必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Lithuania

运营商(isp): UAB Baltnetos komunikacijos

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Mar  9 13:06:36 mail.srvfarm.net postfix/smtpd[4047797]: NOQUEUE: reject: RCPT from unknown[45.146.203.132]: 554 5.7.1 Service unavailable; Client host [45.146.203.132] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
Mar  9 13:06:38 mail.srvfarm.net postfix/smtpd[4030581]: NOQUEUE: reject: RCPT from unknown[45.146.203.132]: 554 5.7.1 Service unavailable; Client host [45.146.203.132] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
Mar  9 13:07:55 mail.srvfarm.net postfix/smtpd[4047795]: NOQUEUE: reject: RCPT from unknown[45.146.203.132]: 554 5.7.1 Service unavailable; Client host [45.146.203.132] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo
2020-03-10 00:24:44
相同子网IP讨论:
IP 类型 评论内容 时间
45.146.203.32 attackspambots
Mar  7 22:55:28 mail.srvfarm.net postfix/smtpd[2937799]: NOQUEUE: reject: RCPT from unknown[45.146.203.32]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 22:56:31 mail.srvfarm.net postfix/smtpd[2937781]: NOQUEUE: reject: RCPT from unknown[45.146.203.32]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 22:56:41 mail.srvfarm.net postfix/smtpd[2941674]: NOQUEUE: reject: RCPT from unknown[45.146.203.32]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 22:56:53 mail.srvfarm.net postfix/smtpd[2937781]: NOQUEUE: reject: RCPT from unknown[45.146.203.32]: 450 4.1.8 :
2020-03-08 09:07:21
45.146.203.130 attackbotsspam
Mar  7 14:13:05 mail.srvfarm.net postfix/smtpd[2761160]: NOQUEUE: reject: RCPT from unknown[45.146.203.130]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 14:13:05 mail.srvfarm.net postfix/smtpd[2759319]: NOQUEUE: reject: RCPT from unknown[45.146.203.130]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 14:13:05 mail.srvfarm.net postfix/smtpd[2760275]: NOQUEUE: reject: RCPT from unknown[45.146.203.130]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 14:13:05 mail.srvfarm.net postfix/smtpd[2773733]: NOQUEUE: reject: RCPT from unknown[45.146.203.130]: 450
2020-03-08 05:56:34
45.146.203.95 attack
Mar  7 07:01:59 mail.srvfarm.net postfix/smtpd[2617077]: NOQUEUE: reject: RCPT from unknown[45.146.203.95]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 07:02:57 mail.srvfarm.net postfix/smtpd[2617075]: NOQUEUE: reject: RCPT from unknown[45.146.203.95]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 07:02:57 mail.srvfarm.net postfix/smtpd[2613524]: NOQUEUE: reject: RCPT from unknown[45.146.203.95]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 07:02:57 mail.srvfarm.net postfix/smtpd[2617089]: NOQUEUE: reject: RCPT from unknown[45.146.203.95]: 450 4.1.8 
2020-03-07 18:35:28
45.146.203.129 attackbotsspam
Mar  6 14:13:03 mail.srvfarm.net postfix/smtpd[2128698]: NOQUEUE: reject: RCPT from unknown[45.146.203.129]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  6 14:21:18 mail.srvfarm.net postfix/smtpd[2130205]: NOQUEUE: reject: RCPT from unknown[45.146.203.129]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  6 14:21:18 mail.srvfarm.net postfix/smtpd[2131732]: NOQUEUE: reject: RCPT from unknown[45.146.203.129]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  6 14:21:18 mail.srvfarm.net postfix/smtpd[2128648]: NOQUEUE: reject: RCPT from unknown[45.146.203.129]: 450 4.1.8 
2020-03-07 02:13:08
45.146.203.117 attack
Mar  4 21:55:52 web01 postfix/smtpd[2936]: connect from glossy.nabzezan.com[45.146.203.117]
Mar  4 21:55:52 web01 policyd-spf[2941]: None; identhostnamey=helo; client-ip=45.146.203.117; helo=glossy.scffa.co; envelope-from=x@x
Mar  4 21:55:52 web01 policyd-spf[2941]: None; identhostnamey=mailfrom; client-ip=45.146.203.117; helo=glossy.scffa.co; envelope-from=x@x
Mar x@x
Mar  4 21:55:52 web01 postfix/smtpd[2936]: disconnect from glossy.nabzezan.com[45.146.203.117]
Mar  4 21:57:15 web01 postfix/smtpd[2936]: connect from glossy.nabzezan.com[45.146.203.117]
Mar  4 21:57:15 web01 policyd-spf[2941]: None; identhostnamey=helo; client-ip=45.146.203.117; helo=glossy.scffa.co; envelope-from=x@x
Mar  4 21:57:15 web01 policyd-spf[2941]: None; identhostnamey=mailfrom; client-ip=45.146.203.117; helo=glossy.scffa.co; envelope-from=x@x
Mar x@x
Mar  4 21:57:15 web01 postfix/smtpd[2936]: disconnect from glossy.nabzezan.com[45.146.203.117]
Mar  4 22:00:07 web01 postfix/smtpd[3268]: connect........
-------------------------------
2020-03-05 09:16:32
45.146.203.182 attackspambots
Mar  4 05:40:53 web01.agentur-b-2.de postfix/smtpd[65984]: NOQUEUE: reject: RCPT from unknown[45.146.203.182]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Mar  4 05:40:53 web01.agentur-b-2.de postfix/smtpd[72795]: NOQUEUE: reject: RCPT from unknown[45.146.203.182]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Mar  4 05:40:53 web01.agentur-b-2.de postfix/smtpd[72796]: NOQUEUE: reject: RCPT from unknown[45.146.203.182]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Mar  4 05:40:53 web01.agentur-b-2.de postfix/smtpd[72797]: NOQUEUE: reject: RCPT from unknown[45.146.203.182]: 450 4.7.1 : Helo command r
2020-03-04 21:07:23
45.146.203.84 attack
Mar  3 05:54:45 web01 postfix/smtpd[5215]: connect from gabby.nabzezan.com[45.146.203.84]
Mar  3 05:54:45 web01 policyd-spf[5550]: None; identhostnamey=helo; client-ip=45.146.203.84; helo=gabby.ipsabt.com; envelope-from=x@x
Mar  3 05:54:45 web01 policyd-spf[5550]: None; identhostnamey=mailfrom; client-ip=45.146.203.84; helo=gabby.ipsabt.com; envelope-from=x@x
Mar x@x
Mar  3 05:54:45 web01 postfix/smtpd[5215]: disconnect from gabby.nabzezan.com[45.146.203.84]
Mar  3 05:54:55 web01 postfix/smtpd[5794]: connect from gabby.nabzezan.com[45.146.203.84]
Mar  3 05:54:55 web01 policyd-spf[5798]: None; identhostnamey=helo; client-ip=45.146.203.84; helo=gabby.ipsabt.com; envelope-from=x@x
Mar  3 05:54:55 web01 policyd-spf[5798]: None; identhostnamey=mailfrom; client-ip=45.146.203.84; helo=gabby.ipsabt.com; envelope-from=x@x
Mar x@x
Mar  3 05:54:55 web01 postfix/smtpd[5794]: disconnect from gabby.nabzezan.com[45.146.203.84]
Mar  3 05:56:02 web01 postfix/smtpd[5215]: connect from ga........
-------------------------------
2020-03-03 16:10:23
45.146.203.203 attackbotsspam
RBL listed IP. Trying to send Spam. IP autobanned
2020-02-08 01:16:48
45.146.203.61 attack
Autoban   45.146.203.61 AUTH/CONNECT
2020-01-23 11:00:19
45.146.203.103 attackspam
Autoban   45.146.203.103 REJECT
2020-01-02 01:05:08
45.146.203.98 attackbotsspam
Autoban   45.146.203.98 AUTH/CONNECT
2019-12-28 05:34:48
45.146.203.20 attack
Autoban   45.146.203.20 AUTH/CONNECT
2019-12-21 09:17:22
45.146.203.154 attackspambots
email spam
2019-12-19 20:02:40
45.146.203.170 attack
email spam
2019-12-19 19:09:03
45.146.203.145 attackspambots
email spam
2019-12-17 18:36:01
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.146.203.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48576
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.146.203.132.			IN	A

;; AUTHORITY SECTION:
.			306	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030901 1800 900 604800 86400

;; Query time: 50 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 10 00:24:39 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
132.203.146.45.in-addr.arpa domain name pointer health.sckenz.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
132.203.146.45.in-addr.arpa	name = health.sckenz.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
122.51.136.99 attackspam
Jan  8 21:43:29 sanyalnet-awsem3-1 sshd[20668]: Connection from 122.51.136.99 port 42198 on 172.30.0.184 port 22
Jan  8 21:43:31 sanyalnet-awsem3-1 sshd[20668]: Invalid user erika from 122.51.136.99
Jan  8 21:43:31 sanyalnet-awsem3-1 sshd[20668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.136.99 
Jan  8 21:43:33 sanyalnet-awsem3-1 sshd[20668]: Failed password for invalid user erika from 122.51.136.99 port 42198 ssh2
Jan  8 21:43:33 sanyalnet-awsem3-1 sshd[20668]: Received disconnect from 122.51.136.99: 11: Bye Bye [preauth]
Jan  8 21:53:53 sanyalnet-awsem3-1 sshd[21017]: Connection from 122.51.136.99 port 40310 on 172.30.0.184 port 22
Jan  8 21:53:55 sanyalnet-awsem3-1 sshd[21017]: Invalid user ftptest from 122.51.136.99
Jan  8 21:53:55 sanyalnet-awsem3-1 sshd[21017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.136.99 


........
-----------------------------------------------
https://www.blocklist.de/en/vie
2020-01-10 05:55:45
119.252.143.102 attackbots
Jan  9 22:27:11 ArkNodeAT sshd\[748\]: Invalid user user from 119.252.143.102
Jan  9 22:27:11 ArkNodeAT sshd\[748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.252.143.102
Jan  9 22:27:14 ArkNodeAT sshd\[748\]: Failed password for invalid user user from 119.252.143.102 port 35524 ssh2
2020-01-10 05:39:47
106.13.110.194 attackbotsspam
Lines containing failures of 106.13.110.194 (max 1000)
Jan 10 03:14:05 Server sshd[1903]: User r.r from 106.13.110.194 not allowed because not listed in AllowUsers
Jan 10 03:14:05 Server sshd[1903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.110.194  user=r.r
Jan 10 03:14:07 Server sshd[1903]: Failed password for invalid user r.r from 106.13.110.194 port 60478 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.13.110.194
2020-01-10 05:50:07
188.165.130.148 attackspambots
188.165.130.148 - - \[09/Jan/2020:22:39:35 +0100\] "POST /wp-login.php HTTP/1.0" 200 6699 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
188.165.130.148 - - \[09/Jan/2020:22:39:36 +0100\] "POST /wp-login.php HTTP/1.0" 200 6669 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
188.165.130.148 - - \[09/Jan/2020:22:39:37 +0100\] "POST /wp-login.php HTTP/1.0" 200 6701 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-01-10 05:59:49
61.177.172.128 attackbots
Jan  9 16:38:02 onepro2 sshd[8868]: Failed none for root from 61.177.172.128 port 62311 ssh2
Jan  9 16:38:04 onepro2 sshd[8868]: Failed password for root from 61.177.172.128 port 62311 ssh2
Jan  9 16:38:09 onepro2 sshd[8868]: Failed password for root from 61.177.172.128 port 62311 ssh2
2020-01-10 05:41:45
167.99.104.129 attackbots
20/1/9@16:26:32: FAIL: Alarm-Intrusion address from=167.99.104.129
...
2020-01-10 06:01:53
120.35.189.101 attackspam
2020-01-09 15:26:28 dovecot_login authenticator failed for (fmmaa) [120.35.189.101]:53005 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=liuqian@lerctr.org)
2020-01-09 15:26:35 dovecot_login authenticator failed for (aqfwb) [120.35.189.101]:53005 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=liuqian@lerctr.org)
2020-01-09 15:26:46 dovecot_login authenticator failed for (tedjq) [120.35.189.101]:53005 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=liuqian@lerctr.org)
...
2020-01-10 05:54:18
112.85.42.94 attackbotsspam
Jan  9 21:25:22 game-panel sshd[1300]: Failed password for root from 112.85.42.94 port 52511 ssh2
Jan  9 21:26:28 game-panel sshd[1321]: Failed password for root from 112.85.42.94 port 20865 ssh2
2020-01-10 05:29:08
177.62.143.93 attack
Jan  9 22:26:39 MK-Soft-VM6 sshd[20210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.62.143.93 
Jan  9 22:26:41 MK-Soft-VM6 sshd[20210]: Failed password for invalid user tomcat from 177.62.143.93 port 58024 ssh2
...
2020-01-10 05:58:33
222.186.173.183 attackspam
Jan  9 11:27:14 wbs sshd\[32091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183  user=root
Jan  9 11:27:16 wbs sshd\[32091\]: Failed password for root from 222.186.173.183 port 34714 ssh2
Jan  9 11:27:19 wbs sshd\[32091\]: Failed password for root from 222.186.173.183 port 34714 ssh2
Jan  9 11:27:22 wbs sshd\[32091\]: Failed password for root from 222.186.173.183 port 34714 ssh2
Jan  9 11:27:26 wbs sshd\[32091\]: Failed password for root from 222.186.173.183 port 34714 ssh2
2020-01-10 05:30:45
116.1.149.196 attackbots
Automatic report - Banned IP Access
2020-01-10 06:08:33
51.91.158.179 attackbotsspam
Fake Bingbot
2020-01-10 05:32:43
123.153.1.189 attack
Jan 10 02:43:57 gw1 sshd[18105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.153.1.189
Jan 10 02:43:59 gw1 sshd[18105]: Failed password for invalid user 369369 from 123.153.1.189 port 45680 ssh2
...
2020-01-10 06:02:54
120.24.4.159 attack
Unauthorized connection attempt detected from IP address 120.24.4.159 to port 445
2020-01-10 05:49:49
138.99.216.112 attackspam
Portscan or hack attempt detected by psad/fwsnort
2020-01-10 05:40:24

最近上报的IP列表

25.157.160.137 165.246.110.251 200.41.92.180 79.207.60.138
169.1.29.38 112.111.248.36 54.209.12.174 103.91.206.2
14.138.181.42 106.12.197.173 103.244.176.23 204.93.169.27
189.132.86.176 180.248.121.171 43.153.8.6 189.80.175.94
115.77.184.248 183.164.252.83 45.13.28.207 52.167.130.229