45.61.142.147 - IPInfo

基本信息:

城市(city): Amsterdam

省份(region): North Holland

国家(country): Netherlands

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
45.61.142.129	attack	UDP 45.61.142.129:10668 -> port 161, len 85	2020-08-13 04:06:13
45.61.142.93	attack	45.61.142.93 - - [04/Aug/2020:05:20:31 -0400] "GET /welcome/images/about.png HTTP/1.1" 304 - "https://ghostgamingvpn.io/welcome/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.61.142.93 - - [04/Aug/2020:05:20:31 -0400] "GET /welcome/images/team-7.jpg HTTP/1.1" 304 - "https://ghostgamingvpn.io/welcome/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.61.142.93 - - [04/Aug/2020:05:20:31 -0400] "GET /welcome/images/team-1.jpg HTTP/1.1" 304 - "https://ghostgamingvpn.io/welcome/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.61.142.93 - - [04/Aug/2020:05:20:31 -0400] "GET /welcome/images/accepted-worldwide.svg HTTP/1.1" 304 - "https://ghostgamingvpn.io/welcome/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/5 ...	2020-08-05 00:42:33
45.61.142.140	attackspam	SYN FLOOD ATTACK SINCE YESTERDAY 07/10/2020-10:50:06.783825 [] [1:2210023:2] SURICATA STREAM ESTABLISHED SYNACK resend with different ACK [] [Classification: Generic Protocol Command Decode] [Priority: 3] {TCP} ***:80 -> 45.61.142.140:9978 07/10/2020-10:50:10.816101 [] [1:2210023:2] SURICATA STREAM ESTABLISHED SYNACK resend with different ACK [] [Classification: Generic Protocol Command Decode] [Priority: 3] {TCP} ***:80 -> 45.61.142.140:9978	2020-07-10 15:58:49
45.61.142.32	attack	Hacking	2020-07-01 09:31:04

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.61.142.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38313
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.61.142.147.			IN	A

;; AUTHORITY SECTION:
.			425	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022012101 1800 900 604800 86400

;; Query time: 85 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 22 08:27:04 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

147.142.61.45.in-addr.arpa domain name pointer team-attack.live.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
147.142.61.45.in-addr.arpa	name = team-attack.live.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
123.201.20.30	attackspam	Nov 23 22:48:14 web1 sshd\[28832\]: Invalid user Jewel from 123.201.20.30 Nov 23 22:48:14 web1 sshd\[28832\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.201.20.30 Nov 23 22:48:16 web1 sshd\[28832\]: Failed password for invalid user Jewel from 123.201.20.30 port 40495 ssh2 Nov 23 22:55:41 web1 sshd\[29498\]: Invalid user keisha from 123.201.20.30 Nov 23 22:55:41 web1 sshd\[29498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.201.20.30	2019-11-24 16:56:16
1.254.154.42	attackbots	Tried sshing with brute force.	2019-11-24 16:56:03
194.24.228.93	attackspambots	Nov 24 09:28:47 * sshd[11494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.24.228.93 Nov 24 09:28:49 * sshd[11494]: Failed password for invalid user test from 194.24.228.93 port 50270 ssh2	2019-11-24 17:12:20
167.71.162.245	attack	167.71.162.245 - - \[24/Nov/2019:07:25:33 +0100\] "POST /wp-login.php HTTP/1.0" 200 6655 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 167.71.162.245 - - \[24/Nov/2019:07:25:41 +0100\] "POST /wp-login.php HTTP/1.0" 200 6493 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 167.71.162.245 - - \[24/Nov/2019:07:25:44 +0100\] "POST /wp-login.php HTTP/1.0" 200 6492 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-11-24 17:20:46
207.46.13.185	attack	Automatic report - Banned IP Access	2019-11-24 17:22:39
94.191.87.254	attackspambots	"Fail2Ban detected SSH brute force attempt"	2019-11-24 17:25:14
185.156.73.7	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-11-24 17:16:25
144.217.93.130	attackspambots	Nov 24 05:01:24 firewall sshd[8881]: Failed password for invalid user ahmed from 144.217.93.130 port 37218 ssh2 Nov 24 05:07:34 firewall sshd[8993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.93.130 user=root Nov 24 05:07:36 firewall sshd[8993]: Failed password for root from 144.217.93.130 port 44966 ssh2 ...	2019-11-24 17:13:03
221.160.100.14	attack	Nov 24 08:33:00 l02a sshd[13623]: Invalid user qhsupport from 221.160.100.14 Nov 24 08:33:00 l02a sshd[13623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.160.100.14 Nov 24 08:33:00 l02a sshd[13623]: Invalid user qhsupport from 221.160.100.14 Nov 24 08:33:02 l02a sshd[13623]: Failed password for invalid user qhsupport from 221.160.100.14 port 53566 ssh2	2019-11-24 17:18:45
139.217.96.76	attack	Nov 24 08:18:10 *** sshd[10051]: Invalid user byoungin from 139.217.96.76	2019-11-24 17:00:43
41.218.196.52	attack	Lines containing failures of 41.218.196.52 Nov 24 07:05:25 shared07 sshd[6062]: Invalid user admin from 41.218.196.52 port 54522 Nov 24 07:05:25 shared07 sshd[6062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.218.196.52 Nov 24 07:05:27 shared07 sshd[6062]: Failed password for invalid user admin from 41.218.196.52 port 54522 ssh2 Nov 24 07:05:28 shared07 sshd[6062]: Connection closed by invalid user admin 41.218.196.52 port 54522 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=41.218.196.52	2019-11-24 17:11:33
41.202.168.249	attackbots	Nov 24 07:26:01 MK-Soft-VM4 sshd[6011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.202.168.249 Nov 24 07:26:03 MK-Soft-VM4 sshd[6011]: Failed password for invalid user admin from 41.202.168.249 port 46574 ssh2 ...	2019-11-24 17:08:57
104.37.175.236	attackbots	\[2019-11-24 04:09:20\] NOTICE\[2754\] chan_sip.c: Registration from '\' failed for '104.37.175.236:64304' - Wrong password \[2019-11-24 04:09:20\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-24T04:09:20.879-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="36800",SessionID="0x7f26c4b7dbd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.37.175.236/64304",Challenge="02675ea4",ReceivedChallenge="02675ea4",ReceivedHash="e0453f5d6f097c0dfab5020f1b0cc9d2" \[2019-11-24 04:09:28\] NOTICE\[2754\] chan_sip.c: Registration from '\' failed for '104.37.175.236:53962' - Wrong password \[2019-11-24 04:09:28\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-24T04:09:28.611-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="219",SessionID="0x7f26c495f738",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.37	2019-11-24 17:26:36
82.81.103.245	attackspambots	Automatic report - Port Scan Attack	2019-11-24 17:19:57
185.176.27.166	attackspam	11/24/2019-09:49:23.327373 185.176.27.166 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-11-24 17:30:19

最近上报的IP列表

102.49.169.107	28.177.137.11	84.93.113.95	219.143.176.215
77.172.174.53	46.236.65.91	231.140.130.156	68.199.34.39
0.243.118.129	8.190.4.244	191.156.191.253	95.21.91.248
78.121.234.194	190.89.104.85	36.49.96.19	99.56.79.18
134.167.161.29	2.181.0.192	146.251.154.15	125.217.83.114