必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Spain

运营商(isp): Telefonica de Espana Sau

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspambots
(sshd) Failed SSH login from 81.45.139.249 (ES/Spain/mail.positronica.com): 5 in the last 3600 secs
2020-03-20 05:34:43
attack
Oct 16 01:03:10 XXX sshd[30438]: Invalid user demo from 81.45.139.249 port 59154
2019-10-16 11:23:47
attack
2019-10-01T17:35:35.6688491495-001 sshd\[57380\]: Invalid user davids from 81.45.139.249 port 61087
2019-10-01T17:35:35.6720071495-001 sshd\[57380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.positronica.com
2019-10-01T17:35:37.5104671495-001 sshd\[57380\]: Failed password for invalid user davids from 81.45.139.249 port 61087 ssh2
2019-10-01T17:39:45.9450681495-001 sshd\[57740\]: Invalid user ts3ovh from 81.45.139.249 port 44828
2019-10-01T17:39:45.9480241495-001 sshd\[57740\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.positronica.com
2019-10-01T17:39:47.7767181495-001 sshd\[57740\]: Failed password for invalid user ts3ovh from 81.45.139.249 port 44828 ssh2
...
2019-10-02 06:43:38
attackbots
Sep 29 14:37:31 localhost sshd\[16694\]: Invalid user sen from 81.45.139.249 port 32928
Sep 29 14:37:31 localhost sshd\[16694\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
Sep 29 14:37:33 localhost sshd\[16694\]: Failed password for invalid user sen from 81.45.139.249 port 32928 ssh2
...
2019-09-30 04:16:04
attackbots
Brute force SMTP login attempted.
...
2019-09-22 02:52:11
attackbotsspam
SSH bruteforce
2019-09-17 07:06:07
attackbotsspam
Sep 14 21:23:57 v22019058497090703 sshd[10797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
Sep 14 21:23:59 v22019058497090703 sshd[10797]: Failed password for invalid user user from 81.45.139.249 port 48712 ssh2
Sep 14 21:28:27 v22019058497090703 sshd[11103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
...
2019-09-15 03:42:06
attack
Sep 10 10:15:13 vps200512 sshd\[31406\]: Invalid user oneadmin from 81.45.139.249
Sep 10 10:15:13 vps200512 sshd\[31406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
Sep 10 10:15:15 vps200512 sshd\[31406\]: Failed password for invalid user oneadmin from 81.45.139.249 port 35372 ssh2
Sep 10 10:21:48 vps200512 sshd\[31609\]: Invalid user admin from 81.45.139.249
Sep 10 10:21:48 vps200512 sshd\[31609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
2019-09-11 03:14:20
attackbots
Sep  2 00:18:14 vps691689 sshd[30994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
Sep  2 00:18:16 vps691689 sshd[30994]: Failed password for invalid user docker from 81.45.139.249 port 50236 ssh2
Sep  2 00:22:24 vps691689 sshd[31109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
...
2019-09-02 08:53:11
attack
Aug 31 13:59:51 SilenceServices sshd[13867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
Aug 31 13:59:54 SilenceServices sshd[13867]: Failed password for invalid user cms from 81.45.139.249 port 49844 ssh2
Aug 31 14:04:16 SilenceServices sshd[15568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249
2019-08-31 20:16:08
attackspambots
Aug  6 23:56:34 srv1 sshd[25677]: Invalid user staff from 81.45.139.249
Aug  6 23:56:37 srv1 sshd[25677]: Failed password for invalid user staff from 81.45.139.249 port 38780 ssh2
Aug  6 23:56:37 srv1 sshd[25677]: Received disconnect from 81.45.139.249: 11: Bye Bye [preauth]
Aug  7 00:09:19 srv1 sshd[28636]: Failed password for r.r from 81.45.139.249 port 34792 ssh2
Aug  7 00:09:19 srv1 sshd[28636]: Received disconnect from 81.45.139.249: 11: Bye Bye [preauth]
Aug  7 00:14:24 srv1 sshd[30169]: Invalid user radio from 81.45.139.249
Aug  7 00:14:26 srv1 sshd[30169]: Failed password for invalid user radio from 81.45.139.249 port 62837 ssh2
Aug  7 00:14:26 srv1 sshd[30169]: Received disconnect from 81.45.139.249: 11: Bye Bye [preauth]
Aug  7 00:18:58 srv1 sshd[30951]: Invalid user desktop from 81.45.139.249
Aug  7 00:19:00 srv1 sshd[30951]: Failed password for invalid user desktop from 81.45.139.249 port 57496 ssh2
Aug  7 00:19:00 srv1 sshd[30951]: Received disconnect from ........
-------------------------------
2019-08-08 03:57:58
attackspambots
Aug  6 23:56:34 srv1 sshd[25677]: Invalid user staff from 81.45.139.249
Aug  6 23:56:37 srv1 sshd[25677]: Failed password for invalid user staff from 81.45.139.249 port 38780 ssh2
Aug  6 23:56:37 srv1 sshd[25677]: Received disconnect from 81.45.139.249: 11: Bye Bye [preauth]
Aug  7 00:09:19 srv1 sshd[28636]: Failed password for r.r from 81.45.139.249 port 34792 ssh2
Aug  7 00:09:19 srv1 sshd[28636]: Received disconnect from 81.45.139.249: 11: Bye Bye [preauth]
Aug  7 00:14:24 srv1 sshd[30169]: Invalid user radio from 81.45.139.249
Aug  7 00:14:26 srv1 sshd[30169]: Failed password for invalid user radio from 81.45.139.249 port 62837 ssh2
Aug  7 00:14:26 srv1 sshd[30169]: Received disconnect from 81.45.139.249: 11: Bye Bye [preauth]
Aug  7 00:18:58 srv1 sshd[30951]: Invalid user desktop from 81.45.139.249
Aug  7 00:19:00 srv1 sshd[30951]: Failed password for invalid user desktop from 81.45.139.249 port 57496 ssh2
Aug  7 00:19:00 srv1 sshd[30951]: Received disconnect from ........
-------------------------------
2019-08-07 22:14:17
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.45.139.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5259
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.45.139.249.			IN	A

;; AUTHORITY SECTION:
.			610	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080700 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Aug 07 22:14:04 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
249.139.45.81.in-addr.arpa domain name pointer mail.positronica.com.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
249.139.45.81.in-addr.arpa	name = mail.positronica.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
193.188.22.12 attack
08/14/2019-13:01:08.937031 193.188.22.12 Protocol: 6 ET COMPROMISED Known Compromised or Hostile Host Traffic group 16
2019-08-15 04:04:18
51.219.58.141 attackbotsspam
SSH Brute Force, server-1 sshd[25898]: Failed password for invalid user win from 51.219.58.141 port 49642 ssh2
2019-08-15 04:01:37
182.91.131.118 attackspam
Aug 13 13:57:25 nandi sshd[27694]: Invalid user usuario from 182.91.131.118
Aug 13 13:57:25 nandi sshd[27694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.91.131.118 
Aug 13 13:57:27 nandi sshd[27694]: Failed password for invalid user usuario from 182.91.131.118 port 54020 ssh2
Aug 13 13:57:30 nandi sshd[27694]: Failed password for invalid user usuario from 182.91.131.118 port 54020 ssh2
Aug 13 13:57:32 nandi sshd[27694]: Failed password for invalid user usuario from 182.91.131.118 port 54020 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=182.91.131.118
2019-08-15 04:30:29
185.220.101.24 attackspambots
2019-08-14T15:43:01.128026WS-Zach sshd[21335]: User root from 185.220.101.24 not allowed because none of user's groups are listed in AllowGroups
2019-08-14T15:43:01.139337WS-Zach sshd[21335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.24  user=root
2019-08-14T15:43:01.128026WS-Zach sshd[21335]: User root from 185.220.101.24 not allowed because none of user's groups are listed in AllowGroups
2019-08-14T15:43:03.110444WS-Zach sshd[21335]: Failed password for invalid user root from 185.220.101.24 port 39445 ssh2
2019-08-14T15:43:01.139337WS-Zach sshd[21335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.24  user=root
2019-08-14T15:43:01.128026WS-Zach sshd[21335]: User root from 185.220.101.24 not allowed because none of user's groups are listed in AllowGroups
2019-08-14T15:43:03.110444WS-Zach sshd[21335]: Failed password for invalid user root from 185.220.101.24 port 39445 ssh2
2019-08-14T15:43:06.55429
2019-08-15 03:53:11
183.111.125.172 attackspam
Aug 14 21:38:44 eventyay sshd[16593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.111.125.172
Aug 14 21:38:46 eventyay sshd[16593]: Failed password for invalid user network1 from 183.111.125.172 port 40112 ssh2
Aug 14 21:46:19 eventyay sshd[18726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.111.125.172
...
2019-08-15 03:52:38
177.128.216.2 attackbots
Automatic report - Banned IP Access
2019-08-15 03:56:34
112.205.68.179 attackbotsspam
localhost 112.205.68.179 - - [14/Aug/2019:21:07:23 +0800] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 284 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" VLOG=-
localhost 112.205.68.179 - - [14/Aug/2019:21:07:23 +0800] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 286 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" VLOG=-
localhost 112.205.68.179 - - [14/Aug/2019:21:07:23 +0800] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 289 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" VLOG=-
localhost 112.205.68.179 - - [14/Aug/2019:21:07:24 +0800] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" VLOG=-
localhost 112.205.68.1
...
2019-08-15 03:57:09
157.230.213.241 attack
$f2bV_matches
2019-08-15 04:12:46
60.20.112.163 attackbots
" "
2019-08-15 03:52:19
121.30.226.25 attackspam
Tried sshing with brute force.
2019-08-15 04:23:54
170.84.129.226 attackspambots
Automatic report - Port Scan Attack
2019-08-15 04:00:42
178.62.199.240 attackbots
Aug 14 20:57:00 v22019058497090703 sshd[3101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.199.240
Aug 14 20:57:02 v22019058497090703 sshd[3101]: Failed password for invalid user te from 178.62.199.240 port 46733 ssh2
Aug 14 21:01:24 v22019058497090703 sshd[3413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.199.240
...
2019-08-15 04:04:51
139.199.0.84 attackbots
Aug 14 19:34:45 yabzik sshd[30932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.0.84
Aug 14 19:34:47 yabzik sshd[30932]: Failed password for invalid user 123 from 139.199.0.84 port 49978 ssh2
Aug 14 19:38:00 yabzik sshd[32193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.0.84
2019-08-15 04:23:30
117.93.65.135 attackbots
Automatic report - Port Scan Attack
2019-08-15 04:06:04
201.99.120.13 attackbots
Aug 14 19:56:45 XXX sshd[22292]: Invalid user messagebus from 201.99.120.13 port 12659
2019-08-15 03:49:06

最近上报的IP列表

18.157.167.217 25.155.175.132 43.216.169.49 14.183.73.155
70.143.136.110 138.191.221.158 189.92.254.142 27.195.88.154
204.148.40.134 174.76.157.67 82.102.27.115 183.81.73.60
88.201.36.241 5.1.106.128 1.179.155.57 193.112.77.113
86.98.71.39 218.161.93.221 182.72.105.218 85.212.244.17