80.249.145.56 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): OOO Network of Data-Centers Selectel

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Nov 19 11:50:27 mecmail postfix/smtpd[8708]: NOQUEUE: reject: RCPT from qd76.4desconto-saude.us[80.249.145.56]: 554 5.7.1 Service unavailable; Client host [80.249.145.56] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.249.145.56; from= to= proto=ESMTP helo= Nov 19 12:38:27 mecmail postfix/smtpd[19044]: NOQUEUE: reject: RCPT from qd76.4desconto-saude.us[80.249.145.56]: 554 5.7.1 Service unavailable; Client host [80.249.145.56] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.249.145.56; from= to= proto=ESMTP helo= Nov 19 16:12:40 mecmail postfix/smtpd[28355]: NOQUEUE: reject: RCPT from qd76.4desconto-saude.us[80.249.145.56]: 554 5.7.1 Service unavailable; Client host [80.249.145.56] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.249.145.56; from=	2019-11-20 06:45:46

类型

评论内容

时间

attack

Nov 19 11:50:27 mecmail postfix/smtpd[8708]: NOQUEUE: reject: RCPT from qd76.4desconto-saude.us[80.249.145.56]: 554 5.7.1 Service unavailable; Client host [80.249.145.56] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.249.145.56; from= to= proto=ESMTP helo=
Nov 19 12:38:27 mecmail postfix/smtpd[19044]: NOQUEUE: reject: RCPT from qd76.4desconto-saude.us[80.249.145.56]: 554 5.7.1 Service unavailable; Client host [80.249.145.56] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.249.145.56; from= to= proto=ESMTP helo=
Nov 19 16:12:40 mecmail postfix/smtpd[28355]: NOQUEUE: reject: RCPT from qd76.4desconto-saude.us[80.249.145.56]: 554 5.7.1 Service unavailable; Client host [80.249.145.56] blocked using dnsbl.spfbl.net; https://matrix.spfbl.net/80.249.145.56; from=

2019-11-20 06:45:46

相同子网IP讨论:

IP	类型	评论内容	时间
80.249.145.99	attackspam	Invalid user mashad from 80.249.145.99 port 56516	2020-03-30 07:58:00
80.249.145.87	attack	Feb 27 18:14:25 lnxmysql61 sshd[22115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.249.145.87	2020-02-28 04:58:16
80.249.145.81	attackspam	Feb 27 16:46:58 vpn01 sshd[20893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.249.145.81 Feb 27 16:47:00 vpn01 sshd[20893]: Failed password for invalid user pi from 80.249.145.81 port 59066 ssh2 ...	2020-02-28 00:15:50
80.249.145.21	attackspambots	Feb 27 17:27:53 server sshd\[17144\]: Invalid user yangzishuang from 80.249.145.21 Feb 27 17:27:53 server sshd\[17144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=gigantplat.ru Feb 27 17:27:55 server sshd\[17144\]: Failed password for invalid user yangzishuang from 80.249.145.21 port 58810 ssh2 Feb 27 17:59:16 server sshd\[22213\]: Invalid user speech-dispatcher from 80.249.145.21 Feb 27 17:59:16 server sshd\[22213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=gigantplat.ru ...	2020-02-27 23:21:06
80.249.145.151	attack	Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=80.249.145.151	2019-11-15 03:30:56
80.249.145.15	attack	Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=80.249.145.15	2019-11-15 02:50:36
80.249.145.151	attackspambots	Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=80.249.145.151	2019-11-08 07:26:59

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.249.145.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25349
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.249.145.56.			IN	A

;; AUTHORITY SECTION:
.			465	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111903 1800 900 604800 86400

;; Query time: 985 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 20 06:45:43 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

56.145.249.80.in-addr.arpa domain name pointer qd76.4desconto-saude.us.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
56.145.249.80.in-addr.arpa	name = qd76.4desconto-saude.us.

Authoritative answers can be found from:

IP	类型	评论内容	时间
49.235.42.177	attack	Invalid user tiago from 49.235.42.177	2020-01-26 04:22:37
5.11.189.106	attackbotsspam	Unauthorized connection attempt detected from IP address 5.11.189.106 to port 23 [J]	2020-01-26 04:25:21
51.83.75.56	attackspam	Unauthorized connection attempt detected from IP address 51.83.75.56 to port 2220 [J]	2020-01-26 04:22:17
220.200.154.207	attackspam	Unauthorized connection attempt detected from IP address 220.200.154.207 to port 8899 [J]	2020-01-26 04:26:17
154.83.13.248	attackbots	Unauthorized connection attempt detected from IP address 154.83.13.248 to port 80 [J]	2020-01-26 04:33:23
189.29.151.97	attack	Unauthorized connection attempt detected from IP address 189.29.151.97 to port 23 [J]	2020-01-26 04:29:15
78.167.235.115	attackspam	Unauthorized connection attempt detected from IP address 78.167.235.115 to port 23 [J]	2020-01-26 04:19:58
119.195.78.53	attack	Unauthorized connection attempt detected from IP address 119.195.78.53 to port 4567 [J]	2020-01-26 04:37:48
148.243.206.211	attackbots	Unauthorized connection attempt detected from IP address 148.243.206.211 to port 23 [J]	2020-01-26 04:33:57
175.45.1.34	attack	Unauthorized connection attempt detected from IP address 175.45.1.34 to port 1433 [J]	2020-01-26 04:31:30
125.91.33.18	attack	Unauthorized connection attempt detected from IP address 125.91.33.18 to port 2220 [J]	2020-01-26 04:35:28
60.13.6.203	attackspam	Unauthorized connection attempt detected from IP address 60.13.6.203 to port 8899 [J]	2020-01-26 04:45:29
58.249.101.198	attackbotsspam	Unauthorized connection attempt detected from IP address 58.249.101.198 to port 8899 [J]	2020-01-26 04:45:52
45.118.205.162	attackspambots	Unauthorized connection attempt detected from IP address 45.118.205.162 to port 8080 [J]	2020-01-26 04:23:11
123.31.31.68	attack	Unauthorized connection attempt detected from IP address 123.31.31.68 to port 2220 [J]	2020-01-26 04:13:17

最近上报的IP列表

55.142.127.205	138.59.141.44	206.214.133.220	231.216.223.184
76.26.138.142	134.76.250.135	103.102.43.250	56.247.213.20
159.1.200.62	170.64.114.191	171.144.52.205	67.102.218.0
121.247.132.218	214.53.247.177	187.36.176.240	165.47.81.233
104.164.79.223	164.187.60.26	92.234.187.57	198.26.135.92