114.45.5.3 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Taiwan, Province of China

运营商(isp): Chunghwa Telecom Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	19/7/7@09:28:45: FAIL: IoT-Telnet address from=114.45.5.3 ...	2019-07-08 05:31:19

相同子网IP讨论:

IP	类型	评论内容	时间
114.45.5.134	attackspam	Unauthorized connection attempt from IP address 114.45.5.134 on Port 445(SMB)	2020-08-13 20:12:36
114.45.53.115	attack	Jun 5 22:56:29 debian kernel: [289550.597845] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=114.45.53.115 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=65239 PROTO=TCP SPT=25434 DPT=23 WINDOW=37812 RES=0x00 SYN URGP=0	2020-06-06 04:18:43
114.45.53.115	attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-06-05 14:40:31
114.45.5.182	attackbotsspam	Honeypot attack, port: 23, PTR: 114-45-5-182.dynamic-ip.hinet.net.	2019-07-12 01:35:12
114.45.51.184	attack	37215/tcp [2019-07-03]1pkt	2019-07-03 18:58:34

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.45.5.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15549
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.45.5.3.			IN	A

;; AUTHORITY SECTION:
.			2383	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070701 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 08 05:31:13 CST 2019
;; MSG SIZE  rcvd: 114

HOST信息:

3.5.45.114.in-addr.arpa domain name pointer 114-45-5-3.dynamic-ip.hinet.net.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
3.5.45.114.in-addr.arpa	name = 114-45-5-3.dynamic-ip.hinet.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
141.98.252.163	attackbotsspam	sshd	2020-09-01 19:03:18
177.45.245.228	attackbotsspam	Unauthorized connection attempt from IP address 177.45.245.228 on Port 445(SMB)	2020-09-01 19:09:24
62.112.11.9	attackspambots	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-01T09:48:58Z and 2020-09-01T10:19:52Z	2020-09-01 19:07:45
72.210.252.142	attack	2020-08-31 20:48 Unauthorized connection attempt to IMAP/POP	2020-09-01 19:15:08
27.72.168.7	attack	Unauthorized connection attempt from IP address 27.72.168.7 on Port 445(SMB)	2020-09-01 19:15:34
139.99.125.231	attackspambots	TCP (SYN) 139.99.125.231:50637 -> port 22, len 48	2020-09-01 19:04:17
134.209.186.72	attackbotsspam	Sep 1 11:52:20 server sshd[28509]: User root from 134.209.186.72 not allowed because listed in DenyUsers Sep 1 11:52:22 server sshd[28509]: Failed password for invalid user root from 134.209.186.72 port 50818 ssh2 Sep 1 11:52:20 server sshd[28509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.186.72 user=root Sep 1 11:52:20 server sshd[28509]: User root from 134.209.186.72 not allowed because listed in DenyUsers Sep 1 11:52:22 server sshd[28509]: Failed password for invalid user root from 134.209.186.72 port 50818 ssh2 ...	2020-09-01 18:59:16
167.172.57.1	attackbots	167.172.57.1 - - [01/Sep/2020:12:17:45 +0100] "POST /wp-login.php HTTP/1.1" 200 2207 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.172.57.1 - - [01/Sep/2020:12:17:48 +0100] "POST /wp-login.php HTTP/1.1" 200 2181 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.172.57.1 - - [01/Sep/2020:12:17:49 +0100] "POST /wp-login.php HTTP/1.1" 200 2187 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-01 19:25:03
37.17.182.22	attackbotsspam	Unauthorized connection attempt from IP address 37.17.182.22 on Port 445(SMB)	2020-09-01 19:11:08
45.227.255.207	attackspambots	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-01T09:47:57Z and 2020-09-01T09:59:52Z	2020-09-01 19:24:46
85.235.52.78	attackbots	Unauthorized connection attempt from IP address 85.235.52.78 on Port 445(SMB)	2020-09-01 18:44:08
218.92.0.198	attackspam	2020-09-01T12:43:25.969799rem.lavrinenko.info sshd[15562]: refused connect from 218.92.0.198 (218.92.0.198) 2020-09-01T12:45:17.809152rem.lavrinenko.info sshd[15563]: refused connect from 218.92.0.198 (218.92.0.198) 2020-09-01T12:48:35.784624rem.lavrinenko.info sshd[15565]: refused connect from 218.92.0.198 (218.92.0.198) 2020-09-01T12:50:15.462783rem.lavrinenko.info sshd[15566]: refused connect from 218.92.0.198 (218.92.0.198) 2020-09-01T12:52:00.684762rem.lavrinenko.info sshd[15567]: refused connect from 218.92.0.198 (218.92.0.198) ...	2020-09-01 18:58:29
66.214.2.40	attackbots	2020-09-01T05:46:28+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)	2020-09-01 19:08:31
218.161.24.203	attackspam	Automatic report - Banned IP Access	2020-09-01 18:43:30
220.249.114.237	attackbotsspam	Brute-force attempt banned	2020-09-01 19:09:40

最近上报的IP列表

158.174.107.91	157.55.39.255	177.11.44.35	212.3.186.118
194.19.121.99	104.236.71.159	179.127.195.95	2.229.63.6
190.3.25.122	178.62.254.64	114.99.130.52	177.74.182.232
163.179.32.29	123.206.227.102	27.69.5.90	201.105.201.242
87.108.135.92	95.129.25.103	60.168.60.152	185.195.25.21