat Sep 26 03:36:50.928764 2020] [:error] [pid 16537:tid 140694825400064] [client 5.255.253.138:61924] [client 5.255.253.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "X25U4pu7GLUg53phw52smgAAAC0"] ...	2020-09-26 16:24:55
149.202.79.125	attackbots	firewall-block, port(s): 21056/tcp	2020-09-26 16:33:34

最近上报的IP列表

131.9.149.203	204.218.149.208	17.90.197.65	99.75.46.53
179.46.190.104	25.86.43.21	201.39.177.99	65.186.78.186
228.155.164.9	224.19.187.244	220.255.75.216	141.36.88.116
206.89.53.105	92.1.145.241	213.79.56.177	126.218.12.218
163.133.56.15	180.125.33.128	56.123.97.138	58.29.159.189