45.122.138.7 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Vanta Telecommunications Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Unauthorized connection attempt detected from IP address 45.122.138.7 to port 1433 [J]	2020-01-29 05:23:52
attackbots	SIP/5060 Probe, BF, Hack -	2019-12-30 21:25:00

相同子网IP讨论:

IP	类型	评论内容	时间
45.122.138.67	attackbots	Unauthorized connection attempt detected from IP address 45.122.138.67 to port 1433 [J]	2020-01-29 10:12:16
45.122.138.22	attack	Dec 29 18:12:37 ws22vmsma01 sshd[222802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.138.22 Dec 29 18:12:39 ws22vmsma01 sshd[222802]: Failed password for invalid user ubnt from 45.122.138.22 port 48709 ssh2 ...	2019-12-30 06:28:14
45.122.138.22	attack	2019-12-27T23:51:12.745531shield sshd\[5830\]: Invalid user ervin from 45.122.138.22 port 59069 2019-12-27T23:51:12.748817shield sshd\[5830\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.138.22 2019-12-27T23:51:15.045338shield sshd\[5830\]: Failed password for invalid user ervin from 45.122.138.22 port 59069 ssh2 2019-12-27T23:54:04.214561shield sshd\[6635\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.138.22 user=root 2019-12-27T23:54:06.791896shield sshd\[6635\]: Failed password for root from 45.122.138.22 port 41868 ssh2	2019-12-28 07:58:59
45.122.138.22	attackbotsspam	Dec 10 14:03:43 vibhu-HP-Z238-Microtower-Workstation sshd\[28411\]: Invalid user 1qaz@WSX from 45.122.138.22 Dec 10 14:03:43 vibhu-HP-Z238-Microtower-Workstation sshd\[28411\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.138.22 Dec 10 14:03:45 vibhu-HP-Z238-Microtower-Workstation sshd\[28411\]: Failed password for invalid user 1qaz@WSX from 45.122.138.22 port 55968 ssh2 Dec 10 14:10:11 vibhu-HP-Z238-Microtower-Workstation sshd\[29473\]: Invalid user pluto from 45.122.138.22 Dec 10 14:10:11 vibhu-HP-Z238-Microtower-Workstation sshd\[29473\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.138.22 ...	2019-12-10 18:47:08
45.122.138.22	attackspambots	Dec 4 16:58:18 plusreed sshd[11157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.138.22 user=root Dec 4 16:58:20 plusreed sshd[11157]: Failed password for root from 45.122.138.22 port 57114 ssh2 ...	2019-12-05 06:05:19
45.122.138.22	attackbotsspam	$f2bV_matches	2019-12-02 19:57:29
45.122.138.22	attack	Nov 23 18:47:07 hosting sshd[16063]: Invalid user dorotea from 45.122.138.22 port 47184 ...	2019-11-24 00:43:46
45.122.138.22	attackspambots	Automatic report - SSH Brute-Force Attack	2019-11-19 06:42:29
45.122.138.81	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/45.122.138.81/ HK - 1H : (18) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : HK NAME ASN : ASN132742 IP : 45.122.138.81 CIDR : 45.122.138.0/24 PREFIX COUNT : 79 UNIQUE IP COUNT : 37888 WYKRYTE ATAKI Z ASN132742 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-17 20:52:50 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery	2019-10-18 04:30:42

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.122.138.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27653
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.122.138.7.			IN	A

;; AUTHORITY SECTION:
.			222	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019123000 1800 900 604800 86400

;; Query time: 438 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 30 21:24:54 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 7.138.122.45.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 7.138.122.45.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
206.189.134.14	attackbotsspam	Automatic report - Banned IP Access	2019-11-01 23:13:26
217.7.239.117	attack	Triggered by Fail2Ban at Vostok web server	2019-11-01 23:35:02
85.201.124.19	attackspam	TCP Port Scanning	2019-11-01 23:23:46
104.199.124.247	attack	Automatic report - XMLRPC Attack	2019-11-01 23:18:39
77.40.3.139	attack	11/01/2019-16:08:57.564210 77.40.3.139 Protocol: 6 SURICATA SMTP tls rejected	2019-11-01 23:13:52
103.79.154.104	attackspambots	pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.79.154.104 user=sshd Failed password for sshd from 103.79.154.104 port 50998 ssh2 Invalid user dp from 103.79.154.104 port 53246 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.79.154.104 Failed password for invalid user dp from 103.79.154.104 port 53246 ssh2	2019-11-01 23:30:37
45.82.153.76	attackspambots	2019-11-01 16:07:43 dovecot_login authenticator failed for $\[45.82.153.76\]$ \[45.82.153.76\]: 535 Incorrect authentication data $set_id=support@nopcommerce.it$ 2019-11-01 16:07:56 dovecot_login authenticator failed for $\[45.82.153.76\]$ \[45.82.153.76\]: 535 Incorrect authentication data 2019-11-01 16:08:07 dovecot_login authenticator failed for $\[45.82.153.76\]$ \[45.82.153.76\]: 535 Incorrect authentication data 2019-11-01 16:08:23 dovecot_login authenticator failed for $\[45.82.153.76\]$ \[45.82.153.76\]: 535 Incorrect authentication data 2019-11-01 16:08:31 dovecot_login authenticator failed for $\[45.82.153.76\]$ \[45.82.153.76\]: 535 Incorrect authentication data	2019-11-01 23:09:53
103.139.45.67	attackspam	Too many connections or unauthorized access detected from Yankee banned ip	2019-11-01 23:16:59
50.197.162.169	attack	2019-11-01 H=50-197-162-169-static.hfc.comcastbusiness.net \[50.197.162.169\] F=\ rejected RCPT \: Mail not accepted. 50.197.162.169 is listed at a DNSBL. 2019-11-01 H=50-197-162-169-static.hfc.comcastbusiness.net \[50.197.162.169\] F=\ rejected RCPT \: Mail not accepted. 50.197.162.169 is listed at a DNSBL. 2019-11-01 H=50-197-162-169-static.hfc.comcastbusiness.net \[50.197.162.169\] F=\ rejected RCPT \<REMOVED@REMOVED.de\>: Mail not accepted. 50.197.162.169 is listed at a DNSBL.	2019-11-01 23:33:36
112.186.77.86	attackspambots	SSH authentication failure x 6 reported by Fail2Ban ...	2019-11-01 23:38:20
121.27.25.27	attack	SSH Scan	2019-11-01 23:31:54
118.200.125.162	attackspam	2019-11-01T13:31:17.075640lon01.zurich-datacenter.net sshd\[9492\]: Invalid user www-data from 118.200.125.162 port 49142 2019-11-01T13:31:17.085276lon01.zurich-datacenter.net sshd\[9492\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.200.125.162 2019-11-01T13:31:19.889276lon01.zurich-datacenter.net sshd\[9492\]: Failed password for invalid user www-data from 118.200.125.162 port 49142 ssh2 2019-11-01T13:36:13.623398lon01.zurich-datacenter.net sshd\[9592\]: Invalid user night from 118.200.125.162 port 40383 2019-11-01T13:36:13.632142lon01.zurich-datacenter.net sshd\[9592\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.200.125.162 ...	2019-11-01 23:18:25
222.186.180.9	attackspam	Nov 1 10:50:52 xentho sshd[1612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.9 user=root Nov 1 10:50:54 xentho sshd[1612]: Failed password for root from 222.186.180.9 port 52658 ssh2 Nov 1 10:50:58 xentho sshd[1612]: Failed password for root from 222.186.180.9 port 52658 ssh2 Nov 1 10:50:52 xentho sshd[1612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.9 user=root Nov 1 10:50:54 xentho sshd[1612]: Failed password for root from 222.186.180.9 port 52658 ssh2 Nov 1 10:50:58 xentho sshd[1612]: Failed password for root from 222.186.180.9 port 52658 ssh2 Nov 1 10:50:52 xentho sshd[1612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.9 user=root Nov 1 10:50:54 xentho sshd[1612]: Failed password for root from 222.186.180.9 port 52658 ssh2 Nov 1 10:50:58 xentho sshd[1612]: Failed password for root from 222.186.180.9 po ...	2019-11-01 22:58:23
67.207.81.225	attackbotsspam	Digital Ocean BotNet attack - 10s of requests to none existent pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks node-superagent/4.1.0	2019-11-01 23:24:42
45.141.84.28	attack	Nov 1 15:31:32 h2177944 kernel: \[5494403.091056\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.141.84.28 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=22816 PROTO=TCP SPT=42848 DPT=23201 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 1 15:36:39 h2177944 kernel: \[5494710.723200\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.141.84.28 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=52731 PROTO=TCP SPT=42848 DPT=22128 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 1 15:40:15 h2177944 kernel: \[5494925.871530\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.141.84.28 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=23858 PROTO=TCP SPT=42848 DPT=23502 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 1 15:40:20 h2177944 kernel: \[5494931.358515\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.141.84.28 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=13879 PROTO=TCP SPT=42848 DPT=21174 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 1 15:52:24 h2177944 kernel: \[5495654.893582\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.141.84.28 DST=85.214.117.9	2019-11-01 23:17:14

最近上报的IP列表

77.104.245.12	47.92.50.135	110.93.247.171	95.219.134.157
88.250.196.146	85.209.0.250	80.74.75.133	14.174.23.167
59.33.84.234	42.116.68.34	213.6.227.10	109.134.12.28
113.254.72.151	27.116.21.82	222.134.38.158	160.136.125.45
222.239.143.35	141.104.243.124	142.68.238.112	176.109.185.87