必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Kuala Lumpur

省份(region): Kuala Lumpur

国家(country): Malaysia

运营商(isp): Telekom Malaysia Berhad

主机名(hostname): unknown

机构(organization): TM Net, Internet Service Provider

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attackspambots
Attempts to probe for or exploit a Drupal site on url: /wp-login.php. Reported by the module https://www.drupal.org/project/abuseipdb.
2019-07-25 03:57:18
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.190.148.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58019
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.190.148.7.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072401 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 25 03:57:13 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
Host 7.148.190.42.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 7.148.190.42.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
111.75.222.141 attackspambots
Unauthorized connection attempt from IP address 111.75.222.141 on Port 445(SMB)
2020-10-09 05:21:55
118.25.133.220 attack
2020-10-08T20:32:20.674669abusebot-4.cloudsearch.cf sshd[17696]: Invalid user design from 118.25.133.220 port 33732
2020-10-08T20:32:20.680517abusebot-4.cloudsearch.cf sshd[17696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.133.220
2020-10-08T20:32:20.674669abusebot-4.cloudsearch.cf sshd[17696]: Invalid user design from 118.25.133.220 port 33732
2020-10-08T20:32:22.800572abusebot-4.cloudsearch.cf sshd[17696]: Failed password for invalid user design from 118.25.133.220 port 33732 ssh2
2020-10-08T20:37:17.351029abusebot-4.cloudsearch.cf sshd[17745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.133.220  user=root
2020-10-08T20:37:19.245058abusebot-4.cloudsearch.cf sshd[17745]: Failed password for root from 118.25.133.220 port 33514 ssh2
2020-10-08T20:42:18.572223abusebot-4.cloudsearch.cf sshd[17762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1
...
2020-10-09 05:00:38
60.167.177.172 attackspambots
Oct  7 16:34:22 lanister sshd[21890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.167.177.172  user=root
Oct  7 16:34:24 lanister sshd[21890]: Failed password for root from 60.167.177.172 port 36250 ssh2
Oct  7 16:46:32 lanister sshd[22095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.167.177.172  user=root
Oct  7 16:46:35 lanister sshd[22095]: Failed password for root from 60.167.177.172 port 42776 ssh2
2020-10-09 05:11:26
104.168.214.86 attack
Oct  8 11:05:14 mail postfix/smtpd[27643]: warning: hwsrv-786714.hostwindsdns.com[104.168.214.86]: SASL login authentication failed: authentication failure
2020-10-09 05:12:13
3.229.134.239 attack
[Sat Oct 03 19:15:54 2020] - Syn Flood From IP: 3.229.134.239 Port: 58089
2020-10-09 05:01:00
159.203.114.189 attackspam
159.203.114.189 - - [08/Oct/2020:22:01:08 +0200] "GET /wp-login.php HTTP/1.1" 200 8712 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
159.203.114.189 - - [08/Oct/2020:22:01:10 +0200] "POST /wp-login.php HTTP/1.1" 200 8942 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
159.203.114.189 - - [08/Oct/2020:22:01:11 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-10-09 05:09:53
54.212.240.209 attackbots
54.212.240.209 - - [08/Oct/2020:21:16:38 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
54.212.240.209 - - [08/Oct/2020:21:16:41 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
54.212.240.209 - - [08/Oct/2020:21:16:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-10-09 05:34:32
92.57.150.133 attack
IP 92.57.150.133 attacked honeypot on port: 1433 at 10/8/2020 2:54:17 AM
2020-10-09 05:05:41
159.65.133.13 attackbots
Oct  8 22:16:55 server sshd[30745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.133.13  user=root
Oct  8 22:16:57 server sshd[30745]: Failed password for invalid user root from 159.65.133.13 port 49398 ssh2
Oct  8 22:19:42 server sshd[30824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.133.13  user=root
Oct  8 22:19:45 server sshd[30824]: Failed password for invalid user root from 159.65.133.13 port 57706 ssh2
2020-10-09 05:17:29
114.224.178.217 attack
Oct  8 10:17:39 Tower sshd[6296]: Connection from 114.224.178.217 port 60886 on 192.168.10.220 port 22 rdomain ""
Oct  8 10:17:43 Tower sshd[6296]: Failed password for root from 114.224.178.217 port 60886 ssh2
Oct  8 10:17:43 Tower sshd[6296]: Received disconnect from 114.224.178.217 port 60886:11: Bye Bye [preauth]
Oct  8 10:17:43 Tower sshd[6296]: Disconnected from authenticating user root 114.224.178.217 port 60886 [preauth]
2020-10-09 05:05:13
191.7.33.150 attackspam
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-10-09 04:57:09
171.252.202.151 attackspam
Unauthorized connection attempt detected from IP address 171.252.202.151 to port 23 [T]
2020-10-09 05:07:54
106.12.71.159 attackspam
Oct  8 20:06:24 host1 sshd[1594409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.71.159  user=root
Oct  8 20:06:26 host1 sshd[1594409]: Failed password for root from 106.12.71.159 port 56632 ssh2
...
2020-10-09 04:58:23
202.137.124.210 attack
Oct  8 18:29:59 rush sshd[22802]: Failed password for root from 202.137.124.210 port 33144 ssh2
Oct  8 18:34:07 rush sshd[22885]: Failed password for root from 202.137.124.210 port 55922 ssh2
...
2020-10-09 04:58:05
165.227.176.208 attackbotsspam
Fail2Ban Ban Triggered
2020-10-09 05:19:20

最近上报的IP列表

44.173.39.120 144.43.13.88 4.61.203.105 70.47.235.34
27.65.83.116 37.49.231.104 126.70.162.229 121.78.179.65
37.6.236.245 84.66.149.23 219.139.170.237 70.9.163.170
83.13.69.103 75.107.117.199 116.25.94.75 203.120.95.130
72.253.217.107 138.110.255.193 136.210.50.97 63.7.184.133