94.245.132.239

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): SakhaTelecom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	unauthorized connection attempt	2020-01-28 17:40:08

相同子网IP讨论:

IP	类型	评论内容	时间
94.245.132.136	attackbotsspam	Unauthorized connection attempt detected from IP address 94.245.132.136 to port 81 [T]	2020-08-16 02:08:22
94.245.132.131	attackspambots	Feb 21 05:53:22 grey postfix/smtpd\[16111\]: NOQUEUE: reject: RCPT from unknown\[94.245.132.131\]: 554 5.7.1 Service unavailable\; Client host \[94.245.132.131\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[94.245.132.131\]\; from=\ to=\ proto=SMTP helo=\ ...	2020-02-21 17:06:32

类型

评论内容

时间

94.245.132.136

attackbotsspam

Unauthorized connection attempt detected from IP address 94.245.132.136 to port 81 [T]

2020-08-16 02:08:22

94.245.132.131

attackspambots

Feb 21 05:53:22 grey postfix/smtpd\[16111\]: NOQUEUE: reject: RCPT from unknown\[94.245.132.131\]: 554 5.7.1 Service unavailable\; Client host \[94.245.132.131\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[94.245.132.131\]\; from=\ to=\ proto=SMTP helo=\
...

2020-02-21 17:06:32

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.245.132.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6912
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.245.132.239.			IN	A

;; AUTHORITY SECTION:
.			458	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012800 1800 900 604800 86400

;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 28 17:40:00 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 239.132.245.94.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 239.132.245.94.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
159.192.133.106	attackspambots	$f2bV_matches	2019-08-18 18:53:05
106.12.87.197	attackbotsspam	Aug 17 20:44:18 php1 sshd\[20920\]: Invalid user butter from 106.12.87.197 Aug 17 20:44:18 php1 sshd\[20920\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.197 Aug 17 20:44:21 php1 sshd\[20920\]: Failed password for invalid user butter from 106.12.87.197 port 51534 ssh2 Aug 17 20:48:47 php1 sshd\[21391\]: Invalid user staette from 106.12.87.197 Aug 17 20:48:47 php1 sshd\[21391\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.197	2019-08-18 18:59:47
70.37.58.101	attack	Invalid user shan from 70.37.58.101 port 60996	2019-08-18 18:49:52
165.227.89.126	attack	2019-08-18T10:56:56.843544abusebot-7.cloudsearch.cf sshd\[9271\]: Invalid user navneet from 165.227.89.126 port 46574	2019-08-18 19:21:34
111.231.54.33	attackbotsspam	Aug 18 11:59:14 minden010 sshd[32561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.54.33 Aug 18 11:59:17 minden010 sshd[32561]: Failed password for invalid user trading from 111.231.54.33 port 46230 ssh2 Aug 18 12:02:19 minden010 sshd[2205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.54.33 ...	2019-08-18 19:05:32
195.239.175.146	attackbotsspam	Unauthorized connection attempt from IP address 195.239.175.146 on Port 445(SMB)	2019-08-18 19:07:59
106.13.10.159	attack	Aug 18 11:27:42 dedicated sshd[15936]: Invalid user police from 106.13.10.159 port 35474	2019-08-18 19:00:40
78.187.200.23	attackbotsspam	Unauthorized connection attempt from IP address 78.187.200.23 on Port 445(SMB)	2019-08-18 19:11:47
178.63.87.197	attackspam	20 attempts against mh-misbehave-ban on air.magehost.pro	2019-08-18 18:54:24
194.110.84.206	attack	[Aegis] @ 2019-08-18 04:01:26 0100 -> Attempt to use mail server as relay (550: Requested action not taken).	2019-08-18 18:58:39
151.80.36.134	attackbots	Aug 18 07:52:18 ArkNodeAT sshd\[5834\]: Invalid user audi from 151.80.36.134 Aug 18 07:52:18 ArkNodeAT sshd\[5834\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.36.134 Aug 18 07:52:20 ArkNodeAT sshd\[5834\]: Failed password for invalid user audi from 151.80.36.134 port 54716 ssh2	2019-08-18 19:09:11
178.128.217.58	attackspambots	Aug 18 09:24:24 v22019058497090703 sshd[1167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.217.58 Aug 18 09:24:26 v22019058497090703 sshd[1167]: Failed password for invalid user james from 178.128.217.58 port 34406 ssh2 Aug 18 09:29:38 v22019058497090703 sshd[1726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.217.58 ...	2019-08-18 18:59:32
106.13.3.79	attackbotsspam	Aug 18 12:58:20 vps647732 sshd[25570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.3.79 Aug 18 12:58:22 vps647732 sshd[25570]: Failed password for invalid user admin from 106.13.3.79 port 55600 ssh2 ...	2019-08-18 19:07:08
176.31.43.255	attackspambots	Aug 18 12:32:04 SilenceServices sshd[14511]: Failed password for root from 176.31.43.255 port 43172 ssh2 Aug 18 12:35:52 SilenceServices sshd[17492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.43.255 Aug 18 12:35:54 SilenceServices sshd[17492]: Failed password for invalid user victor from 176.31.43.255 port 34044 ssh2	2019-08-18 18:55:03
141.98.9.67	attackspambots	Aug 18 12:43:39 andromeda postfix/smtpd\[27219\]: warning: unknown\[141.98.9.67\]: SASL LOGIN authentication failed: authentication failure Aug 18 12:43:49 andromeda postfix/smtpd\[27541\]: warning: unknown\[141.98.9.67\]: SASL LOGIN authentication failed: authentication failure Aug 18 12:43:49 andromeda postfix/smtpd\[27219\]: warning: unknown\[141.98.9.67\]: SASL LOGIN authentication failed: authentication failure Aug 18 12:44:15 andromeda postfix/smtpd\[28251\]: warning: unknown\[141.98.9.67\]: SASL LOGIN authentication failed: authentication failure Aug 18 12:44:24 andromeda postfix/smtpd\[28818\]: warning: unknown\[141.98.9.67\]: SASL LOGIN authentication failed: authentication failure	2019-08-18 18:48:51

最近上报的IP列表

49.69.240.242	47.9.241.217	46.26.233.37	45.129.166.80
35.188.78.108	14.226.177.196	14.186.121.247	5.235.191.74
1.52.187.6	185.164.41.214	175.183.19.74	124.105.167.236
116.42.53.27	113.227.81.233	89.250.223.188	89.250.223.32
85.122.57.68	83.28.181.1	61.218.134.110	42.118.253.173