39.45.221.146 - IPInfo

基本信息:

城市(city): Lahore

省份(region): Punjab

国家(country): Pakistan

运营商(isp): Pakistan Telecommunication Company Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Honeypot attack, port: 5555, PTR: PTR record not found	2019-09-27 02:54:06

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 39.45.221.146
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19829
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;39.45.221.146.			IN	A

;; AUTHORITY SECTION:
.			385	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092601 1800 900 604800 86400

;; Query time: 259 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 27 02:54:02 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 146.221.45.39.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 146.221.45.39.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
193.56.28.29	attackbots	(cpanel) Failed cPanel login from 193.56.28.29 (GB/United Kingdom/-): 5 in the last 3600 secs	2020-10-10 23:16:26
198.143.133.154	attackbotsspam	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-10 23:51:56
95.85.9.94	attackbotsspam	Oct 10 20:20:23 itv-usvr-02 sshd[11504]: Invalid user library from 95.85.9.94 port 48112 Oct 10 20:20:23 itv-usvr-02 sshd[11504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.9.94 Oct 10 20:20:23 itv-usvr-02 sshd[11504]: Invalid user library from 95.85.9.94 port 48112 Oct 10 20:20:25 itv-usvr-02 sshd[11504]: Failed password for invalid user library from 95.85.9.94 port 48112 ssh2 Oct 10 20:27:52 itv-usvr-02 sshd[11762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.9.94 user=root Oct 10 20:27:54 itv-usvr-02 sshd[11762]: Failed password for root from 95.85.9.94 port 50122 ssh2	2020-10-10 23:28:58
159.65.136.44	attackbotsspam	Oct 10 16:26:55 host sshd[22069]: Invalid user hr from 159.65.136.44 port 37626 ...	2020-10-10 23:29:40
47.56.229.85	attackspam	Attempts against non-existent wp-login	2020-10-10 23:44:33
156.96.156.37	attack	[2020-10-10 10:51:33] NOTICE[1182][C-000028b8] chan_sip.c: Call from '' (156.96.156.37:49172) to extension '46842002803' rejected because extension not found in context 'public'. [2020-10-10 10:51:33] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-10T10:51:33.315-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="46842002803",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/156.96.156.37/49172",ACLName="no_extension_match" [2020-10-10 10:53:21] NOTICE[1182][C-000028bc] chan_sip.c: Call from '' (156.96.156.37:56166) to extension '01146842002803' rejected because extension not found in context 'public'. [2020-10-10 10:53:21] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-10T10:53:21.510-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146842002803",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/156.96.156 ...	2020-10-10 23:57:49
208.100.26.236	attackbotsspam	Sep 16 09:24:35 hidden postfix/postscreen[44035]: DNSBL rank 3 for [208.100.26.236]:35176	2020-10-10 23:43:10
128.199.145.5	attackbots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-10-10 23:43:22
199.116.138.172	attackspambots	Lines containing failures of 199.116.138.172 Oct 10 00:13:34 MAKserver05 sshd[15058]: Invalid user testftp from 199.116.138.172 port 4016 Oct 10 00:13:34 MAKserver05 sshd[15058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.116.138.172 Oct 10 00:13:36 MAKserver05 sshd[15058]: Failed password for invalid user testftp from 199.116.138.172 port 4016 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=199.116.138.172	2020-10-10 23:58:14
92.62.131.106	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 82 - port: 19825 proto: tcp cat: Misc Attackbytes: 60	2020-10-10 23:46:13
193.169.253.169	attackspambots	Sep 13 15:18:22 hidden postfix/postscreen[16414]: DNSBL rank 3 for [193.169.253.169]:42332	2020-10-10 23:56:18
138.68.55.147	attackspambots	SSH login attempts.	2020-10-10 23:27:05
208.186.113.144	attackspambots	2020-10-09 15:46:28.207311-0500 localhost smtpd[23498]: NOQUEUE: reject: RCPT from unknown[208.186.113.144]: 450 4.7.25 Client host rejected: cannot find your hostname, [208.186.113.144]; from= to= proto=ESMTP helo=	2020-10-10 23:39:43
193.169.252.205	attack	Oct 2 23:19:18 hidden postfix/postscreen[4930]: DNSBL rank 3 for [193.169.252.205]:51669	2020-10-10 23:58:44
27.254.130.67	attackspambots	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-10-10 23:36:12

最近上报的IP列表

202.118.51.106	68.44.147.136	93.67.105.216	176.59.100.127
113.178.35.230	126.164.251.197	13.114.133.177	189.253.246.218
222.72.39.138	183.221.138.165	105.216.124.227	113.97.21.175
176.61.75.250	56.43.17.171	114.200.201.140	71.179.116.187
110.158.108.157	66.161.169.186	39.123.143.5	76.193.21.138