必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
45.252.248.16 attackspam
45.252.248.16 - - [24/Jun/2020:14:05:52 +0200] "POST /xmlrpc.php HTTP/2.0" 403 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
45.252.248.16 - - [24/Jun/2020:14:05:54 +0200] "POST /xmlrpc.php HTTP/2.0" 403 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
...
2020-06-25 00:08:23
45.252.248.16 attackspam
MYH,DEF GET /wp-login.php
GET /wp-login.php
2020-06-04 22:57:18
45.252.248.13 attack
REQUESTED PAGE: /wp-login.php
2020-05-09 05:24:23
45.252.248.23 attackspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-05-04 20:52:57
45.252.248.23 attackspam
Apr  4 01:56:35 karger wordpress(buerg)[4145]: Authentication attempt for unknown user domi from 45.252.248.23
Apr  4 03:37:01 karger wordpress(buerg)[4145]: Authentication attempt for unknown user domi from 45.252.248.23
...
2020-04-04 09:57:10
45.252.248.23 attackbots
fail2ban/45.252.248.23 - - [02/Apr/2020:21:42:33 +0000] "POST /wp-login.php HTTP/1.0" 200 9822 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.252.248.23 - - [02/Apr/2020:21:46:22 +0000] "POST /wp-login.php HTTP/1.0" 200 9852 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.252.248.23 - - [02/Apr/2020:21:51:39 +0000] "POST /wp-login.php HTTP/1.0" 200 9823 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-04-03 07:02:49
45.252.248.23 attack
WordPress login Brute force / Web App Attack on client site.
2020-03-24 07:30:36
45.252.248.23 attack
php WP PHPmyadamin ABUSE blocked for 12h
2020-03-11 00:41:35
45.252.248.18 attack
REQUESTED PAGE: /wp-login.php
2020-02-23 00:35:18
45.252.248.18 attack
45.252.248.18 - - \[21/Feb/2020:05:54:47 +0100\] "POST /wp-login.php HTTP/1.0" 200 7778 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
45.252.248.18 - - \[21/Feb/2020:05:54:50 +0100\] "POST /wp-login.php HTTP/1.0" 200 7768 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
45.252.248.18 - - \[21/Feb/2020:05:54:54 +0100\] "POST /wp-login.php HTTP/1.0" 200 7634 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-02-21 16:08:44
45.252.248.18 attackspam
45.252.248.18 - - [20/Jan/2020:04:57:59 +0000] "POST /wp-login.php HTTP/1.1" 200 6409 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.252.248.18 - - [20/Jan/2020:04:58:02 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-01-20 14:18:14
45.252.248.189 attackspam
Invalid user admin from 45.252.248.189 port 49318
2020-01-18 22:22:01
45.252.248.18 attackspam
WordPress wp-login brute force :: 45.252.248.18 0.080 BYPASS [10/Jan/2020:08:50:19  0000] [censored_4] "POST /wp-login.php HTTP/1.1" 200 2100 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-01-10 17:28:00
45.252.248.138 attackbotsspam
xmlrpc attack
2019-11-01 20:07:48
45.252.248.161 attack
Wordpress bruteforce
2019-10-08 04:25:39
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.252.248.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11140
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.252.248.159.			IN	A

;; AUTHORITY SECTION:
.			448	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 08:48:37 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 159.248.252.45.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 159.248.252.45.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
87.197.166.67 attackspambots
Automatic report - Banned IP Access
2019-08-19 05:55:34
49.234.46.125 attackbots
Aug 18 22:11:39 MK-Soft-VM3 sshd\[15902\]: Invalid user radio123 from 49.234.46.125 port 48452
Aug 18 22:11:39 MK-Soft-VM3 sshd\[15902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.46.125
Aug 18 22:11:42 MK-Soft-VM3 sshd\[15902\]: Failed password for invalid user radio123 from 49.234.46.125 port 48452 ssh2
...
2019-08-19 06:32:10
95.70.87.97 attack
Aug 18 12:07:18 eddieflores sshd\[16046\]: Invalid user user from 95.70.87.97
Aug 18 12:07:18 eddieflores sshd\[16046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.70.87.97
Aug 18 12:07:20 eddieflores sshd\[16046\]: Failed password for invalid user user from 95.70.87.97 port 39974 ssh2
Aug 18 12:11:52 eddieflores sshd\[16484\]: Invalid user testmail from 95.70.87.97
Aug 18 12:11:52 eddieflores sshd\[16484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.70.87.97
2019-08-19 06:24:23
90.157.222.83 attackspam
Aug 18 07:52:24 hanapaa sshd\[3950\]: Invalid user spark from 90.157.222.83
Aug 18 07:52:24 hanapaa sshd\[3950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.157.222.83
Aug 18 07:52:26 hanapaa sshd\[3950\]: Failed password for invalid user spark from 90.157.222.83 port 42804 ssh2
Aug 18 07:58:14 hanapaa sshd\[4458\]: Invalid user system from 90.157.222.83
Aug 18 07:58:14 hanapaa sshd\[4458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.157.222.83
2019-08-19 06:03:17
178.72.104.22 attackbots
Probing for vulnerable services
2019-08-19 05:51:06
51.254.129.31 attack
Aug 18 18:19:12 ny01 sshd[23004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.129.31
Aug 18 18:19:14 ny01 sshd[23004]: Failed password for invalid user ts3bot from 51.254.129.31 port 39350 ssh2
Aug 18 18:22:53 ny01 sshd[23360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.129.31
2019-08-19 06:23:07
190.14.170.196 attackspambots
2019-08-18 07:55:42 H=(customer-196.tpp.com.ar.170.14.190.in-addr.arpa) [190.14.170.196]:57879 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address
2019-08-18 07:55:42 H=(customer-196.tpp.com.ar.170.14.190.in-addr.arpa) [190.14.170.196]:57879 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed
2019-08-18 07:55:43 H=(customer-196.tpp.com.ar.170.14.190.in-addr.arpa) [190.14.170.196]:57879 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed
...
2019-08-19 06:15:03
23.97.180.45 attack
Aug 18 17:05:07 server sshd\[16842\]: Invalid user lubuntu from 23.97.180.45 port 39254
Aug 18 17:05:07 server sshd\[16842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.97.180.45
Aug 18 17:05:09 server sshd\[16842\]: Failed password for invalid user lubuntu from 23.97.180.45 port 39254 ssh2
Aug 18 17:10:08 server sshd\[10973\]: Invalid user dd from 23.97.180.45 port 34848
Aug 18 17:10:08 server sshd\[10973\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.97.180.45
2019-08-19 05:59:45
185.176.27.30 attackbotsspam
08/18/2019-17:40:23.261046 185.176.27.30 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-08-19 06:05:56
77.49.125.155 attackspambots
[18/Aug/2019:14:55:53 +0200] Web-Request: "GET /wp-login.php", User-Agent: "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1"
2019-08-19 06:06:31
240e:d9:d800:200::212 attack
imap or smtp brute force
2019-08-19 06:17:43
129.204.47.217 attackspam
Aug 18 23:22:13 minden010 sshd[27432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.47.217
Aug 18 23:22:15 minden010 sshd[27432]: Failed password for invalid user dan from 129.204.47.217 port 60259 ssh2
Aug 18 23:26:49 minden010 sshd[29024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.47.217
...
2019-08-19 05:58:28
132.232.4.33 attackbotsspam
Aug 18 21:19:32 lnxmysql61 sshd[21713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.4.33
2019-08-19 05:57:32
183.61.164.115 attack
Aug 19 05:12:17 webhost01 sshd[29825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.61.164.115
Aug 19 05:12:19 webhost01 sshd[29825]: Failed password for invalid user epmeneze from 183.61.164.115 port 9949 ssh2
...
2019-08-19 06:21:45
92.63.194.27 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-08-19 06:24:54

最近上报的IP列表

45.33.55.188 45.33.89.97 45.249.85.59 45.33.4.95
45.40.93.252 45.4.53.156 45.4.219.38 45.4.7.138
45.4.40.242 45.49.68.243 45.43.19.85 45.49.32.165
45.47.185.7 45.5.144.125 45.43.18.138 45.5.202.106
45.5.202.119 45.56.116.239 45.56.102.36 45.55.32.52