80.132.2.89 - IPInfo

基本信息:

城市(city): Düsseldorf

省份(region): North Rhine-Westphalia

国家(country): Germany

运营商(isp): Telekom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
80.132.221.10	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/80.132.221.10/ DE - 1H : (55) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : DE NAME ASN : ASN3320 IP : 80.132.221.10 CIDR : 80.128.0.0/12 PREFIX COUNT : 481 UNIQUE IP COUNT : 29022208 WYKRYTE ATAKI Z ASN3320 : 1H - 1 3H - 3 6H - 4 12H - 13 24H - 18 DateTime : 2019-10-13 05:56:56 INFO : Port SERVER 80 Scan Detected and Blocked by ADMIN - data recovery	2019-10-13 12:46:55

类型

评论内容

时间

80.132.221.10

attack

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/80.132.221.10/ 
 DE - 1H : (55)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : DE 
 NAME ASN : ASN3320 
 
 IP : 80.132.221.10 
 
 CIDR : 80.128.0.0/12 
 
 PREFIX COUNT : 481 
 
 UNIQUE IP COUNT : 29022208 
 
 
 WYKRYTE ATAKI Z ASN3320 :  
  1H - 1 
  3H - 3 
  6H - 4 
 12H - 13 
 24H - 18 
 
 DateTime : 2019-10-13 05:56:56 
 
 INFO : Port SERVER 80 Scan Detected and Blocked by ADMIN  - data recovery

2019-10-13 12:46:55

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.132.2.89
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37791
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.132.2.89.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091000 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Sep 11 00:41:24 CST 2019
;; MSG SIZE  rcvd: 115

HOST信息:

89.2.132.80.in-addr.arpa domain name pointer p50840259.dip0.t-ipconnect.de.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
89.2.132.80.in-addr.arpa	name = p50840259.dip0.t-ipconnect.de.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
197.44.46.114	attackspam	Unauthorized access to SSH at 21/May/2020:03:48:20 +0000. Received: (SSH-2.0-libssh2_1.9.0)	2020-05-21 19:47:46
180.76.36.138	attack	May 21 09:07:46 cdc sshd[9032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.36.138 May 21 09:07:48 cdc sshd[9032]: Failed password for invalid user bigdata from 180.76.36.138 port 36812 ssh2	2020-05-21 19:45:42
140.246.175.68	attackbots	May 21 08:12:48 PorscheCustomer sshd[14511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.175.68 May 21 08:12:50 PorscheCustomer sshd[14511]: Failed password for invalid user qyh from 140.246.175.68 port 28940 ssh2 May 21 08:18:10 PorscheCustomer sshd[14642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.175.68 ...	2020-05-21 19:26:05
182.61.105.146	attack	May 21 06:41:04 ws24vmsma01 sshd[24613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.105.146 May 21 06:41:06 ws24vmsma01 sshd[24613]: Failed password for invalid user mgd from 182.61.105.146 port 38176 ssh2 ...	2020-05-21 19:51:32
65.49.20.69	attack	Unauthorized connection attempt detected from IP address 65.49.20.69 to port 22	2020-05-21 19:27:37
187.0.160.130	attack	SSH login attempts.	2020-05-21 19:50:06
5.196.75.47	attackbots	Found by fail2ban	2020-05-21 19:31:57
189.179.139.209	attack	[portscan] Port scan	2020-05-21 19:41:45
201.40.244.146	attackspam	May 21 01:25:48 web9 sshd\[19639\]: Invalid user tjy from 201.40.244.146 May 21 01:25:48 web9 sshd\[19639\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.40.244.146 May 21 01:25:50 web9 sshd\[19639\]: Failed password for invalid user tjy from 201.40.244.146 port 35290 ssh2 May 21 01:26:32 web9 sshd\[19750\]: Invalid user oyx from 201.40.244.146 May 21 01:26:32 web9 sshd\[19750\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.40.244.146	2020-05-21 19:42:26
159.65.158.30	attackspambots	Tried sshing with brute force.	2020-05-21 19:50:39
132.232.23.135	attack	$f2bV_matches	2020-05-21 19:44:51
93.112.23.191	attack	Brute forcing RDP port 3389	2020-05-21 19:51:00
109.116.196.174	attack	Auto Fail2Ban report, multiple SSH login attempts.	2020-05-21 19:56:17
152.196.0.10	attack	May 21 05:49:02 icecube postfix/smtpd[55094]: NOQUEUE: reject: RCPT from gw.ash.ds.uu.net[152.196.0.10]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=	2020-05-21 19:25:17
80.82.65.253	attack	May 21 13:48:18 debian-2gb-nbg1-2 kernel: \[12320520.485963\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.65.253 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=10566 PROTO=TCP SPT=50436 DPT=4372 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-21 19:59:52

最近上报的IP列表

121.134.244.63	112.94.244.102	60.151.19.182	109.228.178.174
169.235.132.249	93.84.105.253	120.233.81.6	99.200.155.199
149.151.161.200	202.142.142.247	71.254.133.112	110.66.16.235
73.254.81.24	73.172.127.43	78.248.175.172	185.190.157.49
78.129.106.91	159.35.244.163	130.244.195.117	38.242.5.104