197.245.4.142 - IPInfo

基本信息:

城市(city): Pretoria

省份(region): Gauteng

国家(country): South Africa

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
197.245.40.108	attackbotsspam	Unauthorized connection attempt from IP address 197.245.40.108 on Port 445(SMB)	2020-03-11 02:17:31
197.245.49.232	attackspam	Telnet/23 MH Probe, BF, Hack -	2019-12-26 21:49:56
197.245.40.233	attackbotsspam	IP: 197.245.40.233 ASN: AS11845 Vox-Telecom Port: IMAP over TLS protocol 993 Found in one or more Blacklists Date: 16/12/2019 6:27:09 AM UTC	2019-12-16 17:44:13

类型

评论内容

时间

197.245.40.108

attackbotsspam

Unauthorized connection attempt from IP address 197.245.40.108 on Port 445(SMB)

2020-03-11 02:17:31

197.245.49.232

attackspam

Telnet/23 MH Probe, BF, Hack -

2019-12-26 21:49:56

197.245.40.233

attackbotsspam

IP: 197.245.40.233
ASN: AS11845 Vox-Telecom
Port: IMAP over TLS protocol 993
Found in one or more Blacklists
Date: 16/12/2019 6:27:09 AM UTC

2019-12-16 17:44:13

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.245.4.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38870
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;197.245.4.142.			IN	A

;; AUTHORITY SECTION:
.			432	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031700 1800 900 604800 86400

;; Query time: 77 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 17 18:23:56 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

142.4.245.197.in-addr.arpa domain name pointer dsl-197-245-4-142.voxdsl.co.za.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.4.245.197.in-addr.arpa	name = dsl-197-245-4-142.voxdsl.co.za.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
124.105.173.17	attackspam	Jul 15 06:57:29 webhost01 sshd[20207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.105.173.17 Jul 15 06:57:31 webhost01 sshd[20207]: Failed password for invalid user alex from 124.105.173.17 port 58397 ssh2 ...	2020-07-15 08:23:51
37.187.12.126	attackbots	SSH Invalid Login	2020-07-15 08:45:28
13.71.21.123	attackspam	Jun 27 10:33:53 server sshd[9826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.21.123 Jun 27 10:33:56 server sshd[9826]: Failed password for invalid user apache2 from 13.71.21.123 port 1024 ssh2 Jun 27 10:48:07 server sshd[10729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.21.123 user=root Jun 27 10:48:09 server sshd[10729]: Failed password for invalid user root from 13.71.21.123 port 1024 ssh2	2020-07-15 08:20:53
202.83.56.111	attack	202.83.56.111 - - [14/Jul/2020:20:23:01 +0200] "POST /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 202.83.56.111 - - [14/Jul/2020:20:24:09 +0200] "POST /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" ...	2020-07-15 08:38:15
211.220.27.191	attackbotsspam	Jul 14 18:10:30 askasleikir sshd[4216]: Failed password for invalid user arakawa from 211.220.27.191 port 48644 ssh2 Jul 14 18:12:32 askasleikir sshd[4226]: Failed password for invalid user qfc from 211.220.27.191 port 40172 ssh2 Jul 14 18:11:32 askasleikir sshd[4219]: Failed password for invalid user zou from 211.220.27.191 port 58626 ssh2	2020-07-15 08:48:34
176.194.207.32	attackspam	1594751052 - 07/14/2020 20:24:12 Host: 176.194.207.32/176.194.207.32 Port: 445 TCP Blocked	2020-07-15 08:36:10
1.179.185.50	attack	SSH Invalid Login	2020-07-15 08:26:24
61.177.172.142	attackspam	Scanned 16 times in the last 24 hours on port 22	2020-07-15 08:30:26
78.173.131.97	attackbotsspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-07-15 08:31:05
112.85.42.176	attackspambots	Scanned 33 times in the last 24 hours on port 22	2020-07-15 08:29:41
93.174.93.25	attackbots	Jul 15 02:29:26 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.25, lip=185.118.197.126, session= Jul 15 02:29:57 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.25, lip=185.118.197.126, session= Jul 15 02:30:22 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.25, lip=185.118.197.126, session= Jul 15 02:31:00 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.25, lip=185.118.197.126, session= Jul 15 02:32:11 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.25, lip=	2020-07-15 08:44:54
162.243.128.133	attackspambots	Port Scan ...	2020-07-15 08:53:06
192.35.168.226	attackbots	TCP (SYN) 192.35.168.226:41822 -> port 9649, len 44	2020-07-15 08:39:09
120.53.24.160	attackbotsspam	Failed password for invalid user nagios from 120.53.24.160 port 37962 ssh2	2020-07-15 08:42:17
51.140.114.142	attack	WordPress XMLRPC scan :: 51.140.114.142 0.408 - [14/Jul/2020:18:24:21 0000] www.[censored_1] "POST //xmlrpc.php HTTP/1.1" 503 18225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "HTTP/1.1"	2020-07-15 08:25:44

最近上报的IP列表

228.59.145.222	38.237.184.56	89.221.250.12	160.233.166.185
156.210.150.97	13.233.233.56	147.60.196.208	196.212.107.233
183.193.45.60	23.25.177.153	63.168.169.91	7.139.143.25
66.183.31.111	95.247.143.141	132.185.55.225	204.178.16.77
140.139.17.151	226.208.54.37	124.255.37.211	235.170.76.190