41.145.30.245 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): South Africa

运营商(isp): Telkom SA Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Jul 1 18:07:05 cortex sshd[27876]: Invalid user scaner from 41.145.30.245 Jul 1 18:07:07 cortex sshd[27876]: Failed password for invalid user scaner from 41.145.30.245 port 6997 ssh2 Jul 1 18:07:07 cortex sshd[27876]: Received disconnect from 41.145.30.245: 11: Bye Bye [preauth] Jul 1 18:14:17 cortex sshd[27890]: Connection closed by 41.145.30.245 [preauth] Jul 1 18:17:11 cortex sshd[27892]: Invalid user test from 41.145.30.245 Jul 1 18:17:14 cortex sshd[27892]: Failed password for invalid user test from 41.145.30.245 port 8149 ssh2 Jul 1 18:17:14 cortex sshd[27892]: Received disconnect from 41.145.30.245: 11: Bye Bye [preauth] Jul 1 18:20:10 cortex sshd[27901]: Invalid user zhostnamea from 41.145.30.245 Jul 1 18:20:12 cortex sshd[27901]: Failed password for invalid user zhostnamea from 41.145.30.245 port 7510 ssh2 Jul 1 18:20:12 cortex sshd[27901]: Received disconnect from 41.145.30.245: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/vie	2019-07-02 04:52:00

类型

评论内容

时间

attackspambots

Jul  1 18:07:05 cortex sshd[27876]: Invalid user scaner from 41.145.30.245
Jul  1 18:07:07 cortex sshd[27876]: Failed password for invalid user scaner from 41.145.30.245 port 6997 ssh2
Jul  1 18:07:07 cortex sshd[27876]: Received disconnect from 41.145.30.245: 11: Bye Bye [preauth]
Jul  1 18:14:17 cortex sshd[27890]: Connection closed by 41.145.30.245 [preauth]
Jul  1 18:17:11 cortex sshd[27892]: Invalid user test from 41.145.30.245
Jul  1 18:17:14 cortex sshd[27892]: Failed password for invalid user test from 41.145.30.245 port 8149 ssh2
Jul  1 18:17:14 cortex sshd[27892]: Received disconnect from 41.145.30.245: 11: Bye Bye [preauth]
Jul  1 18:20:10 cortex sshd[27901]: Invalid user zhostnamea from 41.145.30.245
Jul  1 18:20:12 cortex sshd[27901]: Failed password for invalid user zhostnamea from 41.145.30.245 port 7510 ssh2
Jul  1 18:20:12 cortex sshd[27901]: Received disconnect from 41.145.30.245: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/vie

2019-07-02 04:52:00

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.145.30.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43263
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;41.145.30.245.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070102 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 02 04:51:55 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

245.30.145.41.in-addr.arpa domain name pointer 8ta-145-30-245.telkomadsl.co.za.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
245.30.145.41.in-addr.arpa	name = 8ta-145-30-245.telkomadsl.co.za.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
201.140.111.58	attackspam	Triggered by Fail2Ban at Vostok web server	2019-09-28 22:40:48
45.142.195.5	attackspambots	Sep 28 16:23:52 webserver postfix/smtpd\[10507\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 28 16:24:50 webserver postfix/smtpd\[10507\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 28 16:25:46 webserver postfix/smtpd\[10507\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 28 16:26:40 webserver postfix/smtpd\[11133\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 28 16:27:40 webserver postfix/smtpd\[11133\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-09-28 22:44:39
112.85.42.237	attack	Sep 28 09:25:56 TORMINT sshd\[24991\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.237 user=root Sep 28 09:25:58 TORMINT sshd\[24991\]: Failed password for root from 112.85.42.237 port 61840 ssh2 Sep 28 09:29:44 TORMINT sshd\[25259\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.237 user=root ...	2019-09-28 22:35:58
144.217.40.3	attackspam	Sep 28 04:32:42 eddieflores sshd\[16777\]: Invalid user nate from 144.217.40.3 Sep 28 04:32:42 eddieflores sshd\[16777\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip3.ip-144-217-40.net Sep 28 04:32:44 eddieflores sshd\[16777\]: Failed password for invalid user nate from 144.217.40.3 port 59528 ssh2 Sep 28 04:36:37 eddieflores sshd\[17086\]: Invalid user jabber from 144.217.40.3 Sep 28 04:36:37 eddieflores sshd\[17086\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip3.ip-144-217-40.net	2019-09-28 22:44:12
132.148.104.32	attack	xmlrpc attack	2019-09-28 23:01:45
106.51.72.240	attackspam	Jan 29 10:58:56 vtv3 sshd\[27932\]: Invalid user james from 106.51.72.240 port 59284 Jan 29 10:58:56 vtv3 sshd\[27932\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.72.240 Jan 29 10:58:58 vtv3 sshd\[27932\]: Failed password for invalid user james from 106.51.72.240 port 59284 ssh2 Jan 29 11:04:01 vtv3 sshd\[29276\]: Invalid user sybase from 106.51.72.240 port 40952 Jan 29 11:04:01 vtv3 sshd\[29276\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.72.240 Feb 1 18:42:09 vtv3 sshd\[29989\]: Invalid user upload from 106.51.72.240 port 41548 Feb 1 18:42:09 vtv3 sshd\[29989\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.72.240 Feb 1 18:42:11 vtv3 sshd\[29989\]: Failed password for invalid user upload from 106.51.72.240 port 41548 ssh2 Feb 1 18:47:25 vtv3 sshd\[31369\]: Invalid user ronjones from 106.51.72.240 port 51406 Feb 1 18:47:25 vtv3 sshd\[31369\]:	2019-09-28 22:57:41
122.161.101.190	attackspambots	$f2bV_matches	2019-09-28 23:08:28
5.196.7.123	attackspambots	$f2bV_matches	2019-09-28 23:16:08
222.186.31.144	attackbotsspam	Sep 28 16:39:49 MK-Soft-Root2 sshd[24659]: Failed password for root from 222.186.31.144 port 55579 ssh2 Sep 28 16:39:51 MK-Soft-Root2 sshd[24659]: Failed password for root from 222.186.31.144 port 55579 ssh2 ...	2019-09-28 22:40:29
185.53.88.35	attackbotsspam	\[2019-09-28 10:44:33\] SECURITY\[2006\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-28T10:44:33.698-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442922550332",SessionID="0x7f1e1c0e6f88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.35/54902",ACLName="no_extension_match" \[2019-09-28 10:46:16\] SECURITY\[2006\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-28T10:46:16.199-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011442922550332",SessionID="0x7f1e1c4e5928",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.35/63332",ACLName="no_extension_match" \[2019-09-28 10:47:58\] SECURITY\[2006\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-28T10:47:58.729-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9442922550332",SessionID="0x7f1e1c4e5928",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.35/59369",ACLName="no_extensi	2019-09-28 23:13:32
51.38.238.22	attack	Sep 28 17:05:04 SilenceServices sshd[23078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.238.22 Sep 28 17:05:05 SilenceServices sshd[23078]: Failed password for invalid user test6 from 51.38.238.22 port 45482 ssh2 Sep 28 17:09:03 SilenceServices sshd[25549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.238.22	2019-09-28 23:10:18
149.202.223.136	attackspam	\[2019-09-28 10:58:31\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '149.202.223.136:61314' - Wrong password \[2019-09-28 10:58:31\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-28T10:58:31.302-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="21000017",SessionID="0x7f1e1c0e6f88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/149.202.223.136/61314",Challenge="78380452",ReceivedChallenge="78380452",ReceivedHash="d3f1b943118c1b4ecba75cafc4e7aefb" \[2019-09-28 10:58:33\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '149.202.223.136:60012' - Wrong password \[2019-09-28 10:58:33\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-28T10:58:33.083-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="45633",SessionID="0x7f1e1c02d9c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/149.202.223.1	2019-09-28 23:06:54
190.204.142.137	attack	Unauthorized connection attempt from IP address 190.204.142.137 on Port 445(SMB)	2019-09-28 23:11:10
95.111.74.98	attackbots	Sep 28 17:01:05 localhost sshd\[23762\]: Invalid user webadmin from 95.111.74.98 port 53862 Sep 28 17:01:05 localhost sshd\[23762\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.111.74.98 Sep 28 17:01:08 localhost sshd\[23762\]: Failed password for invalid user webadmin from 95.111.74.98 port 53862 ssh2	2019-09-28 23:11:31
54.37.66.73	attackbotsspam	Sep 28 04:50:39 kapalua sshd\[11374\]: Invalid user tonglink from 54.37.66.73 Sep 28 04:50:39 kapalua sshd\[11374\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.ip-54-37-66.eu Sep 28 04:50:41 kapalua sshd\[11374\]: Failed password for invalid user tonglink from 54.37.66.73 port 46879 ssh2 Sep 28 04:54:44 kapalua sshd\[11722\]: Invalid user remember from 54.37.66.73 Sep 28 04:54:44 kapalua sshd\[11722\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.ip-54-37-66.eu	2019-09-28 23:11:59

最近上报的IP列表

89.46.105.118	146.144.88.215	191.53.59.86	5.249.144.33
210.217.67.63	113.140.80.195	5.63.151.100	182.75.33.202
168.228.148.237	5.63.151.103	113.20.99.70	14.173.116.155
46.61.152.189	222.252.109.2	45.243.152.176	66.115.104.34
5.95.45.82	14.245.163.138	103.240.220.186	36.76.246.225