45.82.120.194 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
45.82.120.106	attack	[H1.VM1] Blocked by UFW	2020-07-09 01:52:36
45.82.120.52	attackspam	Jul 30 10:07:27 xb0 sshd[15082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.120.52 user=r.r Jul 30 10:07:29 xb0 sshd[15082]: Failed password for r.r from 45.82.120.52 port 42394 ssh2 Jul 30 10:07:29 xb0 sshd[15082]: Received disconnect from 45.82.120.52: 11: Bye Bye [preauth] Jul 30 10:18:04 xb0 sshd[17489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.120.52 user=www-data Jul 30 10:18:06 xb0 sshd[17489]: Failed password for www-data from 45.82.120.52 port 49126 ssh2 Jul 30 10:18:06 xb0 sshd[17489]: Received disconnect from 45.82.120.52: 11: Bye Bye [preauth] Jul 30 10:22:33 xb0 sshd[16813]: Failed password for invalid user weblogic from 45.82.120.52 port 47046 ssh2 Jul 30 10:22:33 xb0 sshd[16813]: Received disconnect from 45.82.120.52: 11: Bye Bye [preauth] Jul 30 10:26:46 xb0 sshd[14304]: Failed password for invalid user qmailq from 45.82.120.52 port 44854 ssh2 Jul 30........ -------------------------------	2019-07-31 05:22:08

类型

评论内容

时间

45.82.120.106

attack

[H1.VM1] Blocked by UFW

2020-07-09 01:52:36

45.82.120.52

attackspam

Jul 30 10:07:27 xb0 sshd[15082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.120.52  user=r.r
Jul 30 10:07:29 xb0 sshd[15082]: Failed password for r.r from 45.82.120.52 port 42394 ssh2
Jul 30 10:07:29 xb0 sshd[15082]: Received disconnect from 45.82.120.52: 11: Bye Bye [preauth]
Jul 30 10:18:04 xb0 sshd[17489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.120.52  user=www-data
Jul 30 10:18:06 xb0 sshd[17489]: Failed password for www-data from 45.82.120.52 port 49126 ssh2
Jul 30 10:18:06 xb0 sshd[17489]: Received disconnect from 45.82.120.52: 11: Bye Bye [preauth]
Jul 30 10:22:33 xb0 sshd[16813]: Failed password for invalid user weblogic from 45.82.120.52 port 47046 ssh2
Jul 30 10:22:33 xb0 sshd[16813]: Received disconnect from 45.82.120.52: 11: Bye Bye [preauth]
Jul 30 10:26:46 xb0 sshd[14304]: Failed password for invalid user qmailq from 45.82.120.52 port 44854 ssh2
Jul 30........
-------------------------------

2019-07-31 05:22:08

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.82.120.194
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23713
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.82.120.194.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025031100 1800 900 604800 86400

;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 11 18:14:39 CST 2025
;; MSG SIZE  rcvd: 106

HOST信息:

194.120.82.45.in-addr.arpa domain name pointer default.reselling.services.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
194.120.82.45.in-addr.arpa	name = default.reselling.services.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
58.226.79.146	attackbots	Invalid user netman from 58.226.79.146 port 34214	2020-09-11 15:42:38
27.4.169.85	attack	Icarus honeypot on github	2020-09-11 15:13:09
213.102.85.36	attackspam	Sep 10 18:55:51 andromeda sshd\[5788\]: Invalid user cablecom from 213.102.85.36 port 58489 Sep 10 18:55:53 andromeda sshd\[5788\]: Failed password for invalid user cablecom from 213.102.85.36 port 58489 ssh2 Sep 10 18:55:56 andromeda sshd\[5829\]: Failed password for root from 213.102.85.36 port 58198 ssh2	2020-09-11 15:12:23
37.57.82.137	attack	Lines containing failures of 37.57.82.137 (max 1000) Sep 10 15:54:16 UTC__SANYALnet-Labs__cac1 sshd[27968]: Connection from 37.57.82.137 port 44422 on 64.137.179.160 port 22 Sep 10 15:54:16 UTC__SANYALnet-Labs__cac1 sshd[27970]: Connection from 37.57.82.137 port 44616 on 64.137.179.160 port 22 Sep 10 15:54:19 UTC__SANYALnet-Labs__cac1 sshd[27970]: Address 37.57.82.137 maps to 137.82.57.37.triolan.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 10 15:54:19 UTC__SANYALnet-Labs__cac1 sshd[27970]: User r.r from 37.57.82.137 not allowed because not listed in AllowUsers Sep 10 15:54:19 UTC__SANYALnet-Labs__cac1 sshd[27970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.57.82.137 user=r.r Sep 10 15:54:21 UTC__SANYALnet-Labs__cac1 sshd[27970]: Failed password for invalid user r.r from 37.57.82.137 port 44616 ssh2 Sep 10 15:54:21 UTC__SANYALnet-Labs__cac1 sshd[27970]: Connection closed by 37.57.82.137 p........ ------------------------------	2020-09-11 15:41:11
1.65.132.178	attackbotsspam	Sep 10 18:55:32 db sshd[26735]: User root from 1.65.132.178 not allowed because none of user's groups are listed in AllowGroups ...	2020-09-11 15:33:05
80.135.26.81	attackbotsspam	Firewall Dropped Connection	2020-09-11 15:37:44
129.227.129.174	attackbots	[Fri Sep 11 02:28:38 2020] - DDoS Attack From IP: 129.227.129.174 Port: 40821	2020-09-11 15:33:57
24.212.13.95	attack	Lines containing failures of 24.212.13.95 Sep 10 19:23:22 mellenthin sshd[12496]: User r.r from 24.212.13.95 not allowed because not listed in AllowUsers Sep 10 19:23:23 mellenthin sshd[12496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.212.13.95 user=r.r Sep 10 19:23:25 mellenthin sshd[12496]: Failed password for invalid user r.r from 24.212.13.95 port 59812 ssh2 Sep 10 19:23:25 mellenthin sshd[12496]: Connection closed by invalid user r.r 24.212.13.95 port 59812 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=24.212.13.95	2020-09-11 15:43:06
120.59.28.247	attackspam	IP 120.59.28.247 attacked honeypot on port: 23 at 9/10/2020 9:55:44 AM	2020-09-11 15:11:41
14.117.238.146	attack	TCP (SYN) 14.117.238.146:29086 -> port 23, len 40	2020-09-11 15:28:52
207.244.229.214	attack	recursive DNS query	2020-09-11 15:36:38
115.99.72.185	attackspam	/HNAP1/	2020-09-11 15:32:00
83.226.25.149	attackspambots	Sep 10 19:02:00 mail sshd[22865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.226.25.149 Sep 10 19:02:02 mail sshd[22865]: Failed password for invalid user cablecom from 83.226.25.149 port 45932 ssh2 ...	2020-09-11 15:38:36
51.91.157.101	attackspambots	$f2bV_matches	2020-09-11 15:10:48
51.75.123.107	attackbots	Invalid user scpuser from 51.75.123.107 port 47130	2020-09-11 15:12:56

最近上报的IP列表

192.168.10.240	214.68.41.49	61.60.139.87	90.194.127.32
236.219.21.95	18.167.229.47	7.97.179.37	11.82.254.3
117.103.55.185	191.24.103.26	63.48.197.100	192.168.110.113
148.241.254.238	146.49.197.59	142.106.6.144	15.55.8.116
128.50.151.220	8.128.136.52	162.234.128.49	191.84.150.113