45.80.104.38 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
45.80.104.195	attackbots	Chat Spam	2020-08-18 08:30:32
45.80.104.119	attackbots	9.260.741,85-03/02 [bc18/m74] PostRequest-Spammer scoring: Lusaka01	2019-11-20 07:30:46
45.80.104.152	attack	Name: 'gekllokjwer' Street: 'DXJXKCusGwzJU' City: 'chOjdNXZYEVOMtMwe' Zip: 'DeRgRoRKaO' Message: 'Ñåìåé Ïÿòèãîðñê Àòûðàó, Êàçàõñòàí êóïèòü Ýêñòàçè (Mdma) Äçåðæèíñê Äåðáåíò Àõàíãàìà, Øðè-Ëàíêà êóïèòü Ñêîðîñòü ÑÊ êðèñòàëëû (ñîëü-Àëüôà-ÏÂÏ) Îáíèíñê Ìàãíèòîãîðñê	2019-10-22 05:11:19
45.80.104.101	attackbots	45.80.104.101 - - [20/Oct/2019:07:59:55 -0400] "GET /?page=..%2f..%2f..%2fetc%2fpasswd&action=view&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 16395 "https://newportbrassfaucets.com/?page=..%2f..%2f..%2fetc%2fpasswd&action=view&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" ...	2019-10-21 01:15:22
45.80.104.109	attackspambots	45.80.104.109 - - [20/Oct/2019:08:03:33 -0400] "GET /?page=products&action=..%2f..%2fetc%2fpasswd%00&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 17152 "https://newportbrassfaucets.com/?page=products&action=..%2f..%2fetc%2fpasswd%00&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" ...	2019-10-20 21:57:02

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.80.104.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44134
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.80.104.38.			IN	A

;; AUTHORITY SECTION:
.			268	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022100602 1800 900 604800 86400

;; Query time: 136 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 07 07:21:15 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 38.104.80.45.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 38.104.80.45.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
107.173.137.144	attack	SSH brute force	2020-08-27 09:03:19
182.208.185.213	attackbotsspam	failed root login	2020-08-27 09:31:46
162.14.22.99	attackspambots	SSH Invalid Login	2020-08-27 09:22:11
114.232.109.140	attackspam	21:47:50.893 1 SMTPI-035924([114.232.109.140]) failed to open 'besadmin'. Connection from [114.232.109.140]:4656. Error Code=unknown user account 21:48:09.991 1 SMTPI-035925([114.232.109.140]) failed to open 'besadmin'. Connection from [114.232.109.140]:4504. Error Code=unknown user account ...	2020-08-27 09:14:57
90.84.189.254	attackspam	Aug 26 16:05:18 cumulus sshd[27096]: Invalid user usu from 90.84.189.254 port 44138 Aug 26 16:05:18 cumulus sshd[27096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.84.189.254 Aug 26 16:05:21 cumulus sshd[27096]: Failed password for invalid user usu from 90.84.189.254 port 44138 ssh2 Aug 26 16:05:21 cumulus sshd[27096]: Received disconnect from 90.84.189.254 port 44138:11: Bye Bye [preauth] Aug 26 16:05:21 cumulus sshd[27096]: Disconnected from 90.84.189.254 port 44138 [preauth] Aug 26 16:16:01 cumulus sshd[28088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.84.189.254 user=r.r Aug 26 16:16:03 cumulus sshd[28088]: Failed password for r.r from 90.84.189.254 port 45878 ssh2 Aug 26 16:16:03 cumulus sshd[28088]: Received disconnect from 90.84.189.254 port 45878:11: Bye Bye [preauth] Aug 26 16:16:03 cumulus sshd[28088]: Disconnected from 90.84.189.254 port 45878 [preauth] Aug 26 16........ -------------------------------	2020-08-27 09:39:24
218.62.80.29	attack	port scan and connect, tcp 1433 (ms-sql-s)	2020-08-27 09:32:32
61.220.28.250	attackspambots	TCP (SYN) 61.220.28.250:53656 -> port 8080, len 44	2020-08-27 09:35:21
176.31.226.188	attackbots	[2020-08-26 17:29:53] NOTICE[1185] chan_sip.c: Registration from '"55" ' failed for '176.31.226.188:6027' - Wrong password [2020-08-26 17:29:53] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-26T17:29:53.842-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="55",SessionID="0x7f10c451d0c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/176.31.226.188/6027",Challenge="4d30fa28",ReceivedChallenge="4d30fa28",ReceivedHash="c0a48fa782a259e78bc317c771f084d9" [2020-08-26 17:29:53] NOTICE[1185] chan_sip.c: Registration from '"55" ' failed for '176.31.226.188:6027' - Wrong password [2020-08-26 17:29:53] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-26T17:29:53.957-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="55",SessionID="0x7f10c46d4728",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/176.31.226. ...	2020-08-27 09:35:48
106.12.204.81	attackspambots	Aug 26 23:48:41 pve1 sshd[10261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.204.81 Aug 26 23:48:43 pve1 sshd[10261]: Failed password for invalid user juanita from 106.12.204.81 port 48440 ssh2 ...	2020-08-27 09:03:40
182.162.104.153	attack	Invalid user lab from 182.162.104.153 port 22626	2020-08-27 09:01:33
210.140.172.181	attackbots	Aug 27 01:05:29 fhem-rasp sshd[32206]: Invalid user anirudh from 210.140.172.181 port 46497 ...	2020-08-27 09:31:33
14.235.94.176	attackspam	2020-08-26 15:42:01.960673-0500 localhost smtpd[44627]: NOQUEUE: reject: RCPT from unknown[14.235.94.176]: 554 5.7.1 Service unavailable; Client host [14.235.94.176] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/14.235.94.176; from= to= proto=ESMTP helo=	2020-08-27 09:21:39
192.241.222.69	attack	Port Scan ...	2020-08-27 09:30:21
13.68.171.41	attackbotsspam	Invalid user mcadmin from 13.68.171.41 port 53208	2020-08-27 09:04:28
176.31.255.223	attackbotsspam	Invalid user phpmy from 176.31.255.223 port 49158	2020-08-27 09:39:43

最近上报的IP列表

123.160.221.40	49.51.95.160	5.181.171.202	45.79.126.63
219.241.102.225	185.88.102.167	170.247.83.206	144.168.253.46
185.164.59.140	218.13.2.122	192.154.249.140	45.159.22.123
185.61.223.39	116.25.47.21	193.202.9.23	193.233.91.88
193.163.207.18	193.187.94.141	71.6.233.52	71.6.233.22