109.49.45.132 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Portugal

运营商(isp): Nos Comunicacoes S.A.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Mobile ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Lines containing failures of 109.49.45.132 Feb 6 22:26:05 supported sshd[14354]: Did not receive identification string from 109.49.45.132 port 54921 Feb 6 22:37:51 supported sshd[15613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.49.45.132 user=r.r Feb 6 22:37:53 supported sshd[15613]: Failed password for r.r from 109.49.45.132 port 58196 ssh2 Feb 6 22:37:53 supported sshd[15613]: Connection closed by authenticating user r.r 109.49.45.132 port 58196 [preauth] Feb 6 22:38:37 supported sshd[15698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.49.45.132 user=r.r Feb 6 22:38:38 supported sshd[15698]: Failed password for r.r from 109.49.45.132 port 33746 ssh2 Feb 6 22:38:39 supported sshd[15698]: Connection closed by authenticating user r.r 109.49.45.132 port 33746 [preauth] Feb 6 22:38:45 supported sshd[15710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ........ ------------------------------	2020-02-08 02:30:18

类型

评论内容

时间

attack

Lines containing failures of 109.49.45.132
Feb  6 22:26:05 supported sshd[14354]: Did not receive identification string from 109.49.45.132 port 54921
Feb  6 22:37:51 supported sshd[15613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.49.45.132  user=r.r
Feb  6 22:37:53 supported sshd[15613]: Failed password for r.r from 109.49.45.132 port 58196 ssh2
Feb  6 22:37:53 supported sshd[15613]: Connection closed by authenticating user r.r 109.49.45.132 port 58196 [preauth]
Feb  6 22:38:37 supported sshd[15698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.49.45.132  user=r.r
Feb  6 22:38:38 supported sshd[15698]: Failed password for r.r from 109.49.45.132 port 33746 ssh2
Feb  6 22:38:39 supported sshd[15698]: Connection closed by authenticating user r.r 109.49.45.132 port 33746 [preauth]
Feb  6 22:38:45 supported sshd[15710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ........
------------------------------

2020-02-08 02:30:18

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.49.45.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33174
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;109.49.45.132.			IN	A

;; AUTHORITY SECTION:
.			534	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020700 1800 900 604800 86400

;; Query time: 153 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 08 02:30:15 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

132.45.49.109.in-addr.arpa domain name pointer a109-49-45-132.cpe.netcabo.pt.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
132.45.49.109.in-addr.arpa	name = a109-49-45-132.cpe.netcabo.pt.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
132.232.68.138	attackbots	Mar 31 07:46:17 hosting sshd[21055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.68.138 user=root Mar 31 07:46:19 hosting sshd[21055]: Failed password for root from 132.232.68.138 port 57316 ssh2 ...	2020-03-31 12:58:51
114.143.153.138	attackbots	Hit on CMS login honeypot	2020-03-31 13:33:19
185.216.140.252	attackspambots	03/31/2020-00:04:03.219652 185.216.140.252 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-03-31 12:48:07
190.147.139.216	attackspam	Mar 31 06:48:18 vps647732 sshd[12660]: Failed password for root from 190.147.139.216 port 45270 ssh2 ...	2020-03-31 13:04:14
179.222.96.70	attack	Mar 31 06:54:58 OPSO sshd\[22353\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.222.96.70 user=root Mar 31 06:55:00 OPSO sshd\[22353\]: Failed password for root from 179.222.96.70 port 33817 ssh2 Mar 31 07:01:51 OPSO sshd\[23989\]: Invalid user chenxh from 179.222.96.70 port 39372 Mar 31 07:01:51 OPSO sshd\[23989\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.222.96.70 Mar 31 07:01:53 OPSO sshd\[23989\]: Failed password for invalid user chenxh from 179.222.96.70 port 39372 ssh2	2020-03-31 13:04:31
14.160.145.141	attack	SMTP-SASL bruteforce attempt	2020-03-31 13:02:03
45.125.65.35	attackbots	Mar 31 06:42:01 srv01 postfix/smtpd\[19075\]: warning: unknown\[45.125.65.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 31 06:44:16 srv01 postfix/smtpd\[4934\]: warning: unknown\[45.125.65.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 31 06:44:50 srv01 postfix/smtpd\[4934\]: warning: unknown\[45.125.65.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 31 06:45:06 srv01 postfix/smtpd\[4934\]: warning: unknown\[45.125.65.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 31 06:55:29 srv01 postfix/smtpd\[1264\]: warning: unknown\[45.125.65.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-03-31 13:07:46
189.39.153.161	attackspambots	port	2020-03-31 13:31:39
89.248.160.150	attackbots	89.248.160.150 was recorded 23 times by 11 hosts attempting to connect to the following ports: 7994,8500,7954. Incident counter (4h, 24h, all-time): 23, 123, 9293	2020-03-31 12:52:31
94.177.229.96	attackbots	Mar 30 19:09:25 tdfoods sshd\[28544\]: Invalid user christopher from 94.177.229.96 Mar 30 19:09:25 tdfoods sshd\[28544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.229.96 Mar 30 19:09:27 tdfoods sshd\[28544\]: Failed password for invalid user christopher from 94.177.229.96 port 49580 ssh2 Mar 30 19:13:27 tdfoods sshd\[28832\]: Invalid user capture from 94.177.229.96 Mar 30 19:13:27 tdfoods sshd\[28832\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.229.96	2020-03-31 13:14:30
113.167.96.249	attackspam	20/3/30@23:54:15: FAIL: Alarm-Network address from=113.167.96.249 ...	2020-03-31 13:30:49
178.142.123.100	attackbots	Mar 31 05:54:22 v22019038103785759 sshd\[21140\]: Invalid user pi from 178.142.123.100 port 56300 Mar 31 05:54:22 v22019038103785759 sshd\[21140\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.142.123.100 Mar 31 05:54:22 v22019038103785759 sshd\[21142\]: Invalid user pi from 178.142.123.100 port 56316 Mar 31 05:54:22 v22019038103785759 sshd\[21142\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.142.123.100 Mar 31 05:54:24 v22019038103785759 sshd\[21140\]: Failed password for invalid user pi from 178.142.123.100 port 56300 ssh2 ...	2020-03-31 13:22:57
177.196.103.93	attackbots	Unauthorized IMAP connection attempt	2020-03-31 12:59:24
37.187.114.179	attack	Mar 31 04:07:28 game-panel sshd[6232]: Failed password for root from 37.187.114.179 port 55898 ssh2 Mar 31 04:13:46 game-panel sshd[6505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.114.179 Mar 31 04:13:48 game-panel sshd[6505]: Failed password for invalid user nr from 37.187.114.179 port 37972 ssh2	2020-03-31 13:19:54
217.112.142.196	attackbotsspam	Mar 31 05:46:14 mail.srvfarm.net postfix/smtpd[382811]: NOQUEUE: reject: RCPT from unknown[217.112.142.196]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 31 05:48:23 mail.srvfarm.net postfix/smtpd[377290]: NOQUEUE: reject: RCPT from unknown[217.112.142.196]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 31 05:48:35 mail.srvfarm.net postfix/smtpd[382811]: NOQUEUE: reject: RCPT from unknown[217.112.142.196]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 31 05:48:42 mail.srvfarm.net postfix/smtpd[380627]: NOQUEUE: reject: RCPT from unknown[217.112.142.196]: 4	2020-03-31 13:34:30

最近上报的IP列表

39.43.38.125	113.22.185.32	14.188.98.53	162.14.20.182
103.113.213.246	113.189.226.11	36.157.212.230	201.211.151.168
139.99.105.138	96.198.108.223	84.208.224.193	162.14.20.174
69.94.158.109	158.140.63.102	117.31.52.56	27.76.10.237
162.14.20.162	61.238.143.138	185.39.10.69	173.19.8.122