145.249.106.140

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands

运营商(isp): IP Broker Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Jan 4 05:57:13 srv206 sshd[4178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.249.106.140 user=root Jan 4 05:57:15 srv206 sshd[4178]: Failed password for root from 145.249.106.140 port 56628 ssh2 ...	2020-01-04 13:00:37

类型

评论内容

时间

attackbots

Jan  4 05:57:13 srv206 sshd[4178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.249.106.140  user=root
Jan  4 05:57:15 srv206 sshd[4178]: Failed password for root from 145.249.106.140 port 56628 ssh2
...

2020-01-04 13:00:37

相同子网IP讨论:

IP	类型	评论内容	时间
145.249.106.130	attack	Brute force blocker - service: exim2 - aantal: 25 - Wed Sep 5 22:00:12 2018	2020-09-26 05:03:12
145.249.106.130	attackspambots	Brute force blocker - service: exim2 - aantal: 25 - Wed Sep 5 22:00:12 2018	2020-09-25 13:35:24
145.249.106.177	attackspam	firewall-block, port(s): 5900/tcp	2019-09-04 03:31:06
145.249.106.238	attackspambots	pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.249.106.238 user=root Failed password for root from 145.249.106.238 port 33198 ssh2 Invalid user ubuntu from 145.249.106.238 port 58572 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.249.106.238 Failed password for invalid user ubuntu from 145.249.106.238 port 58572 ssh2	2019-07-22 16:00:17

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.249.106.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35763
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;145.249.106.140.		IN	A

;; AUTHORITY SECTION:
.			358	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010301 1800 900 604800 86400

;; Query time: 94 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 04 13:00:32 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

Host 140.106.249.145.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		100.100.2.136
Address:	100.100.2.136#53

** server can't find 140.106.249.145.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
200.30.217.218	attackbots	php WP PHPmyadamin ABUSE blocked for 12h	2020-08-31 17:01:22
191.234.176.158	attackspambots	191.234.176.158 - - [31/Aug/2020:09:47:21 +0100] "POST /wp-login.php HTTP/1.1" 200 1965 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 191.234.176.158 - - [31/Aug/2020:09:47:23 +0100] "POST /wp-login.php HTTP/1.1" 200 1968 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 191.234.176.158 - - [31/Aug/2020:09:47:24 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-31 17:06:37
189.174.81.45	attack	Automatic report - Port Scan Attack	2020-08-31 16:55:42
67.205.139.102	attackspambots	Unauthorized connection attempt detected from IP address 67.205.139.102 to port 23 [T]	2020-08-31 17:18:41
27.71.106.172	attackbotsspam	27.71.106.172 - - [31/Aug/2020:06:28:03 +0100] "POST /xmlrpc.php HTTP/1.1" 404 191 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 27.71.106.172 - - [31/Aug/2020:06:28:23 +0100] "POST /wordpress/xmlrpc.php HTTP/1.1" 404 191 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 27.71.106.172 - - [31/Aug/2020:06:28:24 +0100] "POST /blog/xmlrpc.php HTTP/1.1" 404 191 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" ...	2020-08-31 16:52:46
180.76.107.10	attackbotsspam	Invalid user zhangfan from 180.76.107.10 port 45526	2020-08-31 17:33:56
123.30.249.49	attackspambots	Aug 31 07:52:49 buvik sshd[20511]: Failed password for invalid user qwt from 123.30.249.49 port 52017 ssh2 Aug 31 07:57:35 buvik sshd[21070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.249.49 user=root Aug 31 07:57:37 buvik sshd[21070]: Failed password for root from 123.30.249.49 port 56101 ssh2 ...	2020-08-31 17:32:34
112.85.42.94	attack	2020-08-31T04:37:10.405669xentho-1 sshd[325145]: Failed password for root from 112.85.42.94 port 30462 ssh2 2020-08-31T04:37:08.002242xentho-1 sshd[325145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.94 user=root 2020-08-31T04:37:10.405669xentho-1 sshd[325145]: Failed password for root from 112.85.42.94 port 30462 ssh2 2020-08-31T04:37:13.065217xentho-1 sshd[325145]: Failed password for root from 112.85.42.94 port 30462 ssh2 2020-08-31T04:37:08.002242xentho-1 sshd[325145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.94 user=root 2020-08-31T04:37:10.405669xentho-1 sshd[325145]: Failed password for root from 112.85.42.94 port 30462 ssh2 2020-08-31T04:37:13.065217xentho-1 sshd[325145]: Failed password for root from 112.85.42.94 port 30462 ssh2 2020-08-31T04:37:16.969553xentho-1 sshd[325145]: Failed password for root from 112.85.42.94 port 30462 ssh2 2020-08-31T04:38:46.567462xent ...	2020-08-31 17:11:20
49.146.34.10	attack	xmlrpc attack	2020-08-31 17:19:41
49.235.164.107	attack	Aug 31 07:39:03 pve1 sshd[7813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.164.107 Aug 31 07:39:05 pve1 sshd[7813]: Failed password for invalid user csserver from 49.235.164.107 port 39740 ssh2 ...	2020-08-31 17:33:30
134.209.22.239	attack	" "	2020-08-31 17:07:10
87.229.237.126	attackspam	Unauthorized connection attempt detected from IP address 87.229.237.126 to port 10132 [T]	2020-08-31 17:17:02
192.3.199.170	attackbots	TCP (SYN) 192.3.199.170:50864 -> port 22, len 40	2020-08-31 17:08:58
123.108.35.186	attackbots	Aug 31 03:51:09 scw-focused-cartwright sshd[27908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.108.35.186 Aug 31 03:51:11 scw-focused-cartwright sshd[27908]: Failed password for invalid user oracle from 123.108.35.186 port 48252 ssh2	2020-08-31 17:27:50
210.22.78.74	attackspam	2020-08-31T06:52[Censored Hostname] sshd[10912]: Failed password for invalid user test1 from 210.22.78.74 port 16576 ssh2 2020-08-31T06:54[Censored Hostname] sshd[12314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.22.78.74 user=root 2020-08-31T06:54[Censored Hostname] sshd[12314]: Failed password for root from 210.22.78.74 port 29921 ssh2[...]	2020-08-31 17:06:25

最近上报的IP列表

41.233.191.51	169.201.119.6	81.180.249.85	93.29.128.251
185.227.42.94	46.232.2.252	12.69.128.211	51.75.250.10
128.69.80.236	164.122.197.115	138.68.65.238	32.24.149.170
18.242.18.4	12.104.48.107	128.75.241.49	122.80.88.34
8.151.35.22	177.61.191.92	174.167.2.7	59.144.74.169