45.132.14.39 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Guangdong Dahai Network Information Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Jan 22 01:27:05 typhoon sshd[28611]: Failed password for invalid user himanshu from 45.132.14.39 port 40256 ssh2 Jan 22 01:27:06 typhoon sshd[28611]: Received disconnect from 45.132.14.39: 11: Bye Bye [preauth] Jan 22 01:34:30 typhoon sshd[28645]: Failed password for invalid user testing from 45.132.14.39 port 53486 ssh2 Jan 22 01:34:30 typhoon sshd[28645]: Received disconnect from 45.132.14.39: 11: Bye Bye [preauth] Jan 22 01:39:41 typhoon sshd[28687]: Failed password for invalid user confluence from 45.132.14.39 port 54808 ssh2 Jan 22 01:39:42 typhoon sshd[28687]: Received disconnect from 45.132.14.39: 11: Bye Bye [preauth] Jan 22 01:44:28 typhoon sshd[28747]: Failed password for invalid user me from 45.132.14.39 port 56130 ssh2 Jan 22 01:44:29 typhoon sshd[28747]: Received disconnect from 45.132.14.39: 11: Bye Bye [preauth] Jan 22 01:49:11 typhoon sshd[28777]: Failed password for invalid user oracle from 45.132.14.39 port 57452 ssh2 Jan 22 01:49:11 typhoon sshd[28777........ -------------------------------	2020-01-24 02:24:52

类型

评论内容

时间

attackbots

Jan 22 01:27:05 typhoon sshd[28611]: Failed password for invalid user himanshu from 45.132.14.39 port 40256 ssh2
Jan 22 01:27:06 typhoon sshd[28611]: Received disconnect from 45.132.14.39: 11: Bye Bye [preauth]
Jan 22 01:34:30 typhoon sshd[28645]: Failed password for invalid user testing from 45.132.14.39 port 53486 ssh2
Jan 22 01:34:30 typhoon sshd[28645]: Received disconnect from 45.132.14.39: 11: Bye Bye [preauth]
Jan 22 01:39:41 typhoon sshd[28687]: Failed password for invalid user confluence from 45.132.14.39 port 54808 ssh2
Jan 22 01:39:42 typhoon sshd[28687]: Received disconnect from 45.132.14.39: 11: Bye Bye [preauth]
Jan 22 01:44:28 typhoon sshd[28747]: Failed password for invalid user me from 45.132.14.39 port 56130 ssh2
Jan 22 01:44:29 typhoon sshd[28747]: Received disconnect from 45.132.14.39: 11: Bye Bye [preauth]
Jan 22 01:49:11 typhoon sshd[28777]: Failed password for invalid user oracle from 45.132.14.39 port 57452 ssh2
Jan 22 01:49:11 typhoon sshd[28777........
-------------------------------

2020-01-24 02:24:52

相同子网IP讨论:

IP	类型	评论内容	时间
45.132.143.14	attack	xmlrpc attack	2020-09-02 02:06:52
45.132.149.3	attackbotsspam	Brute force SMTP login attempts.	2019-12-23 05:19:23

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.132.14.39
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49295
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.132.14.39.			IN	A

;; AUTHORITY SECTION:
.			418	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012300 1800 900 604800 86400

;; Query time: 86 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 02:24:50 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 39.14.132.45.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 39.14.132.45.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
217.182.79.245	attackbotsspam	SSH Brute Force	2019-12-22 08:38:30
202.95.8.149	attackbotsspam	Invalid user lyle from 202.95.8.149 port 38272	2019-12-22 08:04:18
222.186.173.154	attack	Dec 21 19:19:03 linuxvps sshd\[4361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root Dec 21 19:19:05 linuxvps sshd\[4361\]: Failed password for root from 222.186.173.154 port 33332 ssh2 Dec 21 19:19:21 linuxvps sshd\[4596\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root Dec 21 19:19:23 linuxvps sshd\[4596\]: Failed password for root from 222.186.173.154 port 57050 ssh2 Dec 21 19:19:26 linuxvps sshd\[4596\]: Failed password for root from 222.186.173.154 port 57050 ssh2	2019-12-22 08:20:43
77.42.89.96	attackbots	Honeypot attack, port: 23, PTR: PTR record not found	2019-12-22 08:21:18
179.217.5.25	attack	Honeypot attack, port: 23, PTR: b3d90519.virtua.com.br.	2019-12-22 08:38:03
90.71.180.43	attack	Honeypot attack, port: 445, PTR: 43.pool90-71-180.dynamic.orange.es.	2019-12-22 08:10:31
167.71.179.114	attackspambots	Dec 21 13:48:55 kapalua sshd\[3920\]: Invalid user %username% from 167.71.179.114 Dec 21 13:48:55 kapalua sshd\[3920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.179.114 Dec 21 13:48:58 kapalua sshd\[3920\]: Failed password for invalid user %username% from 167.71.179.114 port 36284 ssh2 Dec 21 13:53:43 kapalua sshd\[4400\]: Invalid user 1q2w3e4r from 167.71.179.114 Dec 21 13:53:43 kapalua sshd\[4400\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.179.114	2019-12-22 08:24:59
210.245.89.85	attackspambots	Dec 22 02:46:48 microserver sshd[17994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.245.89.85 user=root Dec 22 02:46:50 microserver sshd[17994]: Failed password for root from 210.245.89.85 port 55040 ssh2 Dec 22 02:46:52 microserver sshd[17994]: Failed password for root from 210.245.89.85 port 55040 ssh2 Dec 22 02:46:54 microserver sshd[17994]: Failed password for root from 210.245.89.85 port 55040 ssh2 Dec 22 02:46:57 microserver sshd[17994]: Failed password for root from 210.245.89.85 port 55040 ssh2 Dec 22 02:57:01 microserver sshd[19545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.245.89.85 user=root Dec 22 02:57:02 microserver sshd[19545]: Failed password for root from 210.245.89.85 port 52769 ssh2 Dec 22 02:57:04 microserver sshd[19545]: Failed password for root from 210.245.89.85 port 52769 ssh2 Dec 22 02:57:07 microserver sshd[19545]: Failed password for root from 210.245.89.85 port 52769 ssh2 Dec 22 02	2019-12-22 08:39:02
103.100.16.226	attack	Honeypot attack, port: 445, PTR: PTR record not found	2019-12-22 08:33:10
112.21.191.244	attack	2019-12-21T23:30:05.868987shield sshd\[8457\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.21.191.244 user=root 2019-12-21T23:30:07.938107shield sshd\[8457\]: Failed password for root from 112.21.191.244 port 59402 ssh2 2019-12-21T23:36:53.558083shield sshd\[11563\]: Invalid user blades from 112.21.191.244 port 55384 2019-12-21T23:36:53.562204shield sshd\[11563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.21.191.244 2019-12-21T23:36:55.641349shield sshd\[11563\]: Failed password for invalid user blades from 112.21.191.244 port 55384 ssh2	2019-12-22 08:18:03
117.92.16.177	attackbots	Dec 21 23:57:33 grey postfix/smtpd\[22067\]: NOQUEUE: reject: RCPT from unknown\[117.92.16.177\]: 554 5.7.1 Service unavailable\; Client host \[117.92.16.177\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[117.92.16.177\]\; from=\ to=\ proto=SMTP helo=\ ...	2019-12-22 08:09:57
79.137.77.131	attackbotsspam	SSH-BruteForce	2019-12-22 08:16:42
90.150.87.199	attackspam	'IP reached maximum auth failures for a one day block'	2019-12-22 08:23:00
59.74.224.236	attackspam	Dec 22 00:52:04 root sshd[27364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.74.224.236 Dec 22 00:52:06 root sshd[27364]: Failed password for invalid user shop from 59.74.224.236 port 35214 ssh2 Dec 22 00:59:02 root sshd[27423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.74.224.236 ...	2019-12-22 08:06:38
182.61.3.119	attackspambots	2019-12-22 01:38:52,903 fail2ban.actions: WARNING [ssh] Ban 182.61.3.119	2019-12-22 08:39:44

最近上报的IP列表

119.27.161.231	37.145.195.15	3.89.218.216	111.229.58.117
87.122.221.79	39.84.2.71	14.29.205.220	51.91.254.143
222.186.21.212	128.199.235.49	159.89.170.220	79.188.40.187
54.87.182.249	165.22.48.169	107.200.219.232	194.26.29.117
105.157.94.163	53.63.28.84	128.76.185.153	15.188.237.240