113.250.252.99

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Chongqing Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	2020-07-15 UTC: (8x) - add,apagar,ashok,bill,midas,pgbouncer,student9,wmdemo	2020-07-16 19:50:13

相同子网IP讨论:

IP	类型	评论内容	时间
113.250.252.111	attackbotsspam	Aug 20 19:01:43 scivo sshd[24668]: Invalid user firewall from 113.250.252.111 Aug 20 19:01:43 scivo sshd[24668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.250.252.111 Aug 20 19:01:46 scivo sshd[24668]: Failed password for invalid user firewall from 113.250.252.111 port 9098 ssh2 Aug 20 19:01:46 scivo sshd[24668]: Received disconnect from 113.250.252.111: 11: Bye Bye [preauth] Aug 20 19:10:41 scivo sshd[25119]: Invalid user mmm from 113.250.252.111 Aug 20 19:10:41 scivo sshd[25119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.250.252.111 Aug 20 19:10:43 scivo sshd[25119]: Failed password for invalid user mmm from 113.250.252.111 port 8305 ssh2 Aug 20 19:10:43 scivo sshd[25119]: Received disconnect from 113.250.252.111: 11: Bye Bye [preauth] Aug 20 19:13:43 scivo sshd[25271]: Invalid user cherie from 113.250.252.111 Aug 20 19:13:43 scivo sshd[25271]: pam_unix(sshd:auth): au........ -------------------------------	2020-08-22 06:51:53
113.250.252.120	attackbots	Invalid user dev from 113.250.252.120 port 8802	2020-07-18 02:34:23

类型

评论内容

时间

113.250.252.111

attackbotsspam

Aug 20 19:01:43 scivo sshd[24668]: Invalid user firewall from 113.250.252.111
Aug 20 19:01:43 scivo sshd[24668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.250.252.111 
Aug 20 19:01:46 scivo sshd[24668]: Failed password for invalid user firewall from 113.250.252.111 port 9098 ssh2
Aug 20 19:01:46 scivo sshd[24668]: Received disconnect from 113.250.252.111: 11: Bye Bye [preauth]
Aug 20 19:10:41 scivo sshd[25119]: Invalid user mmm from 113.250.252.111
Aug 20 19:10:41 scivo sshd[25119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.250.252.111 
Aug 20 19:10:43 scivo sshd[25119]: Failed password for invalid user mmm from 113.250.252.111 port 8305 ssh2
Aug 20 19:10:43 scivo sshd[25119]: Received disconnect from 113.250.252.111: 11: Bye Bye [preauth]
Aug 20 19:13:43 scivo sshd[25271]: Invalid user cherie from 113.250.252.111
Aug 20 19:13:43 scivo sshd[25271]: pam_unix(sshd:auth): au........
-------------------------------

2020-08-22 06:51:53

113.250.252.120

attackbots

Invalid user dev from 113.250.252.120 port 8802

2020-07-18 02:34:23

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.250.252.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41769
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.250.252.99.			IN	A

;; AUTHORITY SECTION:
.			125	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071601 1800 900 604800 86400

;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 16 19:50:10 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 99.252.250.113.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 99.252.250.113.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
77.247.110.58	attackbotsspam	05/24/2020-08:16:45.569374 77.247.110.58 Protocol: 17 ET SCAN Sipvicious Scan	2020-05-24 20:21:11
206.81.10.104	attackbotsspam	2020-05-24T14:10:43.3335931240 sshd\[15071\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.104 user=root 2020-05-24T14:10:45.5128021240 sshd\[15071\]: Failed password for root from 206.81.10.104 port 51066 ssh2 2020-05-24T14:15:57.7264631240 sshd\[15312\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.104 user=root ...	2020-05-24 20:47:00
177.154.238.182	attackspam	May 24 05:33:31 mail.srvfarm.net postfix/smtpd[3861504]: warning: unknown[177.154.238.182]: SASL PLAIN authentication failed: May 24 05:33:32 mail.srvfarm.net postfix/smtpd[3861504]: lost connection after AUTH from unknown[177.154.238.182] May 24 05:39:44 mail.srvfarm.net postfix/smtpd[3863913]: warning: unknown[177.154.238.182]: SASL PLAIN authentication failed: May 24 05:39:45 mail.srvfarm.net postfix/smtpd[3863913]: lost connection after AUTH from unknown[177.154.238.182] May 24 05:40:02 mail.srvfarm.net postfix/smtps/smtpd[3863905]: warning: unknown[177.154.238.182]: SASL PLAIN authentication failed:	2020-05-24 20:07:28
66.249.66.29	attack	66.249.66.29 - - - [24/May/2020:14:16:44 +0200] "GET /wp-login.php HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.92 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" "-"	2020-05-24 20:20:40
79.137.72.98	attackspam	May 24 14:12:17 mail sshd\[5728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.72.98 user=root May 24 14:12:18 mail sshd\[5728\]: Failed password for root from 79.137.72.98 port 33711 ssh2 May 24 14:16:08 mail sshd\[5754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.72.98 user=root ...	2020-05-24 20:40:22
139.99.54.20	attackbots	May 24 13:16:17 l02a sshd[23182]: Invalid user salb from 139.99.54.20 May 24 13:16:17 l02a sshd[23182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.54.20 May 24 13:16:17 l02a sshd[23182]: Invalid user salb from 139.99.54.20 May 24 13:16:19 l02a sshd[23182]: Failed password for invalid user salb from 139.99.54.20 port 54544 ssh2	2020-05-24 20:35:09
186.216.67.163	attackspambots	May 24 05:18:50 mail.srvfarm.net postfix/smtpd[3861503]: warning: unknown[186.216.67.163]: SASL PLAIN authentication failed: May 24 05:18:50 mail.srvfarm.net postfix/smtpd[3861503]: lost connection after AUTH from unknown[186.216.67.163] May 24 05:26:35 mail.srvfarm.net postfix/smtps/smtpd[3860053]: warning: unknown[186.216.67.163]: SASL PLAIN authentication failed: May 24 05:26:36 mail.srvfarm.net postfix/smtps/smtpd[3860053]: lost connection after AUTH from unknown[186.216.67.163] May 24 05:27:28 mail.srvfarm.net postfix/smtps/smtpd[3862779]: warning: unknown[186.216.67.163]: SASL PLAIN authentication failed:	2020-05-24 20:07:01
92.64.114.1	attackbotsspam	2020-05-24T12:13:24.203722abusebot-2.cloudsearch.cf sshd[5039]: Invalid user linux from 92.64.114.1 port 34952 2020-05-24T12:13:24.210165abusebot-2.cloudsearch.cf sshd[5039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.64.114.1 2020-05-24T12:13:24.203722abusebot-2.cloudsearch.cf sshd[5039]: Invalid user linux from 92.64.114.1 port 34952 2020-05-24T12:13:26.158397abusebot-2.cloudsearch.cf sshd[5039]: Failed password for invalid user linux from 92.64.114.1 port 34952 ssh2 2020-05-24T12:16:28.514905abusebot-2.cloudsearch.cf sshd[5052]: Invalid user admin from 92.64.114.1 port 50500 2020-05-24T12:16:28.522810abusebot-2.cloudsearch.cf sshd[5052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.64.114.1 2020-05-24T12:16:28.514905abusebot-2.cloudsearch.cf sshd[5052]: Invalid user admin from 92.64.114.1 port 50500 2020-05-24T12:16:30.395947abusebot-2.cloudsearch.cf sshd[5052]: Failed password for invalid ...	2020-05-24 20:29:38
103.54.148.58	attackspam	May 24 05:32:05 web01.agentur-b-2.de postfix/smtpd[512973]: NOQUEUE: reject: RCPT from unknown[103.54.148.58]: 554 5.7.1 Service unavailable; Client host [103.54.148.58] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/103.54.148.58 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= May 24 05:32:07 web01.agentur-b-2.de postfix/smtpd[512973]: NOQUEUE: reject: RCPT from unknown[103.54.148.58]: 554 5.7.1 Service unavailable; Client host [103.54.148.58] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/103.54.148.58 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= May 24 05:32:08 web01.agentur-b-2.de postfix/smtpd[512973]: NOQUEUE: reject: RCPT from unknown[103.54.148.58]: 554 5.7.1 Service unavailable; Client host [103.54.148.58] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/103.54.148.58 / https://www.spamh	2020-05-24 20:09:15
223.197.151.55	attackbots	May 24 14:16:37 vps639187 sshd\[25844\]: Invalid user gcn from 223.197.151.55 port 44623 May 24 14:16:37 vps639187 sshd\[25844\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.151.55 May 24 14:16:39 vps639187 sshd\[25844\]: Failed password for invalid user gcn from 223.197.151.55 port 44623 ssh2 ...	2020-05-24 20:23:39
178.161.144.50	attackbots	May 24 14:11:21 jane sshd[26131]: Failed password for root from 178.161.144.50 port 50127 ssh2 ...	2020-05-24 20:28:28
89.31.46.115	attack	May 24 05:05:01 mail.srvfarm.net postfix/smtps/smtpd[3860049]: warning: unknown[89.31.46.115]: SASL PLAIN authentication failed: May 24 05:05:01 mail.srvfarm.net postfix/smtps/smtpd[3860049]: lost connection after AUTH from unknown[89.31.46.115] May 24 05:09:12 mail.srvfarm.net postfix/smtpd[3861509]: warning: unknown[89.31.46.115]: SASL PLAIN authentication failed: May 24 05:09:12 mail.srvfarm.net postfix/smtpd[3861509]: lost connection after AUTH from unknown[89.31.46.115] May 24 05:11:10 mail.srvfarm.net postfix/smtps/smtpd[3856794]: warning: unknown[89.31.46.115]: SASL PLAIN authentication failed: May 24 05:11:10 mail.srvfarm.net postfix/smtps/smtpd[3856794]: lost connection after AUTH from unknown[89.31.46.115]	2020-05-24 20:15:41
162.243.139.192	attackspam	2000/tcp 9042/tcp 1946/tcp... [2020-04-30/05-23]20pkt,17pt.(tcp),3pt.(udp)	2020-05-24 20:08:23
63.83.75.55	attack	Lines containing failures of 63.83.75.55 /var/log/apache/pucorp.org.log:May 20 08:10:47 server01 postfix/smtpd[25727]: connect from billowy.szajmaszk-informaciok.com[63.83.75.55] /var/log/apache/pucorp.org.log:May x@x /var/log/apache/pucorp.org.log:May x@x /var/log/apache/pucorp.org.log:May x@x /var/log/apache/pucorp.org.log:May x@x /var/log/apache/pucorp.org.log:May 20 08:10:50 server01 postfix/smtpd[25727]: disconnect from billowy.szajmaszk-informaciok.com[63.83.75.55] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=63.83.75.55	2020-05-24 20:16:11
134.122.99.228	attack	[portscan] Port scan	2020-05-24 20:28:50

最近上报的IP列表

195.161.2.74	226.49.218.54	120.67.153.51	227.224.134.200
127.226.40.49	9.172.93.188	39.65.223.61	73.44.11.59
172.104.237.189	120.149.127.167	8.45.151.223	240f:64:6939:1:e90d:fbe0:2c0a:8d38
93.43.222.130	94.165.164.82	45.148.234.164	117.248.185.204
34.70.109.186	86.220.37.33	5.155.176.33	189.142.46.205