145.255.180.140

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Kazakhstan

运营商(isp): JSC Kazakhtelecom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	2020-05-23 22:35:54.015681-0500 localhost smtpd[89054]: NOQUEUE: reject: RCPT from unknown[145.255.180.140]: 554 5.7.1 Service unavailable; Client host [145.255.180.140] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/145.255.180.140; from= to= proto=ESMTP helo=<[145.255.180.140]>	2020-05-24 17:35:11

类型

评论内容

时间

attackbots

2020-05-23 22:35:54.015681-0500  localhost smtpd[89054]: NOQUEUE: reject: RCPT from unknown[145.255.180.140]: 554 5.7.1 Service unavailable; Client host [145.255.180.140] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/145.255.180.140; from= to= proto=ESMTP helo=<[145.255.180.140]>

2020-05-24 17:35:11

相同子网IP讨论:

IP	类型	评论内容	时间
145.255.180.214	attackbots	Brute force attempt	2019-10-23 00:01:54

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.255.180.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20158
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;145.255.180.140.		IN	A

;; AUTHORITY SECTION:
.			588	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052400 1800 900 604800 86400

;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 24 17:35:08 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

Host 140.180.255.145.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 140.180.255.145.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
196.41.123.141	attackspam	Scanning and Vuln Attempts	2019-09-25 15:15:13
178.33.233.54	attackbots	Sep 25 05:13:26 localhost sshd\[19882\]: Invalid user git from 178.33.233.54 port 53022 Sep 25 05:13:26 localhost sshd\[19882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.233.54 Sep 25 05:13:28 localhost sshd\[19882\]: Failed password for invalid user git from 178.33.233.54 port 53022 ssh2 ...	2019-09-25 15:13:10
198.12.149.7	attack	B: /wp-login.php attack	2019-09-25 15:05:43
222.186.175.148	attackbots	v+ssh-bruteforce	2019-09-25 14:47:00
202.254.234.103	attack	Scanning and Vuln Attempts	2019-09-25 14:48:48
157.50.9.124	attackbots	C1,WP GET /wp-login.php	2019-09-25 15:01:09
51.254.57.17	attackspam	Automatic report - Banned IP Access	2019-09-25 14:40:59
195.154.182.205	attackbotsspam	Sep 24 19:11:48 hanapaa sshd\[25901\]: Invalid user Passw0rd44 from 195.154.182.205 Sep 24 19:11:48 hanapaa sshd\[25901\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195-154-182-205.rev.poneytelecom.eu Sep 24 19:11:50 hanapaa sshd\[25901\]: Failed password for invalid user Passw0rd44 from 195.154.182.205 port 29265 ssh2 Sep 24 19:16:29 hanapaa sshd\[26318\]: Invalid user 123456 from 195.154.182.205 Sep 24 19:16:29 hanapaa sshd\[26318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195-154-182-205.rev.poneytelecom.eu	2019-09-25 14:54:07
106.13.46.114	attackbotsspam	Sep 25 07:06:47 www1 sshd\[1860\]: Invalid user tms from 106.13.46.114Sep 25 07:06:49 www1 sshd\[1860\]: Failed password for invalid user tms from 106.13.46.114 port 49124 ssh2Sep 25 07:10:14 www1 sshd\[2322\]: Invalid user oracle from 106.13.46.114Sep 25 07:10:16 www1 sshd\[2322\]: Failed password for invalid user oracle from 106.13.46.114 port 46572 ssh2Sep 25 07:13:43 www1 sshd\[2616\]: Invalid user hadoop from 106.13.46.114Sep 25 07:13:45 www1 sshd\[2616\]: Failed password for invalid user hadoop from 106.13.46.114 port 44024 ssh2 ...	2019-09-25 14:36:09
157.230.140.180	attackspambots	2019-09-25T00:43:55.5438651495-001 sshd\[24013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.140.180 2019-09-25T00:43:57.3723021495-001 sshd\[24013\]: Failed password for invalid user ubnt from 157.230.140.180 port 38926 ssh2 2019-09-25T00:55:53.3653901495-001 sshd\[24839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.140.180 user=operator 2019-09-25T00:55:56.0985351495-001 sshd\[24839\]: Failed password for operator from 157.230.140.180 port 49698 ssh2 2019-09-25T01:07:51.4436401495-001 sshd\[25735\]: Invalid user csilla from 157.230.140.180 port 60500 2019-09-25T01:07:51.4534941495-001 sshd\[25735\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.140.180 ...	2019-09-25 14:57:20
188.254.0.182	attack	Sep 25 06:49:29 mail1 sshd\[17241\]: Invalid user benny from 188.254.0.182 port 58704 Sep 25 06:49:29 mail1 sshd\[17241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.182 Sep 25 06:49:32 mail1 sshd\[17241\]: Failed password for invalid user benny from 188.254.0.182 port 58704 ssh2 Sep 25 07:07:15 mail1 sshd\[25649\]: Invalid user drive from 188.254.0.182 port 56050 Sep 25 07:07:15 mail1 sshd\[25649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.182 ...	2019-09-25 15:01:28
211.97.19.8	attack	Unauthorised access (Sep 25) SRC=211.97.19.8 LEN=40 TTL=49 ID=1438 TCP DPT=8080 WINDOW=14996 SYN	2019-09-25 14:54:41
92.222.84.34	attack	2019-09-25T05:58:59.800290abusebot-7.cloudsearch.cf sshd\[9383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.ip-92-222-84.eu user=ftp	2019-09-25 15:12:44
51.68.178.85	attackbots	Sep 25 09:09:28 localhost sshd\[28134\]: Invalid user apache from 51.68.178.85 port 34646 Sep 25 09:09:28 localhost sshd\[28134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.178.85 Sep 25 09:09:30 localhost sshd\[28134\]: Failed password for invalid user apache from 51.68.178.85 port 34646 ssh2	2019-09-25 15:10:21
185.176.27.42	attackspambots	09/25/2019-08:29:49.220542 185.176.27.42 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-09-25 14:34:02

最近上报的IP列表

30.230.166.78	106.12.27.65	211.210.217.192	233.56.155.101
238.184.44.133	179.210.61.153	200.76.148.99	183.56.242.12
192.144.226.241	24.103.5.42	135.204.52.234	27.217.249.193
122.154.40.85	249.160.162.65	50.111.30.3	62.183.146.33
60.191.141.80	175.164.159.87	27.115.238.212	13.229.118.228