必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
145.131.21.209 attack
Dec 29 13:25:48 itv-usvr-02 sshd[19487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.131.21.209  user=www-data
Dec 29 13:25:50 itv-usvr-02 sshd[19487]: Failed password for www-data from 145.131.21.209 port 41176 ssh2
Dec 29 13:28:47 itv-usvr-02 sshd[19517]: Invalid user tgipl66 from 145.131.21.209 port 46136
Dec 29 13:28:47 itv-usvr-02 sshd[19517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.131.21.209
Dec 29 13:28:47 itv-usvr-02 sshd[19517]: Invalid user tgipl66 from 145.131.21.209 port 46136
Dec 29 13:28:49 itv-usvr-02 sshd[19517]: Failed password for invalid user tgipl66 from 145.131.21.209 port 46136 ssh2
2019-12-29 16:04:33
145.131.21.209 attackbots
Dec 28 07:27:31 lnxmail61 sshd[13728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.131.21.209
Dec 28 07:27:31 lnxmail61 sshd[13728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.131.21.209
Dec 28 07:27:33 lnxmail61 sshd[13728]: Failed password for invalid user kroska from 145.131.21.209 port 58894 ssh2
2019-12-28 16:26:46
145.131.21.209 attack
Dec 24 18:15:15 localhost sshd\[114114\]: Invalid user mom from 145.131.21.209 port 39648
Dec 24 18:15:15 localhost sshd\[114114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.131.21.209
Dec 24 18:15:17 localhost sshd\[114114\]: Failed password for invalid user mom from 145.131.21.209 port 39648 ssh2
Dec 24 18:17:49 localhost sshd\[114202\]: Invalid user denny from 145.131.21.209 port 39014
Dec 24 18:17:49 localhost sshd\[114202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.131.21.209
...
2019-12-25 02:19:14
145.131.21.209 attackspambots
Nov 28 23:55:07 sachi sshd\[20358\]: Invalid user guest from 145.131.21.209
Nov 28 23:55:07 sachi sshd\[20358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ahv-id-8633.vps.awcloud.nl
Nov 28 23:55:09 sachi sshd\[20358\]: Failed password for invalid user guest from 145.131.21.209 port 50276 ssh2
Nov 28 23:58:04 sachi sshd\[20582\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ahv-id-8633.vps.awcloud.nl  user=mail
Nov 28 23:58:07 sachi sshd\[20582\]: Failed password for mail from 145.131.21.209 port 58550 ssh2
2019-11-29 17:59:14
145.131.21.209 attackspam
Nov 21 21:36:43 srv206 sshd[14034]: Invalid user rochette from 145.131.21.209
...
2019-11-22 04:45:55
145.131.21.209 attackbots
Lines containing failures of 145.131.21.209
Oct 31 22:41:56 myhost sshd[21675]: Invalid user mailsrv from 145.131.21.209 port 45258
Oct 31 22:41:56 myhost sshd[21675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.131.21.209
Oct 31 22:41:58 myhost sshd[21675]: Failed password for invalid user mailsrv from 145.131.21.209 port 45258 ssh2
Oct 31 22:41:58 myhost sshd[21675]: Received disconnect from 145.131.21.209 port 45258:11: Bye Bye [preauth]
Oct 31 22:41:58 myhost sshd[21675]: Disconnected from invalid user mailsrv 145.131.21.209 port 45258 [preauth]
Oct 31 23:10:07 myhost sshd[21879]: User r.r from 145.131.21.209 not allowed because not listed in AllowUsers
Oct 31 23:10:07 myhost sshd[21879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.131.21.209  user=r.r
Oct 31 23:10:08 myhost sshd[21879]: Failed password for invalid user r.r from 145.131.21.209 port 41000 ssh2
Oct 31 23:10:........
------------------------------
2019-11-03 01:13:14
145.131.21.209 attack
Lines containing failures of 145.131.21.209
Oct 31 22:41:56 myhost sshd[21675]: Invalid user mailsrv from 145.131.21.209 port 45258
Oct 31 22:41:56 myhost sshd[21675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.131.21.209
Oct 31 22:41:58 myhost sshd[21675]: Failed password for invalid user mailsrv from 145.131.21.209 port 45258 ssh2
Oct 31 22:41:58 myhost sshd[21675]: Received disconnect from 145.131.21.209 port 45258:11: Bye Bye [preauth]
Oct 31 22:41:58 myhost sshd[21675]: Disconnected from invalid user mailsrv 145.131.21.209 port 45258 [preauth]
Oct 31 23:10:07 myhost sshd[21879]: User r.r from 145.131.21.209 not allowed because not listed in AllowUsers
Oct 31 23:10:07 myhost sshd[21879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.131.21.209  user=r.r
Oct 31 23:10:08 myhost sshd[21879]: Failed password for invalid user r.r from 145.131.21.209 port 41000 ssh2
Oct 31 23:10:........
------------------------------
2019-11-02 06:50:32
145.131.21.179 attackspambots
1433/tcp 445/tcp...
[2019-10-04/24]5pkt,2pt.(tcp)
2019-10-24 12:29:50
145.131.21.23 attack
145.131.21.23 - - [28/Aug/2019:20:01:33 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
145.131.21.23 - - [28/Aug/2019:20:01:33 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
145.131.21.23 - - [28/Aug/2019:20:01:33 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
145.131.21.23 - - [28/Aug/2019:20:01:34 +0200] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
145.131.21.23 - - [28/Aug/2019:20:01:34 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
145.131.21.23 - - [28/Aug/2019:20:01:34 +0200] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-08-29 05:14:26
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.131.21.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20664
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;145.131.21.56.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 14:16:51 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
56.21.131.145.in-addr.arpa domain name pointer ahv-id-17047.vps.awcloud.nl.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
56.21.131.145.in-addr.arpa	name = ahv-id-17047.vps.awcloud.nl.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
157.245.70.224 attackbots
Feb 18 16:27:37 MK-Soft-VM3 sshd[22986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.70.224 
Feb 18 16:27:39 MK-Soft-VM3 sshd[22986]: Failed password for invalid user jc3server from 157.245.70.224 port 56130 ssh2
...
2020-02-19 01:31:21
103.110.18.86 attackspam
Automatic report - Port Scan Attack
2020-02-19 01:25:07
222.186.190.2 attackspambots
Feb 18 18:10:10 nextcloud sshd\[14227\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.2  user=root
Feb 18 18:10:12 nextcloud sshd\[14227\]: Failed password for root from 222.186.190.2 port 50146 ssh2
Feb 18 18:10:22 nextcloud sshd\[14227\]: Failed password for root from 222.186.190.2 port 50146 ssh2
2020-02-19 01:15:51
193.148.71.35 attack
Feb 18 05:51:24 hpm sshd\[17258\]: Invalid user lambda from 193.148.71.35
Feb 18 05:51:24 hpm sshd\[17258\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.148.71.35
Feb 18 05:51:26 hpm sshd\[17258\]: Failed password for invalid user lambda from 193.148.71.35 port 60836 ssh2
Feb 18 05:54:49 hpm sshd\[17512\]: Invalid user gizella from 193.148.71.35
Feb 18 05:54:49 hpm sshd\[17512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.148.71.35
2020-02-19 01:14:09
91.77.166.52 attack
Feb 18 03:36:17 auw2 sshd\[14242\]: Invalid user tester from 91.77.166.52
Feb 18 03:36:18 auw2 sshd\[14242\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.77.166.52
Feb 18 03:36:20 auw2 sshd\[14242\]: Failed password for invalid user tester from 91.77.166.52 port 60448 ssh2
Feb 18 03:39:42 auw2 sshd\[14678\]: Invalid user rstudio from 91.77.166.52
Feb 18 03:39:42 auw2 sshd\[14678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.77.166.52
2020-02-19 01:36:59
46.229.168.132 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 566be268bd9cea28 | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: challenge | Country: US | CF_IPClass: searchEngine | Protocol: HTTP/1.1 | Method: GET | Host: theme-suka.skk.moe | User-Agent: Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html) | CF_DC: IAD. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2020-02-19 01:41:09
84.91.238.245 attackbots
Automatic report - Port Scan Attack
2020-02-19 01:17:52
193.31.24.113 attackbots
02/18/2020-18:28:50.598170 193.31.24.113 Protocol: 6 SURICATA TLS invalid record/traffic
2020-02-19 01:38:26
185.209.0.32 attackbots
firewall-block, port(s): 18500/tcp
2020-02-19 01:32:32
79.104.39.6 attackspambots
Invalid user t3bot from 79.104.39.6 port 60654
2020-02-19 01:28:20
86.34.240.35 attackbots
Port probing on unauthorized port 23
2020-02-19 01:15:04
103.110.18.87 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-19 01:24:24
165.227.41.202 attackspam
$f2bV_matches
2020-02-19 01:33:26
185.220.101.58 attack
Automatic report - Banned IP Access
2020-02-19 01:13:07
5.53.124.49 attackspam
[ 🧯 ] From delegaciaeletronica4366@compress1.noreplymail.com.de Tue Feb 18 10:23:01 2020
 Received: from compress1.noreplymail.com.de ([5.53.124.49]:34160)
2020-02-19 01:43:53

最近上报的IP列表

145.131.16.74 145.131.25.137 145.131.2.8 145.131.31.20
145.131.41.28 145.131.30.229 145.131.40.204 145.131.31.162
145.131.7.83 145.131.5.57 145.131.72.2 145.131.41.48
145.136.242.150 145.14.12.101 145.14.14.104 145.14.14.118
145.14.145.231 145.136.241.232 145.14.146.41 145.14.14.81