45.4.5.129 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Brazil

运营商(isp): Geiza Teixeira Martins Iida - ME

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Port probing on unauthorized port 23	2020-02-16 16:13:11

相同子网IP讨论:

IP	类型	评论内容	时间
45.4.5.221	attackspam	5x Failed Password	2020-10-06 02:35:22
45.4.5.221	attackbots	2020-10-05T02:27:00.967764server.mjenks.net sshd[521053]: Failed password for root from 45.4.5.221 port 42578 ssh2 2020-10-05T02:28:31.969645server.mjenks.net sshd[521278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.4.5.221 user=root 2020-10-05T02:28:33.514828server.mjenks.net sshd[521278]: Failed password for root from 45.4.5.221 port 34762 ssh2 2020-10-05T02:30:02.681249server.mjenks.net sshd[521429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.4.5.221 user=root 2020-10-05T02:30:04.718332server.mjenks.net sshd[521429]: Failed password for root from 45.4.5.221 port 55178 ssh2 ...	2020-10-05 18:23:27
45.4.5.221	attackspambots	Invalid user ftpuser2 from 45.4.5.221 port 42156	2020-09-06 21:14:53
45.4.5.221	attackbotsspam	Sep 5 22:27:12 marvibiene sshd[5906]: Failed password for root from 45.4.5.221 port 55886 ssh2 Sep 5 22:31:53 marvibiene sshd[7859]: Failed password for root from 45.4.5.221 port 33282 ssh2	2020-09-06 05:11:45
45.4.52.112	attack	Sep 4 18:46:26 mellenthin postfix/smtpd[28829]: NOQUEUE: reject: RCPT from unknown[45.4.52.112]: 554 5.7.1 Service unavailable; Client host [45.4.52.112] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/45.4.52.112; from= to= proto=ESMTP helo=<[45.4.52.112]>	2020-09-06 02:41:13
45.4.52.112	attackbots	Sep 4 18:46:26 mellenthin postfix/smtpd[28829]: NOQUEUE: reject: RCPT from unknown[45.4.52.112]: 554 5.7.1 Service unavailable; Client host [45.4.52.112] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/45.4.52.112; from= to= proto=ESMTP helo=<[45.4.52.112]>	2020-09-05 18:17:18
45.4.5.221	attack	Aug 31 21:42:11 cp sshd[18559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.4.5.221	2020-09-01 04:08:07
45.4.5.221	attackspambots	Aug 28 07:32:52 abendstille sshd\[8435\]: Invalid user orange from 45.4.5.221 Aug 28 07:32:52 abendstille sshd\[8435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.4.5.221 Aug 28 07:32:54 abendstille sshd\[8435\]: Failed password for invalid user orange from 45.4.5.221 port 44460 ssh2 Aug 28 07:37:52 abendstille sshd\[13604\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.4.5.221 user=root Aug 28 07:37:54 abendstille sshd\[13604\]: Failed password for root from 45.4.5.221 port 50962 ssh2 ...	2020-08-28 14:59:45
45.4.5.221	attackspambots	2020-08-24T16:30:29.352115hostname sshd[804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.4.5.221 2020-08-24T16:30:29.335601hostname sshd[804]: Invalid user jenkins from 45.4.5.221 port 60158 2020-08-24T16:30:31.164051hostname sshd[804]: Failed password for invalid user jenkins from 45.4.5.221 port 60158 ssh2 ...	2020-08-24 18:56:26
45.4.5.221	attack	2020-08-20T14:05:30.247114n23.at sshd[280992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.4.5.221 2020-08-20T14:05:30.239052n23.at sshd[280992]: Invalid user l from 45.4.5.221 port 52886 2020-08-20T14:05:33.061545n23.at sshd[280992]: Failed password for invalid user l from 45.4.5.221 port 52886 ssh2 ...	2020-08-20 22:55:42
45.4.5.221	attackspam	Bruteforce detected by fail2ban	2020-08-20 07:09:42
45.4.5.221	attackspam	Triggered by Fail2Ban at Ares web server	2020-08-14 15:23:25
45.4.5.221	attack	Aug 10 19:21:56 sso sshd[22187]: Failed password for root from 45.4.5.221 port 59286 ssh2 ...	2020-08-11 03:15:29
45.4.5.221	attack	Aug 5 22:34:11 melroy-server sshd[2919]: Failed password for root from 45.4.5.221 port 37122 ssh2 ...	2020-08-06 07:04:16
45.4.5.221	attack	Jul 30 21:08:01 mockhub sshd[9825]: Failed password for root from 45.4.5.221 port 38330 ssh2 ...	2020-07-31 15:59:54

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.4.5.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44335
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.4.5.129.			IN	A

;; AUTHORITY SECTION:
.			596	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021600 1800 900 604800 86400

;; Query time: 372 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 16 16:13:05 CST 2020
;; MSG SIZE  rcvd: 114

HOST信息:

129.5.4.45.in-addr.arpa domain name pointer geti.5-129.getibandalarga.com.br.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
129.5.4.45.in-addr.arpa	name = geti.5-129.getibandalarga.com.br.

Authoritative answers can be found from:

IP	类型	评论内容	时间
178.33.175.49	attack	Aug 6 11:40:31 dev0-dcde-rnet sshd[20159]: Failed password for root from 178.33.175.49 port 53584 ssh2 Aug 6 11:47:58 dev0-dcde-rnet sshd[20318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.175.49 Aug 6 11:48:00 dev0-dcde-rnet sshd[20318]: Failed password for invalid user com from 178.33.175.49 port 48066 ssh2	2020-08-06 17:53:15
193.201.105.62	attackbots	2020-08-05 13:08:46 Reject access to port(s):3389 2 times a day	2020-08-06 18:21:44
194.61.27.244	attackbotsspam	TCP port : 3389	2020-08-06 18:21:15
194.61.27.246	attack	TCP port : 3389	2020-08-06 18:20:46
184.105.247.227	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-08-06 18:23:56
104.206.128.46	attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-06 18:27:11
161.35.148.26	attack	Port scan denied	2020-08-06 18:25:30
122.228.19.79	attackbotsspam	Port scan: Attack repeated for 24 hours	2020-08-06 18:25:53
188.165.126.60	attackspam	Unauthorized connection attempt from IP address 188.165.126.60 on Port 3389(RDP)	2020-08-06 18:22:21
51.178.83.124	attack	Aug 6 04:17:00 mail sshd\[55109\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.83.124 user=root ...	2020-08-06 18:06:16
94.102.56.216	attack	SmallBizIT.US 4 packets to udp(41141,41143,41151,41156)	2020-08-06 18:11:39
122.114.222.52	attackspam	Fail2Ban	2020-08-06 18:03:50
106.13.163.39	attackbots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2020-08-06 18:06:58
146.88.240.4	attack	08/06/2020-06:01:12.567944 146.88.240.4 Protocol: 17 ET DROP Dshield Block Listed Source group 1	2020-08-06 18:02:17
194.61.27.248	attack	TCP port : 3389	2020-08-06 18:19:59

最近上报的IP列表

89.47.45.85	86.84.192.159	5.42.92.188	176.12.64.57
168.70.62.151	105.140.58.21	91.4.69.15	14.246.152.214
176.12.64.216	196.22.244.226	193.106.40.111	180.123.8.93
113.195.137.95	59.103.167.187	1.165.175.239	220.246.143.58
211.62.185.15	187.125.89.198	122.112.206.233	118.211.146.145