必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): France

运营商(isp): OVH SAS

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspambots
$f2bV_matches
2020-01-11 22:35:01
attackspam
Dec 22 15:26:53 ws12vmsma01 sshd[17115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.42.107 
Dec 22 15:26:53 ws12vmsma01 sshd[17115]: Invalid user user from 145.239.42.107
Dec 22 15:26:55 ws12vmsma01 sshd[17115]: Failed password for invalid user user from 145.239.42.107 port 42148 ssh2
...
2019-12-23 06:38:57
attackspambots
Dec 19 06:54:36 sso sshd[8108]: Failed password for root from 145.239.42.107 port 38590 ssh2
...
2019-12-19 14:15:08
attackbotsspam
SSH Bruteforce attempt
2019-12-14 07:23:39
attackspambots
Dec 12 23:42:33 loxhost sshd\[21460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.42.107  user=root
Dec 12 23:42:35 loxhost sshd\[21460\]: Failed password for root from 145.239.42.107 port 36628 ssh2
Dec 12 23:48:14 loxhost sshd\[21639\]: Invalid user rashiem from 145.239.42.107 port 45678
Dec 12 23:48:14 loxhost sshd\[21639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.42.107
Dec 12 23:48:16 loxhost sshd\[21639\]: Failed password for invalid user rashiem from 145.239.42.107 port 45678 ssh2
...
2019-12-13 06:54:09
attackspambots
Too many connections or unauthorized access detected from Arctic banned ip
2019-12-11 07:36:59
attackbots
Dec 10 15:12:14 hcbbdb sshd\[6439\]: Invalid user ashleykath from 145.239.42.107
Dec 10 15:12:14 hcbbdb sshd\[6439\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.42.107
Dec 10 15:12:16 hcbbdb sshd\[6439\]: Failed password for invalid user ashleykath from 145.239.42.107 port 43196 ssh2
Dec 10 15:18:04 hcbbdb sshd\[7163\]: Invalid user rafols from 145.239.42.107
Dec 10 15:18:04 hcbbdb sshd\[7163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.42.107
2019-12-10 23:22:44
attackspambots
Dec  9 06:47:08 wbs sshd\[30658\]: Invalid user kate from 145.239.42.107
Dec  9 06:47:08 wbs sshd\[30658\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.42.107
Dec  9 06:47:09 wbs sshd\[30658\]: Failed password for invalid user kate from 145.239.42.107 port 39150 ssh2
Dec  9 06:53:06 wbs sshd\[31319\]: Invalid user oyakuma from 145.239.42.107
Dec  9 06:53:06 wbs sshd\[31319\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.42.107
2019-12-10 00:59:44
attackspam
SSH invalid-user multiple login attempts
2019-12-08 17:11:08
attackspam
SSH brute-force: detected 33 distinct usernames within a 24-hour window.
2019-12-05 19:57:58
attack
ssh intrusion attempt
2019-11-22 17:22:23
attackspam
Nov 17 06:17:17 web8 sshd\[13050\]: Invalid user sig@tjlt from 145.239.42.107
Nov 17 06:17:17 web8 sshd\[13050\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.42.107
Nov 17 06:17:19 web8 sshd\[13050\]: Failed password for invalid user sig@tjlt from 145.239.42.107 port 35220 ssh2
Nov 17 06:21:07 web8 sshd\[15028\]: Invalid user !@\#ewq!@\# from 145.239.42.107
Nov 17 06:21:07 web8 sshd\[15028\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.42.107
2019-11-17 21:27:05
attack
2019-11-13T01:26:48.361927ns547587 sshd\[1369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.42.107.kr-k.de  user=root
2019-11-13T01:26:50.847019ns547587 sshd\[1369\]: Failed password for root from 145.239.42.107 port 54708 ssh2
2019-11-13T01:30:13.300899ns547587 sshd\[5820\]: Invalid user biliamee from 145.239.42.107 port 35256
2019-11-13T01:30:13.304768ns547587 sshd\[5820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.42.107.kr-k.de
...
2019-11-13 14:46:26
attackspambots
SSH Brute Force, server-1 sshd[4737]: Failed password for invalid user webmaster from 145.239.42.107 port 41128 ssh2
2019-11-12 00:00:12
attackspam
SSH brutforce
2019-11-07 18:12:35
attack
Invalid user stefan from 145.239.42.107 port 52496
2019-10-25 17:10:57
attack
Invalid user stefan from 145.239.42.107 port 52496
2019-10-24 16:47:34
attack
Oct 20 07:05:01 localhost sshd\[30811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.42.107  user=root
Oct 20 07:05:03 localhost sshd\[30811\]: Failed password for root from 145.239.42.107 port 43072 ssh2
Oct 20 07:09:06 localhost sshd\[31175\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.42.107  user=root
2019-10-20 13:19:14
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.239.42.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43683
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;145.239.42.107.			IN	A

;; AUTHORITY SECTION:
.			572	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101901 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 20 13:19:10 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
107.42.239.145.in-addr.arpa domain name pointer 145.239.42.107.kr-k.de.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
107.42.239.145.in-addr.arpa	name = 145.239.42.107.kr-k.de.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
5.248.165.110 attack
Blocked range because of multiple attacks in the past. @ 2019-09-03T17:33:34+02:00.
2019-09-08 14:02:03
94.51.29.9 attackbotsspam
Sep  7 23:42:18 host sshd\[50029\]: Invalid user admin from 94.51.29.9 port 44430
Sep  7 23:42:18 host sshd\[50029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.51.29.9
...
2019-09-08 14:35:38
134.209.196.169 attackspambots
php WP PHPmyadamin ABUSE blocked for 12h
2019-09-08 14:42:56
218.98.26.167 attackbotsspam
2019-09-08T06:16:22.312779abusebot-3.cloudsearch.cf sshd\[4636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.167  user=root
2019-09-08 14:54:43
51.15.194.117 attack
firewall-block, port(s): 445/tcp
2019-09-08 14:23:31
221.237.189.26 attack
Sep  7 16:41:04 warning: unknown[221.237.189.26]: SASL LOGIN authentication failed: authentication failure
Sep  7 16:41:11 warning: unknown[221.237.189.26]: SASL LOGIN authentication failed: authentication failure
Sep  7 16:41:19 warning: unknown[221.237.189.26]: SASL LOGIN authentication failed: authentication failure
2019-09-08 14:53:37
196.3.99.246 attackspam
[Aegis] @ 2019-09-07 22:41:50  0100 -> Multiple attempts to send e-mail from invalid/unknown sender domain.
2019-09-08 14:42:18
181.65.186.185 attack
Sep  8 02:57:27 vps647732 sshd[12293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.65.186.185
Sep  8 02:57:29 vps647732 sshd[12293]: Failed password for invalid user ftpuser from 181.65.186.185 port 57729 ssh2
...
2019-09-08 14:33:49
128.199.211.118 attack
Robots ignored. Unauthorized login attempts (wp-login.php). Blocked by Firewall_
2019-09-08 14:30:22
149.202.214.11 attackbotsspam
Sep  7 21:42:51 vm-dfa0dd01 sshd[53529]: Invalid user ubuntu from 149.202.214.11 port 51476
...
2019-09-08 14:08:18
139.199.122.96 attackbots
Sep  8 07:41:40 s64-1 sshd[7545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.122.96
Sep  8 07:41:43 s64-1 sshd[7545]: Failed password for invalid user guest from 139.199.122.96 port 61143 ssh2
Sep  8 07:47:48 s64-1 sshd[7623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.122.96
...
2019-09-08 14:02:34
216.144.251.86 attack
Sep  7 20:12:43 friendsofhawaii sshd\[1128\]: Invalid user admin from 216.144.251.86
Sep  7 20:12:43 friendsofhawaii sshd\[1128\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.144.251.86
Sep  7 20:12:45 friendsofhawaii sshd\[1128\]: Failed password for invalid user admin from 216.144.251.86 port 54664 ssh2
Sep  7 20:16:56 friendsofhawaii sshd\[1497\]: Invalid user dbuser from 216.144.251.86
Sep  7 20:16:56 friendsofhawaii sshd\[1497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.144.251.86
2019-09-08 14:30:45
47.91.90.132 attack
Sep  8 07:15:53 mail sshd\[3038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.91.90.132  user=root
Sep  8 07:15:54 mail sshd\[3038\]: Failed password for root from 47.91.90.132 port 36194 ssh2
Sep  8 07:20:25 mail sshd\[3073\]: Invalid user alex from 47.91.90.132
Sep  8 07:20:25 mail sshd\[3073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.91.90.132
...
2019-09-08 14:39:51
36.66.203.251 attack
2019-09-06T03:31:48.893386WS-Zach sshd[20362]: Invalid user vagrant from 36.66.203.251 port 53030
2019-09-06T03:31:48.896631WS-Zach sshd[20362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.66.203.251
2019-09-06T03:31:48.893386WS-Zach sshd[20362]: Invalid user vagrant from 36.66.203.251 port 53030
2019-09-06T03:31:51.151545WS-Zach sshd[20362]: Failed password for invalid user vagrant from 36.66.203.251 port 53030 ssh2
2019-09-06T03:49:10.070609WS-Zach sshd[28687]: Invalid user cloud from 36.66.203.251 port 41602
2019-09-06T03:49:10.073984WS-Zach sshd[28687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.66.203.251
2019-09-06T03:49:10.070609WS-Zach sshd[28687]: Invalid user cloud from 36.66.203.251 port 41602
2019-09-06T03:49:11.707003WS-Zach sshd[28687]: Failed password for invalid user cloud from 36.66.203.251 port 41602 ssh2
2019-09-06T03:54:31.406146WS-Zach sshd[31339]: Invalid user devel from 36.66.203.251 port 5594
2019-09-08 14:18:20
174.44.140.83 attackspam
Automatic report - Port Scan Attack
2019-09-08 14:49:24

最近上报的IP列表

211.179.76.9 34.87.24.125 185.40.15.247 142.93.218.34
202.52.52.94 200.194.28.159 184.186.75.132 103.61.39.106
174.142.90.14 52.14.33.15 83.149.128.234 23.244.43.2
213.215.82.36 195.138.72.83 167.71.4.130 160.106.238.48
185.40.12.193 83.22.197.253 207.180.196.57 174.139.98.234