必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Linode LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
ATTACKS ON 443 WEB ROUTER PANEL
2022-11-21 22:27:15
attackspambots
scans once in preceeding hours on the ports (in chronological order) 27017 resulting in total of 4 scans from 45.56.64.0/18 block.
2020-09-24 02:48:11
attackspambots
TCP ports : 3307 / 5985 / 6375 / 6381 / 27017
2020-09-23 18:58:43
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.56.96.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42277
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.56.96.139.			IN	A

;; AUTHORITY SECTION:
.			478	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092300 1800 900 604800 86400

;; Query time: 101 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 23 18:58:40 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
139.96.56.45.in-addr.arpa domain name pointer probe42790453.xlii.cloud.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
139.96.56.45.in-addr.arpa	name = probe42790453.xlii.cloud.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
41.39.81.242 attackspam
Attempted connection to port 445.
2020-09-08 04:07:33
197.248.52.46 attack
Attempted connection to port 23.
2020-09-08 04:10:12
144.217.19.8 attackspam
144.217.19.8 (CA/Canada/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep  7 10:19:16 server5 sshd[28779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.204.122  user=root
Sep  7 10:19:18 server5 sshd[28779]: Failed password for root from 142.4.204.122 port 36438 ssh2
Sep  7 10:25:52 server5 sshd[31642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.102.125  user=root
Sep  7 10:22:21 server5 sshd[30010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.203.1.152  user=root
Sep  7 10:22:23 server5 sshd[30010]: Failed password for root from 114.203.1.152 port 50432 ssh2
Sep  7 10:23:34 server5 sshd[30720]: Failed password for root from 144.217.19.8 port 4000 ssh2

IP Addresses Blocked:

142.4.204.122 (CA/Canada/-)
64.225.102.125 (DE/Germany/-)
114.203.1.152 (KR/South Korea/-)
2020-09-08 04:11:30
94.102.57.137 attackbotsspam
Sep  7 21:41:20 srv1 postfix/smtpd[20236]: warning: unknown[94.102.57.137]: SASL LOGIN authentication failed: authentication failure
Sep  7 21:45:08 srv1 postfix/smtpd[21797]: warning: unknown[94.102.57.137]: SASL LOGIN authentication failed: authentication failure
Sep  7 21:46:36 srv1 postfix/smtpd[21766]: warning: unknown[94.102.57.137]: SASL LOGIN authentication failed: authentication failure
Sep  7 21:47:18 srv1 postfix/smtpd[21766]: warning: unknown[94.102.57.137]: SASL LOGIN authentication failed: authentication failure
Sep  7 21:47:36 srv1 postfix/smtpd[21766]: warning: unknown[94.102.57.137]: SASL LOGIN authentication failed: authentication failure
...
2020-09-08 04:12:24
223.18.82.171 attack
Cluster member 67.227.229.95 (US/United States/host.cjthedj97.me) said, DENY 223.18.82.171, Reason:[(sshd) Failed SSH login from 223.18.82.171 (HK/Hong Kong/171-82-18-223-on-nets.com): 1 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER
2020-09-08 03:46:07
79.111.15.23 attack
Unauthorized connection attempt from IP address 79.111.15.23 on Port 445(SMB)
2020-09-08 03:56:50
180.242.234.6 attack
Unauthorized connection attempt from IP address 180.242.234.6 on Port 445(SMB)
2020-09-08 04:03:57
45.141.84.99 attackspambots
[H1.VM10] Blocked by UFW
2020-09-08 03:49:09
103.78.122.171 attackspam
Attempted connection to port 56422.
2020-09-08 04:20:04
93.104.230.164 attack
*Port Scan* detected from 93.104.230.164 (DE/Germany/Bavaria/Munich/host-93-104-230-164.customer.m-online.net). 4 hits in the last 10 seconds
2020-09-08 03:59:12
85.67.98.102 attackspambots
Attempted connection to port 22.
2020-09-08 04:05:11
45.145.66.96 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 23 - port: 13947 proto: tcp cat: Misc Attackbytes: 60
2020-09-08 04:18:28
190.198.167.210 attackspambots
Attempted connection to port 445.
2020-09-08 04:12:39
188.165.236.122 attack
$f2bV_matches
2020-09-08 03:52:41
1.54.7.223 attackspam
Unauthorized connection attempt from IP address 1.54.7.223 on Port 445(SMB)
2020-09-08 03:56:09

最近上报的IP列表

59.20.154.52 171.120.12.248 179.70.139.103 119.28.93.152
49.233.88.229 187.247.158.247 185.39.10.89 219.92.22.76
37.49.225.159 177.152.124.24 104.183.7.244 106.53.103.194
65.247.146.106 182.57.241.6 179.179.106.64 198.249.222.241
77.243.24.155 179.26.225.186 194.97.116.214 185.150.136.22