132.145.158.230

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Oracle Public Cloud

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Sep 23 15:03:37 ip106 sshd[10925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.158.230 Sep 23 15:03:39 ip106 sshd[10925]: Failed password for invalid user solr from 132.145.158.230 port 36380 ssh2 ...	2020-09-23 21:45:53
attackspam	Sep 22 23:41:42 r.ca sshd[8051]: Failed password for root from 132.145.158.230 port 45472 ssh2	2020-09-23 14:05:30
attackbots	$f2bV_matches	2020-09-23 05:55:25

类型

评论内容

时间

attackspam

Sep 23 15:03:37 ip106 sshd[10925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.158.230 
Sep 23 15:03:39 ip106 sshd[10925]: Failed password for invalid user solr from 132.145.158.230 port 36380 ssh2
...

2020-09-23 21:45:53

attackspam

Sep 22 23:41:42 r.ca sshd[8051]: Failed password for root from 132.145.158.230 port 45472 ssh2

2020-09-23 14:05:30

attackbots

$f2bV_matches

2020-09-23 05:55:25

相同子网IP讨论:

IP	类型	评论内容	时间
132.145.158.240	attackbotsspam	Unauthorized connection attempt detected from IP address 132.145.158.240 to port 1433	2020-05-30 01:15:38

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 132.145.158.230
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52925
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;132.145.158.230.		IN	A

;; AUTHORITY SECTION:
.			538	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092202 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 23 05:55:20 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

Host 230.158.145.132.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		100.100.2.138
Address:	100.100.2.138#53

** server can't find 230.158.145.132.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
88.241.131.172	attackspam	2019-11-28T15:39:08.356Z CLOSE host=88.241.131.172 port=63021 fd=4 time=150.120 bytes=262 ...	2020-03-12 23:27:49
217.219.116.116	attack	Unauthorized connection attempt detected from IP address 217.219.116.116 to port 1433	2020-03-13 00:09:33
208.187.167.75	attackspam	Mar 12 14:25:38 mail.srvfarm.net postfix/smtpd[1850438]: NOQUEUE: reject: RCPT from majestic.onvacationnow.com[208.187.167.75]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 12 14:25:38 mail.srvfarm.net postfix/smtpd[1850354]: NOQUEUE: reject: RCPT from majestic.onvacationnow.com[208.187.167.75]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 12 14:27:54 mail.srvfarm.net postfix/smtpd[1850354]: NOQUEUE: reject: RCPT from majestic.onvacationnow.com[208.187.167.75]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 12 14:27:54 mail.srvfarm.net postfix/smtpd[1850433]: NOQUEUE: reje	2020-03-13 00:15:42
46.101.43.224	attackbotsspam	2020-03-12T13:21:08.896792vps773228.ovh.net sshd[31363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.43.224 2020-03-12T13:21:08.885164vps773228.ovh.net sshd[31363]: Invalid user sarvub from 46.101.43.224 port 44770 2020-03-12T13:21:10.835094vps773228.ovh.net sshd[31363]: Failed password for invalid user sarvub from 46.101.43.224 port 44770 ssh2 2020-03-12T14:21:29.337179vps773228.ovh.net sshd[32078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.43.224 user=root 2020-03-12T14:21:31.706973vps773228.ovh.net sshd[32078]: Failed password for root from 46.101.43.224 port 41538 ssh2 2020-03-12T14:28:03.476335vps773228.ovh.net sshd[32174]: Invalid user gmy from 46.101.43.224 port 44317 2020-03-12T14:28:03.487937vps773228.ovh.net sshd[32174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.43.224 2020-03-12T14:28:03.476335vps773228.ovh.net sshd[321 ...	2020-03-12 23:19:40
89.160.191.196	attackspam	2019-12-24T20:10:45.653Z CLOSE host=89.160.191.196 port=56922 fd=4 time=20.016 bytes=27 ...	2020-03-12 23:22:57
91.220.81.153	spambotsattack	а	2020-03-13 00:04:48
85.209.0.203	attackspam	2020-01-05T02:16:39.135Z CLOSE host=85.209.0.203 port=5000 fd=4 time=20.018 bytes=18 ...	2020-03-13 00:11:10
133.50.82.232	attackbots	Scan detected 2020.03.12 13:30:19 blocked until 2020.04.06 11:01:42	2020-03-12 23:59:35
86.102.20.92	attack	2019-11-19T18:49:18.260Z CLOSE host=86.102.20.92 port=54580 fd=4 time=20.015 bytes=26 ...	2020-03-12 23:47:00
157.230.2.208	attackspam	2020-03-12T15:08:50.144972jannga.de sshd[31955]: Invalid user test_dw from 157.230.2.208 port 48228 2020-03-12T15:08:51.876078jannga.de sshd[31955]: Failed password for invalid user test_dw from 157.230.2.208 port 48228 ssh2 ...	2020-03-12 23:46:24
142.93.172.67	attackbotsspam	Mar 12 16:18:03 Invalid user ts3server from 142.93.172.67 port 36924	2020-03-12 23:49:34
77.121.174.100	attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-03-13 00:11:37
86.235.116.22	attack	2019-12-21T05:50:56.363Z CLOSE host=86.235.116.22 port=44222 fd=4 time=20.019 bytes=16 ...	2020-03-12 23:41:12
103.51.153.235	attackbotsspam	suspicious action Thu, 12 Mar 2020 12:07:22 -0300	2020-03-12 23:27:24
222.186.175.163	attackbots	Mar 12 17:03:20 meumeu sshd[11454]: Failed password for root from 222.186.175.163 port 53356 ssh2 Mar 12 17:03:25 meumeu sshd[11454]: Failed password for root from 222.186.175.163 port 53356 ssh2 Mar 12 17:03:36 meumeu sshd[11454]: Failed password for root from 222.186.175.163 port 53356 ssh2 Mar 12 17:03:37 meumeu sshd[11454]: error: maximum authentication attempts exceeded for root from 222.186.175.163 port 53356 ssh2 [preauth] ...	2020-03-13 00:08:02

最近上报的IP列表

50.210.120.198	81.247.39.43	169.61.36.197	21.156.129.36
72.245.220.142	85.128.5.96	117.142.14.152	204.24.165.213
115.242.208.120	204.205.159.126	232.236.102.74	146.205.112.60
79.167.170.108	170.249.45.231	84.208.218.37	219.77.183.186
48.52.9.15	111.14.65.243	142.44.254.100	39.249.79.225