45.80.104.142 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
45.80.104.195	attackbots	Chat Spam	2020-08-18 08:30:32
45.80.104.119	attackbots	9.260.741,85-03/02 [bc18/m74] PostRequest-Spammer scoring: Lusaka01	2019-11-20 07:30:46
45.80.104.152	attack	Name: 'gekllokjwer' Street: 'DXJXKCusGwzJU' City: 'chOjdNXZYEVOMtMwe' Zip: 'DeRgRoRKaO' Message: 'Ñåìåé Ïÿòèãîðñê Àòûðàó, Êàçàõñòàí êóïèòü Ýêñòàçè (Mdma) Äçåðæèíñê Äåðáåíò Àõàíãàìà, Øðè-Ëàíêà êóïèòü Ñêîðîñòü ÑÊ êðèñòàëëû (ñîëü-Àëüôà-ÏÂÏ) Îáíèíñê Ìàãíèòîãîðñê	2019-10-22 05:11:19
45.80.104.101	attackbots	45.80.104.101 - - [20/Oct/2019:07:59:55 -0400] "GET /?page=..%2f..%2f..%2fetc%2fpasswd&action=view&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 16395 "https://newportbrassfaucets.com/?page=..%2f..%2f..%2fetc%2fpasswd&action=view&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" ...	2019-10-21 01:15:22
45.80.104.109	attackspambots	45.80.104.109 - - [20/Oct/2019:08:03:33 -0400] "GET /?page=products&action=..%2f..%2fetc%2fpasswd%00&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 17152 "https://newportbrassfaucets.com/?page=products&action=..%2f..%2fetc%2fpasswd%00&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" ...	2019-10-20 21:57:02

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.80.104.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54882
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.80.104.142.			IN	A

;; AUTHORITY SECTION:
.			469	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 152 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 23:14:41 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 142.104.80.45.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.104.80.45.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
222.124.15.210	attack	Unauthorized connection attempt from IP address 222.124.15.210 on Port 445(SMB)	2020-06-02 19:20:06
167.172.115.193	attack	Jun 2 13:06:18 buvik sshd[1867]: Failed password for root from 167.172.115.193 port 56548 ssh2 Jun 2 13:10:04 buvik sshd[2555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.115.193 user=root Jun 2 13:10:06 buvik sshd[2555]: Failed password for root from 167.172.115.193 port 33090 ssh2 ...	2020-06-02 19:15:17
51.77.158.176	attackbotsspam	Jun 1 16:23:43 dns-3 sshd[14122]: User r.r from 51.77.158.176 not allowed because not listed in AllowUsers Jun 1 16:23:43 dns-3 sshd[14122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.158.176 user=r.r Jun 1 16:23:45 dns-3 sshd[14122]: Failed password for invalid user r.r from 51.77.158.176 port 58606 ssh2 Jun 1 16:23:46 dns-3 sshd[14122]: Received disconnect from 51.77.158.176 port 58606:11: Bye Bye [preauth] Jun 1 16:23:46 dns-3 sshd[14122]: Disconnected from invalid user r.r 51.77.158.176 port 58606 [preauth] Jun 1 16:28:18 dns-3 sshd[14140]: User r.r from 51.77.158.176 not allowed because not listed in AllowUsers Jun 1 16:28:18 dns-3 sshd[14140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.158.176 user=r.r Jun 1 16:28:20 dns-3 sshd[14140]: Failed password for invalid user r.r from 51.77.158.176 port 34987 ssh2 Jun 1 16:28:21 dns-3 sshd[14140]: Received disc........ -------------------------------	2020-06-02 19:31:03
14.166.19.77	attack	1591093402 - 06/02/2020 12:23:22 Host: 14.166.19.77/14.166.19.77 Port: 445 TCP Blocked	2020-06-02 19:26:56
49.88.112.70	attack	2020-06-02T10:52:59.359148shield sshd\[10784\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.70 user=root 2020-06-02T10:53:01.855046shield sshd\[10784\]: Failed password for root from 49.88.112.70 port 16019 ssh2 2020-06-02T10:53:03.664012shield sshd\[10784\]: Failed password for root from 49.88.112.70 port 16019 ssh2 2020-06-02T10:53:05.608138shield sshd\[10784\]: Failed password for root from 49.88.112.70 port 16019 ssh2 2020-06-02T10:59:05.829909shield sshd\[11535\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.70 user=root	2020-06-02 19:02:00
119.110.198.116	attack	Unauthorized connection attempt from IP address 119.110.198.116 on Port 445(SMB)	2020-06-02 18:55:35
79.130.58.143	attack	TCP Port Scanning	2020-06-02 19:00:04
186.206.157.34	attackbotsspam	SSH Brute-Force Attack	2020-06-02 18:51:38
183.91.7.239	attack	Unauthorized connection attempt from IP address 183.91.7.239 on Port 445(SMB)	2020-06-02 19:10:28
164.132.70.22	attack	Tried sshing with brute force.	2020-06-02 19:09:00
45.142.213.171	attack	Jun 1 22:50:50 b2b-pharm sshd[18164]: User r.r not allowed because account is locked Jun 1 22:50:50 b2b-pharm sshd[18164]: error: maximum authentication attempts exceeded for invalid user r.r from 45.142.213.171 port 49322 ssh2 [preauth] Jun 1 22:50:50 b2b-pharm sshd[18164]: User r.r not allowed because account is locked Jun 1 22:50:50 b2b-pharm sshd[18164]: error: maximum authentication attempts exceeded for invalid user r.r from 45.142.213.171 port 49322 ssh2 [preauth] Jun 2 06:36:54 b2b-pharm sshd[22347]: User r.r not allowed because account is locked Jun 2 06:36:54 b2b-pharm sshd[22347]: error: maximum authentication attempts exceeded for invalid user r.r from 45.142.213.171 port 42060 ssh2 [preauth] Jun 2 06:36:54 b2b-pharm sshd[22347]: User r.r not allowed because account is locked Jun 2 06:36:54 b2b-pharm sshd[22347]: error: maximum authentication attempts exceeded for invalid user r.r from 45.142.213.171 port 42060 ssh2 [preauth] ........ ----------------------------------------------- https	2020-06-02 19:03:06
152.32.108.96	attackbotsspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-06-02 19:20:50
114.4.218.175	attackspam	Unauthorized connection attempt from IP address 114.4.218.175 on Port 445(SMB)	2020-06-02 19:18:22
185.22.142.197	attackspam	Jun 2 13:12:33 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 2 13:12:35 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\<9ChX8henEsi5Fo7F\> Jun 2 13:12:57 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 2 13:18:08 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 2 13:18:10 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 ...	2020-06-02 19:30:01
200.98.117.198	attackbots	TCP (SYN) 200.98.117.198:56658 -> port 445, len 44	2020-06-02 19:20:32

最近上报的IP列表

189.207.206.153	183.227.15.95	179.0.68.220	186.88.28.84
163.179.172.19	211.194.170.51	156.251.136.4	118.77.64.160
182.114.230.38	186.96.22.198	177.75.212.147	206.81.23.3
36.56.5.248	58.37.51.17	190.180.154.238	45.132.186.96
187.177.77.177	2.56.59.133	176.31.182.19	223.104.63.63