145.249.106.140

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands

运营商(isp): IP Broker Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Jan 4 05:57:13 srv206 sshd[4178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.249.106.140 user=root Jan 4 05:57:15 srv206 sshd[4178]: Failed password for root from 145.249.106.140 port 56628 ssh2 ...	2020-01-04 13:00:37

类型

评论内容

时间

attackbots

Jan  4 05:57:13 srv206 sshd[4178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.249.106.140  user=root
Jan  4 05:57:15 srv206 sshd[4178]: Failed password for root from 145.249.106.140 port 56628 ssh2
...

2020-01-04 13:00:37

相同子网IP讨论:

IP	类型	评论内容	时间
145.249.106.130	attack	Brute force blocker - service: exim2 - aantal: 25 - Wed Sep 5 22:00:12 2018	2020-09-26 05:03:12
145.249.106.130	attackspambots	Brute force blocker - service: exim2 - aantal: 25 - Wed Sep 5 22:00:12 2018	2020-09-25 13:35:24
145.249.106.177	attackspam	firewall-block, port(s): 5900/tcp	2019-09-04 03:31:06
145.249.106.238	attackspambots	pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.249.106.238 user=root Failed password for root from 145.249.106.238 port 33198 ssh2 Invalid user ubuntu from 145.249.106.238 port 58572 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.249.106.238 Failed password for invalid user ubuntu from 145.249.106.238 port 58572 ssh2	2019-07-22 16:00:17

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.249.106.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35763
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;145.249.106.140.		IN	A

;; AUTHORITY SECTION:
.			358	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010301 1800 900 604800 86400

;; Query time: 94 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 04 13:00:32 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

Host 140.106.249.145.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		100.100.2.136
Address:	100.100.2.136#53

** server can't find 140.106.249.145.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
192.35.169.20	attackbotsspam	TCP (SYN) 192.35.169.20:64085 -> port 110, len 44	2020-09-28 04:08:20
177.220.189.111	attackbotsspam	177.220.189.111 (BR/Brazil/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 27 10:00:15 server2 sshd[30187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.86.209.129 user=root Sep 27 09:59:33 server2 sshd[29623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.153.79 user=root Sep 27 09:59:51 server2 sshd[29764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.220.189.111 user=root Sep 27 09:59:53 server2 sshd[29764]: Failed password for root from 177.220.189.111 port 12359 ssh2 Sep 27 09:59:36 server2 sshd[29623]: Failed password for root from 140.143.153.79 port 33642 ssh2 Sep 27 09:58:53 server2 sshd[29242]: Failed password for root from 51.75.206.42 port 38452 ssh2 IP Addresses Blocked: 40.86.209.129 (CA/Canada/-) 140.143.153.79 (CN/China/-)	2020-09-28 04:01:10
78.47.99.110	attackspambots	Sep 27 20:16:31 vpn01 sshd[20607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.47.99.110 Sep 27 20:16:33 vpn01 sshd[20607]: Failed password for invalid user user5 from 78.47.99.110 port 42624 ssh2 ...	2020-09-28 03:38:38
61.54.249.194	attack	Port probing on unauthorized port 23	2020-09-28 03:36:18
118.89.245.202	attackbots	$f2bV_matches	2020-09-28 04:06:30
113.233.126.93	attack	TCP (SYN) 113.233.126.93:45158 -> port 23, len 44	2020-09-28 03:37:29
130.185.155.34	attackbots	Sep 27 07:27:04 mail sshd\[38261\]: Invalid user nuxeo from 130.185.155.34 Sep 27 07:27:04 mail sshd\[38261\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.185.155.34 ...	2020-09-28 03:51:26
165.227.140.82	attackspambots	Sep 26 22:33:17 prod4 sshd\[7768\]: Invalid user ubnt from 165.227.140.82 Sep 26 22:33:19 prod4 sshd\[7768\]: Failed password for invalid user ubnt from 165.227.140.82 port 58550 ssh2 Sep 26 22:33:19 prod4 sshd\[7770\]: Invalid user admin from 165.227.140.82 ...	2020-09-28 03:48:26
216.218.206.124	attackbotsspam	TCP (SYN) 216.218.206.124:52305 -> port 5900, len 44	2020-09-28 03:58:21
45.132.244.143	attackbotsspam	2020-09-26T15:18:39.920514morrigan.ad5gb.com sshd[757474]: Failed password for invalid user core from 45.132.244.143 port 42004 ssh2	2020-09-28 03:54:05
106.52.64.125	attack	Sep 27 17:41:37 sso sshd[31742]: Failed password for root from 106.52.64.125 port 53308 ssh2 ...	2020-09-28 03:57:04
202.155.228.207	attackbots	Sep 27 20:39:58 ourumov-web sshd\[7405\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.155.228.207 user=root Sep 27 20:40:00 ourumov-web sshd\[7405\]: Failed password for root from 202.155.228.207 port 45950 ssh2 Sep 27 20:55:30 ourumov-web sshd\[8392\]: Invalid user jim from 202.155.228.207 port 43664 ...	2020-09-28 03:42:14
138.91.127.33	attackbotsspam	Invalid user 225 from 138.91.127.33 port 39501	2020-09-28 03:45:19
192.35.169.37	attackbots	Found on CINS badguys / proto=6 . srcport=60037 . dstport=3113 . (915)	2020-09-28 03:59:07
192.241.234.43	attackspambots	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-09-28 04:06:04

最近上报的IP列表

41.233.191.51	169.201.119.6	81.180.249.85	93.29.128.251
185.227.42.94	46.232.2.252	12.69.128.211	51.75.250.10
128.69.80.236	164.122.197.115	138.68.65.238	32.24.149.170
18.242.18.4	12.104.48.107	128.75.241.49	122.80.88.34
8.151.35.22	177.61.191.92	174.167.2.7	59.144.74.169