80.245.105.133

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
80.245.105.179	attack	Port Scan detected from 80.245.105.179 (HK/Hong Kong/Central and Western/Hong Kong/-). 4 hits in the last 250 seconds	2020-08-30 12:10:11
80.245.105.135	attackspambots	2020-08-17T12:29:46.379293hostname sshd[74000]: Failed password for invalid user hqj from 80.245.105.135 port 44600 ssh2 ...	2020-08-19 03:33:27
80.245.105.135	attackspam	20 attempts against mh-ssh on cloud	2020-08-15 03:29:41

类型

评论内容

时间

80.245.105.179

attack

*Port Scan* detected from 80.245.105.179 (HK/Hong Kong/Central and Western/Hong Kong/-). 4 hits in the last 250 seconds

2020-08-30 12:10:11

80.245.105.135

attackspambots

2020-08-17T12:29:46.379293hostname sshd[74000]: Failed password for invalid user hqj from 80.245.105.135 port 44600 ssh2
...

2020-08-19 03:33:27

80.245.105.135

attackspam

20 attempts against mh-ssh on cloud

2020-08-15 03:29:41

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.245.105.133
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33858
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;80.245.105.133.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 17:29:15 CST 2025
;; MSG SIZE  rcvd: 107

HOST信息:

133.105.245.80.in-addr.arpa domain name pointer 80.245.105.133.dynamic-pppoe.dt.ipv4.wtnet.de.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
133.105.245.80.in-addr.arpa	name = 80.245.105.133.dynamic-pppoe.dt.ipv4.wtnet.de.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
106.75.157.9	attackbots	Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-06-21 23:12:37
103.1.179.94	attack	Jun 21 13:14:10 l02a sshd[29425]: Invalid user wdw from 103.1.179.94 Jun 21 13:14:10 l02a sshd[29425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.1.179.94 Jun 21 13:14:10 l02a sshd[29425]: Invalid user wdw from 103.1.179.94 Jun 21 13:14:12 l02a sshd[29425]: Failed password for invalid user wdw from 103.1.179.94 port 23062 ssh2	2020-06-21 23:49:35
14.183.31.82	attackbotsspam	Automatic report - Port Scan Attack	2020-06-21 23:22:13
185.202.2.133	attackbots	RDP Bruteforce	2020-06-21 23:39:03
34.65.154.30	attackspambots	Attempt to log in with non-existing username: admin	2020-06-21 23:34:17
183.89.212.196	attackspambots	Jun 16 17:19:25 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 7 secs\): user=\, method=PLAIN, rip=183.89.212.196, lip=10.64.89.208, session=\ Jun 17 02:20:52 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=183.89.212.196, lip=10.64.89.208, TLS, session=\ Jun 18 02:45:33 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=183.89.212.196, lip=10.64.89.208, TLS, session=\ Jun 19 06:43:29 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=183.89.212.196, lip=10.64.89.208, TLS: Disconnected, session=\<+/SWiGiohKq3WdTE\> Jun 20 11:56:08 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 10 secs\): user=\	2020-06-21 23:34:34
178.33.46.227	attack	michaelklotzbier.de:80 178.33.46.227 - - [21/Jun/2020:14:14:30 +0200] "POST /xmlrpc.php HTTP/1.0" 301 505 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36" michaelklotzbier.de 178.33.46.227 [21/Jun/2020:14:14:31 +0200] "POST /xmlrpc.php HTTP/1.0" 200 3595 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"	2020-06-21 23:28:33
61.218.209.44	attack	Automatic report - Banned IP Access	2020-06-21 23:36:36
94.187.52.22	attackspam	Automatic report - XMLRPC Attack	2020-06-21 23:52:22
222.186.175.167	attackspam	Jun 21 15:28:19 localhost sshd[75432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167 user=root Jun 21 15:28:21 localhost sshd[75432]: Failed password for root from 222.186.175.167 port 12138 ssh2 Jun 21 15:28:25 localhost sshd[75432]: Failed password for root from 222.186.175.167 port 12138 ssh2 Jun 21 15:28:19 localhost sshd[75432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167 user=root Jun 21 15:28:21 localhost sshd[75432]: Failed password for root from 222.186.175.167 port 12138 ssh2 Jun 21 15:28:25 localhost sshd[75432]: Failed password for root from 222.186.175.167 port 12138 ssh2 Jun 21 15:28:19 localhost sshd[75432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167 user=root Jun 21 15:28:21 localhost sshd[75432]: Failed password for root from 222.186.175.167 port 12138 ssh2 Jun 21 15:28:25 localhost sshd[75 ...	2020-06-21 23:29:24
182.180.117.197	attackspam	port scan and connect, tcp 23 (telnet)	2020-06-21 23:54:29
176.95.138.32	attackbots	Jun 22 01:17:33 NG-HHDC-SVS-001 sshd[16681]: Invalid user helix from 176.95.138.32 ...	2020-06-21 23:19:46
49.32.51.213	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-06-21 23:46:02
180.167.225.118	attackbots	Jun 21 17:36:06 vps sshd[542044]: Failed password for root from 180.167.225.118 port 45982 ssh2 Jun 21 17:39:03 vps sshd[553196]: Invalid user ubuntu from 180.167.225.118 port 34258 Jun 21 17:39:03 vps sshd[553196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.167.225.118 Jun 21 17:39:05 vps sshd[553196]: Failed password for invalid user ubuntu from 180.167.225.118 port 34258 ssh2 Jun 21 17:42:04 vps sshd[570021]: Invalid user roberto from 180.167.225.118 port 51402 ...	2020-06-21 23:46:45
162.243.55.188	attack	DATE:2020-06-21 17:33:21, IP:162.243.55.188, PORT:ssh SSH brute force auth (docker-dc)	2020-06-21 23:49:12

最近上报的IP列表

148.151.145.89	88.50.42.103	204.183.127.55	249.176.188.17
208.61.152.32	9.52.210.50	8.213.50.214	44.98.157.22
245.81.62.138	135.166.56.243	81.130.169.29	108.247.23.12
143.113.28.57	234.0.238.31	195.105.108.65	168.78.155.89
248.242.175.110	97.241.114.11	128.194.170.63	59.115.94.207