Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Scottsdale

Region: Arizona

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: GoDaddy.com, LLC

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
148.72.210.178 spambotsattackproxynormal
Camote
2023-08-08 14:53:17
148.72.210.140 attack
148.72.210.140 - - [01/Oct/2020:09:18:05 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.210.140 - - [01/Oct/2020:09:18:10 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.210.140 - - [01/Oct/2020:09:18:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-10-02 00:47:09
148.72.210.140 attackspam
148.72.210.140 - - [01/Oct/2020:09:18:05 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.210.140 - - [01/Oct/2020:09:18:10 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.210.140 - - [01/Oct/2020:09:18:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-10-01 16:53:59
148.72.210.140 attackspam
148.72.210.140 - - [30/Aug/2020:06:05:23 +0100] "POST /wp-login.php HTTP/1.1" 200 2345 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.210.140 - - [30/Aug/2020:06:05:25 +0100] "POST /wp-login.php HTTP/1.1" 200 2329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.210.140 - - [30/Aug/2020:06:05:26 +0100] "POST /wp-login.php HTTP/1.1" 200 2329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-30 15:58:21
148.72.210.140 attack
148.72.210.140 - - [07/Aug/2020:18:46:54 +0200] "POST /wp-login.php HTTP/1.1" 200 5482 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.210.140 - - [07/Aug/2020:18:46:57 +0200] "POST /wp-login.php HTTP/1.1" 200 5455 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.210.140 - - [07/Aug/2020:19:07:54 +0200] "POST /wp-login.php HTTP/1.1" 200 5373 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.210.140 - - [07/Aug/2020:19:07:57 +0200] "POST /wp-login.php HTTP/1.1" 200 5350 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.210.140 - - [07/Aug/2020:19:08:00 +0200] "POST /wp-login.php HTTP/1.1" 200 5354 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-08 04:29:32
148.72.210.140 attackbotsspam
148.72.210.140 - - \[24/Jul/2020:09:27:04 +0200\] "POST /wp-login.php HTTP/1.0" 200 6400 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
148.72.210.140 - - \[24/Jul/2020:09:27:07 +0200\] "POST /wp-login.php HTTP/1.0" 200 6267 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
148.72.210.140 - - \[24/Jul/2020:09:27:10 +0200\] "POST /wp-login.php HTTP/1.0" 200 6263 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-07-24 16:01:26
148.72.210.140 attackbotsspam
WordPress login Brute force / Web App Attack on client site.
2020-07-13 01:05:01
148.72.210.140 attackspam
148.72.210.140 - - [09/Jul/2020:15:26:45 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.210.140 - - [09/Jul/2020:15:26:47 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
148.72.210.140 - - [09/Jul/2020:15:26:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-07-09 22:56:51
148.72.210.28 attack
Triggered by Fail2Ban at Ares web server
2020-03-24 05:55:49
148.72.210.28 attackbots
Mar  3 00:05:12 * sshd[27785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.72.210.28
Mar  3 00:05:15 * sshd[27785]: Failed password for invalid user carlo from 148.72.210.28 port 39416 ssh2
2020-03-03 07:57:52
148.72.210.28 attack
2020-02-22T07:50:04.734785  sshd[805]: Invalid user sig from 148.72.210.28 port 46530
2020-02-22T07:50:04.748409  sshd[805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.72.210.28
2020-02-22T07:50:04.734785  sshd[805]: Invalid user sig from 148.72.210.28 port 46530
2020-02-22T07:50:06.283393  sshd[805]: Failed password for invalid user sig from 148.72.210.28 port 46530 ssh2
...
2020-02-22 16:36:50
148.72.210.28 attackbots
SASL PLAIN auth failed: ruser=...
2020-02-05 07:15:07
148.72.210.28 attackspam
...
2020-02-01 22:44:44
148.72.210.28 attack
Unauthorized connection attempt detected from IP address 148.72.210.28 to port 2220 [J]
2020-01-11 22:07:57
148.72.210.28 attackspam
Unauthorized connection attempt detected from IP address 148.72.210.28 to port 2220 [J]
2020-01-07 15:34:04
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.72.210.154
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11714
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.72.210.154.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041001 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Thu Apr 11 01:44:24 +08 2019
;; MSG SIZE  rcvd: 118

Host info
154.210.72.148.in-addr.arpa domain name pointer ip-148-72-210-154.ip.secureserver.net.
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
154.210.72.148.in-addr.arpa	name = ip-148-72-210-154.ip.secureserver.net.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
159.65.12.204 attackspam
SSH invalid-user multiple login attempts
2020-04-06 06:00:30
106.13.136.3 attackbots
Apr  5 23:54:52 legacy sshd[22630]: Failed password for root from 106.13.136.3 port 56834 ssh2
Apr  5 23:58:39 legacy sshd[22758]: Failed password for root from 106.13.136.3 port 55570 ssh2
...
2020-04-06 06:04:15
178.128.81.60 attackspambots
Apr  6 03:22:37 gw1 sshd[26648]: Failed password for root from 178.128.81.60 port 47924 ssh2
...
2020-04-06 06:27:48
178.88.115.126 attackbotsspam
Apr  6 04:35:25 webhost01 sshd[9380]: Failed password for root from 178.88.115.126 port 36918 ssh2
...
2020-04-06 06:11:21
220.133.196.79 attack
Automatic report - Port Scan Attack
2020-04-06 06:23:37
178.154.200.184 attackspambots
[Mon Apr 06 04:39:27.516956 2020] [:error] [pid 3925:tid 140022798702336] [client 178.154.200.184:42734] [client 178.154.200.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XopQD4ya4Qk5xu-9JTSeNwAAAh4"]
...
2020-04-06 06:22:27
157.245.158.214 attackbotsspam
$f2bV_matches
2020-04-06 06:30:11
61.162.52.210 attack
Apr  6 02:36:55 gw1 sshd[25416]: Failed password for root from 61.162.52.210 port 54503 ssh2
...
2020-04-06 06:19:40
207.244.70.35 attackspambots
05.04.2020 23:40:03 - Wordpress fail 
Detected by ELinOX-ALM
2020-04-06 06:01:01
51.77.194.232 attackspambots
$f2bV_matches
2020-04-06 06:06:01
46.160.37.182 attackspambots
20/4/5@17:47:42: FAIL: IoT-Telnet address from=46.160.37.182
...
2020-04-06 06:12:20
187.94.50.151 attackspam
Apr  5 23:59:47 legacy sshd[22823]: Failed password for root from 187.94.50.151 port 10144 ssh2
Apr  6 00:03:51 legacy sshd[23041]: Failed password for root from 187.94.50.151 port 51266 ssh2
...
2020-04-06 06:24:02
106.75.7.70 attackbots
Apr  5 23:12:08 ovpn sshd\[9977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.7.70  user=root
Apr  5 23:12:10 ovpn sshd\[9977\]: Failed password for root from 106.75.7.70 port 53960 ssh2
Apr  5 23:32:54 ovpn sshd\[14963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.7.70  user=root
Apr  5 23:32:56 ovpn sshd\[14963\]: Failed password for root from 106.75.7.70 port 59998 ssh2
Apr  5 23:39:38 ovpn sshd\[16547\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.7.70  user=root
2020-04-06 06:11:51
222.186.169.192 attackspam
Apr  6 00:02:35 santamaria sshd\[21187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.192  user=root
Apr  6 00:02:37 santamaria sshd\[21187\]: Failed password for root from 222.186.169.192 port 26414 ssh2
Apr  6 00:02:40 santamaria sshd\[21187\]: Failed password for root from 222.186.169.192 port 26414 ssh2
...
2020-04-06 06:06:27
167.206.202.136 attackbots
Unauthorised access (Apr  6) SRC=167.206.202.136 LEN=52 TOS=0x08 PREC=0x40 TTL=111 ID=31081 DF TCP DPT=445 WINDOW=8192 SYN
2020-04-06 06:23:02

Recently Reported IPs

36.68.7.147 206.214.6.220 202.46.49.97 186.249.46.202
138.94.64.238 85.105.86.248 202.65.147.100 185.66.28.38
85.237.46.251 118.25.72.194 113.172.134.36 2.93.84.181
197.2.5.232 113.160.208.104 177.66.104.238 123.18.14.107
195.136.43.167 123.163.252.79 117.82.91.33 178.24.246.85