45.134.24.139 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
spamattack	45.134.24.230 (RU)	2020-02-15 13:50:35
spamattack	45.134.24.230 (RU)	2020-02-15 13:50:28

相同子网IP讨论:

IP	类型	评论内容	时间
45.134.24.7	attackspam	DDOS - one of 48 separate Russian addresses (plus one Lithuanian) IP addresses used to attack our website by repeatedly attempting to download the same, large file. All requests had the same signature, RestSharp/106.11.4.0	2020-07-10 20:54:05
45.134.24.75	attack	My Steam account was hacked and stolen by this IP address on July 5, 2020 at 2:50PM Eastern Standard Time.	2020-07-06 03:41:13

类型

评论内容

时间

45.134.24.7

attackspam

DDOS - one of 48 separate Russian addresses (plus one Lithuanian) IP addresses used to attack our website by repeatedly attempting to download the same, large file. All requests had the same signature, RestSharp/106.11.4.0

2020-07-10 20:54:05

45.134.24.75

attack

My Steam account was hacked and stolen by this IP address on July 5, 2020 at 2:50PM Eastern Standard Time.

2020-07-06 03:41:13

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.134.24.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43320
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.134.24.139.			IN	A

;; AUTHORITY SECTION:
.			312	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012802 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 10:04:08 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 139.24.134.45.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.24.134.45.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
106.12.218.193	attack	Aug 20 18:54:30 yabzik sshd[10070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.218.193 Aug 20 18:54:32 yabzik sshd[10070]: Failed password for invalid user guest from 106.12.218.193 port 60832 ssh2 Aug 20 18:58:13 yabzik sshd[12204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.218.193	2019-08-21 00:13:22
111.231.237.245	attackbots	Aug 20 17:53:37 icinga sshd[30413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.237.245 Aug 20 17:53:39 icinga sshd[30413]: Failed password for invalid user hb from 111.231.237.245 port 55794 ssh2 ...	2019-08-20 23:54:03
185.129.199.144	attackbotsspam	Aug 20 23:54:54 our-server-hostname postfix/smtpd[27655]: connect from unknown[185.129.199.144] Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=185.129.199.144	2019-08-21 01:24:54
34.210.73.98	attackbots	port scan and connect, tcp 80 (http)	2019-08-21 01:46:44
123.110.227.87	attackspambots	Telnetd brute force attack detected by fail2ban	2019-08-21 01:17:39
54.38.47.28	attack	Aug 20 21:12:32 areeb-Workstation sshd\[20001\]: Invalid user mouse from 54.38.47.28 Aug 20 21:12:32 areeb-Workstation sshd\[20001\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.47.28 Aug 20 21:12:34 areeb-Workstation sshd\[20001\]: Failed password for invalid user mouse from 54.38.47.28 port 60898 ssh2 ...	2019-08-20 23:44:30
104.248.116.140	attackbotsspam	Aug 20 05:22:46 web1 sshd\[14269\]: Invalid user erfurt from 104.248.116.140 Aug 20 05:22:46 web1 sshd\[14269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.116.140 Aug 20 05:22:48 web1 sshd\[14269\]: Failed password for invalid user erfurt from 104.248.116.140 port 58228 ssh2 Aug 20 05:26:47 web1 sshd\[14633\]: Invalid user xerxes from 104.248.116.140 Aug 20 05:26:47 web1 sshd\[14633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.116.140	2019-08-20 23:42:42
106.52.132.19	attackbots	Aug 20 15:40:05 hcbbdb sshd\[22093\]: Invalid user vds123 from 106.52.132.19 Aug 20 15:40:05 hcbbdb sshd\[22093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.132.19 Aug 20 15:40:07 hcbbdb sshd\[22093\]: Failed password for invalid user vds123 from 106.52.132.19 port 36020 ssh2 Aug 20 15:43:24 hcbbdb sshd\[22465\]: Invalid user 123 from 106.52.132.19 Aug 20 15:43:24 hcbbdb sshd\[22465\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.132.19	2019-08-20 23:48:27
222.186.19.221	attackspam	firewall-block, port(s): 1900/udp	2019-08-21 02:11:40
104.148.70.38	attack	Spam	2019-08-21 00:01:43
111.223.49.131	attackspambots	19/8/20@10:53:28: FAIL: Alarm-Intrusion address from=111.223.49.131 ...	2019-08-20 23:43:41
106.13.44.78	attackbotsspam	Aug 20 20:00:36 hosting sshd[17668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.78 user=root Aug 20 20:00:39 hosting sshd[17668]: Failed password for root from 106.13.44.78 port 41800 ssh2 ...	2019-08-21 02:18:12
217.115.10.132	attackbotsspam	Automated report - ssh fail2ban: Aug 20 16:51:37 wrong password, user=root, port=40793, ssh2 Aug 20 16:51:41 wrong password, user=root, port=40793, ssh2 Aug 20 16:51:43 wrong password, user=root, port=40793, ssh2 Aug 20 16:51:47 wrong password, user=root, port=40793, ssh2	2019-08-21 01:57:16
94.228.4.249	attack	2019-08-20 09:52:22 H=(249.net-94.228.4.isbl.embou.net) [94.228.4.249]:53808 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address 2019-08-20 09:52:22 H=(249.net-94.228.4.isbl.embou.net) [94.228.4.249]:53808 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed 2019-08-20 09:52:24 H=(249.net-94.228.4.isbl.embou.net) [94.228.4.249]:53808 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed ...	2019-08-21 01:06:09
179.189.201.67	attack	Aug 20 16:50:22 xeon postfix/smtpd[14775]: warning: unknown[179.189.201.67]: SASL PLAIN authentication failed: authentication failure	2019-08-21 01:35:33

最近上报的IP列表

123.210.220.210	113.128.104.89	248.187.8.30	113.58.241.235
113.58.232.223	172.148.149.134	110.177.82.36	103.217.109.195
85.14.35.206	84.3.161.163	73.32.164.227	58.171.124.47
45.122.138.67	41.234.79.25	41.50.87.137	113.110.22.104
36.92.36.114	27.145.76.44	5.15.96.111	221.213.75.208