157.245.145.211

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Dec 15 23:48:55 kapalua sshd\[910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.145.211 user=backup Dec 15 23:48:57 kapalua sshd\[910\]: Failed password for backup from 157.245.145.211 port 39268 ssh2 Dec 15 23:55:24 kapalua sshd\[1750\]: Invalid user alfonzo from 157.245.145.211 Dec 15 23:55:24 kapalua sshd\[1750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.145.211 Dec 15 23:55:26 kapalua sshd\[1750\]: Failed password for invalid user alfonzo from 157.245.145.211 port 47290 ssh2	2019-12-16 20:29:00

类型

评论内容

时间

attackbotsspam

Dec 15 23:48:55 kapalua sshd\[910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.145.211  user=backup
Dec 15 23:48:57 kapalua sshd\[910\]: Failed password for backup from 157.245.145.211 port 39268 ssh2
Dec 15 23:55:24 kapalua sshd\[1750\]: Invalid user alfonzo from 157.245.145.211
Dec 15 23:55:24 kapalua sshd\[1750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.145.211
Dec 15 23:55:26 kapalua sshd\[1750\]: Failed password for invalid user alfonzo from 157.245.145.211 port 47290 ssh2

2019-12-16 20:29:00

相同子网IP讨论:

IP	类型	评论内容	时间
157.245.145.40	attackspam	Unauthorized connection attempt detected from IP address 157.245.145.40 to port 2220 [J]	2020-01-24 20:16:43
157.245.145.243	attackbotsspam	Invalid user cloudtest from 157.245.145.243 port 56034	2019-10-31 01:38:16

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.145.211
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7410
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;157.245.145.211.		IN	A

;; AUTHORITY SECTION:
.			462	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121600 1800 900 604800 86400

;; Query time: 177 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 16 20:28:55 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

Host 211.145.245.157.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 211.145.245.157.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
153.122.75.216	attackbotsspam	WordPress wp-login brute force :: 153.122.75.216 0.048 BYPASS [23/Sep/2019:07:00:41 1000] [censored_4] "POST /wp-login.php HTTP/1.1" 200 3989 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-09-23 09:27:45
95.58.194.141	attack	Reported by AbuseIPDB proxy server.	2019-09-23 09:17:51
114.37.80.164	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 22-09-2019 22:00:36.	2019-09-23 09:30:14
77.247.110.213	attackspambots	1 pkts, ports: UDP:5060	2019-09-23 09:16:17
106.75.141.160	attack	Sep 23 05:55:03 markkoudstaal sshd[15774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160 Sep 23 05:55:05 markkoudstaal sshd[15774]: Failed password for invalid user olivia from 106.75.141.160 port 60364 ssh2 Sep 23 05:58:46 markkoudstaal sshd[16150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160	2019-09-23 12:11:27
142.93.240.79	attack	Sep 22 20:10:59 XXXXXX sshd[64341]: Invalid user csgo-server from 142.93.240.79 port 56726	2019-09-23 09:11:49
14.169.198.120	attack	Chat Spam	2019-09-23 09:14:00
222.186.30.152	attackspambots	Sep 23 05:58:40 server sshd[55293]: Failed password for root from 222.186.30.152 port 10178 ssh2 Sep 23 05:58:44 server sshd[55293]: Failed password for root from 222.186.30.152 port 10178 ssh2 Sep 23 05:58:47 server sshd[55293]: Failed password for root from 222.186.30.152 port 10178 ssh2	2019-09-23 12:09:31
92.44.163.171	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/92.44.163.171/ TR - 1H : (73) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TR NAME ASN : ASN34984 IP : 92.44.163.171 CIDR : 92.44.163.0/24 PREFIX COUNT : 2324 UNIQUE IP COUNT : 1397504 WYKRYTE ATAKI Z ASN34984 : 1H - 2 3H - 3 6H - 3 12H - 4 24H - 6 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery	2019-09-23 12:00:02
106.12.126.42	attackbots	Sep 23 05:54:06 markkoudstaal sshd[15690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.126.42 Sep 23 05:54:08 markkoudstaal sshd[15690]: Failed password for invalid user arkserver from 106.12.126.42 port 60240 ssh2 Sep 23 05:58:57 markkoudstaal sshd[16176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.126.42	2019-09-23 12:03:45
179.6.198.67	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 22-09-2019 22:00:43.	2019-09-23 09:16:53
185.176.27.54	attackspam	09/23/2019-02:56:33.975424 185.176.27.54 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-09-23 09:18:32
125.166.189.197	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 22-09-2019 22:00:41.	2019-09-23 09:20:35
193.32.160.140	attackspambots	2019-09-22 22:58:37 H=([193.32.160.145]) [193.32.160.140]:22336 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed 2019-09-22 22:58:37 H=([193.32.160.145]) [193.32.160.140]:22336 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed 2019-09-22 22:58:37 H=([193.32.160.145]) [193.32.160.140]:22336 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed 2019-09-22 22:58:37 H=([193.32.160.145]) [193.32.160.140]:22336 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed 2019-09-22 22:58:37 H=([193.32.160.145]) [193.32.160.140]:22336 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed 2019-09-22 22:58:37 H=([193.32.160.145]) [193.32.160.140]:22336 I=[192.147.25.65]:25 F=	2019-09-23 12:17:20
190.207.136.35	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 22-09-2019 22:00:44.	2019-09-23 09:14:57

最近上报的IP列表

49.67.144.154	40.92.9.46	71.161.201.53	73.19.194.3
43.195.95.90	112.195.198.104	13.230.96.121	211.224.179.37
36.78.215.30	100.72.121.250	81.232.136.51	103.127.67.194
92.41.229.118	120.244.238.188	84.48.9.252	123.16.133.181
110.138.149.79	95.78.171.17	157.33.16.244	203.173.114.184