212.220.45.111

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): J/S Co. Grancombank

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	445/tcp [2019-11-01]1pkt	2019-11-02 07:18:23

相同子网IP讨论:

IP	类型	评论内容	时间
212.220.45.11	attackspam	Dec 24 14:08:47 ms-srv sshd[29180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.220.45.11 user=root Dec 24 14:08:49 ms-srv sshd[29180]: Failed password for invalid user root from 212.220.45.11 port 46037 ssh2	2020-02-15 23:10:40
212.220.45.20	attackspam	Unauthorized connection attempt from IP address 212.220.45.20 on Port 445(SMB)	2019-09-23 08:30:44

类型

评论内容

时间

212.220.45.11

attackspam

Dec 24 14:08:47 ms-srv sshd[29180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.220.45.11  user=root
Dec 24 14:08:49 ms-srv sshd[29180]: Failed password for invalid user root from 212.220.45.11 port 46037 ssh2

2020-02-15 23:10:40

212.220.45.20

attackspam

Unauthorized connection attempt from IP address 212.220.45.20 on Port 445(SMB)

2019-09-23 08:30:44

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.220.45.111
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15483
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;212.220.45.111.			IN	A

;; AUTHORITY SECTION:
.			514	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110102 1800 900 604800 86400

;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 02 07:18:20 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 111.45.220.212.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 111.45.220.212.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
94.102.51.29	attackbotsspam	TCP (SYN) 94.102.51.29:57788 -> port 3396, len 44	2020-09-14 02:44:11
211.90.39.117	attackbotsspam	SSH Login Bruteforce	2020-09-14 02:42:09
185.193.90.98	attackbotsspam	TCP (SYN) 185.193.90.98:52145 -> port 5466, len 44	2020-09-14 02:54:17
167.248.133.23	attack	TCP (SYN) 167.248.133.23:40014 -> port 8080, len 44	2020-09-14 02:54:42
59.127.133.232	attackspambots	Automatic report - Banned IP Access	2020-09-14 02:44:54
45.148.10.11	attackspam	scans once in preceeding hours on the ports (in chronological order) 1900 resulting in total of 1 scans from 45.148.10.0/24 block.	2020-09-14 02:43:26
139.59.36.87	attackbots	php WP PHPmyadamin ABUSE blocked for 12h	2020-09-14 02:42:39
152.136.106.94	attackspam	Sep 13 06:22:09 ip106 sshd[7245]: Failed password for root from 152.136.106.94 port 55796 ssh2 ...	2020-09-14 03:14:14
144.217.13.40	attack	144.217.13.40 (CA/Canada/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 13 14:05:35 server2 sshd[27995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.35.141 user=root Sep 13 14:05:37 server2 sshd[27995]: Failed password for root from 159.203.35.141 port 41400 ssh2 Sep 13 14:08:10 server2 sshd[30184]: Failed password for root from 210.251.213.165 port 34046 ssh2 Sep 13 14:07:11 server2 sshd[29608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.151.97 user=root Sep 13 14:07:12 server2 sshd[29606]: Failed password for root from 144.217.13.40 port 56781 ssh2 Sep 13 14:07:13 server2 sshd[29608]: Failed password for root from 46.101.151.97 port 53604 ssh2 IP Addresses Blocked: 159.203.35.141 (CA/Canada/-) 210.251.213.165 (JP/Japan/-) 46.101.151.97 (DE/Germany/-)	2020-09-14 02:43:38
187.58.65.21	attack	Sep 13 18:18:01 host2 sshd[1355662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.58.65.21 user=root Sep 13 18:18:03 host2 sshd[1355662]: Failed password for root from 187.58.65.21 port 6096 ssh2 Sep 13 18:22:18 host2 sshd[1356284]: Invalid user akihoro from 187.58.65.21 port 62615 Sep 13 18:22:18 host2 sshd[1356284]: Invalid user akihoro from 187.58.65.21 port 62615 ...	2020-09-14 03:10:37
94.208.138.113	attack	trying to access non-authorized port	2020-09-14 02:51:29
185.87.108.147	attackspam	[2020-09-13 13:33:12] NOTICE[1239] chan_sip.c: Registration from '"1424"' failed for '185.87.108.147:56085' - Wrong password [2020-09-13 13:33:12] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-13T13:33:12.778-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1424",SessionID="0x7f4d480d6c18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.87.108.147/56085",Challenge="7c2b0702",ReceivedChallenge="7c2b0702",ReceivedHash="bcd9fd03b87267e9c5780ca714ca514a" [2020-09-13 13:34:10] NOTICE[1239] chan_sip.c: Registration from '"1422"' failed for '185.87.108.147:11331' - Wrong password [2020-09-13 13:34:10] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-13T13:34:10.603-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1422",SessionID="0x7f4d482e4338",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD ...	2020-09-14 03:16:04
51.15.54.24	attack	Invalid user admin from 51.15.54.24 port 44964	2020-09-14 02:57:54
151.80.77.132	attackspambots	Sep 13 20:19:34 nextcloud sshd\[22740\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.77.132 user=root Sep 13 20:19:36 nextcloud sshd\[22740\]: Failed password for root from 151.80.77.132 port 53832 ssh2 Sep 13 20:25:26 nextcloud sshd\[28907\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.77.132 user=root	2020-09-14 02:56:28
47.180.212.134	attack	(sshd) Failed SSH login from 47.180.212.134 (-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 13 20:14:11 grace sshd[26674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.180.212.134 user=root Sep 13 20:14:13 grace sshd[26674]: Failed password for root from 47.180.212.134 port 44644 ssh2 Sep 13 20:17:48 grace sshd[27142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.180.212.134 user=root Sep 13 20:17:50 grace sshd[27142]: Failed password for root from 47.180.212.134 port 41769 ssh2 Sep 13 20:19:41 grace sshd[27180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.180.212.134 user=root	2020-09-14 02:59:20

最近上报的IP列表

3.78.118.227	168.46.131.13	247.228.190.200	4.37.57.9
128.5.10.225	4.102.156.89	121.188.100.73	182.211.36.151
58.18.136.56	67.129.221.17	146.31.115.181	23.233.19.19
187.92.247.133	109.27.29.126	177.53.8.175	65.20.201.210
199.178.198.63	174.36.174.135	77.200.53.43	226.132.236.126