145.239.2.29 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): OVH SAS

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	[2020-07-27 08:58:10] NOTICE[1248] chan_sip.c: Registration from '' failed for '145.239.2.29:54384' - Wrong password [2020-07-27 08:58:10] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-27T08:58:10.983-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3735",SessionID="0x7f27200510e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/145.239.2.29/54384",Challenge="0617269c",ReceivedChallenge="0617269c",ReceivedHash="d44e7e37d4db4c6d421e0b72bd9ad369" [2020-07-27 08:58:21] NOTICE[1248] chan_sip.c: Registration from '' failed for '145.239.2.29:56753' - Wrong password ...	2020-07-27 21:08:04

类型

评论内容

时间

attackbotsspam

[2020-07-27 08:58:10] NOTICE[1248] chan_sip.c: Registration from '' failed for '145.239.2.29:54384' - Wrong password
[2020-07-27 08:58:10] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-27T08:58:10.983-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3735",SessionID="0x7f27200510e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/145.239.2.29/54384",Challenge="0617269c",ReceivedChallenge="0617269c",ReceivedHash="d44e7e37d4db4c6d421e0b72bd9ad369"
[2020-07-27 08:58:21] NOTICE[1248] chan_sip.c: Registration from '' failed for '145.239.2.29:56753' - Wrong password
...

2020-07-27 21:08:04

相同子网IP讨论:

IP	类型	评论内容	时间
145.239.29.12	spam	Exploit.RTF-ObfsStrm.Gen	2025-01-23 20:00:43
145.239.23.196	spamattack	PHISHING AND SPAM ATTACK FROM "Wealth Loophole - eqyeyrp@storages.moscow - " : SUBJECT "Citizens are already raking in millions of dollars from home using this "wealth loophole" " : RECEIVED "from storages.moscow (media1.worldbtcnews.com [145.239.23.196] " : DATE/TIMESENT "Wed, 17 Mar 2021 01:53:17 ": IP ADDRESS "inetnum: 145.239.23.192 - 145.239.23.207 OrgName: Information Technologies AltinSoft" :	2021-03-17 15:31:29
145.239.29.217	attackspam	wp-login.php	2020-10-06 02:01:23
145.239.29.217	attack	Attempt to hack Wordpress Login, XMLRPC or other login	2020-10-05 17:49:52
145.239.29.217	attackbotsspam	(PERMBLOCK) 145.239.29.217 (PL/Poland/ip-145-239-29.eu) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:	2020-09-29 23:35:29
145.239.29.71	attack	(mod_security) mod_security (id:210492) triggered by 145.239.29.71 (FR/France/-): 5 in the last 3600 secs	2020-09-25 03:30:39
145.239.29.71	attack	(mod_security) mod_security (id:210492) triggered by 145.239.29.71 (FR/France/-): 5 in the last 3600 secs	2020-09-24 19:15:18
145.239.29.217	attackbotsspam	145.239.29.217 - - [21/Sep/2020:06:50:02 +0100] "POST /wp-login.php HTTP/1.1" 200 1861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.29.217 - - [21/Sep/2020:06:50:02 +0100] "POST /wp-login.php HTTP/1.1" 200 1839 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.29.217 - - [21/Sep/2020:06:50:03 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-21 15:37:58
145.239.29.217	attackbots	145.239.29.217 - - [20/Sep/2020:21:50:22 +0100] "POST /wp-login.php HTTP/1.1" 200 2520 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.29.217 - - [20/Sep/2020:21:50:23 +0100] "POST /wp-login.php HTTP/1.1" 200 2572 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.29.217 - - [20/Sep/2020:21:50:23 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-21 07:31:58
145.239.211.242	attackbots	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-09-20 14:20:31
145.239.211.242	attackspambots	145.239.211.242 - - [19/Sep/2020:23:10:49 +0100] "POST /wp-login.php HTTP/1.1" 200 2191 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.211.242 - - [19/Sep/2020:23:10:50 +0100] "POST /wp-login.php HTTP/1.1" 200 2173 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.211.242 - - [19/Sep/2020:23:10:50 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-20 06:20:08
145.239.29.217	attack	145.239.29.217 - - [14/Sep/2020:08:51:41 +0200] "GET /wp-login.php HTTP/1.1" 200 8558 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.29.217 - - [14/Sep/2020:08:51:44 +0200] "POST /wp-login.php HTTP/1.1" 200 8809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.29.217 - - [14/Sep/2020:08:51:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-14 23:59:46
145.239.29.217	attackspam	145.239.29.217 - - [14/Sep/2020:08:51:41 +0200] "GET /wp-login.php HTTP/1.1" 200 8558 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.29.217 - - [14/Sep/2020:08:51:44 +0200] "POST /wp-login.php HTTP/1.1" 200 8809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.29.217 - - [14/Sep/2020:08:51:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-14 15:45:13
145.239.29.217	attack	145.239.29.217 - - [13/Sep/2020:18:59:28 +0100] "POST /wp-login.php HTTP/1.1" 200 2401 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.29.217 - - [13/Sep/2020:18:59:29 +0100] "POST /wp-login.php HTTP/1.1" 200 2415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 145.239.29.217 - - [13/Sep/2020:18:59:29 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-14 07:38:29
145.239.29.217	attackspam	GET /wp-login.php HTTP/1.1	2020-09-14 00:21:04

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.239.2.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46253
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;145.239.2.29.			IN	A

;; AUTHORITY SECTION:
.			208	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072700 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jul 27 21:07:58 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

29.2.239.145.in-addr.arpa domain name pointer ns3080942.ip-145-239-2.eu.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
29.2.239.145.in-addr.arpa	name = ns3080942.ip-145-239-2.eu.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
103.91.181.25	attack	Invalid user fbm from 103.91.181.25 port 52708	2020-07-28 18:41:28
159.203.192.134	attackbotsspam	TCP ports : 10281 / 23615	2020-07-28 18:32:15
106.12.136.105	attackspam	xmlrpc attack	2020-07-28 18:27:34
211.235.32.70	attackbotsspam	firewall-block, port(s): 445/tcp	2020-07-28 18:47:05
165.22.43.225	attack	Invalid user sdt from 165.22.43.225 port 42836	2020-07-28 18:26:45
64.202.184.249	attack	64.202.184.249 - - [28/Jul/2020:08:37:42 +0100] "POST /wp-login.php HTTP/1.1" 200 1905 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 64.202.184.249 - - [28/Jul/2020:08:37:45 +0100] "POST /wp-login.php HTTP/1.1" 200 1890 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 64.202.184.249 - - [28/Jul/2020:08:37:48 +0100] "POST /wp-login.php HTTP/1.1" 200 1887 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-28 18:23:17
73.189.130.241	attackbotsspam	Fail2Ban Ban Triggered HTTP Attempted Bot Registration	2020-07-28 18:35:25
134.175.230.209	attackspam	Jul 28 08:18:54 scw-tender-jepsen sshd[32120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.230.209 Jul 28 08:18:56 scw-tender-jepsen sshd[32120]: Failed password for invalid user dell from 134.175.230.209 port 58848 ssh2	2020-07-28 18:24:10
106.12.95.45	attackspam	2020-07-27 UTC: (34x) - acer,airpods,ajeel,anna,cbiuser,chenjl,chikwataf,cy,davey,divyam,esgl,ftpadmin4,furkan,huzuyi,jiay,liumin,luanmingfu,olivier,panchao,peng,petrovsky,renxiaoguang,root,takamatsu,thinkit,tsinghua,vada,wlk-lab,wuyanjun,xiaochaojun,xxx,yangben,zhangcz,zhouying	2020-07-28 18:33:45
117.145.22.82	attackspam	07/27/2020-23:50:56.489390 117.145.22.82 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-07-28 18:18:52
164.52.24.165	attackspam	Unauthorized connection attempt detected from IP address 164.52.24.165 to port 21 [T]	2020-07-28 18:52:24
222.76.203.58	attackbots	Invalid user zero from 222.76.203.58 port 2120	2020-07-28 18:56:42
112.85.42.174	attackbots	Jul 28 12:28:19 minden010 sshd[30241]: Failed password for root from 112.85.42.174 port 40582 ssh2 Jul 28 12:28:23 minden010 sshd[30241]: Failed password for root from 112.85.42.174 port 40582 ssh2 Jul 28 12:28:26 minden010 sshd[30241]: Failed password for root from 112.85.42.174 port 40582 ssh2 Jul 28 12:28:29 minden010 sshd[30241]: Failed password for root from 112.85.42.174 port 40582 ssh2 ...	2020-07-28 18:33:23
35.187.239.32	attackspambots	Invalid user xuyuanchao from 35.187.239.32 port 42630	2020-07-28 18:24:44
192.241.234.8	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-07-28 18:47:59

最近上报的IP列表

121.13.107.171	36.85.222.149	70.37.162.11	180.127.90.176
124.130.164.173	201.242.122.126	149.72.52.170	118.243.222.66
170.81.146.32	50.110.19.14	198.144.120.223	35.200.145.32
82.213.217.22	117.69.189.215	95.47.49.23	201.182.228.63
171.215.73.178	109.236.51.202	148.72.153.224	124.148.205.50