必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Amsterdam

省份(region): North Holland

国家(country): Netherlands

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
145.249.105.226 attackspambots
Brute force blocker - service: dovecot1, exim2 - aantal: 25 - Sun Jan  6 08:00:10 2019
2020-02-07 07:27:18
145.249.105.146 attackbots
Brute force blocker - service: dovecot1 - aantal: 25 - Sun Jan  6 11:55:08 2019
2020-02-07 07:25:12
145.249.105.204 attack
...
2020-02-02 01:17:50
145.249.105.204 attackspam
Bruteforce on SSH Honeypot
2019-12-08 16:13:09
145.249.105.204 attackspambots
Nov 28 19:09:27 ncomp sshd[32370]: Invalid user mongodb from 145.249.105.204
Nov 28 19:09:27 ncomp sshd[32370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.249.105.204
Nov 28 19:09:27 ncomp sshd[32370]: Invalid user mongodb from 145.249.105.204
Nov 28 19:09:30 ncomp sshd[32370]: Failed password for invalid user mongodb from 145.249.105.204 port 60158 ssh2
2019-11-29 02:20:29
145.249.105.204 attackbotsspam
Nov 26 11:50:23 vpn01 sshd[29063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.249.105.204
Nov 26 11:50:26 vpn01 sshd[29063]: Failed password for invalid user storm from 145.249.105.204 port 40832 ssh2
...
2019-11-26 19:24:51
145.249.105.204 attackspam
Nov 26 06:55:24 ncomp sshd[8401]: Invalid user storm from 145.249.105.204
Nov 26 06:55:24 ncomp sshd[8401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.249.105.204
Nov 26 06:55:24 ncomp sshd[8401]: Invalid user storm from 145.249.105.204
Nov 26 06:55:25 ncomp sshd[8401]: Failed password for invalid user storm from 145.249.105.204 port 34912 ssh2
2019-11-26 13:04:27
145.249.105.204 attack
Invalid user test from 145.249.105.204 port 36780
2019-11-20 05:13:41
145.249.105.204 attackspam
Invalid user test from 145.249.105.204 port 36780
2019-11-18 08:03:17
145.249.105.204 attackbotsspam
Nov 16 12:45:22 ArkNodeAT sshd\[1900\]: Invalid user plex from 145.249.105.204
Nov 16 12:45:22 ArkNodeAT sshd\[1900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.249.105.204
Nov 16 12:45:24 ArkNodeAT sshd\[1900\]: Failed password for invalid user plex from 145.249.105.204 port 44900 ssh2
2019-11-16 20:10:53
145.249.105.204 attackspam
Invalid user oracle from 145.249.105.204 port 42680
2019-11-15 17:40:38
145.249.105.204 attack
Nov 13 08:14:09 srv01 sshd[2839]: Invalid user oracle from 145.249.105.204
Nov 13 08:14:09 srv01 sshd[2839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.249.105.204
Nov 13 08:14:09 srv01 sshd[2839]: Invalid user oracle from 145.249.105.204
Nov 13 08:14:11 srv01 sshd[2839]: Failed password for invalid user oracle from 145.249.105.204 port 55354 ssh2
Nov 13 08:14:09 srv01 sshd[2839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.249.105.204
Nov 13 08:14:09 srv01 sshd[2839]: Invalid user oracle from 145.249.105.204
Nov 13 08:14:11 srv01 sshd[2839]: Failed password for invalid user oracle from 145.249.105.204 port 55354 ssh2
...
2019-11-13 15:49:40
145.249.105.204 attack
Nov 11 08:47:02 ArkNodeAT sshd\[17532\]: Invalid user oracle from 145.249.105.204
Nov 11 08:47:02 ArkNodeAT sshd\[17532\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.249.105.204
Nov 11 08:47:04 ArkNodeAT sshd\[17532\]: Failed password for invalid user oracle from 145.249.105.204 port 35678 ssh2
2019-11-11 16:07:41
145.249.105.204 attackspam
Oct 30 16:15:06 andromeda sshd\[23275\]: Invalid user ubuntu from 145.249.105.204 port 34938
Oct 30 16:15:06 andromeda sshd\[23275\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.249.105.204
Oct 30 16:15:08 andromeda sshd\[23275\]: Failed password for invalid user ubuntu from 145.249.105.204 port 34938 ssh2
2019-10-31 03:22:23
145.249.105.204 attackbots
Oct 29 00:34:52 serwer sshd\[8967\]: Invalid user ubuntu from 145.249.105.204 port 60662
Oct 29 00:34:52 serwer sshd\[8967\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.249.105.204
Oct 29 00:34:55 serwer sshd\[8967\]: Failed password for invalid user ubuntu from 145.249.105.204 port 60662 ssh2
...
2019-10-29 07:53:30
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.249.105.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11515
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;145.249.105.5.			IN	A

;; AUTHORITY SECTION:
.			313	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020601 1800 900 604800 86400

;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 04:57:38 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 5.105.249.145.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 5.105.249.145.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
200.27.131.51 attack
Unauthorized connection attempt from IP address 200.27.131.51 on Port 445(SMB)
2020-04-13 18:01:37
107.180.92.3 attackspam
Apr 13 11:09:40 eventyay sshd[15922]: Failed password for root from 107.180.92.3 port 45041 ssh2
Apr 13 11:12:24 eventyay sshd[16042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.180.92.3
Apr 13 11:12:26 eventyay sshd[16042]: Failed password for invalid user loy from 107.180.92.3 port 37084 ssh2
...
2020-04-13 18:19:55
88.250.115.38 attackbots
Automatic report - Port Scan Attack
2020-04-13 18:02:42
112.85.42.176 attackbots
Apr 13 06:02:38 NPSTNNYC01T sshd[25097]: Failed password for root from 112.85.42.176 port 15651 ssh2
Apr 13 06:02:41 NPSTNNYC01T sshd[25097]: Failed password for root from 112.85.42.176 port 15651 ssh2
Apr 13 06:02:45 NPSTNNYC01T sshd[25097]: Failed password for root from 112.85.42.176 port 15651 ssh2
Apr 13 06:02:47 NPSTNNYC01T sshd[25097]: Failed password for root from 112.85.42.176 port 15651 ssh2
...
2020-04-13 18:14:06
113.107.139.68 attackspambots
[portscan] tcp/3389 [MS RDP]
*(RWIN=1024)(04131106)
2020-04-13 18:24:29
94.159.26.6 attackspambots
Unauthorized connection attempt from IP address 94.159.26.6 on Port 445(SMB)
2020-04-13 18:17:37
49.145.197.11 attackspambots
Unauthorized connection attempt from IP address 49.145.197.11 on Port 445(SMB)
2020-04-13 18:07:38
218.92.0.171 attack
v+ssh-bruteforce
2020-04-13 18:04:53
200.29.106.65 attackspambots
Apr 13 12:20:44 pkdns2 sshd\[28038\]: Failed password for root from 200.29.106.65 port 54338 ssh2Apr 13 12:20:47 pkdns2 sshd\[28041\]: Invalid user shit from 200.29.106.65Apr 13 12:20:49 pkdns2 sshd\[28041\]: Failed password for invalid user shit from 200.29.106.65 port 54876 ssh2Apr 13 12:20:53 pkdns2 sshd\[28043\]: Failed password for root from 200.29.106.65 port 55512 ssh2Apr 13 12:20:57 pkdns2 sshd\[28046\]: Failed password for root from 200.29.106.65 port 56008 ssh2Apr 13 12:21:02 pkdns2 sshd\[28051\]: Failed password for root from 200.29.106.65 port 56554 ssh2
...
2020-04-13 17:58:14
62.4.54.158 attack
Apr 13 09:23:49 mail.srvfarm.net postfix/smtpd[775967]: NOQUEUE: reject: RCPT from unknown[62.4.54.158]: 554 5.7.1 Service unavailable; Client host [62.4.54.158] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?62.4.54.158; from= to= proto=ESMTP helo=
Apr 13 09:23:50 mail.srvfarm.net postfix/smtpd[775967]: NOQUEUE: reject: RCPT from unknown[62.4.54.158]: 554 5.7.1 Service unavailable; Client host [62.4.54.158] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?62.4.54.158; from= to= proto=ESMTP helo=
Apr 13 09:23:50 mail.srvfarm.net postfix/smtpd[775967]: NOQUEUE: reject: RCPT from unknown[62.4.54.158]: 554 5.7.1 Service unavailable; Client host [62.4.54.158] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?62.4.54.158; from= to= proto=ESMTP helo=
Apr 13 09:23:5
2020-04-13 18:16:58
14.177.64.234 attackspam
Unauthorized connection attempt from IP address 14.177.64.234 on Port 445(SMB)
2020-04-13 17:50:28
178.165.99.155 attackspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-04-13 17:55:40
201.236.143.243 attackspam
Lines containing failures of 201.236.143.243
Apr 13 10:38:22 shared03 postfix/smtpd[14216]: connect from unknown[201.236.143.243]
Apr x@x
Apr x@x
Apr x@x
Apr x@x
Apr x@x
Apr x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=201.236.143.243
2020-04-13 17:57:54
2.186.112.66 attackspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-04-13 18:04:31
212.73.150.142 attack
SSH login attempts with user root.
2020-04-13 18:07:56

最近上报的IP列表

189.249.134.110 163.142.20.235 184.195.149.59 112.16.32.41
182.30.135.245 129.128.227.230 12.19.2.199 204.111.67.169
114.239.105.164 108.129.106.227 193.110.196.85 114.236.237.109
111.207.16.62 166.5.41.116 37.79.179.38 99.48.110.34
68.10.190.238 179.52.205.217 122.183.224.158 89.219.13.222