45.134.24.139 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
spamattack	45.134.24.230 (RU)	2020-02-15 13:50:35
spamattack	45.134.24.230 (RU)	2020-02-15 13:50:28

相同子网IP讨论:

IP	类型	评论内容	时间
45.134.24.7	attackspam	DDOS - one of 48 separate Russian addresses (plus one Lithuanian) IP addresses used to attack our website by repeatedly attempting to download the same, large file. All requests had the same signature, RestSharp/106.11.4.0	2020-07-10 20:54:05
45.134.24.75	attack	My Steam account was hacked and stolen by this IP address on July 5, 2020 at 2:50PM Eastern Standard Time.	2020-07-06 03:41:13

类型

评论内容

时间

45.134.24.7

attackspam

DDOS - one of 48 separate Russian addresses (plus one Lithuanian) IP addresses used to attack our website by repeatedly attempting to download the same, large file. All requests had the same signature, RestSharp/106.11.4.0

2020-07-10 20:54:05

45.134.24.75

attack

My Steam account was hacked and stolen by this IP address on July 5, 2020 at 2:50PM Eastern Standard Time.

2020-07-06 03:41:13

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.134.24.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43320
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.134.24.139.			IN	A

;; AUTHORITY SECTION:
.			312	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012802 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 10:04:08 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 139.24.134.45.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.24.134.45.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
139.99.134.195	attackbotsspam	GET /configuration.php-bak GET /configuration.php_bak GET /configuration.php.bak GET /configuration.bak GET /configuration.php_new GET /configuration.php.old GET /configuration.php.new GET /configuration.php_Old GET /configuration.php_old	2020-10-12 07:31:56
153.101.167.242	attackspambots	Oct 11 19:35:01 ws24vmsma01 sshd[62273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.101.167.242 Oct 11 19:35:03 ws24vmsma01 sshd[62273]: Failed password for invalid user dyndns from 153.101.167.242 port 36834 ssh2 ...	2020-10-12 07:28:49
177.81.27.78	attack	Oct 12 00:11:09 vps8769 sshd[5739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.81.27.78 Oct 12 00:11:11 vps8769 sshd[5739]: Failed password for invalid user harris from 177.81.27.78 port 9773 ssh2 ...	2020-10-12 07:02:32
101.36.110.202	attack	DATE:2020-10-11 03:34:15, IP:101.36.110.202, PORT:ssh SSH brute force auth (docker-dc)	2020-10-12 07:07:47
120.70.100.88	attackbotsspam	Oct 11 15:37:50 vps208890 sshd[10329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.70.100.88	2020-10-12 07:11:27
188.166.213.172	attack	Bruteforce detected by fail2ban	2020-10-12 07:17:31
61.216.161.223	attackspam	TCP (SYN) 61.216.161.223:10321 -> port 23, len 44	2020-10-12 07:18:36
142.93.211.36	attackspambots	Oct 12 00:25:27 hidden sshd[869]: Failed password for hidden from 142.93.211.36 port 56534 ssh2 Oct 12 00:28:28 hidden sshd[1320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.211.36 user=root Oct 12 00:28:30 hidden sshd[1320]: Failed password for hidden from 142.93.211.36 port 40212 ssh2	2020-10-12 07:11:11
152.136.143.44	attack	bruteforce detected	2020-10-12 07:18:01
51.255.173.222	attack	(sshd) Failed SSH login from 51.255.173.222 (FR/France/222.ip-51-255-173.eu): 5 in the last 3600 secs	2020-10-12 07:19:35
163.172.154.178	attackbotsspam	2020-10-12T00:30:12+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)	2020-10-12 07:08:18
134.209.189.230	attack	134.209.189.230 - - [17/Sep/2020:21:16:16 +0200] "GET /muieblackcat HTTP/1.1" 404 390 "-" "-" 134.209.189.230 - - [17/Sep/2020:21:16:16 +0200] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 390 "-" "-" 134.209.189.230 - - [17/Sep/2020:21:16:16 +0200] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 390 "-" "-" 134.209.189.230 - - [17/Sep/2020:21:16:16 +0200] "GET //pma/scripts/setup.php HTTP/1.1" 404 390 "-" "-" 134.209.189.230 - - [17/Sep/2020:21:16:16 +0200] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 390 "-" "-" ...	2020-10-12 07:14:23
73.72.31.114	attackbots	Oct 12 00:07:59 pve1 sshd[3959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.72.31.114 Oct 12 00:08:01 pve1 sshd[3959]: Failed password for invalid user jack from 73.72.31.114 port 49958 ssh2 ...	2020-10-12 07:24:19
185.202.2.147	attackspam	185.202.2.147 - - \[11/Oct/2020:23:39:41 +0200\] "\x03\x00\x00/\*\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Administr" 400 166 "-" "-" ...	2020-10-12 07:09:16
103.45.130.165	attack	bruteforce detected	2020-10-12 07:10:46

最近上报的IP列表

123.210.220.210	113.128.104.89	248.187.8.30	113.58.241.235
113.58.232.223	172.148.149.134	110.177.82.36	103.217.109.195
85.14.35.206	84.3.161.163	73.32.164.227	58.171.124.47
45.122.138.67	41.234.79.25	41.50.87.137	113.110.22.104
36.92.36.114	27.145.76.44	5.15.96.111	221.213.75.208