45.136.108.128

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): ComTrade LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	SIP/5060 Probe, BF, Hack -	2020-01-09 23:42:26
attackbots	Port scan on 9 port(s): 360 15186 22829 24241 34106 56263 62324 63435 64649	2020-01-06 22:16:09
attackspambots	Port scan on 16 port(s): 205 305 615 635 6788 20546 22829 23031 26566 31319 39397 44748 48889 50052 59394 61611	2019-12-28 07:10:32
attackbots	Port scan on 14 port(s): 34 420 970 5222 14725 19495 19522 24546 25251 32425 38384 41411 42627 60601	2019-12-27 05:42:56

相同子网IP讨论:

IP	类型	评论内容	时间
45.136.108.22	attackspambots	45.136.108.22 - - [31/Aug/2020:07:28:26 -0500] "- / HTTP/1.0" 400 219 000 0 0 0 15 282 0 0 0 NONE FIN FIN ERR_INVALID_REQ	2020-09-01 04:38:43
45.136.108.22	attack	Unauthorized connection attempt from IP address 45.136.108.22 on port 993	2020-08-29 02:06:36
45.136.108.24	attackspambots	SSH login attempts.	2020-08-22 23:35:58
45.136.108.22	attackspambots	Fail2Ban Ban Triggered	2020-08-19 09:11:16
45.136.108.65	attack	[14/Aug/2020:05:14:56 -0400] "\x03" Blank UA	2020-08-16 04:36:35
45.136.108.67	attack	Unauthorized connection attempt detected from IP address 45.136.108.67 to port 2261 [T]	2020-08-16 04:36:18
45.136.108.24	attackspam	Unauthorized connection attempt detected from IP address 45.136.108.24 to port 4453 [T]	2020-08-14 02:36:09
45.136.108.65	attackbotsspam	Unauthorized connection attempt detected from IP address 45.136.108.65 to port 968 [T]	2020-08-14 02:12:50
45.136.108.66	attackbotsspam	Unauthorized connection attempt detected from IP address 45.136.108.66 to port 1723 [T]	2020-08-14 02:12:33
45.136.108.68	attack	Unauthorized connection attempt detected from IP address 45.136.108.68 to port 3424 [T]	2020-08-14 02:12:09
45.136.108.22	attackbotsspam	Port scan detected	2020-08-14 01:49:56
45.136.108.67	attackspambots	Unauthorized connection attempt detected from IP address 45.136.108.67 to port 2925 [T]	2020-08-14 01:49:28
45.136.108.62	attack	Unauthorized connection attempt detected from IP address 45.136.108.62 to port 9055 [T]	2020-08-14 01:07:35
45.136.108.80	attackspambots	2020-08-12T12:42:42Z - RDP login failed multiple times. (45.136.108.80)	2020-08-12 22:09:08
45.136.108.18	attack	RDP brute forcing (r)	2020-08-04 21:39:59

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.136.108.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49305
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.136.108.128.			IN	A

;; AUTHORITY SECTION:
.			579	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122601 1800 900 604800 86400

;; Query time: 99 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 27 05:42:53 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 128.108.136.45.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 128.108.136.45.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
186.249.86.200	attackspam	2019-10-03 15:52:13 H=(livingwellness.it) [186.249.86.200]:54120 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/186.249.86.200) 2019-10-03 15:52:21 H=(livingwellness.it) [186.249.86.200]:54120 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-10-03 15:52:29 H=(livingwellness.it) [186.249.86.200]:54120 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-10-04 06:04:59
88.214.26.8	attack	Oct 4 03:53:34 webhost01 sshd[23085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.214.26.8 Oct 4 03:53:36 webhost01 sshd[23085]: Failed password for invalid user admin from 88.214.26.8 port 42058 ssh2 ...	2019-10-04 05:32:06
128.199.175.6	attackspam	Automatic report - Banned IP Access	2019-10-04 05:30:44
82.165.64.156	attackspambots	Oct 4 03:30:24 areeb-Workstation sshd[8909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.165.64.156 Oct 4 03:30:26 areeb-Workstation sshd[8909]: Failed password for invalid user rescue from 82.165.64.156 port 48260 ssh2 ...	2019-10-04 06:06:19
167.114.68.123	attackspam	SSH Server BruteForce Attack	2019-10-04 06:05:35
106.13.26.40	attackbotsspam	Oct 3 11:33:56 kapalua sshd\[21260\]: Invalid user adina from 106.13.26.40 Oct 3 11:33:56 kapalua sshd\[21260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.26.40 Oct 3 11:33:59 kapalua sshd\[21260\]: Failed password for invalid user adina from 106.13.26.40 port 33174 ssh2 Oct 3 11:37:47 kapalua sshd\[21620\]: Invalid user matteo from 106.13.26.40 Oct 3 11:37:47 kapalua sshd\[21620\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.26.40	2019-10-04 05:38:52
139.59.78.236	attack	Oct 3 23:10:24 andromeda sshd\[37477\]: Invalid user ldap from 139.59.78.236 port 54730 Oct 3 23:10:24 andromeda sshd\[37477\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.78.236 Oct 3 23:10:25 andromeda sshd\[37477\]: Failed password for invalid user ldap from 139.59.78.236 port 54730 ssh2	2019-10-04 05:55:37
222.186.30.152	attackbotsspam	Oct 3 23:29:06 h2177944 sshd\[25447\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.152 user=root Oct 3 23:29:09 h2177944 sshd\[25447\]: Failed password for root from 222.186.30.152 port 50739 ssh2 Oct 3 23:29:10 h2177944 sshd\[25447\]: Failed password for root from 222.186.30.152 port 50739 ssh2 Oct 3 23:29:12 h2177944 sshd\[25447\]: Failed password for root from 222.186.30.152 port 50739 ssh2 ...	2019-10-04 05:30:15
52.60.189.115	attack	Hit on /wordpress/wp-login.php	2019-10-04 05:50:21
175.124.43.123	attackspambots	Oct 3 11:23:06 web9 sshd\[27497\]: Invalid user 123456 from 175.124.43.123 Oct 3 11:23:06 web9 sshd\[27497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.124.43.123 Oct 3 11:23:08 web9 sshd\[27497\]: Failed password for invalid user 123456 from 175.124.43.123 port 56045 ssh2 Oct 3 11:27:28 web9 sshd\[28266\]: Invalid user 123 from 175.124.43.123 Oct 3 11:27:28 web9 sshd\[28266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.124.43.123	2019-10-04 05:32:51
222.186.190.2	attack	Oct 4 00:00:35 MK-Soft-Root1 sshd[5727]: Failed password for root from 222.186.190.2 port 26816 ssh2 Oct 4 00:00:40 MK-Soft-Root1 sshd[5727]: Failed password for root from 222.186.190.2 port 26816 ssh2 ...	2019-10-04 06:07:17
218.188.210.214	attackbots	Oct 3 23:53:37 vps01 sshd[21842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.188.210.214 Oct 3 23:53:39 vps01 sshd[21842]: Failed password for invalid user mysql from 218.188.210.214 port 53002 ssh2	2019-10-04 05:58:19
195.20.197.222	attack	[portscan] Port scan	2019-10-04 05:34:54
190.14.37.227	attackspam	Oct 3 14:42:23 localhost kernel: [3865962.740768] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=190.14.37.227 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=79 ID=50759 DF PROTO=TCP SPT=64219 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 3 14:42:23 localhost kernel: [3865962.740808] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=190.14.37.227 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=79 ID=50759 DF PROTO=TCP SPT=64219 DPT=22 SEQ=712200143 ACK=0 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 3 16:53:00 localhost kernel: [3873799.157992] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=190.14.37.227 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=73 ID=37888 DF PROTO=TCP SPT=65173 DPT=22 SEQ=3979357090 ACK=0 WINDOW=29200 RES=0x00 SYN URGP=0	2019-10-04 05:40:06
85.113.210.58	attackspam	Oct 3 22:53:07 vps647732 sshd[22207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.113.210.58 Oct 3 22:53:10 vps647732 sshd[22207]: Failed password for invalid user pos from 85.113.210.58 port 24385 ssh2 ...	2019-10-04 05:32:28

最近上报的IP列表

75.95.50.47	161.30.177.51	119.29.5.196	103.206.60.41
117.247.184.225	116.249.122.173	125.212.177.150	115.75.247.182
103.7.112.121	125.214.50.151	113.161.94.73	202.143.113.57
156.207.165.132	186.93.42.173	85.209.40.27	225.54.112.216
129.28.188.21	106.38.10.44	67.205.160.115	221.179.228.211