必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): ComTrade LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:
类型 评论内容 时间
attack
09/23/2019-01:52:45.766599 45.136.109.140 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-09-23 14:21:50
attackspambots
09/21/2019-14:07:24.880312 45.136.109.140 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-09-22 02:07:40
相同子网IP讨论:
IP 类型 评论内容 时间
45.136.109.219 attackspambots
ET CINS Active Threat Intelligence Poor Reputation IP group 26 - port: 6000 proto: tcp cat: Misc Attackbytes: 60
2020-08-19 23:39:13
45.136.109.219 attackspam
slow and persistent scanner
2020-08-17 20:34:11
45.136.109.251 attackbotsspam
Port scanning [3 denied]
2020-08-14 14:18:15
45.136.109.219 attackbots
 TCP (SYN) 45.136.109.219:50230 -> port 53, len 44
2020-08-07 08:11:38
45.136.109.219 attackbotsspam
[Tue Aug 04 17:47:28 2020] - DDoS Attack From IP: 45.136.109.219 Port: 41096
2020-08-06 18:31:50
45.136.109.219 attack
 TCP (SYN) 45.136.109.219:43869 -> port 53, len 44
2020-08-05 23:34:34
45.136.109.158 attack
Unauthorized connection attempt detected from IP address 45.136.109.158 to port 3389
2020-07-22 15:39:59
45.136.109.87 attack
BruteForce RDP attempts from 45.136.109.175
2020-07-17 14:21:12
45.136.109.158 attack
SmallBizIT.US 2 packets to tcp(3389,3391)
2020-07-07 12:28:14
45.136.109.158 attackbots
Unauthorized connection attempt detected from IP address 45.136.109.158 to port 4489 [T]
2020-07-05 22:47:55
45.136.109.175 attackspambots
Icarus honeypot on github
2020-07-02 08:25:18
45.136.109.251 attackbots
Multiport scan : 15 ports scanned 2888 3381 3382 3402 3420 3501 3502 4003 4018 5909 7926 8093 9000 9261 9833
2020-06-21 07:47:48
45.136.109.219 attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 27 - port: 6389 proto: TCP cat: Misc Attack
2020-06-06 08:47:05
45.136.109.222 attackspam
Mar 22 03:57:09 src: 45.136.109.222 signature match: "BACKDOOR NetSphere Connection attempt" (sid: 100044) tcp port: 30100
2020-03-22 12:01:46
45.136.109.222 attackbotsspam
Mar 18 22:14:16 src: 45.136.109.222 signature match: "BACKDOOR Subseven connection attempt" (sid: 100207) tcp port: 27374
2020-03-19 06:22:33
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.136.109.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5941
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.136.109.140.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092100 1800 900 604800 86400

;; Query time: 619 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 22 02:07:35 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 140.109.136.45.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 140.109.136.45.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
212.55.94.18 attackspambots
Honeypot hit.
2020-02-13 23:34:51
78.128.113.62 attackbots
21 attempts against mh_ha-misbehave-ban on lb
2020-02-13 23:18:56
95.70.157.102 attack
1581601784 - 02/13/2020 14:49:44 Host: 95.70.157.102/95.70.157.102 Port: 445 TCP Blocked
2020-02-13 22:57:01
223.71.167.164 attack
Portscan or hack attempt detected by psad/fwsnort
2020-02-13 23:13:13
187.111.221.83 attack
Feb 13 09:15:19 XXX sshd[8104]: reveeclipse mapping checking getaddrinfo for 187-111-221-83.virt.com.br [187.111.221.83] failed - POSSIBLE BREAK-IN ATTEMPT!
Feb 13 09:15:19 XXX sshd[8104]: User r.r from 187.111.221.83 not allowed because none of user's groups are listed in AllowGroups
Feb 13 09:15:28 XXX sshd[8108]: reveeclipse mapping checking getaddrinfo for 187-111-221-83.virt.com.br [187.111.221.83] failed - POSSIBLE BREAK-IN ATTEMPT!
Feb 13 09:15:28 XXX sshd[8108]: User r.r from 187.111.221.83 not allowed because none of user's groups are listed in AllowGroups
Feb 13 09:15:36 XXX sshd[8111]: reveeclipse mapping checking getaddrinfo for 187-111-221-83.virt.com.br [187.111.221.83] failed - POSSIBLE BREAK-IN ATTEMPT!
Feb 13 09:15:36 XXX sshd[8111]: User r.r from 187.111.221.83 not allowed because none of user's groups are listed in AllowGroups
Feb 13 09:15:37 XXX sshd[8111]: Received disconnect from 187.111.221.83: 11: disconnected by user [preauth]
Feb 13 09:15:44 XX........
-------------------------------
2020-02-13 23:08:18
35.198.115.127 attack
ICMP MH Probe, Scan /Distributed -
2020-02-13 23:26:37
156.236.119.166 attack
Automatic report - SSH Brute-Force Attack
2020-02-13 23:03:58
58.82.224.218 attack
Feb 13 10:16:29 xxxx sshd[23025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.82.224.218  user=r.r
Feb 13 10:16:31 xxxx sshd[23025]: Failed password for r.r from 58.82.224.218 port 37884 ssh2
Feb 13 10:16:34 xxxx sshd[23027]: Invalid user admln from 58.82.224.218
Feb 13 10:16:34 xxxx sshd[23027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.82.224.218 
Feb 13 10:16:35 xxxx sshd[23027]: Failed password for invalid user admln from 58.82.224.218 port 41666 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=58.82.224.218
2020-02-13 23:05:11
192.241.238.125 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-13 23:27:12
202.43.168.72 attackbotsspam
IMAP brute force
...
2020-02-13 23:19:26
173.245.202.210 attackbots
[2020-02-13 09:55:45] NOTICE[1148] chan_sip.c: Registration from '' failed for '173.245.202.210:63069' - Wrong password
[2020-02-13 09:55:45] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-13T09:55:45.012-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="17454",SessionID="0x7fd82ca712e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/173.245.202.210/63069",Challenge="16092da7",ReceivedChallenge="16092da7",ReceivedHash="b2ab3c9c3890b1acedf2be7802d85821"
[2020-02-13 09:56:10] NOTICE[1148] chan_sip.c: Registration from '' failed for '173.245.202.210:64140' - Wrong password
[2020-02-13 09:56:10] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-13T09:56:10.518-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="13750",SessionID="0x7fd82c57aa58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/173
...
2020-02-13 22:58:52
193.29.13.28 attack
20 attempts against mh-misbehave-ban on sonic
2020-02-13 23:17:56
45.154.255.44 attackbotsspam
02/13/2020-14:49:11.497672 45.154.255.44 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 67
2020-02-13 23:39:39
103.61.37.231 attack
Feb 13 14:49:24 * sshd[30894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.61.37.231
Feb 13 14:49:26 * sshd[30894]: Failed password for invalid user rnashcroft from 103.61.37.231 port 33117 ssh2
2020-02-13 23:21:03
182.253.8.160 attack
20/2/13@08:49:36: FAIL: Alarm-Network address from=182.253.8.160
...
2020-02-13 23:06:23

最近上报的IP列表

209.63.92.135 92.81.254.214 90.231.216.77 9.92.247.213
213.100.250.96 75.43.54.153 91.53.88.171 251.86.133.13
210.77.178.138 249.153.43.233 190.59.49.20 21.251.64.214
161.192.91.98 222.148.57.114 140.23.205.147 70.142.117.231
90.34.113.135 192.254.173.208 191.227.92.42 41.117.58.196