170.245.68.13 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Brazil

运营商(isp): Interfibras Telecomunicacoes Ltda

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt from IP address 170.245.68.13 on Port 445(SMB)	2020-07-13 06:27:22

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 170.245.68.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21512
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;170.245.68.13.			IN	A

;; AUTHORITY SECTION:
.			330	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071201 1800 900 604800 86400

;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jul 13 06:27:19 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

13.68.245.170.in-addr.arpa domain name pointer 170-245-68-13.interfibras.com.br.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
13.68.245.170.in-addr.arpa	name = 170-245-68-13.interfibras.com.br.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
185.212.170.184	attackbotsspam	B: Magento admin pass test (wrong country)	2019-09-29 02:34:55
177.125.164.225	attackbots	Sep 28 19:50:34 nextcloud sshd\[6799\]: Invalid user adriaan from 177.125.164.225 Sep 28 19:50:34 nextcloud sshd\[6799\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.125.164.225 Sep 28 19:50:36 nextcloud sshd\[6799\]: Failed password for invalid user adriaan from 177.125.164.225 port 37090 ssh2 ...	2019-09-29 02:09:48
92.223.159.3	attackspam	Sep 28 17:52:14 XXXXXX sshd[54223]: Invalid user zou from 92.223.159.3 port 46994	2019-09-29 02:37:37
67.215.225.107	attackspam	From: "Domain Services" (FRAUD DOMAIN REGISTRAR)	2019-09-29 02:24:29
159.203.139.128	attackbots	Sep 28 15:29:47 MK-Soft-VM3 sshd[14467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128 Sep 28 15:29:48 MK-Soft-VM3 sshd[14467]: Failed password for invalid user amavis from 159.203.139.128 port 41848 ssh2 ...	2019-09-29 02:38:25
134.209.51.46	attackspam	$f2bV_matches	2019-09-29 02:15:51
220.98.204.169	attackspam	(Sep 28) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=43873 TCP DPT=8080 WINDOW=24010 SYN (Sep 28) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=19394 TCP DPT=8080 WINDOW=24010 SYN (Sep 28) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=34201 TCP DPT=8080 WINDOW=24010 SYN (Sep 27) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=24538 TCP DPT=8080 WINDOW=24010 SYN (Sep 26) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=4851 TCP DPT=8080 WINDOW=24010 SYN (Sep 26) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=44401 TCP DPT=8080 WINDOW=24010 SYN (Sep 24) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=21881 TCP DPT=8080 WINDOW=24010 SYN (Sep 24) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=63692 TCP DPT=8080 WINDOW=24010 SYN (Sep 23) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=44808 TCP DPT=8080 WINDOW=24010 SYN (Sep 23) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=4947 TCP DPT=8080 WINDOW=24010 SYN	2019-09-29 02:23:14
180.120.120.80	attackspam	Sep 28 17:51:19 localhost postfix/smtpd\[16927\]: warning: unknown\[180.120.120.80\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 28 17:51:28 localhost postfix/smtpd\[16924\]: warning: unknown\[180.120.120.80\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 28 17:51:42 localhost postfix/smtpd\[16927\]: warning: unknown\[180.120.120.80\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 28 17:51:59 localhost postfix/smtpd\[16927\]: warning: unknown\[180.120.120.80\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 28 17:52:08 localhost postfix/smtpd\[16924\]: warning: unknown\[180.120.120.80\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-09-29 02:43:38
183.207.181.138	attackspambots	Sep 28 19:34:29 vps647732 sshd[30606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.207.181.138 Sep 28 19:34:31 vps647732 sshd[30606]: Failed password for invalid user system from 183.207.181.138 port 47285 ssh2 ...	2019-09-29 02:32:43
111.125.142.50	attackspambots	Unauthorized connection attempt from IP address 111.125.142.50 on Port 445(SMB)	2019-09-29 02:06:32
199.116.78.161	attackbots	WordPress XMLRPC scan :: 199.116.78.161 0.136 BYPASS [28/Sep/2019:22:29:57 1000] [censored_1] "POST /xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-09-29 02:11:31
126.121.28.221	attack	Unauthorised access (Sep 28) SRC=126.121.28.221 LEN=52 TTL=115 ID=17820 DF TCP DPT=445 WINDOW=8192 SYN	2019-09-29 02:05:40
71.6.167.142	attack	09/28/2019-13:07:26.577348 71.6.167.142 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 71	2019-09-29 02:42:01
116.212.149.78	attackbotsspam	postfix (unknown user, SPF fail or relay access denied)	2019-09-29 02:08:24
193.32.163.182	attackspambots	SSH Bruteforce attempt	2019-09-29 02:12:48

最近上报的IP列表

211.188.137.10	150.246.20.209	206.53.27.96	104.40.116.184
104.69.213.248	197.195.188.224	205.182.231.189	229.224.26.247
59.126.22.116	112.215.244.109	217.147.175.42	49.232.101.33
181.49.112.174	45.187.192.1	103.243.246.234	63.176.3.184
173.252.28.111	89.114.4.214	77.210.233.150	206.189.155.25