112.45.1.20 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Mobile Communications Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Unauthorized connection attempt detected from IP address 112.45.1.20 to port 5555 [T]	2020-01-07 01:04:07

相同子网IP讨论:

IP	类型	评论内容	时间
112.45.114.76	attackbotsspam	SASL PLAIN auth failed: ruser=...	2020-09-30 06:42:50
112.45.114.75	attackbotsspam	SASL PLAIN auth failed: ruser=...	2020-09-30 06:10:37
112.45.114.75	attack	IP: 112.45.114.75 Ports affected Simple Mail Transfer (25) Abuse Confidence rating 100% Found in DNSBL('s) ASN Details AS9808 Guangdong Mobile Communication Co.Ltd. China (CN) CIDR 112.44.0.0/14 Log Date: 29/09/2020 8:09:08 AM UTC	2020-09-29 22:23:25
112.45.114.76	attackbotsspam	SASL PLAIN auth failed: ruser=...	2020-09-29 15:16:45
112.45.114.75	attack	Automatic report after SMTP connect attempts	2020-09-29 14:40:39
112.45.114.76	attack	1 times SMTP brute-force	2020-09-16 01:31:25
112.45.114.76	attackbots	email spam	2020-09-15 17:23:30
112.45.114.76	attack	smtp probe/invalid login attempt	2020-08-15 22:05:40
112.45.122.7	attackbotsspam	Aug 14 22:23:44 itv-usvr-01 sshd[4781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.45.122.7 user=root Aug 14 22:23:46 itv-usvr-01 sshd[4781]: Failed password for root from 112.45.122.7 port 48881 ssh2	2020-08-15 02:33:47
112.45.114.75	attackspambots	1 times SMTP brute-force	2020-08-14 23:52:29
112.45.120.82	attackspambots	Fail2Ban Ban Triggered	2020-08-12 22:14:55
112.45.114.75	attackspam	"SMTP brute force auth login attempt."	2020-08-11 14:56:24
112.45.122.7	attackspam	Jul 30 05:53:03 rancher-0 sshd[657014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.45.122.7 user=root Jul 30 05:53:05 rancher-0 sshd[657014]: Failed password for root from 112.45.122.7 port 36837 ssh2 ...	2020-07-30 15:07:18
112.45.122.9	attackspambots	Unauthorized connection attempt detected from IP address 112.45.122.9 to port 22 [T]	2020-07-22 02:56:21
112.45.114.75	attackspam	SMTP AUTH break-in attempt.	2020-07-18 15:05:24

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.45.1.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17641
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.45.1.20.			IN	A

;; AUTHORITY SECTION:
.			580	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010600 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 07 01:04:01 CST 2020
;; MSG SIZE  rcvd: 115

HOST信息:

Host 20.1.45.112.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.1.45.112.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
131.118.95.201	attack	Lines containing failures of 131.118.95.201 Nov 13 15:34:00 * sshd[18678]: Invalid user aaland from 131.118.95.201 port 36610 Nov 13 15:34:00 * sshd[18678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=131.118.95.201 Nov 13 15:34:02 * sshd[18678]: Failed password for invalid user aaland from 131.118.95.201 port 36610 ssh2 Nov 13 15:34:02 * sshd[18678]: Received disconnect from 131.118.95.201 port 36610:11: Bye Bye [preauth] Nov 13 15:34:02 * sshd[18678]: Disconnected from invalid user aaland 131.118.95.201 port 36610 [preauth] Nov 13 15:38:26 * sshd[19063]: Invalid user seiden from 131.118.95.201 port 55596 Nov 13 15:38:26 *** sshd[19063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=131.118.95.201 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=131.118.95.201	2019-11-14 02:34:08
182.61.54.14	attackspam	Nov 13 16:00:08 mail sshd[19897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.54.14 Nov 13 16:00:10 mail sshd[19897]: Failed password for invalid user dongguanidc from 182.61.54.14 port 39080 ssh2 Nov 13 16:06:00 mail sshd[22777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.54.14	2019-11-14 02:19:13
115.79.7.213	attackbots	Attempt to attack host OS, exploiting network vulnerabilities, on 13-11-2019 15:25:20.	2019-11-14 02:58:49
112.64.102.165	attack	Honeypot attack, port: 23, PTR: PTR record not found	2019-11-14 02:36:26
46.105.29.160	attack	Fail2Ban - SSH Bruteforce Attempt	2019-11-14 02:35:29
63.88.23.167	attackspambots	63.88.23.167 was recorded 7 times by 3 hosts attempting to connect to the following ports: 80. Incident counter (4h, 24h, all-time): 7, 23, 52	2019-11-14 02:49:57
177.124.184.181	attackspam	Unauthorized connection attempt from IP address 177.124.184.181 on Port 445(SMB)	2019-11-14 02:59:01
45.93.247.180	attack	Nov 14 00:49:49 our-server-hostname postfix/smtpd[29891]: connect from unknown[45.93.247.180] Nov x@x Nov x@x Nov 14 00:49:52 our-server-hostname postfix/smtpd[29891]: F2035A4000B: client=unknown[45.93.247.180] Nov 14 00:49:54 our-server-hostname postfix/smtpd[13021]: C703AA40019: client=unknown[127.0.0.1], orig_client=unknown[45.93.247.180] Nov 14 00:49:54 our-server-hostname amavis[5876]: (05876-11) Passed CLEAN, [45.93.247.180] [45.93.247.180] , mail_id: vFtL8kiDYxpv, Hhostnames: -, size: 6612, queued_as: C703AA40019, 131 ms Nov 14 00:49:55 our-server-hostname postfix/smtpd[29891]: disconnect from unknown[45.93.247.180] Nov 14 00:50:06 our-server-hostname postfix/smtpd[8580]: connect from unknown[45.93.247.180] Nov 14 00:50:07 our-server-hostname postfix/smtpd[7846]: connect from unknown[45.93.247.180] Nov x@x Nov x@x Nov 14 00:50:08 our-server-hostname postfix/smtpd[8580]: 8BF41A4000B: client=unknown[45.93.247.180] Nov 14 00:50:09 our-server-hostname postfix/sm........ -------------------------------	2019-11-14 02:29:56
34.83.184.206	attack	Invalid user pi from 34.83.184.206 port 56122	2019-11-14 02:32:20
159.65.5.183	attackbotsspam	Nov 13 19:37:20 markkoudstaal sshd[31010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.5.183 Nov 13 19:37:22 markkoudstaal sshd[31010]: Failed password for invalid user moazzami from 159.65.5.183 port 41882 ssh2 Nov 13 19:41:44 markkoudstaal sshd[31442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.5.183	2019-11-14 02:43:02
34.94.208.18	attack	WordPress login Brute force / Web App Attack on client site.	2019-11-14 02:25:26
206.189.89.28	attack	Nov 13 21:43:35 lcl-usvr-01 sshd[11459]: refused connect from 206.189.89.28 (206.189.89.28) Nov 13 21:47:52 lcl-usvr-01 sshd[12585]: refused connect from 206.189.89.28 (206.189.89.28)	2019-11-14 02:22:10
107.182.187.34	attack	Nov 13 17:10:11 debian sshd\[31936\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.182.187.34 user=root Nov 13 17:10:14 debian sshd\[31936\]: Failed password for root from 107.182.187.34 port 40960 ssh2 Nov 13 17:46:58 debian sshd\[2059\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.182.187.34 user=lp ...	2019-11-14 02:55:38
125.70.254.68	attackspambots	Unauthorized connection attempt from IP address 125.70.254.68 on Port 445(SMB)	2019-11-14 02:55:07
168.181.49.192	attackbotsspam	Nov 13 15:47:07 lnxweb61 sshd[6245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.181.49.192	2019-11-14 02:47:50

最近上报的IP列表

161.0.18.2	124.112.72.86	124.90.55.178	123.144.30.42
120.253.205.174	120.85.132.10	118.69.86.72	116.5.186.58
113.118.241.203	113.22.166.111	111.42.66.52	101.53.101.16
83.220.94.229	93.190.168.206	83.97.109.185	208.108.149.177
57.127.107.217	146.129.65.114	14.154.177.186	241.100.136.72