94.245.132.131

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): SakhaTelecom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Feb 21 05:53:22 grey postfix/smtpd\[16111\]: NOQUEUE: reject: RCPT from unknown\[94.245.132.131\]: 554 5.7.1 Service unavailable\; Client host \[94.245.132.131\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[94.245.132.131\]\; from=\ to=\ proto=SMTP helo=\ ...	2020-02-21 17:06:32

类型

评论内容

时间

attackspambots

Feb 21 05:53:22 grey postfix/smtpd\[16111\]: NOQUEUE: reject: RCPT from unknown\[94.245.132.131\]: 554 5.7.1 Service unavailable\; Client host \[94.245.132.131\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[94.245.132.131\]\; from=\ to=\ proto=SMTP helo=\
...

2020-02-21 17:06:32

相同子网IP讨论:

IP	类型	评论内容	时间
94.245.132.136	attackbotsspam	Unauthorized connection attempt detected from IP address 94.245.132.136 to port 81 [T]	2020-08-16 02:08:22
94.245.132.239	attack	unauthorized connection attempt	2020-01-28 17:40:08

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.245.132.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44748
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.245.132.131.			IN	A

;; AUTHORITY SECTION:
.			427	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022100 1800 900 604800 86400

;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 17:06:23 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 131.132.245.94.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 131.132.245.94.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
185.94.111.1	attackspam	6 Attack(s) Detected [DoS Attack: Ping Sweep] from source: 185.94.111.1, Tuesday, April 14, 2020 22:55:12 [DoS Attack: TCP/UDP Chargen] from source: 185.94.111.1, port 41406, Tuesday, April 14, 2020 13:39:15 [DoS Attack: Ping Sweep] from source: 185.94.111.1, Monday, April 13, 2020 00:41:25 [DoS Attack: Ping Sweep] from source: 185.94.111.1, Saturday, April 11, 2020 04:03:15 [DoS Attack: TCP/UDP Chargen] from source: 185.94.111.1, port 60004, Friday, April 10, 2020 21:47:43 [DoS Attack: TCP/UDP Chargen] from source: 185.94.111.1, port 35441, Friday, April 10, 2020 21:01:58	2020-04-16 05:48:32
35.199.117.177	attackspambots	leo_www	2020-04-16 06:17:39
42.118.242.189	attackspambots	Apr 15 07:17:05: Invalid user zte from 42.118.242.189 port 36020	2020-04-16 06:04:39
128.199.160.61	attack	Apr 15 23:45:19 markkoudstaal sshd[16764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.160.61 Apr 15 23:45:21 markkoudstaal sshd[16764]: Failed password for invalid user tab2 from 128.199.160.61 port 25376 ssh2 Apr 15 23:49:38 markkoudstaal sshd[17351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.160.61	2020-04-16 05:49:42
61.177.172.128	attack	Apr 16 00:14:49 srv206 sshd[17810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root Apr 16 00:14:51 srv206 sshd[17810]: Failed password for root from 61.177.172.128 port 4077 ssh2 ...	2020-04-16 06:17:15
51.89.235.112	attackspambots	51.89.235.112 was recorded 5 times by 4 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 30, 160	2020-04-16 05:46:29
177.104.251.122	attack	Apr 15 15:54:04 server1 sshd\[4965\]: Failed password for invalid user star from 177.104.251.122 port 45882 ssh2 Apr 15 15:57:23 server1 sshd\[6090\]: Invalid user deploy from 177.104.251.122 Apr 15 15:57:23 server1 sshd\[6090\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.104.251.122 Apr 15 15:57:25 server1 sshd\[6090\]: Failed password for invalid user deploy from 177.104.251.122 port 48545 ssh2 Apr 15 16:00:42 server1 sshd\[7058\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.104.251.122 user=ubuntu ...	2020-04-16 06:10:44
182.43.225.34	attack	Apr 16 00:48:57 www4 sshd\[10576\]: Invalid user ubuntu from 182.43.225.34 Apr 16 00:48:57 www4 sshd\[10576\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.43.225.34 Apr 16 00:48:58 www4 sshd\[10576\]: Failed password for invalid user ubuntu from 182.43.225.34 port 59666 ssh2 ...	2020-04-16 06:04:01
103.90.188.171	attackspam	$f2bV_matches	2020-04-16 05:45:47
141.98.10.55	attackbots	Port Scan: Events[4] countPorts[4]: 7070 6655 8060 8050 ..	2020-04-16 05:47:33
200.108.143.6	attack	Invalid user celso from 200.108.143.6 port 41252	2020-04-16 06:13:43
111.229.101.220	attackspam	Apr 15 23:27:42 v22018086721571380 sshd[2372]: Failed password for invalid user insserver from 111.229.101.220 port 44744 ssh2	2020-04-16 06:06:30
172.105.89.161	attackbots	Port Scan: Events[1] countPorts[1]: 445 ..	2020-04-16 05:50:31
167.179.110.29	attackspam	Invalid user firefart from 167.179.110.29 port 47326	2020-04-16 06:08:09
198.245.50.81	attack	Port Scan detected from 198.245.50.81 (CA/Canada/Quebec/Montreal (Ville-Marie)/ns527545.ip-198-245-50.net). 4 hits in the last 180 seconds	2020-04-16 05:59:15

最近上报的IP列表

113.162.188.62	25.244.214.74	10.207.161.173	192.241.234.244
154.16.58.219	77.42.89.131	65.99.161.162	20.119.55.56
161.194.46.251	179.234.139.98	64.129.238.120	156.251.178.23
203.223.189.91	122.128.215.99	200.187.170.185	54.89.249.241
189.220.202.100	162.243.133.233	146.185.152.26	85.214.28.17