必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): Intercom LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attack
[H1.VM7] Blocked by UFW
2020-07-23 12:48:45
attackspambots
Jul 23 01:41:18 debian-2gb-nbg1-2 kernel: \[17719806.402056\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.145.66.55 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=13582 PROTO=TCP SPT=57028 DPT=53517 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-23 07:51:42
attackspam
Jul 22 17:42:34 debian-2gb-nbg1-2 kernel: \[17691084.170479\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.145.66.55 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=57934 PROTO=TCP SPT=62000 DPT=14920 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-23 00:21:41
相同子网IP讨论:
IP 类型 评论内容 时间
45.145.66.104 attackbots
Excessive Port-Scanning
2020-10-04 02:34:03
45.145.66.104 attackbotsspam
[HOST2] Port Scan detected
2020-10-03 18:21:49
45.145.66.159 attackbotsspam
RDPBruteGam24
2020-09-29 02:25:57
45.145.66.159 attack
RDPBruteGam24
2020-09-28 18:33:33
45.145.66.67 attack
scans once in preceeding hours on the ports (in chronological order) 20425 resulting in total of 13 scans from 45.145.66.0/23 block.
2020-09-13 22:45:10
45.145.66.67 attackspambots
Fail2Ban Ban Triggered
2020-09-13 14:40:51
45.145.66.67 attackbots
Fail2Ban Ban Triggered
2020-09-13 06:23:54
45.145.66.104 attackbots
Unauthorized connection attempt from IP address 45.145.66.104 on Port 3389(RDP)
2020-09-09 17:11:10
45.145.66.96 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 23 - port: 13947 proto: tcp cat: Misc Attackbytes: 60
2020-09-08 04:18:28
45.145.66.96 attackbots
SmallBizIT.US 20 packets to tcp(13911,13959,13990,14001,14015,14016,14022,14028,14036,14052,14068,14069,14075,14076,14120,14132,14146,14170,14186,14194)
2020-09-07 19:54:56
45.145.66.96 attackspambots
Port scan: Attack repeated for 24 hours
2020-09-06 04:08:16
45.145.66.96 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 23 - port: 14029 proto: tcp cat: Misc Attackbytes: 60
2020-09-05 19:53:35
45.145.66.90 attackbots
9922/tcp 4899/tcp 1022/tcp...
[2020-06-27/08-27]230pkt,86pt.(tcp)
2020-08-29 15:27:53
45.145.66.120 attackbots
[H1.VM8] Blocked by UFW
2020-08-27 07:37:28
45.145.66.21 attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 23 - port: 29939 proto: tcp cat: Misc Attackbytes: 60
2020-08-27 02:41:52
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.145.66.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65514
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.145.66.55.			IN	A

;; AUTHORITY SECTION:
.			549	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072200 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 23 00:21:35 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
Host 55.66.145.45.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 55.66.145.45.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
103.56.207.81 attack
trying to access non-authorized port
2020-09-24 15:59:46
217.136.171.122 attack
(sshd) Failed SSH login from 217.136.171.122 (BE/Belgium/122.171-136-217.adsl-static.isp.belgacom.be): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 23 13:02:06 internal2 sshd[1901]: Invalid user admin from 217.136.171.122 port 37274
Sep 23 13:02:07 internal2 sshd[1940]: Invalid user admin from 217.136.171.122 port 37342
Sep 23 13:02:09 internal2 sshd[1961]: Invalid user admin from 217.136.171.122 port 37372
2020-09-24 16:16:37
13.68.254.96 attackspam
Sep 24 04:47:56 marvibiene sshd[34648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.254.96  user=root
Sep 24 04:47:58 marvibiene sshd[34648]: Failed password for root from 13.68.254.96 port 2142 ssh2
Sep 24 05:11:52 marvibiene sshd[6319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.254.96  user=root
Sep 24 05:11:54 marvibiene sshd[6319]: Failed password for root from 13.68.254.96 port 22795 ssh2
2020-09-24 16:17:38
104.248.235.174 attackbots
Automatic report - XMLRPC Attack
2020-09-24 16:11:38
68.183.229.218 attack
Sep 24 08:20:24 * sshd[30747]: Failed password for root from 68.183.229.218 port 40270 ssh2
2020-09-24 16:24:03
89.248.169.94 attackbots
Sep 24 01:38:36 [host] kernel: [1236330.720053] [U
Sep 24 01:42:19 [host] kernel: [1236553.667330] [U
Sep 24 01:56:08 [host] kernel: [1237382.692303] [U
Sep 24 01:57:08 [host] kernel: [1237443.259790] [U
Sep 24 01:58:46 [host] kernel: [1237540.448229] [U
Sep 24 01:59:31 [host] kernel: [1237586.206618] [U
2020-09-24 16:21:04
163.172.32.190 attack
fulda-media.de 163.172.32.190 [24/Sep/2020:09:15:14 +0200] "POST /wp-login.php HTTP/1.1" 200 6769 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
fulda-media.de 163.172.32.190 [24/Sep/2020:09:15:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-24 16:04:02
52.142.10.22 attackbots
Sep 23 15:32:36 h2865660 sshd[16803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.142.10.22  user=root
Sep 23 15:32:38 h2865660 sshd[16803]: Failed password for root from 52.142.10.22 port 57320 ssh2
Sep 24 02:42:53 h2865660 sshd[14209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.142.10.22  user=root
Sep 24 02:42:54 h2865660 sshd[14209]: Failed password for root from 52.142.10.22 port 39346 ssh2
Sep 24 10:02:23 h2865660 sshd[9161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.142.10.22  user=root
Sep 24 10:02:26 h2865660 sshd[9161]: Failed password for root from 52.142.10.22 port 25825 ssh2
...
2020-09-24 16:05:41
82.213.32.201 attackbotsspam
Unauthorized connection attempt from IP address 82.213.32.201 on Port 445(SMB)
2020-09-24 15:55:48
103.17.88.16 attack
Unauthorized connection attempt from IP address 103.17.88.16 on Port 445(SMB)
2020-09-24 16:17:17
46.101.4.101 attackspambots
"Unauthorized connection attempt on SSHD detected"
2020-09-24 16:16:10
113.172.164.254 attackbots
(eximsyntax) Exim syntax errors from 113.172.164.254 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-09-23 20:32:20 SMTP call from [113.172.164.254] dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f?	?")
2020-09-24 16:01:05
178.74.102.1 attackbots
Unauthorized connection attempt from IP address 178.74.102.1 on Port 445(SMB)
2020-09-24 15:45:25
86.57.222.46 attackbotsspam
Unauthorized connection attempt from IP address 86.57.222.46 on Port 445(SMB)
2020-09-24 16:26:10
123.24.154.56 attackspambots
20/9/23@13:02:03: FAIL: Alarm-Network address from=123.24.154.56
...
2020-09-24 16:25:31

最近上报的IP列表

82.191.188.65 58.194.104.117 63.215.26.218 92.64.23.128
14.25.120.186 24.58.229.4 190.207.234.182 36.55.210.142
69.192.236.75 103.174.107.46 121.214.147.64 48.59.24.125
32.208.192.241 109.245.143.166 124.114.177.107 18.157.236.136
198.8.80.103 152.136.212.92 227.207.240.73 113.189.15.100