213.104.89.245

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United Kingdom of Great Britain and Northern Ireland (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.104.89.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 708
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;213.104.89.245.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025030100 1800 900 604800 86400

;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 01 20:38:13 CST 2025
;; MSG SIZE  rcvd: 107

HOST信息:

245.89.104.213.in-addr.arpa domain name pointer brad-lam-5-tenge92-1166404.network.virginmedia.net.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
245.89.104.213.in-addr.arpa	name = brad-lam-5-tenge92-1166404.network.virginmedia.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
85.105.69.143	attackbotsspam	Automatic report - Port Scan Attack	2020-03-08 05:16:45
180.218.96.254	attackspam	Honeypot attack, port: 4567, PTR: 180-218-96-254.dynamic.twmbroadband.net.	2020-03-08 05:11:09
122.160.46.61	attack	Mar 7 22:19:40 silence02 sshd[16320]: Failed password for root from 122.160.46.61 port 50240 ssh2 Mar 7 22:24:02 silence02 sshd[16554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.160.46.61 Mar 7 22:24:04 silence02 sshd[16554]: Failed password for invalid user rabbitmq from 122.160.46.61 port 39122 ssh2	2020-03-08 05:37:22
45.141.84.38	attack	Mar 7 19:20:56 host3 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=45.141.84.38, lip=207.180.241.50, session= Mar 7 19:29:32 host3 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=45.141.84.38, lip=207.180.241.50, session= Mar 7 19:45:21 host3 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=45.141.84.38, lip=207.180.241.50, session=<9D7zK0igJrItjVQm> Mar 7 19:51:32 host3 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=45.141.84.38, lip=207.180.241.50, session=<1rkSQkigVtYtjVQm> Mar 7 20:31:10 host3 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=45.141.84.38, lip=207.180.241.50, session=<3WjOz0ig ...	2020-03-08 05:11:24
222.186.175.151	attack	Mar 7 16:11:10 NPSTNNYC01T sshd[18967]: Failed password for root from 222.186.175.151 port 23288 ssh2 Mar 7 16:11:23 NPSTNNYC01T sshd[18967]: error: maximum authentication attempts exceeded for root from 222.186.175.151 port 23288 ssh2 [preauth] Mar 7 16:11:28 NPSTNNYC01T sshd[18996]: Failed password for root from 222.186.175.151 port 11748 ssh2 ...	2020-03-08 05:20:08
46.0.203.166	attack	Mar 7 21:26:17 itv-usvr-01 sshd[3201]: Invalid user ftpguest from 46.0.203.166 Mar 7 21:26:17 itv-usvr-01 sshd[3201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.0.203.166 Mar 7 21:26:17 itv-usvr-01 sshd[3201]: Invalid user ftpguest from 46.0.203.166 Mar 7 21:26:19 itv-usvr-01 sshd[3201]: Failed password for invalid user ftpguest from 46.0.203.166 port 54250 ssh2 Mar 7 21:30:40 itv-usvr-01 sshd[3348]: Invalid user jeff from 46.0.203.166	2020-03-08 05:43:55
222.186.15.18	attack	Mar 7 21:48:24 OPSO sshd\[12797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.18 user=root Mar 7 21:48:26 OPSO sshd\[12797\]: Failed password for root from 222.186.15.18 port 16224 ssh2 Mar 7 21:48:28 OPSO sshd\[12797\]: Failed password for root from 222.186.15.18 port 16224 ssh2 Mar 7 21:48:31 OPSO sshd\[12797\]: Failed password for root from 222.186.15.18 port 16224 ssh2 Mar 7 21:49:39 OPSO sshd\[12819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.18 user=root	2020-03-08 05:13:34
139.59.30.54	attackspam	Lines containing failures of 139.59.30.54 Mar 2 15:25:53 shared11 sshd[25574]: Invalid user admin from 139.59.30.54 port 36946 Mar 2 15:25:53 shared11 sshd[25574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.30.54 Mar 2 15:25:55 shared11 sshd[25574]: Failed password for invalid user admin from 139.59.30.54 port 36946 ssh2 Mar 2 15:25:55 shared11 sshd[25574]: Received disconnect from 139.59.30.54 port 36946:11: Normal Shutdown [preauth] Mar 2 15:25:55 shared11 sshd[25574]: Disconnected from invalid user admin 139.59.30.54 port 36946 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=139.59.30.54	2020-03-08 05:37:07
192.241.210.24	attackspam	port scan and connect, tcp 21 (ftp)	2020-03-08 05:28:31
206.189.131.211	attackbotsspam	Lines containing failures of 206.189.131.211 Mar 2 15:23:25 keyhelp sshd[20224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.131.211 user=keyhelp Mar 2 15:23:27 keyhelp sshd[20224]: Failed password for keyhelp from 206.189.131.211 port 60684 ssh2 Mar 2 15:23:27 keyhelp sshd[20224]: Received disconnect from 206.189.131.211 port 60684:11: Normal Shutdown [preauth] Mar 2 15:23:27 keyhelp sshd[20224]: Disconnected from authenticating user keyhelp 206.189.131.211 port 60684 [preauth] Mar 2 15:26:57 keyhelp sshd[21066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.131.211 user=mysql ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=206.189.131.211	2020-03-08 05:45:29
152.168.227.167	attackbots	Mar 7 05:46:12 mailrelay sshd[1914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.168.227.167 user=r.r Mar 7 05:46:15 mailrelay sshd[1914]: Failed password for r.r from 152.168.227.167 port 51337 ssh2 Mar 7 05:46:15 mailrelay sshd[1914]: Received disconnect from 152.168.227.167 port 51337:11: Bye Bye [preauth] Mar 7 05:46:15 mailrelay sshd[1914]: Disconnected from 152.168.227.167 port 51337 [preauth] Mar 7 05:57:47 mailrelay sshd[2064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.168.227.167 user=r.r Mar 7 05:57:49 mailrelay sshd[2064]: Failed password for r.r from 152.168.227.167 port 55691 ssh2 Mar 7 05:57:50 mailrelay sshd[2064]: Received disconnect from 152.168.227.167 port 55691:11: Bye Bye [preauth] Mar 7 05:57:50 mailrelay sshd[2064]: Disconnected from 152.168.227.167 port 55691 [preauth] Mar 7 06:05:32 mailrelay sshd[2181]: Invalid user ts3bot from 152.168.2........ -------------------------------	2020-03-08 05:19:46
163.172.191.192	attackspambots	Mar 7 16:52:32 ourumov-web sshd\[13631\]: Invalid user git from 163.172.191.192 port 57100 Mar 7 16:52:32 ourumov-web sshd\[13631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.191.192 Mar 7 16:52:34 ourumov-web sshd\[13631\]: Failed password for invalid user git from 163.172.191.192 port 57100 ssh2 ...	2020-03-08 05:25:44
115.236.72.16	attackbotsspam	(sshd) Failed SSH login from 115.236.72.16 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 7 21:33:18 amsweb01 sshd[30380]: Invalid user postgres from 115.236.72.16 port 39004 Mar 7 21:33:20 amsweb01 sshd[30380]: Failed password for invalid user postgres from 115.236.72.16 port 39004 ssh2 Mar 7 21:37:18 amsweb01 sshd[5102]: User admin from 115.236.72.16 not allowed because not listed in AllowUsers Mar 7 21:37:18 amsweb01 sshd[5102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.236.72.16 user=admin Mar 7 21:37:21 amsweb01 sshd[5102]: Failed password for invalid user admin from 115.236.72.16 port 57896 ssh2	2020-03-08 05:27:45
191.28.129.82	attack	suspicious action Sat, 07 Mar 2020 10:27:08 -0300	2020-03-08 05:22:27
60.251.80.76	attack	Honeypot attack, port: 445, PTR: 60-251-80-76.HINET-IP.hinet.net.	2020-03-08 05:26:39

最近上报的IP列表

199.64.142.164	245.131.112.53	201.181.12.33	221.232.141.96
142.75.127.85	109.110.199.123	190.175.201.219	30.59.144.70
46.237.225.45	49.132.115.156	155.106.126.14	92.232.246.155
177.69.149.240	154.75.91.35	50.86.202.120	23.163.178.242
200.181.183.77	25.17.156.206	18.177.166.131	41.92.175.215