45.138.172.63 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
45.138.172.125	attackbotsspam	(pop3d) Failed POP3 login from 45.138.172.125 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 2 16:38:29 ir1 dovecot[3110802]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=45.138.172.125, lip=5.63.12.44, session=	2020-08-03 00:47:50
45.138.172.57	attack	Portscan or hack attempt detected by psad/fwsnort	2020-03-20 23:18:33
45.138.172.252	attackspam	Lines containing failures of 45.138.172.252 /var/log/apache/pucorp.org.log:45.138.172.252 - - [11/Dec/2019:06:02:06 +0100] "GET / HTTP/1.1" 301 691 "-" "Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt; DTS Agent" ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.138.172.252	2019-12-14 17:03:24

类型

评论内容

时间

45.138.172.125

attackbotsspam

(pop3d) Failed POP3 login from 45.138.172.125 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug  2 16:38:29 ir1 dovecot[3110802]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=45.138.172.125, lip=5.63.12.44, session=

2020-08-03 00:47:50

45.138.172.57

attack

Portscan or hack attempt detected by psad/fwsnort

2020-03-20 23:18:33

45.138.172.252

attackspam

Lines containing failures of 45.138.172.252
/var/log/apache/pucorp.org.log:45.138.172.252 - - [11/Dec/2019:06:02:06 +0100] "GET / HTTP/1.1" 301 691 "-" "Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt; DTS Agent"


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.138.172.252

2019-12-14 17:03:24

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.138.172.63
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8471
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.138.172.63.			IN	A

;; AUTHORITY SECTION:
.			48	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022050101 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 02 10:46:55 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 63.172.138.45.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 63.172.138.45.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
106.15.239.73	attackbotsspam	(sshd) Failed SSH login from 106.15.239.73 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jan 5 06:52:37 s1 sshd[21908]: Invalid user firebird from 106.15.239.73 port 42492 Jan 5 06:52:39 s1 sshd[21908]: Failed password for invalid user firebird from 106.15.239.73 port 42492 ssh2 Jan 5 06:55:04 s1 sshd[21944]: Invalid user oracle from 106.15.239.73 port 52496 Jan 5 06:55:06 s1 sshd[21944]: Failed password for invalid user oracle from 106.15.239.73 port 52496 ssh2 Jan 5 06:57:37 s1 sshd[22001]: Invalid user butter from 106.15.239.73 port 34260	2020-01-05 13:14:38
78.46.124.50	attackbots	Nov 1 20:16:29 vpn sshd[29575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.46.124.50 user=root Nov 1 20:16:31 vpn sshd[29575]: Failed password for root from 78.46.124.50 port 44692 ssh2 Nov 1 20:17:49 vpn sshd[29582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.46.124.50 user=root Nov 1 20:17:51 vpn sshd[29582]: Failed password for root from 78.46.124.50 port 56922 ssh2 Nov 1 20:19:10 vpn sshd[29584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.46.124.50 user=root	2020-01-05 13:32:59
78.58.200.58	attackspam	Jul 17 12:51:15 vpn sshd[20864]: Invalid user pi from 78.58.200.58 Jul 17 12:51:15 vpn sshd[20862]: Invalid user pi from 78.58.200.58 Jul 17 12:51:15 vpn sshd[20864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.58.200.58 Jul 17 12:51:15 vpn sshd[20862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.58.200.58 Jul 17 12:51:17 vpn sshd[20864]: Failed password for invalid user pi from 78.58.200.58 port 60426 ssh2	2020-01-05 13:25:03
78.8.9.196	attackspam	Jan 7 08:32:25 vpn sshd[10999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.8.9.196 Jan 7 08:32:27 vpn sshd[10999]: Failed password for invalid user anderson from 78.8.9.196 port 37392 ssh2 Jan 7 08:36:33 vpn sshd[11004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.8.9.196	2020-01-05 13:23:35
206.189.225.85	attackbotsspam	Jan 5 06:24:24 legacy sshd[18435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.225.85 Jan 5 06:24:26 legacy sshd[18435]: Failed password for invalid user anicia from 206.189.225.85 port 53070 ssh2 Jan 5 06:27:33 legacy sshd[18737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.225.85 ...	2020-01-05 13:31:27
222.186.175.148	attack	Jan 5 02:30:21 firewall sshd[14134]: Failed password for root from 222.186.175.148 port 40046 ssh2 Jan 5 02:30:34 firewall sshd[14134]: error: maximum authentication attempts exceeded for root from 222.186.175.148 port 40046 ssh2 [preauth] Jan 5 02:30:34 firewall sshd[14134]: Disconnecting: Too many authentication failures [preauth] ...	2020-01-05 13:31:10
78.94.36.59	attack	Sep 21 06:08:07 vpn sshd[29946]: Invalid user deploy from 78.94.36.59 Sep 21 06:08:07 vpn sshd[29946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.94.36.59 Sep 21 06:08:09 vpn sshd[29946]: Failed password for invalid user deploy from 78.94.36.59 port 42624 ssh2 Sep 21 06:16:59 vpn sshd[29955]: Invalid user vncuser from 78.94.36.59 Sep 21 06:16:59 vpn sshd[29955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.94.36.59	2020-01-05 13:19:53
78.211.128.54	attack	Aug 3 14:34:08 vpn sshd[428]: Invalid user pi from 78.211.128.54 Aug 3 14:34:08 vpn sshd[429]: Invalid user pi from 78.211.128.54 Aug 3 14:34:08 vpn sshd[428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.211.128.54 Aug 3 14:34:08 vpn sshd[429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.211.128.54 Aug 3 14:34:10 vpn sshd[428]: Failed password for invalid user pi from 78.211.128.54 port 50672 ssh2	2020-01-05 13:45:44
107.6.169.252	attackspambots	3389BruteforceFW21	2020-01-05 13:53:04
78.226.136.165	attack	Mar 30 08:31:33 vpn sshd[11405]: Invalid user pi from 78.226.136.165 Mar 30 08:31:33 vpn sshd[11407]: Invalid user pi from 78.226.136.165 Mar 30 08:31:33 vpn sshd[11405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.226.136.165 Mar 30 08:31:33 vpn sshd[11407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.226.136.165 Mar 30 08:31:35 vpn sshd[11405]: Failed password for invalid user pi from 78.226.136.165 port 57006 ssh2	2020-01-05 13:42:05
36.108.170.241	attackbots	Jan 4 19:37:32 eddieflores sshd\[27548\]: Invalid user paps from 36.108.170.241 Jan 4 19:37:32 eddieflores sshd\[27548\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.108.170.241 Jan 4 19:37:34 eddieflores sshd\[27548\]: Failed password for invalid user paps from 36.108.170.241 port 60685 ssh2 Jan 4 19:40:57 eddieflores sshd\[27954\]: Invalid user Pass123 from 36.108.170.241 Jan 4 19:40:57 eddieflores sshd\[27954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.108.170.241	2020-01-05 13:47:07
78.46.76.250	attack	Dec 9 18:39:22 vpn sshd[10501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.46.76.250 Dec 9 18:39:23 vpn sshd[10501]: Failed password for invalid user www from 78.46.76.250 port 34866 ssh2 Dec 9 18:44:21 vpn sshd[10567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.46.76.250	2020-01-05 13:33:40
79.1.212.37	attackspambots	Mar 4 16:59:54 vpn sshd[567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.1.212.37 Mar 4 16:59:56 vpn sshd[567]: Failed password for invalid user xf from 79.1.212.37 port 61859 ssh2 Mar 4 17:05:13 vpn sshd[607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.1.212.37	2020-01-05 13:15:56
78.243.116.144	attackspam	Jul 26 20:24:17 vpn sshd[28501]: Invalid user pi from 78.243.116.144 Jul 26 20:24:19 vpn sshd[28503]: Invalid user pi from 78.243.116.144 Jul 26 20:24:19 vpn sshd[28501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.243.116.144 Jul 26 20:24:19 vpn sshd[28503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.243.116.144 Jul 26 20:24:21 vpn sshd[28501]: Failed password for invalid user pi from 78.243.116.144 port 59336 ssh2	2020-01-05 13:36:33
51.89.164.224	attack	Jan 4 19:23:28 hanapaa sshd\[15949\]: Invalid user i from 51.89.164.224 Jan 4 19:23:28 hanapaa sshd\[15949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=224.ip-51-89-164.eu Jan 4 19:23:30 hanapaa sshd\[15949\]: Failed password for invalid user i from 51.89.164.224 port 52694 ssh2 Jan 4 19:25:47 hanapaa sshd\[16169\]: Invalid user developer from 51.89.164.224 Jan 4 19:25:47 hanapaa sshd\[16169\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=224.ip-51-89-164.eu	2020-01-05 13:26:38

最近上报的IP列表

122.143.1.131	171.67.71.32	206.52.170.71	214.175.117.198
212.229.126.53	217.182.172.144	211.115.116.190	161.36.166.132
216.164.167.10	14.11.151.173	181.184.204.216	116.82.56.165
17.117.169.45	211.45.63.119	134.195.101.74	247.53.106.94
122.40.70.156	190.118.180.73	142.233.194.72	91.73.90.108