48.2.181.66 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.2.181.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15516
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;48.2.181.66.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 21:46:49 CST 2025
;; MSG SIZE  rcvd: 104

HOST信息:

Host 66.181.2.48.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 66.181.2.48.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
165.22.103.169	attackbotsspam	165.22.103.169 - - \[29/Oct/2019:12:17:32 +0000\] "POST /wp-login.php HTTP/1.1" 200 4358 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 165.22.103.169 - - \[29/Oct/2019:12:17:35 +0000\] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ...	2019-10-29 20:52:41
80.48.126.5	attack	Oct 29 02:30:34 tdfoods sshd\[16948\]: Invalid user mobile from 80.48.126.5 Oct 29 02:30:34 tdfoods sshd\[16948\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.48.126.5 Oct 29 02:30:36 tdfoods sshd\[16948\]: Failed password for invalid user mobile from 80.48.126.5 port 60563 ssh2 Oct 29 02:35:19 tdfoods sshd\[17358\]: Invalid user toolcrib from 80.48.126.5 Oct 29 02:35:19 tdfoods sshd\[17358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.48.126.5	2019-10-29 20:40:14
122.118.130.209	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 29-10-2019 11:40:26.	2019-10-29 21:11:08
5.9.77.62	attackspam	2019-10-29T13:24:15.100717mail01 postfix/smtpd[10415]: warning: static.62.77.9.5.clients.your-server.de[5.9.77.62]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-10-29T13:28:54.062465mail01 postfix/smtpd[8638]: warning: static.62.77.9.5.clients.your-server.de[5.9.77.62]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-10-29T13:28:54.062920mail01 postfix/smtpd[18061]: warning: static.62.77.9.5.clients.your-server.de[5.9.77.62]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-10-29 20:39:47
71.196.50.185	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/71.196.50.185/ US - 1H : (259) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN7922 IP : 71.196.50.185 CIDR : 71.192.0.0/12 PREFIX COUNT : 1512 UNIQUE IP COUNT : 70992640 ATTACKS DETECTED ASN7922 : 1H - 2 3H - 3 6H - 9 12H - 19 24H - 37 DateTime : 2019-10-29 12:40:39 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-29 20:53:59
222.186.175.169	attackbotsspam	Oct 29 13:54:47 arianus sshd\[1602\]: Unable to negotiate with 222.186.175.169 port 25030: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 \[preauth\] ...	2019-10-29 20:58:14
49.88.112.114	attackbotsspam	Oct 29 02:30:14 wbs sshd\[8533\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Oct 29 02:30:17 wbs sshd\[8533\]: Failed password for root from 49.88.112.114 port 44752 ssh2 Oct 29 02:31:19 wbs sshd\[8613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Oct 29 02:31:21 wbs sshd\[8613\]: Failed password for root from 49.88.112.114 port 49660 ssh2 Oct 29 02:33:18 wbs sshd\[8794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root	2019-10-29 20:39:01
200.160.111.44	attackbots	Oct 29 02:34:32 tdfoods sshd\[17301\]: Invalid user gnatsg from 200.160.111.44 Oct 29 02:34:32 tdfoods sshd\[17301\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.160.111.44 Oct 29 02:34:34 tdfoods sshd\[17301\]: Failed password for invalid user gnatsg from 200.160.111.44 port 30842 ssh2 Oct 29 02:40:43 tdfoods sshd\[17924\]: Invalid user lorien from 200.160.111.44 Oct 29 02:40:43 tdfoods sshd\[17924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.160.111.44	2019-10-29 20:50:57
182.61.174.5	attackspambots	Oct 29 12:41:19 localhost sshd\[100385\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.174.5 user=root Oct 29 12:41:21 localhost sshd\[100385\]: Failed password for root from 182.61.174.5 port 51890 ssh2 Oct 29 12:45:45 localhost sshd\[100485\]: Invalid user 19 from 182.61.174.5 port 34488 Oct 29 12:45:45 localhost sshd\[100485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.174.5 Oct 29 12:45:47 localhost sshd\[100485\]: Failed password for invalid user 19 from 182.61.174.5 port 34488 ssh2 ...	2019-10-29 20:59:06
187.28.50.230	attackbots	Oct 29 13:48:48 sso sshd[8978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.28.50.230 Oct 29 13:48:50 sso sshd[8978]: Failed password for invalid user jiangsuidc from 187.28.50.230 port 44188 ssh2 ...	2019-10-29 20:58:45
46.172.8.25	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 29-10-2019 11:40:31.	2019-10-29 21:03:25
222.186.175.217	attack	Oct 29 13:36:07 SilenceServices sshd[22350]: Failed password for root from 222.186.175.217 port 8116 ssh2 Oct 29 13:36:20 SilenceServices sshd[22350]: Failed password for root from 222.186.175.217 port 8116 ssh2 Oct 29 13:36:25 SilenceServices sshd[22350]: Failed password for root from 222.186.175.217 port 8116 ssh2 Oct 29 13:36:25 SilenceServices sshd[22350]: error: maximum authentication attempts exceeded for root from 222.186.175.217 port 8116 ssh2 [preauth]	2019-10-29 20:45:56
41.216.165.190	attackbotsspam	2019-10-29 06:24:37 H=([41.216.165.190]) [41.216.165.190]:63544 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/41.216.165.190) 2019-10-29 06:25:23 H=([41.216.165.190]) [41.216.165.190]:62893 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-10-29 06:40:47 H=([41.216.165.190]) [41.216.165.190]:63457 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/41.216.165.190) ...	2019-10-29 20:50:35
141.237.122.135	attackbots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/141.237.122.135/ GR - 1H : (64) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : GR NAME ASN : ASN3329 IP : 141.237.122.135 CIDR : 141.237.96.0/19 PREFIX COUNT : 167 UNIQUE IP COUNT : 788480 ATTACKS DETECTED ASN3329 : 1H - 2 3H - 4 6H - 10 12H - 18 24H - 32 DateTime : 2019-10-29 12:40:56 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-29 20:43:34
104.248.40.97	attackbots	WordPress login Brute force / Web App Attack on client site.	2019-10-29 20:44:54

最近上报的IP列表

191.210.76.127	208.236.52.64	203.109.249.221	239.57.1.215
158.0.103.85	6.66.227.109	136.154.159.126	180.98.151.104
214.150.144.114	121.248.218.206	38.251.175.152	12.190.28.192
13.205.156.22	243.56.243.44	197.49.191.5	248.220.41.132
180.94.204.155	36.60.23.77	200.154.138.198	109.156.4.74