45.136.111.68 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): ComTrade LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Brute-Force Attack	2020-02-09 06:06:34

相同子网IP讨论:

IP	类型	评论内容	时间
45.136.111.115	attackspambots	RDP brute forcing (r)	2020-02-12 04:59:10
45.136.111.131	attackspam	Brute-Force Attack	2020-02-09 05:25:10
45.136.111.109	attackbotsspam	Jan 9 15:20:52 debian-2gb-nbg1-2 kernel: \[838965.019442\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.109 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=181 ID=12894 PROTO=TCP SPT=40032 DPT=33867 WINDOW=1024 RES=0x00 SYN URGP=0	2020-01-09 22:51:58
45.136.111.109	attackspambots	Jan 9 13:47:21 debian-2gb-nbg1-2 kernel: \[833353.752877\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.109 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=180 ID=49367 PROTO=TCP SPT=40032 DPT=33889 WINDOW=1024 RES=0x00 SYN URGP=0	2020-01-09 20:58:16
45.136.111.109	attack	Jan 3 15:58:09 h2177944 kernel: \[1262092.522476\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=27223 PROTO=TCP SPT=48227 DPT=3007 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 3 15:58:09 h2177944 kernel: \[1262092.522489\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=27223 PROTO=TCP SPT=48227 DPT=3007 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 3 16:33:07 h2177944 kernel: \[1264190.699883\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=62098 PROTO=TCP SPT=48227 DPT=3004 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 3 16:33:07 h2177944 kernel: \[1264190.699897\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=62098 PROTO=TCP SPT=48227 DPT=3004 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 3 16:33:12 h2177944 kernel: \[1264195.130428\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.	2020-01-04 00:00:41
45.136.111.109	attack	12/28/2019-06:29:14.241621 45.136.111.109 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-12-28 19:37:56
45.136.111.109	attackbots	Automatic report - Port Scan	2019-12-28 14:01:37
45.136.111.65	attack	Dec 14 09:30:07 debian-2gb-nbg1-2 kernel: \[24593735.530181\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.65 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=28231 PROTO=TCP SPT=45713 DPT=9094 WINDOW=1024 RES=0x00 SYN URGP=0	2019-12-14 17:04:08
45.136.111.65	attack	Dec 12 08:50:39 debian-2gb-vpn-nbg1-1 kernel: [508219.734117] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.65 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=61971 PROTO=TCP SPT=45713 DPT=14350 WINDOW=1024 RES=0x00 SYN URGP=0	2019-12-12 13:58:48
45.136.111.65	attack	Dec 11 11:38:58 debian-2gb-vpn-nbg1-1 kernel: [431921.053048] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.65 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54683 PROTO=TCP SPT=45713 DPT=64337 WINDOW=1024 RES=0x00 SYN URGP=0	2019-12-11 16:59:47
45.136.111.65	attack	Dec 9 20:34:34 debian-2gb-vpn-nbg1-1 kernel: [291261.390516] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.65 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=26352 PROTO=TCP SPT=45713 DPT=60385 WINDOW=1024 RES=0x00 SYN URGP=0	2019-12-10 01:43:26
45.136.111.21	attack	firewall-block, port(s): 3319/tcp, 3663/tcp, 3838/tcp	2019-11-23 15:08:04
45.136.111.24	attackspambots	1574317651 - 11/21/2019 07:27:31 Host: 45.136.111.24/45.136.111.24 Port: 6001 TCP Blocked	2019-11-21 16:44:38
45.136.111.21	attackbotsspam	CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2019-11-21 07:52:41
45.136.111.21	attackspam	45.136.111.21 was recorded 16 times by 10 hosts attempting to connect to the following ports: 3390,3386,3392,3387,3391,3384,3394,3393,3389,3382,3381. Incident counter (4h, 24h, all-time): 16, 51, 221	2019-11-18 03:10:47

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.136.111.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28854
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.136.111.68.			IN	A

;; AUTHORITY SECTION:
.			563	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020800 1800 900 604800 86400

;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 09 06:06:31 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 68.111.136.45.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 68.111.136.45.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
183.89.212.179	attackspam	Brute force attempt	2020-07-01 09:32:51
178.128.21.38	attackspambots	Jun 30 20:20:05 lukav-desktop sshd\[9612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.21.38 user=root Jun 30 20:20:07 lukav-desktop sshd\[9612\]: Failed password for root from 178.128.21.38 port 53850 ssh2 Jun 30 20:22:23 lukav-desktop sshd\[9625\]: Invalid user ch from 178.128.21.38 Jun 30 20:22:23 lukav-desktop sshd\[9625\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.21.38 Jun 30 20:22:25 lukav-desktop sshd\[9625\]: Failed password for invalid user ch from 178.128.21.38 port 57530 ssh2	2020-07-01 09:13:57
46.161.27.75	attackbots	TCP (SYN) 46.161.27.75:59865 -> port 22222, len 44	2020-07-01 09:14:49
221.146.168.180	attackspambots	TCP (SYN) 221.146.168.180:50915 -> port 23, len 40	2020-07-01 09:08:02
94.154.159.137	attack	TCP (SYN,ACK) 94.154.159.137:33355 -> port 36093, len 44	2020-07-01 09:26:58
192.3.1.22	attack	Invalid user terrariaserver from 192.3.1.22 port 35876	2020-07-01 09:17:09
123.58.109.42	attackspam	Jun 30 02:29:49 mellenthin sshd[31824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.58.109.42 Jun 30 02:29:51 mellenthin sshd[31824]: Failed password for invalid user pcguest from 123.58.109.42 port 58722 ssh2	2020-07-01 09:04:48
103.89.176.74	attackspam	Jun 30 19:19:13 debian-2gb-nbg1-2 kernel: \[15796190.480997\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=103.89.176.74 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=42385 PROTO=TCP SPT=57614 DPT=24071 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-01 09:21:12
122.152.211.187	attackbotsspam	Jun 30 14:08:14 DAAP sshd[30817]: Invalid user contest from 122.152.211.187 port 41970 Jun 30 14:08:14 DAAP sshd[30817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.152.211.187 Jun 30 14:08:14 DAAP sshd[30817]: Invalid user contest from 122.152.211.187 port 41970 Jun 30 14:08:16 DAAP sshd[30817]: Failed password for invalid user contest from 122.152.211.187 port 41970 ssh2 Jun 30 14:09:45 DAAP sshd[30893]: Invalid user printer from 122.152.211.187 port 53478 ...	2020-07-01 09:11:00
109.167.200.10	attackbots	Multiple SSH authentication failures from 109.167.200.10	2020-07-01 09:30:13
120.132.14.42	attack	Jun 30 18:17:18 gestao sshd[5085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.132.14.42 Jun 30 18:17:20 gestao sshd[5085]: Failed password for invalid user shankar from 120.132.14.42 port 50382 ssh2 Jun 30 18:18:00 gestao sshd[5104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.132.14.42 ...	2020-07-01 09:24:19
186.147.129.110	attack	Jul 1 02:53:48 localhost sshd[4160887]: Invalid user public from 186.147.129.110 port 57922 ...	2020-07-01 09:38:46
118.24.156.209	attack	TCP (SYN) 118.24.156.209:40739 -> port 12132, len 44	2020-07-01 09:44:45
201.149.55.53	attackspam	Jun 30 19:03:21 itv-usvr-02 sshd[8359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.149.55.53 user=root Jun 30 19:03:22 itv-usvr-02 sshd[8359]: Failed password for root from 201.149.55.53 port 48310 ssh2 Jun 30 19:07:02 itv-usvr-02 sshd[8541]: Invalid user fluffy from 201.149.55.53 port 51622 Jun 30 19:07:02 itv-usvr-02 sshd[8541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.149.55.53 Jun 30 19:07:02 itv-usvr-02 sshd[8541]: Invalid user fluffy from 201.149.55.53 port 51622 Jun 30 19:07:05 itv-usvr-02 sshd[8541]: Failed password for invalid user fluffy from 201.149.55.53 port 51622 ssh2	2020-07-01 09:29:49
185.153.208.21	attack	Multiple SSH authentication failures from 185.153.208.21	2020-07-01 09:22:39

最近上报的IP列表

91.108.212.154	211.214.184.89	178.188.157.172	45.57.238.22
92.234.221.214	75.109.32.168	65.234.8.147	71.241.8.249
66.117.204.237	1.5.195.72	132.154.74.227	75.34.17.68
223.16.238.34	67.18.105.155	2.38.246.90	171.228.154.227
181.228.223.139	178.7.229.143	173.110.103.183	27.211.212.146